Re: Mobility express - Roaming - Page 2

3xIT · ‎12-31-2018

Hi all,

We have problems with roaming on Mobility Express (version 8.4.x). Currently, we have 10 AP - 3802i and two of them are WLC (another one as backup).

After connecting to one AP, we are connected to that one until we lose signal and then our device (iPhone or Microsoft Surface Book) connects to the first AP. It's really frustrating when you walk around and example have a video chat that brakes because of this roaming problem.

We made only simple setup, there is no special configuration beside we have different VLANs for different networks (currently we have four networks - tree WIFI SSID and one for local computers). Our router RV325 is doing all VLAN and DHCP things.

Thank you for your help in advance!

patoberli · ‎03-20-2019

Apple users....
Can you check if under the SSID configuration the FT security options are enabled? If so, disable them.

3xIT · ‎03-20-2019

Again did a test with debug client MAC add and she got kicked out without moving her MacBook. Here are the results:

(Cisco Controller) >*emWeb: Mar 20 09:56:04.347:
Debugging session started on Mar 20 09:56:04.347 for WLC AIR-AP3802I-E-K9 Version :8.8.111.0 SN :FGL2225A8DP Hostname WWLC01
*apfReceiveTask: Mar 20 10:06:15.479: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:62 destination addr 78:72:5d:f8:7c:62
*apfMsConnTask_0: Mar 20 10:06:15.479: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : GUEST thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:f8:7c:62 AP WAP07 on ssid GUEST
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 3
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:62 ApVapId 3 Slot 0, mobility role 1
*spamApTask0: Mar 20 10:06:21.351: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_REASSOC_TIMEOUT, deleteReason 4 from AP 78:72:5d:f8:7c:60, slot 0 ...cleaning up mscb
*spamApTask0: Mar 20 10:06:21.351: 5c:f9:38:8c:5e:68 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 78:72:5d:f8:7c:60, slot 0. STA connecting AP: 78:72:5d:fd:fc:c0, slot 0
*apfReceiveTask: Mar 20 10:06:25.740: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:fd:fc:c1 destination addr 78:72:5d:fd:fc:c1
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:fd:fc:c1 AP WAP02 on ssid STAFF
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:25.741: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP02 on BSSID 78:72:5d:fd:fc:c1 ApVapId 2 Slot 0, mobility role 1
*apfReceiveTask: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Received management frame REASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:61 destination addr 78:72:5d:f8:7c:61
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Reassociation received from mobile on BSSID 78:72:5d:f8:7c:61 AP WAP07 on ssid STAFF
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 17 station:5c:f9:38:8c:5e:68 AP:78:72:5d:fd:fc:c0-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:29.671: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:61 ApVapId 2 Slot 0, mobility role 1
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_REASSOC_TIMEOUT, deleteReason 4 from AP 78:72:5d:fd:fc:c0, slot 0 ...cleaning up mscb
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Succesfully freed AID 113, slot 0 on AP 78:72:5d:fd:fc:c0, #client on this slot 1
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4

*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Removing PMK cache entry for station 5c:f9:38:8c:5e:68
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*spamApTask0: Mar 20 10:06:31.108: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*osapiBsnTimer: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfMsExpireCallback (apf_ms.c:657) Expiring Mobile!
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:7986) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Associated to Disassociated

*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 apfSendDisAssocMsgDebug (apf_80211.c:3962) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Disassociated to Disassociated

*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Sent Disassociate to mobile on AP 78:72:5d:fd:fc:c0-0 on BSSID 78:72:5d:fd:fc:c2(reason 1, caller apf_ms.c:8070)
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Setting active key cache index 0 ---> 8
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Mar 20 10:06:32.055: 5c:f9:38:8c:5e:68 Global PMK Cache deletion failed.
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Sent Deauthenticate to mobile on BSSID 78:72:5d:fd:fc:c2 slot 0(caller apf_ms.c:8078)
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Initiating Accounting request(2) update for mobile
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsAssoStateDec
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsWepPskStateDec
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:8136) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:fd:fc:c0 from Disassociated to Idle

*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:5148)
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 192.168.163.12 START (0) Deleted mobile LWAPP rule on AP [78:72:5d:fd:fc:c0]
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*apfReceiveTask: Mar 20 10:06:32.056: 5c:f9:38:8c:5e:68 Deleting mobile on AP 78:72:5d:fd:fc:c0(0)
*spamApTask0: Mar 20 10:06:32.067: 5c:f9:38:8c:5e:68 Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP 78:72:5d:fd:fc:c0
*apfReceiveTask: Mar 20 10:06:32.078: 5c:f9:38:8c:5e:68 apf_ms.c:5565 Clearing the SGT 0 of mobile
*apfReceiveTask: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Received management frame REASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:61 destination addr 78:72:5d:f8:7c:61
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 ssid : STAFF thread:5e0bef70
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 apfCreateMobileStationEntryWrapper (apf_ms.c:4446) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Idle

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Adding mobile on LWAPP AP 78:72:5d:f8:7c:60(0)
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Created Acct-Session-ID (5c9210a9/5c:f9:38:8c:5e:68/748) for the mobile
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Setting hasApChnaged Flag as true. It is a fresh assoc request.

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Setting RTTS enabled to 0
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Reassociation received from mobile on BSSID 78:72:5d:f8:7c:61 AP WAP07
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -65. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 0
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Max Client Trap Threshold: 0 cur: 8

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updated local bridging VLAN to 0 while applying WLAN policy
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy
*apfMsConnTask_0: Mar 20 10:06:33.514: 5c:f9:38:8c:5e:68 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Not re-applying interface policy for local switching Client

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 After applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3274)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing Url ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255),Default action is '0' --- (caller apf_policy.c:3294)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3315)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apf_policy.c:2559 Assigning the SGT 0 to mobile (earlier sgt 0)
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 In processSsidIE:7088 setting Central switched to FALSE
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Set Clinet MSCB as Central Association Disabled
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying site-specific Local Bridging override for station 5c:f9:38:8c:5e:68 - vapId 2, site 'default-group', interface 'management'
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Applying Local Bridging Interface Policy for station 5c:f9:38:8c:5e:68 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Set Clinet Non AP specific WLAN apfMsAccessVlan = 602
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 This apfMsAccessVlan may be changed later from AAA after L2 Auth
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Cleared localSwitchingVlan, may be assigned later based on AAA override
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 STA - rates (7): 18 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_0: Mar 20 10:06:33.515: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Mar 20 10:06:33.515: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Mar 20 10:06:33.515: [0016] ac 02 00 00

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Processing RSN IE type 48, length 20 for mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 RSN Capabilities: 0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 non-11w Capable mobile
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Received RSN IE with 0 PMKIDs from mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 Updating AID for REAP AP Client 78:72:5d:f8:7c:60 - AID ===> 169
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 apfVapSecurity=0x40004000 L2=16384 SkipWeb=0
*apfMsConnTask_0: Mar 20 10:06:33.515: 5c:f9:38:8c:5e:68 AuthenticationRequired = 1
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Encryption policy is set to 0x80000001
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Mar 20 10:06:33.516: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfMsAssoStateInc
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfMsWepPskStateInc
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfPemAddUser2 (apf_policy.c:451) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Associated

*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfPemAddUser2:session timeout forstation 5c:f9:38:8c:5e:68 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 0 station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-00 on apVapId 2
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: '0') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:61 ApVapId 2 Slot 0, mobility role 0
*apfMsConnTask_0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 apfProcessAssocReq (apf_80211.c:12199) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@50
*spamApTask0: Mar 20 10:06:33.517: 5c:f9:38:8c:5e:68 Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 1004616088) ack state for STA on AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Received ADD_MOBILE ack - Initiating 1x to STA 5c:f9:38:8c:5e:68 (idx 50)
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 APF Initiating 1x to STA 5c:f9:38:8c:5e:68
*spamApTask0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Sent dot1x auth initiate message for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 dot1xProcessInitiate1XtoMobile to mobile station 5c:f9:38:8c:5e:68 (mscb 1, msg 1)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 reauth_sm state transition 0 ---> 1 for mobile 5c:f9:38:8c:5e:68 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Normal psk client, full auth
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Creating a PKC PMKID Cache entry for station 5c:f9:38:8c:5e:68 (RSN 2)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Resetting MSCB PMK Cache Entry @index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Created PMKID PMK Cache for BSSID 78:72:5d:f8:7c:61 at index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] f3 47 4e 6f 8b e2 ec de c9 f6 ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Initiating RSN PSK to mobile 5c:f9:38:8c:5e:68keyMgmtType : 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 EAP-PARAM Debug - eap-params for Wlan-Id :2 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 dot1x - moving mobile 5c:f9:38:8c:5e:68 into Force Auth state
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Skipping EAP-Success to mobile 5c:f9:38:8c:5e:68 (encryptBit:0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:61 in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:61 in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] f3 47 4e 6f 8b e2 ec de c9 f6 ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0000] dd 14 00 0f ac 04 f3 47 4e 6f 8b e2 ec de c9 f6

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: [0016] ab 2b 56 64 91 7e

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Starting key exchange to mobile 5c:f9:38:8c:5e:68, data packets will be dropped
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.521: 5c:f9:38:8c:5e:68 Allocating EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTK_START state (message 2) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Encryption Policy: 4, PTK Key Length: 48
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Successfully computed PTK from PMK!!!
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Received valid MIC in EAPOL Key Message M2!!!!!
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 rsnieCapabilty = 0 rsnie_len =20
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Dumping RSNIE received in Association request(len = 22):
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000010: 00 0f ac 02 00 00 ......
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Dumping RSNIE received in EAPOL M2 (len = 20):
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 00000010: ac 02 00 00 ....
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.523: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.524: 5c:f9:38:8c:5e:68 Reusing allocated memory for EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.525: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Freeing EAP Retransmit Bufer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Mobility query, PEM State: L2AUTHCOMPLETE

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) NO release MSCB
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building Mobile Announce :

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building Client Payload:

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Ip: 0.0.0.0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Vlan Ip: 10.10.130.10, Vlan mask : 255.255.255.128

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Client Vap Security: 1073758208

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Virtual Ip: 192.0.2.1

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 ssid: STAFF

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Building VlanIpPayload.

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 7231, Adding TMP rule
*spamApTask0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*Dot1x_NW_MsgTask_0: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 Successfully Plumbed PTK session Keysfor mobile 5c:f9:38:8c:5e:68
*apfReceiveTask: Mar 20 10:06:33.526: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.10.130.10
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Created Cisco-Audit-Session-ID for the mobile: 0a820a0a000001dda910925c type: local
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Audit session id is created 0a820a0a000001dda910925c for mobility complete
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 pemAdvanceState2 (pem_api.c:6735) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6869, Adding TMP rule
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255,
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*apfReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*pemReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*spamApTask0: Mar 20 10:06:33.527: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@51
*apfReceiveTask: Mar 20 10:06:34.683: 5c:f9:38:8c:5e:68 Recieved MS IPv4 Addr= 0.0.0.0
*apfReceiveTask: Mar 20 10:06:34.683: 5c:f9:38:8c:5e:68 Updating MS IPv6[1] Addr= fe80:0000:0000:0000:0cda:2b10:6584:4f3e
*apfReceiveTask: Mar 20 10:06:36.583: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:36.583: 5c:f9:38:8c:5e:68 IPv4 Addr: 0:0:0:0

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 dtlArpInsert: Add ARP entry IP 10.10.162.6, MAC 5c:f9:38:8c:5e:68, VLAN 0, INTF 1, Type 0, New 1 (caller apf_foreignap.c:1176)
,arp count = 26
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 dtlArpSetType: Changing ARP Type from 0 ---> 1 for station 5c:f9:38:8c:5e:68
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 apfMsRunStateInc
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 10.10.162.6 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7)

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Created Session Cache Entry with timeout 86388 for client. Type: Local
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 apfCreatePmkCacheEntry: added a new pmk cache entry for 5c:f9:38:8c:5e:68

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Created audit session id (0a820a0a000001dda910925c) in pmk cache. type: local
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Adding Audit session ID payload in Mobility handoff

*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 0 PMK-update groupcast messages sent
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:7854)
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Initiating Accounting request(0) update for mobile
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 10.10.162.6 RUN (20) NO release MSCB
*apfReceiveTask: Mar 20 10:06:36.634: 5c:f9:38:8c:5e:68 Assigning Address 10.10.162.6 to mobile
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*pemReceiveTask: Mar 20 10:06:36.635: 5c:f9:38:8c:5e:68 10.10.162.6 Removed NPU entry.
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 Recieved MS IPv4 Addr= 10.10.162.6
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 Updating MS IPv6[1] Addr= fe80:0000:0000:0000:0cda:2b10:6584:4f3e
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:37.740: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:37.741: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Mar 20 10:06:37.741: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Mar 20 10:06:38.065: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Mar 20 10:06:38.391: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Mar 20 10:06:38.391: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

3xIT · ‎03-20-2019

Also, I asked the user to delete second Wi-Fi on her MacBook because sometimes she is connected to Guest and sometimes to Staff which is really wired and maybe this is causing problems. She is supposed to use "Staff" and nothing else but it looks she tried "Guest" before and now she is automatically jumping from one to other. Will see if this helps.

patoberli · ‎03-20-2019

Ah look this:
*apfMsConnTask_0: Mar 20 10:06:15.480: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: 'maximum station reached') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:62 ApVapId 3 Slot 0, mobility role 1
There is this bug here, but I don't think you hit it:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve81314/?rfs=iqvred

But then there is this bug here:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj14972/?rfs=iqvred
That one you actually might be hitting. Try the workaround listed there, maybe it helps.

Can you provide me with the output of show wlan #, where # is the number of the SSID (either 1 or 2 with two configured SSIDs)?

3xIT · ‎03-21-2019

I am waiting for users approval to reboot and I have also added "config ap aid-audit enable"

Here is the output of show wlan 2 (Staff)
(Cisco Controller) >show wlan 2

WLAN Identifier.................................. 2
Profile Name..................................... STAFF
Network Name (SSID).............................. STAFF
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited
Security Group Tag............................... Unknown(0)

--More-- or (q)uit
Maximum number of Clients per AP Radio........... 200
ATF Policy....................................... 0
Number of Active Clients......................... 3
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
Sleep Client Auto Auth Feature................... Enabled
Web Auth Captive Bypass Mode..................... None
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Scope Name.................................. none

--More-- or (q)uit
Central NAT...................................... Disabled
Central NAT Peer-Peer Blocking................... Disabled
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
EoGRE Override VLAN state........................ disable
EoGRE Override VLAN ID........................... 0
Quality of Service............................... Silver
Per-BSSID Rate Limits............................ Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-WLAN Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0

--More-- or (q)uit
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=0)
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Disabled
Accounting.................................... Global Servers
Interim Update............................. Enabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Authorization ACA............................. Disabled
Accounting ACA................................ Disabled

--More-- or (q)uit
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Radius Authentication caching.................... Disabled
Mu-Mimo.......................................... Enabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Adaptive
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
CCMP256 Cipher.......................... Disabled
GCMP128 Cipher.......................... Disabled
GCMP256 Cipher.......................... Disabled
OSEN IE.................................... Disabled
Auth Key Management
802.1x.................................. Disabled

--More-- or (q)uit
PSK..................................... Enabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
OSEN-1X................................. Disabled
SUITEB-1X............................... Disabled
SUITEB192-1X............................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Enabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
qrscan-des-key................................ 12345678

--More-- or (q)uit
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Enabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Fleconnect Post-Auth IPv4 ACL................. Unconfigured
Fleconnect Post-Auth IPv6 ACL................. Unconfigured
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
Flex Avc Profile Name............................ STAFF

--More-- or (q)uit
OpenDns Profile Name............................. None
OpenDns Wlan Mode................................ ignore
OpenDns Wlan Dhcp Option 6....................... enable
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Enabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Enabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Enabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Client-Count Based

--More-- or (q)uit
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled
PRP.............................................. Disabled
Fast Receive..................................... Disabled

Mobility Anchor List
WLAN ID IP Address Status Priority
------- --------------- ------ --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority Policy Name
-------- ---------------

QoS Fastlane Status.............................. Disable
Selective Reanchoring Status..................... Disable
Lobby Admin Access............................... Disabled

--More-- or (q)uit
Fabric Status
--------------

Fabric status.................................... Disable
Vnid Name........................................
Vnid............................................. 0
Applied SGT Tag.................................. 0
Peer Ip Address.................................. 0.0.0.0
Flex Acl Name....................................
Flex IPv6 Acl Name...............................
Flex Avc Policy Name.............................

U3-Interface................................... Disable

U3-Reporting Interval.......................... 30

patoberli · ‎03-25-2019

Can't really see anything wrong, that's a good sign.
For testing, try to disable those two features (one of them could maybe cause the debug message I saw previously):
Band Select...................................... Enabled
Load Balancing................................... Client-Count Based

3xIT · ‎03-25-2019

It's really a basic configuration, without anything special. We have router RV325 working as DHCP server with a couple of VLANs, one PoE+ switch, two ME enabled APs (master and backup) and six additional APs (all are 3802i).

Can you write me how to disable those two options?

Thank you for all your help!

patoberli · ‎03-25-2019

I sadly don't have a ME AP with me at the moment. If I remember correctly, you have to enable the Advanced View mode in the webinterface and then those options should be unter the SSID configuration.
If the commands are the same as for the wlc, they should be:
config wlan band-select allow {enable | disable} wlan_ID
config wlan load-balance allow {enable | disable} wlan_ID
So in your case you'd want to disable it for testing.

3xIT · ‎04-04-2019

Thank you, I will try this next week. Unfortunately users are still keeping kicked out from Wi-Fi and I just captured this:

(Cisco Controller) >debug client 5c:f9:38:8c:5e:68

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*apfReceiveTask: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:6d destination addr 78:72:5d:f8:7c:6d
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-01 ssid : GUEST thread:5e0fef70
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -64. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 1
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Setting hasApChnaged Flag as true. It is a roam scenario.

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Setting RTTS enabled to 0
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:f8:7c:6d AP WAP07
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -64. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 1
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Max Client Trap Threshold: 0 cur: 1

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Deleting client immediately since WLAN has changed
*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Scheduling deletion of Mobile Station: (callerId: 50) in 1 seconds
*osapiBsnTimer: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 apfMsExpireCallback (apf_ms.c:657) Expiring Mobile!
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:7986) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Disassociated

*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Succesfully freed AID 40, slot 0 on AP 78:72:5d:f8:7c:60, #client on this slot 7
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Sent Disassociate to mobile on AP 78:72:5d:f8:7c:60-0 on BSSID 78:72:5d:f8:7c:61(reason 1, caller apf_ms.c:8070)
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Resetting MSCB PMK Cache Entry @index 0 for station 5c:f9:38:8c:5e:68
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Removing BSSID 78:72:5d:f8:7c:61 from PMKID cache of station 5c:f9:38:8c:5e:68
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Setting active key cache index 0 ---> 8
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Removing PMK cache entry for station 5c:f9:38:8c:5e:68
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Sent Deauthenticate to mobile on BSSID 78:72:5d:f8:7c:61 slot 0(caller apf_ms.c:8078)
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 Initiating Accounting request(2) update for mobile
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 apfMsAssoStateDec
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 apfMsWepPskStateDec
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 apfMsExpireMobileStation (apf_ms.c:8136) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Disassociated to Idle

*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:5148)
*apfReceiveTask: Apr 04 11:18:22.304: 5c:f9:38:8c:5e:68 10.10.162.6 START (0) Deleted mobile LWAPP rule on AP [78:72:5d:f8:7c:60]
*apfReceiveTask: Apr 04 11:18:22.305: 5c:f9:38:8c:5e:68 0 PMK-remove groupcast messages sent
*apfReceiveTask: Apr 04 11:18:22.305: 5c:f9:38:8c:5e:68 Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client
*apfReceiveTask: Apr 04 11:18:22.305: 5c:f9:38:8c:5e:68 Deleting mobile on AP 78:72:5d:f8:7c:60(0)
*spamApTask0: Apr 04 11:18:22.316: 5c:f9:38:8c:5e:68 Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:22.316: 5c:f9:38:8c:5e:68 Delete Mobile request with reason 'MN_DEL_REAUTH_TIMEOUT' on slot 0 sent to the AP 78:72:5d:f8:7c:60 IP: 10.10.130.17:5248.
*apfReceiveTask: Apr 04 11:18:22.326: 5c:f9:38:8c:5e:68 apf_ms.c:5565 Clearing the SGT 0 of mobile
*spamApTask0: Apr 04 11:18:27.166: 5c:f9:38:8c:5e:68 Received DELETE mobile, reasonCode MN_REASSOC_TIMEOUT, deleteReason 4 from AP 78:72:5d:f8:7c:60, slot 1 ...cleaning up mscb
*apfReceiveTask: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:6e destination addr 78:72:5d:f8:7c:6e
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-01 ssid : STAFF thread:5e0fef70
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 apfCreateMobileStationEntryWrapper (apf_ms.c:4446) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Idle

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Adding mobile on LWAPP AP 78:72:5d:f8:7c:60(1)
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Created Acct-Session-ID (5ca5e808/5c:f9:38:8c:5e:68/1528) for the mobile
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Setting hasApChnaged Flag as true. It is a fresh assoc request.

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Setting RTTS enabled to 0
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:f8:7c:6e AP WAP07
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -66. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 1
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Max Client Trap Threshold: 0 cur: 1

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Updated local bridging VLAN to 0 while applying WLAN policy
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Apr 04 11:18:32.145: 5c:f9:38:8c:5e:68 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Not re-applying interface policy for local switching Client

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 After applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3274)
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing Url ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255),Default action is '0' --- (caller apf_policy.c:3294)
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:3315)
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 apf_policy.c:2559 Assigning the SGT 0 to mobile (earlier sgt 0)
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 In processSsidIE:7088 setting Central switched to FALSE
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Set Clinet MSCB as Central Association Disabled
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Applying site-specific Local Bridging override for station 5c:f9:38:8c:5e:68 - vapId 2, site 'default-group', interface 'management'
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Applying Local Bridging Interface Policy for station 5c:f9:38:8c:5e:68 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Set Clinet Non AP specific WLAN apfMsAccessVlan = 602
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 This apfMsAccessVlan may be changed later from AAA after L2 Auth
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Cleared localSwitchingVlan, may be assigned later based on AAA override
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_0: Apr 04 11:18:32.146: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Apr 04 11:18:32.146: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Apr 04 11:18:32.146: [0016] ac 02 00 00

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Processing RSN IE type 48, length 20 for mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 RSN Capabilities: 0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 non-11w Capable mobile
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Received RSN IE with 0 PMKIDs from mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Updating AID for REAP AP Client 78:72:5d:f8:7c:60 - AID ===> 186
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 apfVapSecurity=0x40004000 L2=16384 SkipWeb=0
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 AuthenticationRequired = 1
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Encryption policy is set to 0x80000001
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*apfMsConnTask_0: Apr 04 11:18:32.146: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 apfMsAssoStateInc
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 apfMsWepPskStateInc
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 apfPemAddUser2 (apf_policy.c:451) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Idle to Associated

*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 apfPemAddUser2:session timeout forstation 5c:f9:38:8c:5e:68 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Apr 04 11:18:32.147: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 0 station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-01 on apVapId 2
*apfMsConnTask_0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 VHT Operation IE: width 80/1 ch 40 freq0 42 freq1 0 msc0 0x3f msc1 0x3f
*apfMsConnTask_0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: '0') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:6e ApVapId 2 Slot 1, mobility role 0
*apfMsConnTask_0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 apfProcessAssocReq (apf_80211.c:12199) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@13
*spamApTask0: Apr 04 11:18:32.148: 5c:f9:38:8c:5e:68 Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 808711376) ack state for STA on AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Received ADD_MOBILE ack - Initiating 1x to STA 5c:f9:38:8c:5e:68 (idx 13)
*spamApTask0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 APF Initiating 1x to STA 5c:f9:38:8c:5e:68
*spamApTask0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Sent dot1x auth initiate message for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 dot1xProcessInitiate1XtoMobile to mobile station 5c:f9:38:8c:5e:68 (mscb 1, msg 1)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 reauth_sm state transition 0 ---> 1 for mobile 5c:f9:38:8c:5e:68 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Normal psk client, full auth
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Creating a PKC PMKID Cache entry for station 5c:f9:38:8c:5e:68 (RSN 2)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Resetting MSCB PMK Cache Entry @index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Created PMKID PMK Cache for BSSID 78:72:5d:f8:7c:6e at index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: [0000] 5c f8 91 b0 50 77 ec 1f 3b 26 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Initiating RSN PSK to mobile 5c:f9:38:8c:5e:68keyMgmtType : 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 EAP-PARAM Debug - eap-params for Wlan-Id :2 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 dot1x - moving mobile 5c:f9:38:8c:5e:68 into Force Auth state
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Skipping EAP-Success to mobile 5c:f9:38:8c:5e:68 (encryptBit:0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:6e in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:6e in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: [0000] 5c f8 91 b0 50 77 ec 1f 3b 26 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: [0000] dd 14 00 0f ac 04 5c f8 91 b0 50 77 ec 1f 3b 26

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: [0016] 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Starting key exchange to mobile 5c:f9:38:8c:5e:68, data packets will be dropped
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.152: 5c:f9:38:8c:5e:68 Allocating EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTK_START state (message 2) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Encryption Policy: 4, PTK Key Length: 48
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Successfully computed PTK from PMK!!!
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Received valid MIC in EAPOL Key Message M2!!!!!
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 rsnieCapabilty = 0 rsnie_len =20
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Dumping RSNIE received in Association request(len = 22):
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 00000010: 00 0f ac 02 00 00 ......
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Dumping RSNIE received in EAPOL M2 (len = 20):
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 00000010: ac 02 00 00 ....
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.154: 5c:f9:38:8c:5e:68 Reusing allocated memory for EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Apr 04 11:18:32.155: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Freeing EAP Retransmit Bufer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Mobility query, PEM State: L2AUTHCOMPLETE

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) NO release MSCB
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Building Mobile Announce :

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Building Client Payload:

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Client Ip: 0.0.0.0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Client Vlan Ip: 10.10.130.10, Vlan mask : 255.255.255.128

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Client Vap Security: 1073758208

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Virtual Ip: 192.0.2.1

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 ssid: STAFF

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Building VlanIpPayload.

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 7231, Adding TMP rule
*spamApTask0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 1, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.156: 5c:f9:38:8c:5e:68 Successfully Plumbed PTK session Keysfor mobile 5c:f9:38:8c:5e:68
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.10.130.10
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Created Cisco-Audit-Session-ID for the mobile: 0a820a0a0000030108e8a55c type: local
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Audit session id is created 0a820a0a0000030108e8a55c for mobility complete
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 pemAdvanceState2 (pem_api.c:6735) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6869, Adding TMP rule
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 1, interface = 1, QOS = 0
IPv4 ACL ID = 255,
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*apfReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*spamApTask0: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*pemReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*spamApTask0: Apr 04 11:18:32.157: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@14
*apfReceiveTask: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Received management frame ASSOCIATION REQUEST on BSSID 78:72:5d:f8:7c:6e destination addr 78:72:5d:f8:7c:6e
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Updating 11r vendor IE

*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Processing assoc-req station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-01 ssid : STAFF thread:5e0fef70
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -65. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 1
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Updating location for mobile on same AP 78:72:5d:f8:7c:60-1
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Setting RTTS enabled to 0
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Association received from mobile on BSSID 78:72:5d:f8:7c:6e AP WAP07
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 trying to join WLAN with RSSI -65. Checking for XOR roam conditions on AP: 78:72:5D:F8:7C:60 Slot: 1
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Station: 5C:F9:38:8C:5E:68 is associating to AP 78:72:5D:F8:7C:60 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 11:18:32.645: 5c:f9:38:8c:5e:68 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Max Client Trap Threshold: 0 cur: 2

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Updated local bridging VLAN to 0 while applying WLAN policy
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 In processSsidIE:7088 setting Central switched to FALSE
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Set Clinet MSCB as Central Association Disabled
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Applying site-specific Local Bridging override for station 5c:f9:38:8c:5e:68 - vapId 2, site 'default-group', interface 'management'
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Applying Local Bridging Interface Policy for station 5c:f9:38:8c:5e:68 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Set Clinet Non AP specific WLAN apfMsAccessVlan = 602
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 This apfMsAccessVlan may be changed later from AAA after L2 Auth
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Cleared localSwitchingVlan, may be assigned later based on AAA override
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_0: Apr 04 11:18:32.646: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Apr 04 11:18:32.646: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Apr 04 11:18:32.646: [0016] ac 02 00 00

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Processing RSN IE type 48, length 20 for mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 RSN Capabilities: 0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 non-11w Capable mobile
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Received RSN IE with 0 PMKIDs from mobile 5c:f9:38:8c:5e:68
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 2
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Succesfully freed AID 186, slot 1 on AP 78:72:5d:f8:7c:60, #client on this slot 1
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 Updating AID for REAP AP Client 78:72:5d:f8:7c:60 - AID ===> 21
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 apfMs1xStateDec
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*pemReceiveTask: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 0.0.0.0 Removed NPU entry.
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 apfVapSecurity=0x40004000 L2=16384 SkipWeb=0
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 AuthenticationRequired = 1
*apfMsConnTask_0: Apr 04 11:18:32.646: 5c:f9:38:8c:5e:68 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Encryption policy is set to 0x80000001
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000001]
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 apfPemAddUser2 (apf_policy.c:451) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 apfPemAddUser2:session timeout forstation 5c:f9:38:8c:5e:68 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Sending assoc-resp with status 0 station:5c:f9:38:8c:5e:68 AP:78:72:5d:f8:7c:60-01 on apVapId 2
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 VHT Operation IE: width 80/1 ch 40 freq0 42 freq1 0 msc0 0x3f msc1 0x3f
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Sending Assoc Response (status: '0') to station on AP WAP07 on BSSID 78:72:5d:f8:7c:6e ApVapId 2 Slot 1, mobility role 1
*apfMsConnTask_0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 apfProcessAssocReq (apf_80211.c:12199) Changing state for mobile 5c:f9:38:8c:5e:68 on AP 78:72:5d:f8:7c:60 from Associated to Associated

*spamApTask0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Apr 04 11:18:32.647: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Apr 04 11:18:32.648: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@15
*spamApTask0: Apr 04 11:18:32.648: 5c:f9:38:8c:5e:68 Setting ADD_MOBILE (idx 0, seqno 0, action 1, count 808711378) ack state for STA on AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Received ADD_MOBILE ack - Initiating 1x to STA 5c:f9:38:8c:5e:68 (idx 15)
*spamApTask0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 APF Initiating 1x to STA 5c:f9:38:8c:5e:68
*spamApTask0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Sent dot1x auth initiate message for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 dot1xProcessInitiate1XtoMobile to mobile station 5c:f9:38:8c:5e:68 (mscb 2, msg 2)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 reauth_sm state transition 1 ---> 0 for mobile 5c:f9:38:8c:5e:68 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Normal psk client, full auth
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Creating a PKC PMKID Cache entry for station 5c:f9:38:8c:5e:68 (RSN 2)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Resetting MSCB PMK Cache Entry @index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Removing BSSID 78:72:5d:f8:7c:6e from PMKID cache of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Created PMKID PMK Cache for BSSID 78:72:5d:f8:7c:6e at index 0 for station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: [0000] 5c f8 91 b0 50 77 ec 1f 3b 26 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Initiating RSN PSK to mobile 5c:f9:38:8c:5e:68keyMgmtType : 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 EAP-PARAM Debug - eap-params for Wlan-Id :2 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 dot1x - moving mobile 5c:f9:38:8c:5e:68 into Force Auth state
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Skipping EAP-Success to mobile 5c:f9:38:8c:5e:68 (encryptBit:0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:6e in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Found an cache entry for BSSID 78:72:5d:f8:7c:6e in PMKID cache at index 0 of station 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: [0000] 5c f8 91 b0 50 77 ec 1f 3b 26 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: M1 - Key Data: (22)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: [0000] dd 14 00 0f ac 04 5c f8 91 b0 50 77 ec 1f 3b 26

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: [0016] 79 64 3a a8 55 a3

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Starting key exchange to mobile 5c:f9:38:8c:5e:68, data packets will be dropped
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.651: 5c:f9:38:8c:5e:68 Allocating EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Apr 04 11:18:32.653: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTK_START state (message 2) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Encryption Policy: 4, PTK Key Length: 48
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Successfully computed PTK from PMK!!!
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Received valid MIC in EAPOL Key Message M2!!!!!
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Compare RSN IE in association and EAPOL-M2 frame(rsnie_len :20, and grpMgmtCipherLen:0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 rsnieCapabilty = 0 rsnie_len =20
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Dumping RSNIE received in Association request(len = 22):
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 00000010: 00 0f ac 02 00 00 ......
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Dumping RSNIE received in EAPOL M2 (len = 20):
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 00000010: ac 02 00 00 ....
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Sending EAPOL-Key Message to mobile 5c:f9:38:8c:5e:68
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.654: 5c:f9:38:8c:5e:68 Reusing allocated memory for EAP Pkt for retransmission to mobile 5c:f9:38:8c:5e:68
*CAPWAP DATA: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 validating eapol pkt: key version = 2
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Received EAPOL-Key from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 key Desc Version FT - 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Stopping retransmission timer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Freeing EAP Retransmit Bufer for mobile 5c:f9:38:8c:5e:68
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2for this client
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.655: 5c:f9:38:8c:5e:68 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 78:72:5d:f8:7c:60 vapId 2 apVapId 2 flex acl-name: v6acl-name
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) pemAdvanceState2 7202, Adding TMP rule
*spamApTask0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Add SGT:0 to AP 78:72:5d:f8:7c:60
*spamApTask0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 1, interface = 1, QOS = 0
IPv4 ACL ID = 255
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 7231, Adding TMP rule
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 78:72:5d:f8:7c:60, slot 1, interface = 1, QOS = 0
IPv4 ACL ID = 255,
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 1706, IntfId = 0 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 1706 AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255,URL ACL ID 255,URL ACL Action 0)
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Updating info change db with CMX bitmap 0x0000
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 DHCP_REQD (7) NO release MSCB
*Dot1x_NW_MsgTask_0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Successfully Plumbed PTK session Keysfor mobile 5c:f9:38:8c:5e:68
*spamApTask0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 Successful transmission of LWAPP Add-Mobile to AP 78:72:5d:f8:7c:60 idx@16
*pemReceiveTask: Apr 04 11:18:32.656: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Apr 04 11:18:32.657: 5c:f9:38:8c:5e:68 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*apfReceiveTask: Apr 04 11:18:35.560: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Apr 04 11:18:35.560: 5c:f9:38:8c:5e:68 IPv4 Addr: 0:0:0:0

*apfReceiveTask: Apr 04 11:18:35.567: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 1, add_or_delete 1
*apfReceiveTask: Apr 04 11:18:35.567: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Apr 04 11:18:35.567: 5c:f9:38:8c:5e:68 dtlArpInsert: Add ARP entry IP 10.10.162.6, MAC 5c:f9:38:8c:5e:68, VLAN 0, INTF 1, Type 0, New 1 (caller apf_foreignap.c:1176)
,arp count = 23
*apfReceiveTask: Apr 04 11:18:35.567: 5c:f9:38:8c:5e:68 dtlArpSetType: Changing ARP Type from 0 ---> 1 for station 5c:f9:38:8c:5e:68
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 apfMsRunStateInc
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 10.10.162.6 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7)

*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 Created Session Cache Entry with timeout 86390 for client. Type: Local
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 apfCreatePmkCacheEntry: added a new pmk cache entry for 5c:f9:38:8c:5e:68

*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 Created audit session id (0a820a0a0000030108e8a55c) in pmk cache. type: local
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 Adding Audit session ID payload in Mobility handoff

*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 0 PMK-update groupcast messages sent
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 the value of url acl preserve flag is 0 for mobile 5c:f9:38:8c:5e:68 (caller pem_api.c:7854)
*apfReceiveTask: Apr 04 11:18:35.589: 5c:f9:38:8c:5e:68 Initiating Accounting request(0) update for mobile
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 10.10.162.6 RUN (20) NO release MSCB
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 Assigning Address 10.10.162.6 to mobile
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 DHCP success event for client. Clearing dhcp failure count for interface management.
*apfReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*pemReceiveTask: Apr 04 11:18:35.590: 5c:f9:38:8c:5e:68 10.10.162.6 Removed NPU entry.
*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 Recieved MS IPv4 Addr= 10.10.162.6
*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 Updating MS IPv6[1] Addr= fe80:0000:0000:0000:08e3:9e33:b2be:895e
*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Apr 04 11:18:36.557: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Apr 04 11:18:36.871: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Apr 04 11:18:36.871: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Apr 04 11:18:36.871: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.
*apfReceiveTask: Apr 04 11:18:36.871: 5c:f9:38:8c:5e:68 No DHCP scope for IP scope name none.
*apfReceiveTask: Apr 04 11:18:37.197: 5c:f9:38:8c:5e:68 WcdbClientUpdate: IP Binding from WCDB ip_learn_type 2, add_or_delete 1
*apfReceiveTask: Apr 04 11:18:37.197: 5c:f9:38:8c:5e:68 IPv4 Addr: 10:10:162:6

*apfReceiveTask: Apr 04 11:18:37.197: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.

patoberli · ‎04-04-2019

This is a new error:

*apfReceiveTask: Apr 04 11:18:37.197: 5c:f9:38:8c:5e:68 Static IP client associated to interface management which cannot support client subnet.

In this case the client doesn't seem to use DHCP and has an IP configured that doesn't match the subnet configured for the SSID.
In the meantime was 8.8.120.0 released, please try this update regardless of this issue.

It also seems that this client has several different SSIDs of your company configured:

*apfMsConnTask_0: Apr 04 11:18:21.368: 5c:f9:38:8c:5e:68 Deleting client immediately since WLAN has changed

This could also be the main reason. They should only use 1 SSID, not several. Not sure if that is indeed the case, but it looks like there is another SSID besides the one called STAFF.

3xIT · ‎04-04-2019

Hi patoberli,

I agree with you on this part about several different SSIDs. I saw that before on the same PC and I asked her to delete but obviously, she didn't do that and now I have asked her again. Last 30 minutes looks better and I am not sure if this was the case. Let me check with her and I will let you know.
Also, there was no static IP configured and I am sure that she doesn't know how to do that. I am very confused with this error but let see.

Thanks!

3xIT · ‎04-04-2019

I have found one more strange thing... When I click on "Clients" under "Monitoring", I saw "mesh_SSID" under WLAN SSID and it looks like another Cisco Bug https://quickview.cloudapps.cisco.com/quickview/bug/CSCtb74460

patoberli · ‎04-08-2019

I doubt it's that bug, as it was solved many years ago and not affecting any 8.x release.
Try 8.8.120.0 if you haven't already.

panagiotiskontos · ‎06-28-2019

Hi,

Did you resolve this issue?

Because i have the same proble. When users moves they cannot connect to another access point.

The version of Controller is 8.8.120.0

Please let me know if you have any solution.

Thanks in advance

3xIT · ‎06-28-2019

Hi,
I think it's resolved as I didn't hear complaints for almost two months.
I did next:
- Upgrade all AP to 8.8.120.0
- Added additional AP to one office for better coverage
- Remove one SSID, now they have only two (guest and office).

If I get another call, I will write here.

Btw. Most of Huawei devices have really bad connection with AP 3802. All iPhones, even iPhone 5 has better connectivity than some new Huawei.
Also, I'm not sure how to make a stronger signal. We had 1142 AP before and I think it was better coverage with 3-4 of them than 9-10 3802i which is strange.
Good luck!