cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4194
Views
0
Helpful
31
Replies

Regarding Corp-Mobile SSID

jain.manish94
Spotlight
Spotlight

Hello Team, 

Please help me out to resolve the issue. 

 

ISSue : there are some users at the site are able to connect with Corp-Mobile SSID successfully but some are not able to connect in same environment. i am attaching all screen shots and Debug logs from Central WLC and Anchor WLC. 

 

There is only one single SSID. 

There is only one single Central WLC. 

there is only one single Anchor WLC. 

There is only one single Radius server. 

There is only one single Intune Server for mobile enrollment.

 

i am not understanding why for user iphone users are not able to connect in same network but some iphone users are connecting successfully. 

 

This is only Iphone ios device issue. SSID-1.PNGSSID-AAA Servers.PNGSSID-Advanced.PNGSSID-Advanced-1.PNGSSID-Advanced-2.PNGSSID-Advanced-3.PNGSSID-On Anchor WLC.PNGSSID-On Anchor WLC-1.PNGSSID-On Anchor WLC-2.PNGSSID-On Anchor WLC-3.PNGSSID-On Anchor WLC-4.PNGSSID-On Anchor WLC-5.PNGSSID-On Anchor WLC-6.PNGSSID-QOS-1.PNGSSID-QOS-2.PNGSSID-Security-Layer2.PNGuser is getting stuck on 802.1x.PNGUsers on Central WLC- Corp-Mobile-SSID.PNG

 

---------------------------------------------

 

From Central WLC

 

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.07.01 16:29:34 =~=~=~=~=~=~=~=~=~=~=~=
login as:


(Cisco Controller)
User: pa6nwadmin
Password:**********
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >debug client m 00:56:CD:BF:B7:E2

(Cisco Controller) >*RRM-CLNT-5_0: May 22 01:24:26.955: [rrmClientSendNeighborCtrl] AP mac:20:4c:9e:0e:c7:50 slot:1Measurement Interval: b4

*apfMsConnTask_1: Jul 01 06:34:12.380: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*spamApTask4: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.527: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.737: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.754: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.923: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.937: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:12.937: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.157: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.169: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.359: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.371: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2

(Cisco Controller) >*Dot1x_NW_MsgTask_2: Jul 01 06:34:13.584: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 Received DELETE mobile, reason UNKNOWN, from AP 00:fe:c8:be:d9:d0, slot 0 ...cleaning up mscb
*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 15, reasonCode 1

*spamApTask4: Jul 01 06:35:22.563: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*osapiBsnTimer: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7442) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Disassociated

*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsAssoStateDec
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7581) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Disassociated to Idle

*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [00:fe:c8:be:d9:d0]
*apfReceiveTask: Jul 01 06:35:23.407: 00:56:cd:bf:b7:e2 Deleting mobile on AP 00:fe:c8:be:d9:d0(0)
*spamApTask4: Jul 01 06:35:23.552: 00:56:cd:bf:b7:e2 apfUpdateDeleteAckInMscb (apf_api.c:50821) Expiring Mobile!
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Created Acct-Session-ID (5d19a9b1/00:56:cd:bf:b7:e2/1113697) for the mobile
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Adding mobile on LWAPP AP 00:fe:c8:be:d9:d0(0)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:35:29.600: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:35:29.600: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:35:29.600: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfMsAssoStateInc
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Idle to Associated

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:35:29.600: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.746: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.899: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:29.916: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*osapiBsnTimer: Jul 01 06:35:33.955: 00:56:cd:bf:b7:e2 802.1x 'timeoutEvt' Timer expired for station 00:56:cd:bf:b7:e2 and for message = M0
*Dot1x_NW_MsgTask_2: Jul 01 06:35:33.955: 00:56:cd:bf:b7:e2 Retransmit 1 of EAP-Request (length 10) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.105: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.120: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.306: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.317: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.520: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.532: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:35:34.781: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Processing AAA Error 'Timeout' (-5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Sent Deauthenticate to mobile on BSSID 00:fe:c8:be:d9:d4 slot 0(caller 1x_auth_pae.c:1636)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Deleting the PMK cache when de-authenticating the client.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Global PMK Cache deletion failed.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 65) in 10 seconds
*Dot1x_NW_MsgTask_2: Jul 01 06:36:14.515: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Reassociation received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 14

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:14.911: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:36:14.911: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:36:14.911: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d4-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:36:14.911: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.059: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.214: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.232: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.390: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.403: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.571: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.583: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 4, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.757: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.769: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:15.969: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:36:32.547: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:36:32.547: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:36:32.547: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 AID 16 in Assoc Req from flex AP 00:fe:c8:be:d9:d0 is same as in mscb 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d4-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:36:32.547: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:36:32.693: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 reauth_sm state transition 1 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.694: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:32.912: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Received EAPOL START, dot1x state = 3
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Received EAPOL START from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Aborting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:37.906: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.097: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.302: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:38.315: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*osapiBsnTimer: Jul 01 06:36:42.167: 00:56:cd:bf:b7:e2 802.1x 'timeoutEvt' Timer expired for station 00:56:cd:bf:b7:e2 and for message = M0
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.167: 00:56:cd:bf:b7:e2 Retransmit 1 of EAP-Request (length 1300) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 5, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.365: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=6) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 6)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.376: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.564: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=7) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 7)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.576: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 7, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:36:42.887: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:71

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) 802.1X/WPA Policy timeout
*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Pem timed out, Try to delete client in 10 secs.
*apfReceiveTask: Jul 01 06:38:09.851: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds
*osapiBsnTimer: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7442) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Disassociated

*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 Freeing EAP Retransmit Bufer for mobile 00:56:cd:bf:b7:e2
*apfReceiveTask: Jul 01 06:38:19.939: 00:56:cd:bf:b7:e2 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds
*osapiBsnTimer: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsExpireCallback (apf_ms.c:638) Expiring Mobile!
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsAssoStateDec
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 apfMsExpireMobileStation (apf_ms.c:7581) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Disassociated to Idle

*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Jul 01 06:38:30.071: 00:56:cd:bf:b7:e2 Deleting mobile on AP 00:fe:c8:be:d9:d0(0)

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*spamApTask4: Jul 01 06:38:30.216: 00:56:cd:bf:b7:e2 apfUpdateDeleteAckInMscb (apf_api.c:50821) Expiring Mobile!
*apfMsConnTask_1: Jul 01 06:38:56.967: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:38:56.967: 00:56:cd:bf:b7:e2 Created Acct-Session-ID (5d19aa80/00:56:cd:bf:b7:e2/1113714) for the mobile
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Adding mobile on LWAPP AP 00:fe:c8:be:d9:d0(0)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 12

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying site-specific override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:38:56.968: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:38:56.968: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:38:56.968: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Updating AID for REAP AP Client 00:fe:c8:be:d9:d0 - AID ===> 16
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfMsAssoStateInc
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Idle to Associated

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:38:56.968: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 reauth_sm state transition 0 ---> 1 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Station 00:56:cd:bf:b7:e2 setting dot1x reauth timeout = 36000
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.114: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.278: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=2) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.381: 00:56:cd:bf:b7:e2 Allocating EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 2, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.604: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=3) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.621: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Received EAP Response from mobile 00:56:cd:bf:b7:e2 (EAP Id 3, EAP Type 13)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.814: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:57.826: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.006: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.006: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.020: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:38:58.308: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Processing assoc-req station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 ssid : CORP-MOBILE-WLAN thread:18d07600
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Association received from mobile on BSSID 00:fe:c8:be:d9:d4 AP bsacnwwa89g-VS
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Station: 00:56:CD:BF:B7:E2 11v BSS Transition not enabled on the AP 00:FE:C8:BE:D9:D0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Global 200 Clients are allowed to AP radio

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Max Client Trap Threshold: 0 cur: 13

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 override for default ap group, marking intgrp NULL
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Re-applying interface policy for client

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 In processSsidIE:6332 setting Central switched to TRUE
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 In processSsidIE:6335 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying site-specific Local Bridging override for station 00:56:cd:bf:b7:e2 - vapId 5, site 'SAC2', interface 'management'
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Local Bridging Interface Policy for station 00:56:cd:bf:b7:e2 - vlan 2409, interface id 0, interface 'management'
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 override from ap group, removing intf group from mscb
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2711)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2732)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_1: Jul 01 06:40:05.129: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_1: Jul 01 06:40:05.129: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_1: Jul 01 06:40:05.129: [0016] ac 01 0c 00

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Processing RSN IE type 48, length 20 for mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 RSN Capabilities: 12
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Marking Mobile as non-11w Capable
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Received RSN IE with 0 PMKIDs from mobile 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Setting active key cache index 8 ---> 8
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 unsetting PmkIdValidatedByAp
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 AID 16 in Assoc Req from flex AP 00:fe:c8:be:d9:d0 is same as in mscb 00:56:cd:bf:b7:e2
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfVapSecurity=0x6040 L2=16384 SkipWeb=0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 AuthenticationRequired = 1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Encryption policy is set to 0x80000001
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Vlan while overriding the policy = -1
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:fe:c8:be:d9:d0 vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfPemAddUser2 (apf_policy.c:362) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfPemAddUser2:session timeout forstation 00:56:cd:bf:b7:e2 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Sending assoc-resp with status 0 station:00:56:cd:bf:b7:e2 AP:00:fe:c8:be:d9:d0-00 on apVapId 5
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 Sending Assoc Response to station on BSSID 00:fe:c8:be:d9:d4 (status 0) ApVapId 5 Slot 0
*apfMsConnTask_1: Jul 01 06:40:05.129: 00:56:cd:bf:b7:e2 apfProcessAssocReq (apf_80211.c:10552) Changing state for mobile 00:56:cd:bf:b7:e2 on AP 00:fe:c8:be:d9:d0 from Associated to Associated

*spamApTask4: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Sent dot1x auth initiate message for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 reauth_sm state transition 1 ---> 0 for mobile 00:56:cd:bf:b7:e2 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Connecting state
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.276: 00:56:cd:bf:b7:e2 Sending EAP-Request/Identity to mobile 00:56:cd:bf:b7:e2 (EAP Id 1)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Received Identity Response (count=1) from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Resetting reauth count 1 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 EAP State update from Connecting to Authenticating for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 dot1x - moving mobile 00:56:cd:bf:b7:e2 into Authenticating state
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.436: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 2)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.453: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.630: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 3)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.645: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:05.816: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=4) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 4)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.276: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.442: 00:56:cd:bf:b7:e2 Entering Backend Auth Response state for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Processing Access-Challenge for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Entering Backend Auth Req state (id=5) for mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Sending EAP Request from AAA to mobile 00:56:cd:bf:b7:e2 (EAP Id 5)
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.455: 00:56:cd:bf:b7:e2 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.725: 00:56:cd:bf:b7:e2 Received EAPOL EAPPKT from mobile 00:56:cd:bf:b7:e2
*Dot1x_NW_MsgTask_2: Jul 01 06:40:46.725: 00:56:cd:bf:b7:e2 Resetting reauth count 0 to 0 for mobile 00:56:cd:bf:b7:e2

(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >close     exit

Incorrect usage. Use the '?' or <TAB> key to list commands.

(Cisco Controller) >logout

 

 

----------------------------------------------------------

 

 

From Anchor WLC

 

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.07.01 16:38:39 =~=~=~=~=~=~=~=~=~=~=~=
login as:


(Cisco Controller)
User: pa6nwadmin
Password:**********
(Cisco Controller) >debug client m ?

<MAC addr1> Enter MAC address

(Cisco Controller) >debug client 00:56:CD:BF:B7:E2

(Cisco Controller) >*mmListen: Mar 25 17:20:12.710: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:35:28.780: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:35:29.943: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:35:45.821: Received mmIpAddrUpdateAck for client


(Cisco Controller) >*mmListen: Jul 01 18:36:00.737: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:38:05.043: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:38:05.575: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:38:19.216: Received mmIpAddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:38:19.343: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:38:45.275: Received mmIpv6AddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:38:45.848: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:39:57.015: Received mmIpAddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:07.726: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:40:07.927: Received mmIpv6AddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:28.691: Received mmIpv6AddrUpdateAck for client

*mmListen: Jul 01 18:40:37.823: Received mmIpv6AddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >*mmListen: Jul 01 18:40:38.719: Received mmIpAddrUpdateAck for client

*mmListen: Jul 01 18:42:45.020: Received mmIpAddrUpdateAck for client


(Cisco Controller) >
(Cisco Controller) >logout

31 Replies 31

Sorry I have never done an Anchor WLC deployment. If it is required for that, leave it enabled.

there is max 5000 only for eapol-key-timeout

Hello Team, 

 

Thanks for you comment. 

 

Please let me know why i am getting these error in WLC. 

 

RADIUS server 10.209.42.15:1812 failed to respond to request (ID 206) for client 20:a2:e4:83:60:7d / user 'rick.vanvegchel@nunhemsseeds.com'

RADIUS auth-server 10.209.42.16:1812 available

RADIUS auth-server 10.209.42.15:1812 available

RADIUS server 10.209.42.15:1812 activated on WLAN 5

RADIUS server 10.209.42.16:1812 deactivated on WLAN 5 

RADIUS auth-server 10.209.42.16:1812 unavailable

 

 

why this is happening again and again. 

Check the radius server logfiles. For whatever reason it doesn't answer the requests and thus gets marked as unavailable.

Hello Team, 

Plz plz please help me. this is esclated for me now. please help me. 

 

this is the debug for the same user. first he was connecting successfully but after 5 mint disconnected and not connecting again now. 

i checked with radius team , i can see success logs for some users but i am not understanding by some Iphone users are getting denied by radius. 

Please team nobody is understanding my issue. i can provide all information which you want. 

 

i have already told that there is only one Single WLC (Central), Central radius, Central MDM server. 

 

issue :  suppose 10 users at the site with corporate mobile , 5 users are connecting but other 5 are getting denied by i am not understanding. 

 

one more important things that this issue only with Central WLC but not from Local WLC. 

 

Please find attachment of one users before and after. 

 

team one more output from Central WLC. 

 

Server Index..................................... 4
Server Address................................... 10.209.42.15
Msg Round Trip Time.............................. 13 (msec)
First Requests................................... 4130317

--More-- or (q)uit
Retry Requests................................... 1551137
Accept Responses................................. 152588
Reject Responses................................. 51349
Challenge Responses.............................. 3612715
Malformed Msgs................................... 0
Bad Authenticator Msgs........................... 0
Pending Requests................................. 9
Timeout Requests................................. 1802983
Consecutive Drops ............................... 20
Unknowntype Msgs................................. 0
Other Drops...................................... 448

 

Is problem with iPhone only? How about Android users able to connect?

Are phones provided by corporate office?

Hello Shivu, 

 

this is corporate users and company provided iphone , yes there is same issue with Android as well but most of the users using iphone and this is the big issue for me now. please check my debug and let me know if any changes required. 

The unsuccessful shows this message in the logs:
*apfMsConnTask_2: Jul 24 17:11:07.963: bc:9f:ef:9c:dd:45 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 2409
It looks like it wants to do NAC and puts the device into the VLAN 2409, does that exist?
Also, what is written in the Radius logs for the unsuccessful attempts? I mean if the radius rejects the attempt, then it can't be successful.

yes 2409 vlan is there. how others are connecting then. that is why i am saying that there are 10 users at the site , 5 to 6 are connecting successfully but other are not able to connect and they are getting stuck in 802.1x auth. 

Check the radius. If the Radius rejects the client, then the radius must have a reason to do so and typically it logs the reason why it rejected the client.

the problem is that there is nothing to check , actually it is windows based radius and showing IAS success for all. 

Can you please clear the radius statistics from before?
There were a lot of Rejects, but even more Timeouts. I wonder if those are old entries or if they are still happening. A timeout between WLC and Radius/MDM solution could cause this issue.

 

You can tune the timers on the WLC under Security -> Advanced EAP. 

You maybe need to raise the following by a few seconds (but not too much!):

Identity Request Timeout

Request Timeout

 

Please suggest me how much need to be increased. 

 

please see attachment of default of my WLC

In my case I've increased them to 120 seconds, but that is because my users need time to enter username + password. 

So for a start I would increase the 4 to 10 seconds, while decreasing the Max Retries from 6 to 4. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: