5520 wlc + C9115axi - no client entry found, dropping packet

[Prt]

I added a new AP C9115AXI to 5520 wlc ( image 8.10.151.0 - suggested release)
AP booted up and wlc accepted join request.
Clients connected to ssid, receive ip address but something is blocking the connection AP, can't browsing internet.

ap debug log:
[*08/30/2021 12:32:49.2680] chatter: client_ip_table :: ClientIPTable no client entry found, dropping packet xx:xx:xx:xx:xx:xx 

ClientIPTable - i can't find what uses this table.
Tried wpa and open security profile.

Older devices AIR-AP1832I-E-K9 working ok - no problem.

[marce1000]

          - Check full-logs on the AP , and or look for surrounding messages before and after the error you denoted.

 M.

[Leo Laohoo]

Reboot the AP.  

[Prt]

Rebooted several times.
ap client debug log:
[*08/30/2021 13:11:15.6870] CLSM[xx:xx:xx:xx:xx:xx]: US Auth(b0) seq 1804 IF 40 slot 1 vap 1 len 128 state DELETE_PENDING
[*08/30/2021 13:11:15.6870] CLSM[xx:xx:xx:xx:xx:xx]: prMDIE or SAEesent in auth request
[*08/30/2021 13:11:15.6870] CLSM[xx:xx:xx:xx:xx:xx]: Not populating DCDS data
[*08/30/2021 13:11:15.6920] CLSM[xx:xx:xx:xx:xx:xx]: DS Auth(b0) IF 17 slot 1 vap 1 state DELETE_PENDING, generated by WLC
[*08/30/2021 13:11:15.6920] CLSM[xx:xx:xx:xx:xx:xx]: Driver send mgmt frame success Radio 1 Vap 1
[*08/30/2021 13:11:15.6930] CLSM[xx:xx:xx:xx:xx:xx]: client moved from DELETE_PENDING to AUTH
[*08/30/2021 13:11:15.7200] CLSM[xx:xx:xx:xx:xx:xx]: US Auth(b0) seq 1805 IF 40 slot 1 vap 1 len 64 state AUTH
[*08/30/2021 13:11:15.7200] CLSM[xx:xx:xx:xx:xx:xx]: MDIE or SAE present in auth request
[*08/30/2021 13:11:15.7200] CLSM[xx:xx:xx:xx:xx:xx]: Not populating DCDS data
[*08/30/2021 13:11:15.7240] CLSM[xx:xx:xx:xx:xx:xx]: DS Auth(b0) IF 17 slot 1 vap 1 state AUTH, generated by WLC
[*08/30/2021 13:11:15.7240] CLSM[xx:xx:xx:xx:xx:xx]: Driver send mgmt frame success Radio 1 Vap 1
[*08/30/2021 13:11:15.7260] chatter: client_ip_table :: ClientIPTable no client entry found, dropping packet xx:xx:xx:xx:xx:xx
[*08/30/2021 13:11:15.7260] CLSM[xx:xx:xx:xx:xx:xx]: US Assoc Req(0) seq 1806 IF 40 slot 1 vap 1 len 192 state AUTH
[*08/30/2021 13:11:15.7270] CLSM[xx:xx:xx:xx:xx:xx]: Not populating DCDS data
[*08/30/2021 13:11:15.7320] CLSM[xx:xx:xx:xx:xx:xx]: DS Assoc Resp(10) IF 17 slot 1 vap 1 state AUTH, generated by WLC
[*08/30/2021 13:11:15.7330] CLSM[xx:xx:xx:xx:xx:xx]: Driver send mgmt frame success Radio 1 Vap 1
[*08/30/2021 13:11:15.7330] CLSM[xx:xx:xx:xx:xx:xx]: client moved from AUTH to ASSOC
[*08/30/2021 13:11:15.7330] CLSM[xx:xx:xx:xx:xx:xx]: ADD_MOBILE AID 1
[*08/30/2021 13:11:15.7330] CLSM[xx:xx:xx:xx:xx:xx]: Driver Add Client success AID 1 Radio 1 Vap 1 Enc 1
[*08/30/2021 13:11:15.7330] CLSM[xx:xx:xx:xx:xx:xx]: Added to ClientIPTable on apr1v1
[*08/30/2021 13:11:15.7340] CLSM[xx:xx:xx:xx:xx:xx]: client moved from ASSOC to 8021X
[*08/30/2021 13:11:15.7340] CLSM[xx:xx:xx:xx:xx:xx]: Added to WCP client table AID 1 Radio 1 Vap 1 Enc 1
[*08/30/2021 13:11:15.7340] CLSM[xx:xx:xx:xx:xx:xx]: Decoding TLV_CLIENTCAPABILITYPAYLOAD: capbaility: 6 Apple Client: Yes
[*08/30/2021 13:11:15.7530] CLSM[xx:xx:xx:xx:xx:xx]: ADD_MOBILE AID 1
[*08/30/2021 13:11:15.7600] CLSM[xx:xx:xx:xx:xx:xx]: Client ADD Encrypt Key success AID 1 Radio 1 Enc 4 Key Len 16 Key idx 0 Key 5d 81
[*08/30/2021 13:11:15.7600] CLSM[xx:xx:xx:xx:xx:xx]: client moved from 8021X to FWD
[*08/30/2021 13:11:15.7610] CLSM[xx:xx:xx:xx:xx:xx]: Decoding TLV_CLIENTCAPABILITYPAYLOAD: capbaility: 6 Apple Client: Yes

[Leo Laohoo]

Factory reset the AP.

[Prt]

also tried ap factory reset. 
No error messages on the controller - only this error ap log.
Yesterday test last sw version 8.10.162.0 - same problem. Tried both 802.11a/n/ac/ax and 802.11b/g/n/ax radios

[Arshad Safrulla]

What mode the AP (Flex or Local)? 

Is this impacting only one client or all connecting to the SSID? Is the client drivers updated to the latest?

What is Authentication mechanism set? If any Radius server please share the eap mechanism and share the complete debug client output after censoring important info. 

[dhleal]

I have the same error.
Could you find the solution?

[matcsousa]

How is switchport configured?

I had the same problem and when I checked again, I saw that I forgot to configure the native vlan on the port.

Description Cisco AP 9115
switchport mode trunk
switchport trunk native vlan '000'