Buy or Renew
Buy or Renew
NOTICE: The community will be in READ-ONLY Sept. 6 – 9 to add Umbrella release notes and announcements. Learn more.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
8912
Views
0
Helpful
35
Replies

802.1x 'timeoutEvt' Timer expired for station ***** and for message = M2

jawadawawdeh
Level 1
Level 1

‎03-03-2018 01:54 AM - edited ‎07-05-2021 08:19 AM

my problem is that I have an ISE joined to an AD and have a Cisco WLC as a network device

I have authentication rule and authorization profiles that give back a VLAN, that redirect to an interface on the WLC

The problem is when an Android smartphone tries to join a "test" WLAN it authenticated and get authorized and get an IP, but when windows or iPhone device try to connect, it can't, and on the WLC show it's not authorized.!

 

I don't have access to "WLC Debug Analyzer" and not familiar with debug outputs.

I ran a debug command on the WLC :

 

debug client 2C:F0:A2:97:B1:E9

 

 

 


(Cisco Controller) >debug client 2C:F0:A2:97:B1:E9

*mcListen: Feb 27 13:20:39.198: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:29.605: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:29.649: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:29.649: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:29.650: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:29.674: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:29.674: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:29.675: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:29.675: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:29.738: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:29.738: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:29.779: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:29.781: Process Handoff Payload: IP 172.30.152.129 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:29.781: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 152 WlanVlanId : 129 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:29.781: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:29.782: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:29.782: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.4,SenderIdIp:172.16.31.4,senderMcIp:172.16.31.4

*mmMaListen: Feb 27 13:22:29.783: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:29.783: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:29.783: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:29.785: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:29.785: Found tunnel id 1 for 172.16.31.4
*mmMaListen: Feb 27 13:22:29.787: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:29.905: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:29.905: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:30.240: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:30.241: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:30.252: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:30.253: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:30.445: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:30.446: Process Handoff Payload: IP 172.30.55.191 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:30.446: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 55 WlanVlanId : 191 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:30.446: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:30.447: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:30.447: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:30.448: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:30.448: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:30.448: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:30.451: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:30.451: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:30.452: Entering mmMA_Tun2Peer

*mmMaListen: Feb 27 13:22:30.452: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:30.452: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:30.453: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:30.606: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:30.606: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:30.649: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:30.649: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:30.649: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:30.650: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:30.650: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:30.650: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:30.650: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:30.650: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:30.651: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:30.674: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:30.674: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:30.774: MC:Forwarding Mobile announce[xid 1752752] to internal MA

*mmMaListen: Feb 27 13:22:30.775: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1752752] Error Check Passed

*mmMaListen: Feb 27 13:22:30.775: Built SGT Payload successfully payloadSize 15 totalLen 590
*mmMaListen: Feb 27 13:22:30.775: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:30.779: Found tunnel id 3 for 172.16.31.6
*mcListen: Feb 27 13:22:30.806: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:30.806: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:30.943: MC:Forwarding Mobile announce[xid 1752755] to internal MA

*mmMaListen: Feb 27 13:22:31.449: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:31.449: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:31.451: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:31.475: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:31.476: Process Handoff Payload: IP 172.30.133.151 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:31.477: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 133 WlanVlanId : 151 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:31.477: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:31.477: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:31.477: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:31.478: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.478: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.478: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:31.481: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:31.481: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:31.482: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:31.606: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:31.606: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:31.712: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:31.714: Process Handoff Payload: IP 172.30.111.245 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:31.714: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 111 WlanVlanId : 245 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:31.714: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:31.714: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:31.714: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:31.715: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.715: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.715: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:31.717: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:31.717: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:31.718: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:31.806: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:31.806: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:31.874: MC:Forwarding Mobile announce[xid 1752755] to internal MA

*mcListen: Feb 27 13:22:31.900: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:31.900: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:31.919: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:31.921: Process Handoff Payload: IP 172.30.139.86 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:31.921: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 139 WlanVlanId : 86 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:31.921: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:31.921: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:31.921: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:31.922: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.922: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:31.922: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:31.926: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:31.926: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:31.927: Entering mmMA_Tun2Peer

*mmMaListen: Feb 27 13:22:32.449: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:32.449: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:32.449: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:32.449: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:32.449: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:32.449: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:32.449: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:32.450: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:32.453: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:32.853: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:32.873: MC:Forwarding Mobile announce[xid 1752755] to internal MA

*mcListen: Feb 27 13:22:32.875: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:32.876: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.138: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:33.138: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.238: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:33.238: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.286: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:33.287: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.543: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:33.543: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.577: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:33.577: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:33.772: Mobile announce from MO or MC and Client entry is in anchor state, Sending Nack

*mmMaListen: Feb 27 13:22:33.849: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:33.849: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:33.850: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:33.875: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:33.875: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:34.075: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:34.075: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:34.114: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:34.114: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:34.366: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:34.366: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:34.657: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:34.657: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:34.849: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:34.849: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:34.851: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:34.890: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:34.890: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.012: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:35.012: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.075: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:35.075: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.090: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:35.092: Process Handoff Payload: IP 172.30.100.99 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:35.092: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 100 WlanVlanId : 99 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:35.092: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:35.092: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:35.092: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.9,SenderIdIp:172.16.31.9,senderMcIp:172.16.31.9

*mmMaListen: Feb 27 13:22:35.095: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.095: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.095: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:35.097: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:35.097: Found tunnel id 5 for 172.16.31.9
*mmMaListen: Feb 27 13:22:35.099: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:35.107: MC:Forwarding Mobile announce[xid 1752766] to internal MA

*mmMaListen: Feb 27 13:22:35.107: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1752766] Error Check Passed

*mmMaListen: Feb 27 13:22:35.107: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:35.107: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:35.112: Found tunnel id 3 for 172.16.31.6
*mcListen: Feb 27 13:22:35.114: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:35.114: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.435: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:35.435: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.492: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:35.492: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.605: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:35.606: Process Handoff Payload: IP 172.30.165.1 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:35.606: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 165 WlanVlanId : 1 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:35.606: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:35.607: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:35.607: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:35.608: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.608: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.608: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:35.611: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:35.611: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:35.611: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:35.637: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:35.637: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:35.643: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:35.643: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:35.850: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:35.850: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:35.850: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:35.850: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.850: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:35.850: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:35.850: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:35.851: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:35.852: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:36.315: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:36.315: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:36.338: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:36.340: Process Handoff Payload: IP 172.30.143.48 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:36.340: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 143 WlanVlanId : 48 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:36.340: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:36.340: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:36.340: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:36.341: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:36.341: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:36.341: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:36.345: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:36.345: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:36.346: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:36.474: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:36.474: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:36.643: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:36.643: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:36.669: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:36.669: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:36.673: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:36.857: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:36.857: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:36.966: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:36.967: Process Handoff Payload: IP 172.30.84.125 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:36.967: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 84 WlanVlanId : 125 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:36.967: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:36.967: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:36.967: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:36.968: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:36.969: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:36.969: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:36.970: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:36.970: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:36.973: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:37.315: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:37.315: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:37.365: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:37.365: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:37.405: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:37.405: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:37.475: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:37.475: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:37.484: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:37.484: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:37.552: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:37.553: Process Handoff Payload: IP 172.30.36.245 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:37.553: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 36 WlanVlanId : 245 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:37.553: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:37.553: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:37.553: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.8,SenderIdIp:172.16.31.8,senderMcIp:172.16.31.8

*mmMaListen: Feb 27 13:22:37.554: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:37.555: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:37.555: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:37.557: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:37.557: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:37.558: Entering mmMA_Tun2Peer

*mmMaListen: Feb 27 13:22:37.649: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:37.649: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:37.650: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Processing assoc-req station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 thread:151492b0
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Adding mobile on LWAPP AP c0:25:5c:78:46:f0(0)
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Association received from mobile on BSSID c0:25:5c:78:46:f0 AP AP-ITC006
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Global 200 Clients are allowed to AP radio

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Max Client Trap Threshold: 0 cur: 10

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Applying site-specific Local Bridging override for station 2c:f0:a2:97:b1:e9 - vapId 1, site 'default-group', interface 'management'
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 Applying Local Bridging Interface Policy for station 2c:f0:a2:97:b1:e9 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_7: Feb 27 13:22:37.744: 2c:f0:a2:97:b1:e9 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:37.745: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_7: Feb 27 13:22:37.745: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_7: Feb 27 13:22:37.745: [0016] ac 01 0c 00

*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Processing RSN IE type 48, length 20 for mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 RSN Capabilities: 12
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Marking Mobile as non-11w Capable
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Received RSN IE with 0 PMKIDs from mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Encryption policy is set to 0x80000001
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP c0:25:5c:78:46:f0 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 apfMsAssoStateInc
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 apfPemAddUser2 (apf_policy.c:353) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Idle to Associated

*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 apfPemAddUser2:session timeout forstation 2c:f0:a2:97:b1:e9 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_7: Feb 27 13:22:37.745: 2c:f0:a2:97:b1:e9 Sending assoc-resp with status 0 station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 on apVapId 1
*apfMsConnTask_7: Feb 27 13:22:37.746: 2c:f0:a2:97:b1:e9 Sending Assoc Response to station on BSSID c0:25:5c:78:46:f0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_7: Feb 27 13:22:37.746: 2c:f0:a2:97:b1:e9 apfProcessAssocReq (apf_80211.c:9582) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Associated to Associated

*spamApTask7: Feb 27 13:22:37.750: 2c:f0:a2:97:b1:e9 Sent 1x initiate message to multi thread task for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 reauth_sm state transition 0 ---> 1 for mobile 2c:f0:a2:97:b1:e9 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Connecting state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.751: 2c:f0:a2:97:b1:e9 Sending EAP-Request/Identity to mobile 2c:f0:a2:97:b1:e9 (EAP Id 1)
*mcListen: Feb 27 13:22:37.753: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:37.753: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 Received Identity Response (count=1) from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 Resetting reauth count 1 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 EAP State update from Connecting to Authenticating for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticating state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.773: 2c:f0:a2:97:b1:e9 Created Acct-Session-ID (5a953f7d/2c:f0:a2:97:b1:e9/383604) for the mobile
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.779: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.779: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=134) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.779: 2c:f0:a2:97:b1:e9 WARNING: updated EAP-Identifier 1 ===> 134 for STA 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.780: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 134)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.780: 2c:f0:a2:97:b1:e9 Allocating EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.793: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.793: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 134, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.793: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.793: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.797: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.797: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=135) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.797: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 135)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:37.797: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:37.972: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:37.974: Process Handoff Payload: IP 172.30.109.230 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:37.974: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 109 WlanVlanId : 230 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:37.974: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:37.974: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:37.974: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.6,SenderIdIp:172.16.31.6,senderMcIp:172.16.31.6

*mmMaListen: Feb 27 13:22:37.975: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:37.975: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:37.975: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:37.977: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:37.977: Found tunnel id 3 for 172.16.31.6
*mmMaListen: Feb 27 13:22:37.978: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:38.000: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:38.000: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.274: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:38.274: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.275: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:38.276: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.330: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:38.330: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.409: MC:Forwarding Mobile announce[xid 1752776] to internal MA

*mmMaListen: Feb 27 13:22:38.409: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1752776] Error Check Passed

*mmMaListen: Feb 27 13:22:38.409: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:38.409: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:38.412: Found tunnel id 3 for 172.16.31.6
*mcListen: Feb 27 13:22:38.613: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:38.613: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:38.650: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:38.650: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:38.651: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:38.714: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:38.714: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.825: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:38.825: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.943: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:38.943: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:38.948: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:38.949: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.095: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:39.095: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.196: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:39.196: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.224: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.224: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 135, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.224: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.224: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.229: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.229: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=136) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.229: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 136)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.229: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.259: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.259: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 136, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.259: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.259: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.262: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.262: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=137) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.262: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 137)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.262: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.272: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.272: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 137, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.272: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.272: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:39.275: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:39.275: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.275: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:39.275: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.275: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.275: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=138) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.275: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 138)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.275: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:39.286: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:39.286: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.294: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.294: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 138, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.294: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.294: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.313: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.313: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=139) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.313: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 139)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.313: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.330: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.330: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 139, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.330: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.330: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.333: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.333: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=140) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.333: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 140)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.333: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.351: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.351: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 140, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.351: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.351: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.369: 2c:f0:a2:97:b1:e9 Processing Access-Accept for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Resetting web IPv4 acl from 255 to 255

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Resetting web IPv4 Flex acl from 65535 to 65535

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Username entry (f4523) already exists in name table, length = 253
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Added the MAC entry for Username entry (f4523) in name table, length = 253 at index 1
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Username entry (f4523) created in mscb for mobile, length = 253
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Inserting AAA Override struct for mobile
MAC: 2c:f0:a2:97:b1:e9, source 4

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Applying override policy from source Override Summation: with value 201

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:3, ovrd:1, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.370: 2c:f0:a2:97:b1:e9 AAA override is enabled and interface doesnot exist use the VLAN id in the nac payload 14 for 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Creating a PKC PMKID Cache entry for station 2c:f0:a2:97:b1:e9 (RSN 2)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Adding BSSID c0:25:5c:78:46:f0 to PMKID cache at index 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: New PMKID: (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: [0000] 17 93 4d e6 cd c1 6e 1e 06 09 e2 06 23 c3 71 c1

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Disabling re-auth since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.371: 2c:f0:a2:97:b1:e9 Updating AAA Overrides from local for station
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 PMK sent to mobility group
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Sending EAP-Success to mobile 2c:f0:a2:97:b1:e9 (EAP Id 140)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: [0000] 17 93 4d e6 cd c1 6e 1e 06 09 e2 06 23 c3 71 c1

*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Starting key exchange to mobile 2c:f0:a2:97:b1:e9, data packets will be dropped
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Sending EAPOL-Key Message to mobile 2c:f0:a2:97:b1:e9
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Entering Backend Auth Success state (id=140) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 Received Auth Success while in Authenticating state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:39.372: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticated state
*mcListen: Feb 27 13:22:39.378: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:39.378: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.434: MC:Forwarding Mobile announce[xid 1349055] to internal MA

*mmMaListen: Feb 27 13:22:39.435: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1349055] Error Check Passed

*mmMaListen: Feb 27 13:22:39.435: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:39.435: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:39.439: Found tunnel id 4 for 172.16.31.8
*mcListen: Feb 27 13:22:39.457: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:39.515: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:39.515: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:39.650: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:39.650: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:39.650: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:39.650: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:39.650: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:39.650: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:39.650: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:39.651: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:39.652: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:39.705: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:39.705: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.751: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:39.751: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.775: MC:Forwarding Mobile announce[xid 1752799] to internal MA

*mmMaListen: Feb 27 13:22:39.775: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1752799] Error Check Passed

*mmMaListen: Feb 27 13:22:39.775: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:39.775: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:39.780: Found tunnel id 3 for 172.16.31.6
*mcListen: Feb 27 13:22:39.792: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:39.792: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:39.887: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:39.887: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.047: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:40.048: Process Handoff Payload: IP 172.30.126.167 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:40.048: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 126 WlanVlanId : 167 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:40.048: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:40.049: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:40.049: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.6,SenderIdIp:172.16.31.6,senderMcIp:172.16.31.6

*mmMaListen: Feb 27 13:22:40.050: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:40.050: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:40.050: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:40.052: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:40.052: Found tunnel id 3 for 172.16.31.6
*mmMaListen: Feb 27 13:22:40.055: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:40.283: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:40.284: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.373: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:40.373: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.431: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:40.431: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:40.449: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:40.449: 2c:f0:a2:97:b1:e9 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mmMaListen: Feb 27 13:22:40.449: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:40.450: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:40.450: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:40.515: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:40.515: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.527: Mobile announce received from same switch which suppose to have the client, sending nack

*mcListen: Feb 27 13:22:40.527: MC :Sending Mobile announce Nack to IP addr 172.16.31.7

*mmMaListen: Feb 27 13:22:40.527: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:40.528: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:40.528: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:40.528: Leaving mmMA_TxHdoffComplete2MC

*mcListen: Feb 27 13:22:40.529: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:40.530: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:40.548: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:40.549: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.611: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:40.611: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.638: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:40.639: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.642: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:40.642: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.674: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:40.674: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.795: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:40.795: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:40.806: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:40.806: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:41.092: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:41.093: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:41.275: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:41.275: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:41.445: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:41.445: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:41.449: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:41.449: 2c:f0:a2:97:b1:e9 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mmMaListen: Feb 27 13:22:41.449: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:41.449: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:41.450: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:41.521: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:41.523: Process Handoff Payload: IP 172.30.34.218 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:41.523: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 34 WlanVlanId : 218 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:41.523: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:41.524: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:41.524: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.9,SenderIdIp:172.16.31.9,senderMcIp:172.16.31.9

*mmMaListen: Feb 27 13:22:41.526: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:41.526: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:41.526: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:41.528: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:41.528: Found tunnel id 5 for 172.16.31.9
*mmMaListen: Feb 27 13:22:41.532: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:41.642: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:41.642: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:41.674: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:41.674: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:41.806: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:41.806: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.024: MC:Forwarding Mobile announce[xid 1641040] to internal MA

*mmMaListen: Feb 27 13:22:42.025: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1641040] Error Check Passed

*mmMaListen: Feb 27 13:22:42.025: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:42.025: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:42.030: Found tunnel id 1 for 172.16.31.4
*mcListen: Feb 27 13:22:42.092: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:42.092: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.119: MC:Forwarding Mobile announce[xid 1641045] to internal MA

*mcListen: Feb 27 13:22:42.146: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:42.147: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.275: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:42.276: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.432: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:42.432: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Retransmit failure for EAPOL-Key M1 to mobile 2c:f0:a2:97:b1:e9, retransmit count 3, mscb deauth count 0
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Removing BSSID c0:25:5c:78:46:f0 from PMKID cache of station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Setting active key cache index 0 ---> 8
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Sent Deauthenticate to mobile on BSSID c0:25:5c:78:46:f0 slot 0(caller 1x_ptsm.c:599)
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Deleting the PMK cache when de-authenticating the client.
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 PMK: Sending cache delete
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Removing PMK cache entry for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds
*dot1xMsgTask: Feb 27 13:22:42.449: 2c:f0:a2:97:b1:e9 Freeing EAP Retransmit Bufer for mobile 2c:f0:a2:97:b1:e9
*mmMaListen: Feb 27 13:22:42.450: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:42.450: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:42.450: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:42.450: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:42.450: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:42.450: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:42.450: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:42.451: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:42.452: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:42.627: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:42.628: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.653: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:42.653: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:42.679: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:42.680: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Processing assoc-req station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 thread:151492b0
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Association received from mobile on BSSID c0:25:5c:78:46:f0 AP AP-ITC006
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Global 200 Clients are allowed to AP radio

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Max Client Trap Threshold: 0 cur: 11

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 14

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Applying site-specific Local Bridging override for station 2c:f0:a2:97:b1:e9 - vapId 1, site 'default-group', interface 'management'
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 Applying Local Bridging Interface Policy for station 2c:f0:a2:97:b1:e9 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:42.754: 2c:f0:a2:97:b1:e9 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:42.754: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_7: Feb 27 13:22:42.754: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_7: Feb 27 13:22:42.754: [0016] ac 01 0c 00

*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Processing RSN IE type 48, length 20 for mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 RSN Capabilities: 12
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Marking Mobile as non-11w Capable
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Received RSN IE with 0 PMKIDs from mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Encryption policy is set to 0x80000001
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP c0:25:5c:78:46:f0 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 apfPemAddUser2 (apf_policy.c:353) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Associated to Associated

*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 apfPemAddUser2:session timeout forstation 2c:f0:a2:97:b1:e9 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Sending assoc-resp with status 0 station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 on apVapId 1
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 Sending Assoc Response to station on BSSID c0:25:5c:78:46:f0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_7: Feb 27 13:22:42.755: 2c:f0:a2:97:b1:e9 apfProcessAssocReq (apf_80211.c:9582) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Associated to Associated

*spamApTask7: Feb 27 13:22:42.760: 2c:f0:a2:97:b1:e9 Sent 1x initiate message to multi thread task for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 reauth_sm state transition 0 ---> 1 for mobile 2c:f0:a2:97:b1:e9 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Connecting state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.761: 2c:f0:a2:97:b1:e9 Sending EAP-Request/Identity to mobile 2c:f0:a2:97:b1:e9 (EAP Id 1)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 Received Identity Response (count=1) from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 Resetting reauth count 1 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 EAP State update from Connecting to Authenticating for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticating state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.782: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.787: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.787: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=2) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.787: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 2)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.787: 2c:f0:a2:97:b1:e9 Allocating EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.815: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.815: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 2, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.815: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.815: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.818: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.818: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=3) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.818: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 3)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.818: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.839: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.839: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.839: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.839: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.843: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.844: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=4) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.844: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 4)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.844: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:42.844: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:42.845: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.851: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.851: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.851: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.851: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.854: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.854: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=5) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.854: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 5)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.854: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.864: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.864: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.864: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.864: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.867: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.867: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=6) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.867: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 6)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.867: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.929: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.929: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.929: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.929: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:42.933: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:42.933: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.941: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.941: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=7) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.941: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 7)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.941: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.948: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.948: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 7, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.949: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.949: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.951: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.952: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=8) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.952: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.952: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.959: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.959: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 8, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.959: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.959: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.972: 2c:f0:a2:97:b1:e9 Processing Access-Accept for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.972: 2c:f0:a2:97:b1:e9 Resetting web IPv4 acl from 255 to 255

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.972: 2c:f0:a2:97:b1:e9 Resetting web IPv4 Flex acl from 65535 to 65535

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Inserting AAA Override struct for mobile
MAC: 2c:f0:a2:97:b1:e9, source 4

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Applying override policy from source Override Summation: with value 201

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:3, ovrd:1, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 AAA override is enabled and interface doesnot exist use the VLAN id in the nac payload 14 for 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Creating a PKC PMKID Cache entry for station 2c:f0:a2:97:b1:e9 (RSN 2)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Adding BSSID c0:25:5c:78:46:f0 to PMKID cache at index 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: New PMKID: (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: [0000] c9 1d 1f 01 71 20 7a c8 5a 73 5b 9e 58 37 41 43

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.973: 2c:f0:a2:97:b1:e9 Disabling re-auth since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.974: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.974: 2c:f0:a2:97:b1:e9 Updating AAA Overrides from local for station
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 PMK sent to mobility group
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Sending EAP-Success to mobile 2c:f0:a2:97:b1:e9 (EAP Id
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: [0000] c9 1d 1f 01 71 20 7a c8 5a 73 5b 9e 58 37 41 43

*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Starting key exchange to mobile 2c:f0:a2:97:b1:e9, data packets will be dropped
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Sending EAPOL-Key Message to mobile 2c:f0:a2:97:b1:e9
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Entering Backend Auth Success state (id=8) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 Received Auth Success while in Authenticating state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:42.975: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticated state
*mcListen: Feb 27 13:22:42.994: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:42.994: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.090: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:43.090: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.182: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:43.182: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.241: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:43.241: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.269: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:43.269: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.387: MC:Forwarding Mobile announce[xid 1349105] to internal MA

*mmMaListen: Feb 27 13:22:43.387: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1349105] Error Check Passed

*mmMaListen: Feb 27 13:22:43.387: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:43.387: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:43.392: Found tunnel id 4 for 172.16.31.8
*mcListen: Feb 27 13:22:43.586: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:43.586: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.606: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:43.607: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.607: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:43.607: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:43.607: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:43.607: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.026: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:44.026: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:44.049: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:44.049: 2c:f0:a2:97:b1:e9 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:44.075: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:44.075: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.077: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:44.077: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.474: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:44.474: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.520: MC:Forwarding Mobile announce[xid 1641055] to internal MA

*mmMaListen: Feb 27 13:22:44.520: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1641055] Error Check Passed

*mmMaListen: Feb 27 13:22:44.521: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:44.521: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:44.525: Found tunnel id 1 for 172.16.31.4
*mcListen: Feb 27 13:22:44.608: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:44.608: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.609: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:44.610: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.610: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:44.610: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.661: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:44.663: Process Handoff Payload: IP 172.30.77.233 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:44.663: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 77 WlanVlanId : 233 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:44.663: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:44.663: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:44.664: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.5,SenderIdIp:172.16.31.5,senderMcIp:172.16.31.5

*mmMaListen: Feb 27 13:22:44.665: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:44.665: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:44.665: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:44.667: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:44.667: Found tunnel id 2 for 172.16.31.5
*mmMaListen: Feb 27 13:22:44.674: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:44.711: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:44.712: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:44.773: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:44.773: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:45.049: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:45.049: 2c:f0:a2:97:b1:e9 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:45.075: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:45.075: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:45.422: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:45.455: MC:Forwarding Mobile announce[xid 1741636] to internal MA

*mcListen: Feb 27 13:22:45.474: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:45.474: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:45.546: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:45.546: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:45.744: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:45.744: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Retransmit failure for EAPOL-Key M1 to mobile 2c:f0:a2:97:b1:e9, retransmit count 3, mscb deauth count 0
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Removing BSSID c0:25:5c:78:46:f0 from PMKID cache of station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Setting active key cache index 0 ---> 8
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Sent Deauthenticate to mobile on BSSID c0:25:5c:78:46:f0 slot 0(caller 1x_ptsm.c:599)
*dot1xMsgTask: Feb 27 13:22:46.049: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*dot1xMsgTask: Feb 27 13:22:46.050: 2c:f0:a2:97:b1:e9 Deleting the PMK cache when de-authenticating the client.
*dot1xMsgTask: Feb 27 13:22:46.050: 2c:f0:a2:97:b1:e9 PMK: Sending cache delete
*dot1xMsgTask: Feb 27 13:22:46.050: 2c:f0:a2:97:b1:e9 Removing PMK cache entry for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:46.050: 2c:f0:a2:97:b1:e9 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds
*dot1xMsgTask: Feb 27 13:22:46.050: 2c:f0:a2:97:b1:e9 Freeing EAP Retransmit Bufer for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:46.072: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:46.074: Process Handoff Payload: IP 172.30.163.125 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:46.074: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 163 WlanVlanId : 125 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:46.074: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:46.074: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:46.074: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.4,SenderIdIp:172.16.31.4,senderMcIp:172.16.31.4

*mmMaListen: Feb 27 13:22:46.075: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:46.075: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:46.075: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:46.077: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:46.078: Found tunnel id 1 for 172.16.31.4
*mmMaListen: Feb 27 13:22:46.078: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:46.081: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:46.081: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.113: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:46.113: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.129: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:46.129: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.144: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:46.144: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.193: MC:Forwarding Mobile announce[xid 1349137] to internal MA

*mmMaListen: Feb 27 13:22:46.193: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1349137] Error Check Passed

*mmMaListen: Feb 27 13:22:46.193: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:46.193: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:46.198: Found tunnel id 4 for 172.16.31.8
*mmMaListen: Feb 27 13:22:46.250: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:46.250: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:46.250: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:46.263: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:46.263: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.269: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:46.271: Process Handoff Payload: IP 172.30.187.28 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:46.271: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 187 WlanVlanId : 28 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridge
*mmMaListen: Feb 27 13:22:46.271: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:46.271: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:46.271: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.10,SenderIdIp:172.16.31.10,senderMcIp:172.16.31.10

*mmMaListen: Feb 27 13:22:46.272: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:46.272: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:46.272: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:46.274: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:46.274: Found tunnel id 6 for 172.16.31.10
*mmMaListen: Feb 27 13:22:46.276: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:46.279: MC:Forwarding Mobile announce[xid 1741636] to internal MA

*mcListen: Feb 27 13:22:46.348: MC:Forwarding Mobile announce[xid 1349142] to internal MA

*mmMaListen: Feb 27 13:22:46.348: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1349142] Error Check Passed

*mmMaListen: Feb 27 13:22:46.348: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:46.348: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:46.353: Found tunnel id 4 for 172.16.31.8
*mcListen: Feb 27 13:22:46.394: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:46.394: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:46.498: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:46.498: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Processing assoc-req station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 thread:151492b0
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Association received from mobile on BSSID c0:25:5c:78:46:f0 AP AP-ITC006
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Global 200 Clients are allowed to AP radio

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Max Client Trap Threshold: 0 cur: 11

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 14

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Applying site-specific Local Bridging override for station 2c:f0:a2:97:b1:e9 - vapId 1, site 'default-group', interface 'management'
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 Applying Local Bridging Interface Policy for station 2c:f0:a2:97:b1:e9 - vlan 0, interface id 0, interface 'management', nasId:''
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
*apfMsConnTask_7: Feb 27 13:22:46.514: 2c:f0:a2:97:b1:e9 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Feb 27 13:22:46.514: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_7: Feb 27 13:22:46.515: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_7: Feb 27 13:22:46.515: [0016] ac 01 0c 00

*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Processing RSN IE type 48, length 20 for mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Received 802.11i 802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 RSN Capabilities: 12
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Marking Mobile as non-11w Capable
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Received RSN IE with 0 PMKIDs from mobile 2c:f0:a2:97:b1:e9
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Encryption policy is set to 0x80000001
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP c0:25:5c:78:46:f0 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 apfPemAddUser2 (apf_policy.c:353) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Associated to Associated

*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 apfPemAddUser2:session timeout forstation 2c:f0:a2:97:b1:e9 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Sending assoc-resp with status 0 station:2c:f0:a2:97:b1:e9 AP:c0:25:5c:78:46:f0-00 on apVapId 1
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 Sending Assoc Response to station on BSSID c0:25:5c:78:46:f0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_7: Feb 27 13:22:46.515: 2c:f0:a2:97:b1:e9 apfProcessAssocReq (apf_80211.c:9582) Changing state for mobile 2c:f0:a2:97:b1:e9 on AP c0:25:5c:78:46:f0 from Associated to Associated

*spamApTask7: Feb 27 13:22:46.520: 2c:f0:a2:97:b1:e9 Sent 1x initiate message to multi thread task for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.520: 2c:f0:a2:97:b1:e9 reauth_sm state transition 0 ---> 1 for mobile 2c:f0:a2:97:b1:e9 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.521: 2c:f0:a2:97:b1:e9 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.521: 2c:f0:a2:97:b1:e9 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.521: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.521: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Connecting state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.521: 2c:f0:a2:97:b1:e9 Sending EAP-Request/Identity to mobile 2c:f0:a2:97:b1:e9 (EAP Id 1)
*mcListen: Feb 27 13:22:46.529: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:46.529: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.539: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.539: 2c:f0:a2:97:b1:e9 Received Identity Response (count=1) from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.539: 2c:f0:a2:97:b1:e9 Resetting reauth count 1 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.539: 2c:f0:a2:97:b1:e9 EAP State update from Connecting to Authenticating for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.540: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticating state
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.540: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.545: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.545: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=49) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.545: 2c:f0:a2:97:b1:e9 WARNING: updated EAP-Identifier 1 ===> 49 for STA 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.545: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 49)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.545: 2c:f0:a2:97:b1:e9 Allocating EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.568: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.568: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 49, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.568: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.569: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.571: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.572: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=50) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.572: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 50)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.573: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.600: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.600: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 50, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.600: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.600: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.605: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.605: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=51) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.605: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 51)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.605: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.613: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.613: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 51, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.613: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.613: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.615: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.615: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=52) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.615: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 52)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.615: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.626: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.626: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 52, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.626: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.626: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.628: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.628: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=53) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.629: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 53)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.629: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.639: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.639: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 53, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.639: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.639: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.651: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.651: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=54) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.651: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 54)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.651: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.676: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.676: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 54, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.676: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.676: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.678: 2c:f0:a2:97:b1:e9 Processing Access-Challenge for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.678: 2c:f0:a2:97:b1:e9 Entering Backend Auth Req state (id=55) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.678: 2c:f0:a2:97:b1:e9 Sending EAP Request from AAA to mobile 2c:f0:a2:97:b1:e9 (EAP Id 55)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.678: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.706: 2c:f0:a2:97:b1:e9 Received EAPOL EAPPKT from mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.706: 2c:f0:a2:97:b1:e9 Received EAP Response from mobile 2c:f0:a2:97:b1:e9 (EAP Id 55, EAP Type 25)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.706: 2c:f0:a2:97:b1:e9 Resetting reauth count 0 to 0 for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.706: 2c:f0:a2:97:b1:e9 Entering Backend Auth Response state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Processing Access-Accept for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Resetting web IPv4 acl from 255 to 255

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Resetting web IPv4 Flex acl from 65535 to 65535

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 override for default ap group, marking intgrp NULL
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.718: 2c:f0:a2:97:b1:e9 Check before Setting the NAS Id to WLAN specific Id ''
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Inserting AAA Override struct for mobile
MAC: 2c:f0:a2:97:b1:e9, source 4

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Applying override policy from source Override Summation: with value 201

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Found an interface name:'vlan14' corresponds to interface name received: vlan14
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Re-applying interface policy for client

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Values before applying NASID - interfacetype:3, ovrd:1, mscb nasid:, interface nasid:
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 AAA override is enabled and interface doesnot exist use the VLAN id in the nac payload 14 for 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Station 2c:f0:a2:97:b1:e9 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Creating a PKC PMKID Cache entry for station 2c:f0:a2:97:b1:e9 (RSN 2)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Adding BSSID c0:25:5c:78:46:f0 to PMKID cache at index 0 for station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: New PMKID: (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: [0000] 62 11 e1 9b 9e b3 e8 a6 d1 73 48 15 1b 83 f6 5c

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Disabling re-auth since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 unsetting PmkIdValidatedByAp
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.719: 2c:f0:a2:97:b1:e9 Updating AAA Overrides from local for station
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: 2c:f0:a2:97:b1:e9 PMK sent to mobility group
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: 2c:f0:a2:97:b1:e9 Sending EAP-Success to mobile 2c:f0:a2:97:b1:e9 (EAP Id 55)
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: 2c:f0:a2:97:b1:e9 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: 2c:f0:a2:97:b1:e9 Found an cache entry for BSSID c0:25:5c:78:46:f0 in PMKID cache at index 0 of station 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: Including PMKID in M1 (16)

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.720: [0000] 62 11 e1 9b 9e b3 e8 a6 d1 73 48 15 1b 83 f6 5c

*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 Starting key exchange to mobile 2c:f0:a2:97:b1:e9, data packets will be dropped
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 Sending EAPOL-Key Message to mobile 2c:f0:a2:97:b1:e9
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 Reusing allocated memory for EAP Pkt for retransmission to mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 Entering Backend Auth Success state (id=55) for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 Received Auth Success while in Authenticating state for mobile 2c:f0:a2:97:b1:e9
*Dot1x_NW_MsgTask_1: Feb 27 13:22:46.721: 2c:f0:a2:97:b1:e9 dot1x - moving mobile 2c:f0:a2:97:b1:e9 into Authenticated state
*mcListen: Feb 27 13:22:46.900: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:46.900: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:47.197: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:47.197: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:47.249: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:47.249: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:47.249: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mcListen: Feb 27 13:22:47.275: MC:Forwarding Mobile announce[xid 1741636] to internal MA

*mcListen: Feb 27 13:22:47.602: MC :Sending Mobile announce Nack to IP addr 172.16.31.10

*mcListen: Feb 27 13:22:47.602: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:47.677: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:47.677: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:47.831: MC:Forwarding Mobile announce[xid 1379480] to internal MA

*mmMaListen: Feb 27 13:22:47.831: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1379480] Error Check Passed

*mmMaListen: Feb 27 13:22:47.832: Built SGT Payload successfully payloadSize 15 totalLen 593
*mmMaListen: Feb 27 13:22:47.832: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:47.835: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:47.835: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:47.837: Found tunnel id 6 for 172.16.31.10
*osapiBsnTimer: Feb 27 13:22:47.849: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:47.849: 2c:f0:a2:97:b1:e9 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:47.919: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:47.919: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:48.066: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:48.066: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mmMaListen: Feb 27 13:22:48.249: Entering maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:48.249: Executing the state machine in maMCAnnounceMipResendTimeoutNotify

*mmMaListen: Feb 27 13:22:48.249: Entering mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:48.249: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:48.249: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:48.249: Leaving mmMA_TxHdoffComplete2MC

*mmMaListen: Feb 27 13:22:48.249: Leaving maMCAnnounceMipResendTimeoutNotify

*mcListen: Feb 27 13:22:48.250: Found tunnel id 0 for 172.16.31.7
*mmMaListen: Feb 27 13:22:48.251: Entering mmMA_Tun2Peer

*osapiBsnTimer: Feb 27 13:22:48.849: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:48.849: 2c:f0:a2:97:b1:e9 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:48.917: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:48.918: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:48.935: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:48.935: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:49.062: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:49.062: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:49.252: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:49.252: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:49.282: MC:Forwarding Mobile announce[xid 1349225] to internal MA

*mmMaListen: Feb 27 13:22:49.282: mmErrCheckMobileAnnounce:1839 Client MobAnnounce[xid 1349225] Error Check Passed

*mmMaListen: Feb 27 13:22:49.282: Built SGT Payload successfully payloadSize 15 totalLen 573
*mmMaListen: Feb 27 13:22:49.282: AAA Override QoS payload Build, Total Payload length 41

*mcListen: Feb 27 13:22:49.288: Found tunnel id 4 for 172.16.31.8
*mcListen: Feb 27 13:22:49.462: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:49.462: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:49.840: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:49.840: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*osapiBsnTimer: Feb 27 13:22:49.849: 2c:f0:a2:97:b1:e9 802.1x 'timeoutEvt' Timer expired for station 2c:f0:a2:97:b1:e9 and for message = M2
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Retransmit failure for EAPOL-Key M1 to mobile 2c:f0:a2:97:b1:e9, retransmit count 3, mscb deauth count 0
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Resetting MSCB PMK Cache Entry 0 for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Removing BSSID c0:25:5c:78:46:f0 from PMKID cache of station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Setting active key cache index 0 ---> 8
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Sent Deauthenticate to mobile on BSSID c0:25:5c:78:46:f0 slot 0(caller 1x_ptsm.c:599)
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Setting active key cache index 8 ---> 8
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Deleting the PMK cache when de-authenticating the client.
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 PMK: Sending cache delete
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Removing PMK cache entry for station 2c:f0:a2:97:b1:e9
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds
*dot1xMsgTask: Feb 27 13:22:49.851: 2c:f0:a2:97:b1:e9 Freeing EAP Retransmit Bufer for mobile 2c:f0:a2:97:b1:e9
*mcListen: Feb 27 13:22:50.315: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:50.315: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:50.488: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:50.489: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:50.775: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:50.776: Process Handoff Payload: IP 172.30.191.249 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:50.776: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 191 WlanVlanId : 249 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:50.776: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:50.777: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:50.777: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.5,SenderIdIp:172.16.31.5,senderMcIp:172.16.31.5

*mmMaListen: Feb 27 13:22:50.778: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:50.778: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:50.778: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:50.780: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:50.780: Found tunnel id 2 for 172.16.31.5
*mmMaListen: Feb 27 13:22:50.782: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:50.806: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:50.807: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.083: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:51.084: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.315: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:51.316: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.525: MC :Sending Mobile announce Nack to IP addr 172.16.31.4

*mcListen: Feb 27 13:22:51.525: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.535: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:51.535: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.636: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:51.636: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.807: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:51.807: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:51.926: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:51.926: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:52.074: MC :Sending Mobile announce Nack to IP addr 172.16.31.6

*mcListen: Feb 27 13:22:52.074: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:52.078: MC :Sending Mobile announce Nack to IP addr 172.16.31.9

*mcListen: Feb 27 13:22:52.079: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:52.080: Mobile announce from MA and Client entry not found, groupcasted to peer MC's

*mmMaListen: Feb 27 13:22:52.081: Process Handoff Payload: IP 172.30.114.254 VlanId 44 WlanVlanId : 44 MSCB: Vlan IP 172.30.0.6 Vlan Mask: 255.255.0.0 Access vlan 44
*mmMaListen: Feb 27 13:22:52.081: Process Handoff Client Payload: IP 323357192.323357216.172.30 VlanId 114 WlanVlanId : 254 MSCB: Vlan IP 44.44.172.30 Vlan Mask: 0.6.255.255 Vlan Id 0 haveClientSubnet 0 Anchor Bridg
*mmMaListen: Feb 27 13:22:52.081: Entering mmMA_TxHandoffCompleteNotify

*mmMaListen: Feb 27 13:22:52.081: Calling apfCallback function with local anchor

*mmMaListen: Feb 27 13:22:52.082: maHandoffConfirm:AddrPayload, AnchorIp: 172.16.31.4,SenderIdIp:172.16.31.4,senderMcIp:172.16.31.4

*mmMaListen: Feb 27 13:22:52.083: Entering mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:52.083: Leaving mmBuildMsgHandoffComplete

*mmMaListen: Feb 27 13:22:52.083: Leaving mmMA_TxHandoffCompleteNotify

*mcListen: Feb 27 13:22:52.085: Found tunnel id 0 for 172.16.31.7
*mcListen: Feb 27 13:22:52.085: Found tunnel id 1 for 172.16.31.4
*mmMaListen: Feb 27 13:22:52.086: Entering mmMA_Tun2Peer

*mcListen: Feb 27 13:22:52.087: MC :Sending Mobile announce Nack to IP addr 172.16.31.8

*mcListen: Feb 27 13:22:52.087: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

*mcListen: Feb 27 13:22:52.315: MC :Sending Mobile announce Nack to IP addr 172.16.31.5

*mcListen: Feb 27 13:22:52.315: Mobile announce from MO or MC and Client entry not found, sending NACK if it is from MO

 

Labels:
0 Helpful
35 Replies 35

jawadawawdeh
Level 1
Level 1
In response to Ric Beeching

‎03-11-2018 04:18 AM

I think the issue is with the ISE, cause when I switch the RADIUS server on the WLAN to the ACS server the client connect and get an IP.

0 Helpful

Freerk Terpstra
Level 7
Level 7

‎03-03-2018 02:36 PM

The behavior seems to match with bug CSCuq45110, but lets not jump to conclusions. Please provide the following information:

  • Controllers:
    • Hardware platform;
    • Software version;
  • WLAN configuration:
    • Output of a "show wlan x";
  • Authentication configuration:
    • Did you tune any EAP values on the WLC?
    • Radius time-out values on the WLC;
    • EAP certificate on ISE;
    • Used EAP type.

Please rate useful posts... :-)

 

0 Helpful

jawadawawdeh
Level 1
Level 1
In response to Freerk Terpstra

‎03-03-2018 11:49 PM

Hi @Freerk Terpstra

 

Controllers:
hardware 2504
Software 8.0.133.0

WLAN configuration:
WLAN Identifier.................................. 1
Profile Name..................................... jawad
Network Name (SSID).............................. jawad
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Enabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200

Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0

Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1

Radius Servers
Authentication................................ 192.168.16.107 1812
Accounting.................................... 192.168.16.107 1813
Interim Update............................. Enabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Security

802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Enabled

PSK..................................... Disabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Enabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
WAPI.......................................... Disabled
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled

FlexConnect Local Switching................... Enabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Enabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled

SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled
802.11v BSS Max Idle Service..................... Enabled
DMS DB is empty
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled

Mobility Anchor List
WLAN ID IP Address Status
------- --------------- ------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy

----------------
Priority Policy Name
-------- ---------------

Authentication configuration:
Did you tune any EAP values on the WLC?
EAP-Identity-Request Timeout (seconds)........... 120
EAP-Identity-Request Max Retries................. 3
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 3000
EAPOL-Key Max Retries............................ 2
EAP-Broadcast Key Interval....................... 3600

Local EAP Configuration
User credentials database search order:
Primary ..................................... Local DB

Timer:
Active timeout .............................. 300

Configured EAP profiles:

EAP Method configuration:
EAP-FAST:
Server key ................................ <hidden>
TTL for the PAC ........................... 10
Anonymous provision allowed ............... Yes
Authority ID .............................. 436973636f0000000000000000000000
Authority Information ..................... Cisco A-ID

Radius time-out values on the WLC?
Server Timeout 5s

EAP certificate on ISE?
self signed certificate
Signature Algorithm SHA256WITHRSA

Used EAP type?
PEAP: EAP-MS-CHAPv2

 

 also, I forget to mention that I have an ACS server configured on the WLC as a radios server and have the same authentication and authorization as Cisco ISE and when I change the RADIUS server on the WLAN to the ACS everything works just fine.

0 Helpful

Freerk Terpstra
Level 7
Level 7
In response to jawadawawdeh

‎03-04-2018 02:45 PM

Please upgrade the 2504 controller to AireOS 8.0.152.0 first, it might not be the solution for this issue but will prevent others.

Which type of EAP certificate has been installed on the ACS platform? How is the WLAN profile configured on the end-points, manually?

0 Helpful

jawadawawdeh
Level 1
Level 1
In response to Freerk Terpstra

‎03-04-2018 11:12 PM

Which type of EAP certificate has been installed on the ACS platform?

Its issued by the AD "sha1RSA 1024Bits", I have tried the same certificate on ISE for EAP and I tried a self-signed ISE certificate and the same issue.

 

How is the WLAN profile configured on the end-points, manually?

I have tried manual configuration and the same.

0 Helpful

Flavio Miranda
VIP
VIP
In response to jawadawawdeh

‎03-04-2018 04:26 PM

Take care with "

FT Reassociation Timeout................... 20

FT Over-The-DS mode........................ Enabled"

 

I'd disabled it and test again. FT usually cause some trouble if client does not support it.

 

0 Helpful

jawadawawdeh
Level 1
Level 1
In response to Flavio Miranda

‎03-04-2018 11:13 PM

I disabled it but the same.

0 Helpful

patoberli
VIP Alumni
VIP Alumni
In response to jawadawawdeh

‎03-12-2018 01:49 AM

I'm a tad confused by your naming scheme:
Authorization Profile VALN42
AuthorizationPolicyMatchedRule VLAN42

Do you extra use VALN instead of VLAN?
And why does it match VLAN42, if it should match VLAN14?

Also, could you screenshot the ISE radius properties output of a working device and a not working, which "should" use the same policy?
0 Helpful

jawadawawdeh
Level 1
Level 1
In response to patoberli

‎03-12-2018 02:52 AM

Hi @patoberli 

Here a screenshot and RADIUS logs 

Preview file
132 KB
Preview file
131 KB
Preview file
51 KB
0 Helpful

patoberli
VIP Alumni
VIP Alumni
In response to jawadawawdeh

‎03-12-2018 03:11 AM

Ok, this looks good, on the ISE side.
The not connected one should receive VLAN42.
It looks like the WLC doesn't like that, for whatever reason.
DHCP is working in VLAN42?
Your dynamic interface VLAN42 on the WLC is configured correctly?
0 Helpful

jawadawawdeh
Level 1
Level 1
In response to patoberli

‎03-12-2018 04:01 AM

The interface is working fine and the DHCP is working fine cause the "connected" get an IP.

 

0 Helpful

patoberli
VIP Alumni
VIP Alumni
In response to jawadawawdeh

‎03-12-2018 04:56 AM

Do you have a connected that gets the same VLAN policy? If yes, could you show me the radius properties of that client like before?
0 Helpful

jawadawawdeh
Level 1
Level 1
In response to patoberli

‎03-12-2018 05:09 AM

Sorry I don't get it, the tow clients get the same policy from the ISE.

0 Helpful

patoberli
VIP Alumni
VIP Alumni
In response to jawadawawdeh

‎03-12-2018 06:02 AM

Actually they don't, based on your two PDF.



OK client:
Endpoint Id 5C:70:A3:61:A6:C1
Endpoint Profile Unknown
Authentication Policy AL-QUDS-WLAN >> Default >> Default
Authorization Policy AL-QUDS-WLAN >> VLAN44

Authorization Result VALN44


Not OK client:
Endpoint Id 80:27:A7:FC:1D:8A
Endpoint Profile
Authentication Policy AL-QUDS-WLAN >> Default >> Default
Authorization Policy AL-QUDS-WLAN >> VLAN42
Authorization Result VALN42

As you can see, one gets the Authorization Policy for VLAN44, while the other gets the Authorization Policy for VLAN42.
This suggests to me that there is a problem with VLAN42 on the WLC or DHCP server.



0 Helpful

jawadawawdeh
Level 1
Level 1
In response to patoberli

‎03-17-2018 12:12 AM

@patoberli 

Sorry about that ... 

 

 

Preview file
265 KB
Preview file
267 KB
0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card