Re: Can't get IP address

wangyaojininfo · ‎05-09-2011

Hi guys,

Infrastructure looks like this way: Peap authentication, Cisco ACS server, 4402 WLC. 1131 LAP

I have muliple sites running this WLC but only one site is having this problem. In ACS log, I see user's authenticated but all people there just can not get ip address from local DHCP. All wired and wireless users there are in same VLAN. Hardwire works fine though.

Thanks

Surendra BG · ‎05-09-2011

Wjere is the DHCP server configured?? is it on the L3 device or the dedicated server or on the WLC?? if its on the WLC, then wats the WLC software version?? and if its any where other than WLC, then from the WLC if we ping the IP, are we able to get the replies??

Regards
Surendra

Regards
Surendra BG

wangyaojininfo · ‎05-09-2011

appreciate the feedback, that site is running on a windowns 2003 dhcp server. No problem to ping dhcp from wlc. local dhcp works fine for hardwire connection as you can see in my orignal post.

Surendra BG · ‎05-09-2011

any ASA or firewall in between?? if so, just make sure you disable DHCP proxy on the WLC.. that is.. WLC GUI >> Monitor >> Controller >> Left Bottom >> Advanced >> DHCP >> proxy >> Disable >> Apply.

if this does not help, then we need to nail down the network hop by hop..

lemme know if this helps

Regards

Surendra

Regards
Surendra BG

wangyaojininfo · ‎05-09-2011

just checked with helpdesk there, untick "enable dhclp proxy" does not help,

how can we nail this down hop by hop? Thanks.

Surendra BG · ‎05-09-2011

Step One > Check the client on the WLC and let me know in what PEM state are they in.

Step Two > On the WLC port connecting to the switchport colect the captures and see if the DHCP packets are passing the WLC or not!!

Regards

Surendra

Regards
Surendra BG

Simon Fahrnbauer · ‎05-10-2011

Hi Yao-Jin,

have you already checked if there is a configuration at "DHCP Server overide" on your SSID?

WLAN -> -> Advanced -> DHCP Server "Override"

Otherwise I would recommend a Debug DHCP.

regards,

Simon

wangyaojininfo · ‎05-11-2011

PEM status is DHCP_REQD on client, this is what I see on WLC.

Is there anything relate to the switch port connect to WLC? The site which currently having problem is running on a w2k3 dhcp. Once the authentication is done there should be nothing to do with ACS and WLC.

How could I initiate dhcp debug and where to do that? Thanks.

wangyaojininfo · ‎05-11-2011

Hi Simon,

It is not ticked now but if I tick DHCP override I need to specify DHCP server. We have multiple sites which are running on this WLC and each of them have local DHCP, so I can't do that.

Surendra BG · ‎05-11-2011

Hi,

Just make sure the VLAN is allowed between the WLC and the switchport.. it should be a trunk allowing all the VLANs used on the WLC..

Run the Debug..

Debug client

paste it here..

Regards

Surendra

Regards
Surendra BG

wangyaojininfo · ‎05-12-2011

(Cisco Controller) >*May 13 06:20:22.400: 00:25:56:88:17:d4 Invalid MSCB state: ipAddr=169.254.1.73, regType=2, Dhcp required!

*May 13 06:21:43.840: dhcpd: Received 332 byte dhcp packet from 0x0a56f906 10.86.249.6:68

*May 13 06:21:43.840: adding option 0x35
*May 13 06:21:43.840: adding option 0x36
*May 13 06:21:43.840: adding option 0x33
*May 13 06:21:43.840: adding option 0x03
*May 13 06:21:43.840: adding option 0x06
*May 13 06:21:43.840: adding option 0x01
*May 13 06:21:43.843: dhcpd: Received 340 byte dhcp packet from 0x0a56f906 10.86.249.6:68

*May 13 06:21:43.843: adding option 0x35
*May 13 06:21:43.843: adding option 0x36
*May 13 06:21:43.843: adding option 0x33
*May 13 06:21:43.843: adding option 0x03
*May 13 06:21:43.843: adding option 0x06
*May 13 06:21:43.843: adding option 0x01
*May 13 06:22:21.109: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout
*May 13 06:22:21.109: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs.
*May 13 06:22:21.109: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 12) in 10 seconds
*May 13 06:22:31.109: 00:25:56:88:17:d4 apfMsExpireCallback (apf_ms.c:418) Expiring Mobile!
*May 13 06:22:31.109: 00:25:56:88:17:d4 apfMsExpireMobileStation (apf_ms.c:4427) Changing state for mobile 00:25:56:88:17:d4 on AP 00:23:33:a2:8a:70 from Associated to Disassociated

*May 13 06:22:31.110: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds
*May 13 06:22:41.109: 00:25:56:88:17:d4 apfMsExpireCallback (apf_ms.c:418) Expiring Mobile!
*May 13 06:22:41.109: 00:25:56:88:17:d4 Sent Deauthenticate to mobile on BSSID 00:23:33:a2:8a:70 slot 0(caller apf_ms.c:4511)
*May 13 06:22:41.110: 00:25:56:88:17:d4 apfMsExpireMobileStation (apf_ms.c:4548) Changing state for mobile 00:25:56:88:17:d4 on AP 00:23:33:a2:8a:70 from Disassociated to Idle

*May 13 06:22:41.110: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [00:23:33:a2:8a:70]
*May 13 06:22:41.110: 00:25:56:88:17:d4 Username entry deleted for mobile
*May 13 06:22:41.110: 00:25:56:88:17:d4 Deleting mobile on AP 00:23:33:a2:8a:70(0)
*May 13 06:22:41.112: 00:25:56:88:17:d4 0.0.0.0 Removed NPU entry.
*May 13 06:22:41.773: 00:25:56:88:17:d4 Adding mobile on LWAPP AP 00:23:33:a2:8a:70(0)
*May 13 06:22:41.773: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
*May 13 06:22:41.773: 00:25:56:88:17:d4 apfProcessProbeReq (apf_80211.c:4761) Changing state for mobile 00:25:56:88:17:d4 on AP 00:23:33:a2:8a:70 from Idle to Probe

*May 13 06:22:41.807: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*May 13 06:22:42.010: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*May 13 06:22:42.019: 00:25:56:88:17:d4 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*May 13 06:22:42.100: 00:25:56:88:17:d4 Reassociation received from mobile on AP 00:23:33:a2:8a:70
*May 13 06:22:42.100: 00:25:56:88:17:d4 Applying site-specific IPv6 override for station 00:25:56:88:17:d4 - vapId 2, site 'default-group', interface 'vlan210'
*May 13 06:22:42.100: 00:25:56:88:17:d4 Applying IPv6 Interface Policy for station 00:25:56:88:17:d4 - vlan 210, interface id 10, interface 'vlan210'
*May 13 06:22:42.100: 00:25:56:88:17:d4 STA - rates (8): 139 22 24 36 48 72 96 108 0 0 0 0 0 0 0 0
*May 13 06:22:42.100: 00:25:56:88:17:d4 STA - rates (10): 139 22 24 36 48 72 96 108 12 18 0 0 0 0 0 0
*May 13 06:22:42.100: 00:25:56:88:17:d4 Processing WPA IE type 221, length 24 for mobile 00:25:56:88:17:d4
*May 13 06:22:42.100: 00:25:56:88:17:d4 0.0.0.0 START (0) Initializing policy
*May 13 06:22:42.100: 00:25:56:88:17:d4 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)

*May 13 06:22:42.100: 00:25:56:88:17:d4 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*May 13 06:22:42.100: 00:25:56:88:17:d4 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:23:33:a2:8a:70 vapId 2 apVapId 2
*May 13 06:22:42.100: 00:25:56:88:17:d4 apfPemAddUser2 (apf_policy.c:213) Changing state for mobile 00:25:56:88:17:d4 on AP 00:23:33:a2:8a:70 from Probe to Associated

*May 13 06:22:42.100: 00:25:56:88:17:d4 Stopping deletion of Mobile Station: (callerId: 48)
*May 13 06:22:42.100: 00:25:56:88:17:d4 Sending Assoc Response to station on BSSID 00:23:33:a2:8a:70 (status 0) Vap Id 2 Slot 0
*May 13 06:22:42.100: 00:25:56:88:17:d4 apfProcessAssocReq (apf_80211.c:4391) Changing state for mobile 00:25:56:88:17:d4 on AP 00:23:33:a2:8a:70 from Associated to Associated

*May 13 06:22:42.135: 00:25:56:88:17:d4 Station 00:25:56:88:17:d4 setting dot1x reauth timeout = 1800
*May 13 06:22:42.135: 00:25:56:88:17:d4 Received EAPOL START from mobile 00:25:56:88:17:d4
*May 13 06:22:42.135: 00:25:56:88:17:d4 dot1x - moving mobile 00:25:56:88:17:d4 into Connecting state
*May 13 06:22:42.135: 00:25:56:88:17:d4 Sending EAP-Request/Identity to mobile 00:25:56:88:17:d4 (EAP Id 1)
*May 13 06:22:42.671: 00:25:56:88:17:d4 Updating AID for REAP AP Client 00:23:33:a2:8a:70 - AID ===> 1
*May 13 06:22:42.675: 00:25:56:88:17:d4 dot1x - moving mobile 00:25:56:88:17:d4 into Connecting state
*May 13 06:22:42.675: 00:25:56:88:17:d4 Sending EAP-Request/Identity to mobile 00:25:56:88:17:d4 (EAP Id 1)
*May 13 06:22:42.712: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:42.713: 00:25:56:88:17:d4 Username entry (host/INMUM0044.hearing.corp-ad.com) created for mobile
*May 13 06:22:42.713: 00:25:56:88:17:d4 Received Identity Response (count=1) from mobile 00:25:56:88:17:d4
*May 13 06:22:42.713: 00:25:56:88:17:d4 EAP State update from Connecting to Authenticating for mobile 00:25:56:88:17:d4
*May 13 06:22:42.713: 00:25:56:88:17:d4 dot1x - moving mobile 00:25:56:88:17:d4 into Authenticating state
*May 13 06:22:42.713: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:42.962: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:42.963: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=213) for mobile 00:25:56:88:17:d4
*May 13 06:22:42.963: 00:25:56:88:17:d4 WARNING: updated EAP-Identifer 1 ===> 213 for STA 00:25:56:88:17:d4
*May 13 06:22:42.963: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 213)
*May 13 06:22:43.165: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:43.165: 00:25:56:88:17:d4 Received EAP Response packet with mismatching id (currentid=213, eapid=1) from mobile 00:25:56:88:17:d4
*May 13 06:22:43.414: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:43.414: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 213, EAP Type 25)
*May 13 06:22:43.414: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:43.665: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:43.665: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=214) for mobile 00:25:56:88:17:d4
*May 13 06:22:43.665: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 214)
*May 13 06:22:44.126: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:44.126: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 214, EAP Type 25)
*May 13 06:22:44.126: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:44.376: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:44.376: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=215) for mobile 00:25:56:88:17:d4
*May 13 06:22:44.376: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 215)
*May 13 06:22:44.831: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:44.832: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 215, EAP Type 25)
*May 13 06:22:44.832: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:45.081: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:45.081: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=216) for mobile 00:25:56:88:17:d4
*May 13 06:22:45.081: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 216)
*May 13 06:22:45.482: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:45.482: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 216, EAP Type 25)
*May 13 06:22:45.482: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:45.734: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:45.734: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=217) for mobile 00:25:56:88:17:d4
*May 13 06:22:45.734: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 217)
*May 13 06:22:46.163: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:46.163: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 217, EAP Type 25)
*May 13 06:22:46.163: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:46.411: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:46.411: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=218) for mobile 00:25:56:88:17:d4
*May 13 06:22:46.411: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 218)
*May 13 06:22:46.785: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:46.785: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 218, EAP Type 25)
*May 13 06:22:46.785: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:47.035: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:47.035: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=219) for mobile 00:25:56:88:17:d4
*May 13 06:22:47.035: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 219)
*May 13 06:22:47.573: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:47.573: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 219, EAP Type 25)
*May 13 06:22:47.573: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:47.822: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:47.822: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=220) for mobile 00:25:56:88:17:d4
*May 13 06:22:47.822: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 220)
*May 13 06:22:48.259: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:48.259: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 220, EAP Type 25)
*May 13 06:22:48.260: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:48.528: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:48.528: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=221) for mobile 00:25:56:88:17:d4
*May 13 06:22:48.528: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 221)
*May 13 06:22:48.993: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:48.993: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 221, EAP Type 25)
*May 13 06:22:48.993: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:49.250: 00:25:56:88:17:d4 Processing Access-Challenge for mobile 00:25:56:88:17:d4
*May 13 06:22:49.250: 00:25:56:88:17:d4 Entering Backend Auth Req state (id=222) for mobile 00:25:56:88:17:d4
*May 13 06:22:49.250: 00:25:56:88:17:d4 Sending EAP Request from AAA to mobile 00:25:56:88:17:d4 (EAP Id 222)
*May 13 06:22:49.773: 00:25:56:88:17:d4 Received EAPOL EAPPKT from mobile 00:25:56:88:17:d4
*May 13 06:22:49.774: 00:25:56:88:17:d4 Received EAP Response from mobile 00:25:56:88:17:d4 (EAP Id 222, EAP Type 25)
*May 13 06:22:49.774: 00:25:56:88:17:d4 Entering Backend Auth Response state for mobile 00:25:56:88:17:d4
*May 13 06:22:50.023: 00:25:56:88:17:d4 Processing Access-Accept for mobile 00:25:56:88:17:d4
*May 13 06:22:50.023: 00:25:56:88:17:d4 Setting re-auth timeout to 1800 seconds, got from WLAN config.
*May 13 06:22:50.023: 00:25:56:88:17:d4 Station 00:25:56:88:17:d4 setting dot1x reauth timeout = 1800
*May 13 06:22:50.023: 00:25:56:88:17:d4 Creating a PKC PMKID Cache entry for station 00:25:56:88:17:d4 (RSN 0)
*May 13 06:22:50.024: 00:25:56:88:17:d4 Sending EAP-Success to mobile 00:25:56:88:17:d4 (EAP Id 222)
*May 13 06:22:50.024: 00:25:56:88:17:d4 Starting key exchange to mobile 00:25:56:88:17:d4, data packets will be dropped
*May 13 06:22:50.024: 00:25:56:88:17:d4 Sending EAPOL-Key Message to mobile 00:25:56:88:17:d4
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*May 13 06:22:50.024: 00:25:56:88:17:d4 Entering Backend Auth Success state (id=222) for mobile 00:25:56:88:17:d4
*May 13 06:22:50.024: 00:25:56:88:17:d4 Received Auth Success while in Authenticating state for mobile 00:25:56:88:17:d4
*May 13 06:22:50.024: 00:25:56:88:17:d4 dot1x - moving mobile 00:25:56:88:17:d4 into Authenticated state
*May 13 06:22:50.464: 00:25:56:88:17:d4 Received EAPOL-Key from mobile 00:25:56:88:17:d4
*May 13 06:22:50.464: 00:25:56:88:17:d4 Received EAPOL-key in PTK_START state (message 2) from mobile 00:25:56:88:17:d4
*May 13 06:22:50.464: 00:25:56:88:17:d4 Stopping retransmission timer for mobile 00:25:56:88:17:d4
*May 13 06:22:50.464: 00:25:56:88:17:d4 Sending EAPOL-Key Message to mobile 00:25:56:88:17:d4
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*May 13 06:22:50.983: 00:25:56:88:17:d4 Received EAPOL-Key from mobile 00:25:56:88:17:d4
*May 13 06:22:50.983: 00:25:56:88:17:d4 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:25:56:88:17:d4
*May 13 06:22:50.983: 00:25:56:88:17:d4 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4)

*May 13 06:22:50.983: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:23:33:a2:8a:70 vapId 2 apVapId 2
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) pemAdvanceState2 4484, Adding TMP rule
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 00:23:33:a2:8a:70, slot 0, interface = 29, QOS = 0
ACL Id = 255, Ju
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) Successfully plumbed mobile rule (ACL ID 255)
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4500, Adding TMP rule
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 00:23:33:a2:8a:70, slot 0, interface = 29, QOS = 0
ACL Id = 255, Jumb
*May 13 06:22:50.984: 00:25:56:88:17:d4 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)
*May 13 06:22:50.985: 00:25:56:88:17:d4 Stopping retransmission timer for mobile 00:25:56:88:17:d4
*May 13 06:22:50.985: 00:25:56:88:17:d4 Key exchange done, data packets from mobile 00:25:56:88:17:d4 should be forwarded shortly
*May 13 06:22:50.985: 00:25:56:88:17:d4 Sending EAPOL-Key Message to mobile 00:25:56:88:17:d4
state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02
*May 13 06:22:50.988: 00:25:56:88:17:d4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*May 13 06:22:50.991: 00:25:56:88:17:d4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*May 13 06:22:51.246: dhcpd: Received 356 byte dhcp packet from 0x0a56f906 10.86.249.6:68

*May 13 06:22:51.247: adding option 0x35
*May 13 06:22:51.247: adding option 0x36
*May 13 06:22:51.247: adding option 0x33
*May 13 06:22:51.247: adding option 0x03
*May 13 06:22:51.247: adding option 0x06
*May 13 06:22:51.247: adding option 0x01
*May 13 06:22:51.511: 00:25:56:88:17:d4 Sent EAPOL-Key M5 for mobile 00:25:56:88:17:d4
*May 13 06:22:52.509: 00:25:56:88:17:d4 802.1x 'timeoutEvt' Timer expired for station 00:25:56:88:17:d4
*May 13 06:22:52.510: 00:25:56:88:17:d4 Retransmit 1 of EAPOL-Key M5 (length 131) for mobile 00:25:56:88:17:d4
*May 13 06:22:53.092: 00:25:56:88:17:d4 Received EAPOL-Key from mobile 00:25:56:88:17:d4
*May 13 06:22:53.093: 00:25:56:88:17:d4 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile 00:25:56:88:17:d4
*May 13 06:22:53.093: 00:25:56:88:17:d4 Stopping retransmission timer for mobile 00:25:56:88:17:d4
*May 13 06:22:53.094: 00:25:56:88:17:d4 Orphan Packet from 169.254.1.73 on mobile
*May 13 06:22:53.094: 00:25:56:88:17:d4 Invalid MSCB state: ipAddr=169.254.1.73, regType=2, Dhcp required!

(Cisco Controller) >