CBW240AC: Received RM 11K Action frame through incorrect AP

[MarkusD]

Hi,

I have 2 CBW240AC in my network. Authentication is done via external radius server. 802.11r is enabled. Network is on 2,4 and 5 GHz.

Sometimes Android clients are not able to connect to the network and I get this message in syslog:

Apr  3 11:11:24 192.168.0.69 ap-cisco: *apfMsConnTask_0: Apr 03 11:11:23.317: %APF-4-PROC_ACTION_FAILED: apf_80211k.c:773 Could not process 802.11 Action. Received RM 11K Action frame through incorrect AP from mobile station. Mobile:00:E7:E6:BE:BC:12.
Apr  3 11:13:48 192.168.0.69 ap-cisco: *apfMsConnTask_0: Apr 03 11:13:47.825: %APF-4-PROC_ACTION_FAILED: apf_80211k.c:773 Could not process 802.11 Action. Received RM 11K Action frame through incorrect AP from mobile station. Mobile:00:E7:E6:BE:BC:12.
Apr  3 11:13:50 192.168.0.69 ap-cisco: *Dot1x_NW_MsgTask_0: Apr 03 11:13:49.850: %DOT1X-3-CLIENT_NOT_FOUND: dot1x_msg_task.c:1844 Unable to process 802.1X 1 msg - client 00:e7:e6:be:bc:12 not found

I attached some screenshots of my settings.

I have no idea, how to fix that.

Any help is appreciated.

[Flavio Miranda]

This logs is related to the 802.11r, you can disable it and observe. But, this is not the cause of client not connecting  in randomly fashion, this is for clients already connected.

 For the problem you mention, I´d worry with the message: Unable to process 802.1X 1 msg - client 00:e7:e6:be:bc:12 not found

  What kind ot external radius do you use? Does it allows for debug? This kind of toubleshooting is better conducted on the radius server when it permits.

[MarkusD]

Thanks for reply.

It's a freeradius server.

I will run it in debug mode and check the logs, when the error happens again.

[Flavio Miranda]

Alright, then you have a lot of possibilities. One thing Linux is good is for troubleshooting.   tail -f on the radius log and you can see in real time.

[marce1000]

 - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvr72944

 M.