ciscoCatalyst 9800-L-F and problem with PEAP clients

[Andrey128]

strange case is happening with ciscoCatalyst 9800-L-F: I am migrating clients from 5508 to this new WLC, clients are scan guns  Zebra MC33X. Two the same model of such scan guns both are in "run" status and without problems joined related SSID (screen attached, I've deleted site specific details). But one of these clients is pingable (e.g. from the same WLC or from other wifi clients) and have access to the network, another client is not pingable and even dont have ARP cache in the attached WLC:

#sh arp | i 94fb.2947.cb55  -> this client does not have ARP cache and so has problem with accessing any network resources
#sh arp | i 94fb.2947.cc61  -> WLC has ARP cache data for this scan gun and this client has network connectivity.
Internet 10.182.50.213 0 94fb.2947.cc61 ARPA Vlan83

-----------------------

Both mentioned scan guns can work without problem on 5508-series WLCs though.

------------------------

What is the source of described problem?

[Leo Laohoo]

Please provide the firmware version and the exact model of the APs.

This could be CSCvw76804.

[Andrey128]

access points are 2702 and 2802, firmware on C9800-L-F-K9 is 17.03.05a

[Leo Laohoo]

Raise a TAC Case and get them to confirm if this is CSCvw76804 or not. 

Try upgrading to the rebuild 17.3.5b which was released over the weekend.

[marce1000]

                - FYI : https://bst.cisco.com/bugsearch/bug/CSCvm88919

 M.

[Andrey128]

"Symptom: wireless client association is rejected Conditions: If association request sent by a wireless client do not contain Supported rates information element (or) length of supported IE is zero, association will fail"

probably a little different (maybe its a bug also but another one), as both clients are shown in "RUN" status, authenticated and associated

[marce1000]

 - The following checkup of the 9800-L-F configuration is always useful for bringing extra insights :   (CLI) show  tech wireless , have the output analyzed by  https://cway.cisco.com/tools/WirelessAnalyzer/  , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer.  You can also debug clients (the guns) following info's from : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213949-wireless-debugging-and-log-collection-on.html  , these can be analyzed with https://cway.cisco.com/tools/WirelessDebugAnalyzer/

 M.