Client IP Learn. Method ARP

[tomborkowski]

I'm having an issue with a client that is unsuccessfully able to join up to wireless.  There are two separate networks operating in the same physical space (one is Meraki and one is Cisco 9800) with the same SSID and security, but dropping clients off on different vlans/subnets.  The vlans on the Meraki side are not available on the Cisco 9800 as it's behind a FW.  I know this is a bad design (it was inherited).  Clients roaming from Meraki to Cisco are able to successfully perform L2 authentication, but the controllers are learning the clients IP via ARP and not DHCP.  The problem is that the ARP address is in the subnet from the Meraki side.  The client is then deleted by the anchor controller.

The goal is to move everything to just use Cisco on one VLAN, but in the meantime I'm trying to look at temporary options.  I've temporarily disabled client exclusion.  My next thought was to enable DHCP required for the WLAN, but not sure if that will actually prevent the WLC from learning the clients previous IP via ARP.  Just looking for some thoughts from the community.

2023/07/11 08:53:16.728217823 {wncd_x_R0-0}{1}: [llbridge-main] [15475]: (debug): MAC: aa66.f9c3.7213 Link Local Bridging not enabled for client
2023/07/11 08:53:16.728218561 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 Client QoS dpath create params
2023/07/11 08:53:16.728261585 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 No QoS PM Name or QoS Level received from SANet for pm_dir:0. Check client is fastlane, otherwise set pm name to none
2023/07/11 08:53:16.728271457 {wncd_x_R0-0}{1}: [avc-afc] [15475]: (debug): AVC disabled for client aa66.f9c3.7213
2023/07/11 08:53:16.728420622 {wncd_x_R0-0}{1}: [dpath_svc] [15475]: (note): MAC: aa66.f9c3.7213 Client datapath entry created for ifid 0xa000002e
2023/07/11 08:53:16.728457658 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:16.728482306 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:16.728538840 {wncd_x_R0-0}{1}: [client-orch-state] [15475]: (note): MAC: aa66.f9c3.7213 Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS
2023/07/11 08:53:16.728660550 {wncd_x_R0-0}{1}: [client-orch-sm] [15475]: (debug): MAC: aa66.f9c3.7213 Received ip learn response. method: IPLEARN_METHOD_ROAMING
2023/07/11 08:53:16.728738494 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : anchor-vlan 0 310 (0x136) ]
2023/07/11 08:53:16.728747196 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "SSID" ]
2023/07/11 08:53:16.728749162 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : timeout 0 1800 (0x708) ]
2023/07/11 08:53:16.728753752 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 Client QoS run state handler
2023/07/11 08:53:16.728784612 {wncd_x_R0-0}{1}: [rog-proxy-capwap] [15475]: (debug): Managed client RUN state notification: aa66.f9c3.7213
2023/07/11 08:53:16.728845325 {wncd_x_R0-0}{1}: [client-orch-state] [15475]: (note): MAC: aa66.f9c3.7213 Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN
2023/07/11 08:53:16.728921101 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:16.728932603 {wncd_x_R0-0}{1}: [llbridge-main] [15475]: (debug): MAC: aa66.f9c3.7213 Link Local Bridging not enabled for client
2023/07/11 08:53:16.728933431 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 Client QoS dpath run params
2023/07/11 08:53:16.728973087 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 No QoS PM Name or QoS Level received from SANet for pm_dir:0. Check client is fastlane, otherwise set pm name to none
2023/07/11 08:53:16.728984931 {wncd_x_R0-0}{1}: [avc-afc] [15475]: (debug): AVC disabled for client aa66.f9c3.7213
2023/07/11 08:53:16.738970240 {wncd_x_R0-0}{1}: [client-auth] [15475]: (info): MAC: aa66.f9c3.7213 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_AUTHIF_PSK_AUTH_DONE
2023/07/11 08:53:18.859487344 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Received ipv6_address_update, sub type: 0 of XID (441020) from (ipv4: 172.x.x.x )
2023/07/11 08:53:18.859534551 {mobilityd_R0-0}{1}: [mm-client] [16255]: (info): MAC: aa66.f9c3.7213 Forwarding ipv6_address_update, sub type: 0 of XID (441020) from (ipv4: 172.x.x.x ) to (WNCD[0])
2023/07/11 08:53:18.859569931 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Sending ipv6_address_update of XID (441020) to (WNCD[0])
2023/07/11 08:53:18.859623569 {mobilityd_R0-0}{1}: [mm-pmtu] [16255]: (debug): Peer IP: 172.x.x.x PMTU size is 1385 and calculated additional header length is 76
2023/07/11 08:53:18.859637025 {wncd_x_R0-0}{1}: [mm-client] [15475]: (debug): MAC: aa66.f9c3.7213 Received ipv6_address_update, sub type: 0 of XID (441020) from (MobilityD[0])
2023/07/11 08:53:18.859637667 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: 0000.0000.0000 Sending ipv6_address_update_ack of XID (441020) to (ipv4: 172.x.x.x )
2023/07/11 08:53:18.859736091 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.859782037 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.859823039 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.860063552 {wncd_x_R0-0}{1}: [client-iplearn] [15475]: (info): MAC: aa66.f9c3.7213 Client IP learn successful. Method: IPv6 Snooping IP: fe80::8a8:513b:b373:4eaa
2023/07/11 08:53:18.860195104 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.860277450 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.860474836 {wncd_x_R0-0}{1}: [auth-mgr] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] auth mgr attr add/change notification is received for attr addrv6(10)
2023/07/11 08:53:18.860561442 {wncd_x_R0-0}{1}: [auth-mgr-feat_acct] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] SM Notified attribute Add/Update ipv6_addr fe80::8a8:513b:b373:4eaa
2023/07/11 08:53:18.860600703 {wncd_x_R0-0}{1}: [client-iplearn] [15475]: (info): MAC: aa66.f9c3.7213 IP-learn state transition: S_IPLEARN_INIT -> S_IPLEARN_IN_PROGRESS
2023/07/11 08:53:18.860972120 {wncd_x_R0-0}{2}: [apmgr-db] [15433]: (info): a00f.3709.9ec0 AP records required are present for client in slot 1 vap id 2
2023/07/11 08:53:18.861019818 {wncd_x_R0-0}{2}: [mm-client] [15433]: (debug): MAC: 0000.0000.0000 Sending client_add of XID (0) to (MobilityD[0])
2023/07/11 08:53:18.861096740 {mobilityd_R0-0}{2}: [mm-client] [15985]: (debug): MAC: aa66.f9c3.7213 Received client_add, sub type: 0 of XID (0) from (WNCD[0])
2023/07/11 08:53:18.861176670 {wncd_x_R0-0}{2}: [apmgr-db] [15433]: (info): a00f.3709.9ec0 AP records required are present for client in slot 1 vap id 2
2023/07/11 08:53:18.861204788 {wncd_x_R0-0}{2}: [llbridge-main] [15433]: (debug): MAC: aa66.f9c3.7213 Link Local Bridging disabled for client with vlan 0
2023/07/11 08:53:18.861240734 {wncd_x_R0-0}{2}: [avc-afc] [15433]: (debug): AVC disabled for client aa66.f9c3.7213
2023/07/11 08:53:18.861403226 {wncd_x_R0-0}{2}: [dpath_svc] [15433]: (note): MAC: aa66.f9c3.7213 client datapath plumb on standby for client IFID: 0xa000002e
2023/07/11 08:53:18.861791682 {wncd_x_R0-0}{2}: [apmgr-db] [15433]: (info): a00f.3709.9ec0 AP records required are present for client in slot 1 vap id 2
2023/07/11 08:53:18.861812596 {wncd_x_R0-0}{2}: [llbridge-main] [15433]: (debug): MAC: aa66.f9c3.7213 Link Local Bridging disabled for client with vlan 0
2023/07/11 08:53:18.861834076 {wncd_x_R0-0}{2}: [avc-afc] [15433]: (debug): AVC disabled for client aa66.f9c3.7213
2023/07/11 08:53:18.861955988 {wncd_x_R0-0}{2}: [dpath_svc] [15433]: (note): MAC: aa66.f9c3.7213 client datapath plumb on standby for client IFID: 0xa000002e
2023/07/11 08:53:18.862218385 {wncd_x_R0-0}{2}: [apmgr-db] [15433]: (info): a00f.3709.9ec0 AP records required are present for client in slot 1 vap id 2
2023/07/11 08:53:18.862247607 {wncd_x_R0-0}{2}: [llbridge-main] [15433]: (debug): MAC: aa66.f9c3.7213 Link Local Bridging disabled for client with vlan 0
2023/07/11 08:53:18.862262377 {wncd_x_R0-0}{2}: [avc-afc] [15433]: (debug): AVC disabled for client aa66.f9c3.7213
2023/07/11 08:53:18.862386581 {wncd_x_R0-0}{2}: [dpath_svc] [15433]: (note): MAC: aa66.f9c3.7213 client datapath plumb on standby for client IFID: 0xa000002e
2023/07/11 08:53:18.897877324 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Received ipv4_address_update, sub type: 0 of XID (441021) from (ipv4: 172.x.x.x )
2023/07/11 08:53:18.897916660 {mobilityd_R0-0}{1}: [mm-client] [16255]: (info): MAC: aa66.f9c3.7213 Forwarding ipv4_address_update, sub type: 0 of XID (441021) from (ipv4: 172.x.x.x ) to (WNCD[0])
2023/07/11 08:53:18.897948122 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Sending ipv4_address_update of XID (441021) to (WNCD[0])
2023/07/11 08:53:18.897998870 {mobilityd_R0-0}{1}: [mm-pmtu] [16255]: (debug): Peer IP: 172.x.x.x PMTU size is 1385 and calculated additional header length is 76
2023/07/11 08:53:18.898012566 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: 0000.0000.0000 Sending ipv4_address_update_ack of XID (441021) to (ipv4: 172.x.x.x )
2023/07/11 08:53:18.898025698 {wncd_x_R0-0}{1}: [mm-client] [15475]: (debug): MAC: aa66.f9c3.7213 Received ipv4_address_update, sub type: 0 of XID (441021) from (MobilityD[0])
2023/07/11 08:53:18.898247676 {wncd_x_R0-0}{1}: [client-iplearn] [15475]: (note): MAC: aa66.f9c3.7213 Client IP learn successful. Method: ARP IP: 10.2.48.78
2023/07/11 08:53:18.898474177 {wncd_x_R0-0}{1}: [auth-mgr] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] auth mgr attr add/change notification is received for attr addr(8)
2023/07/11 08:53:18.898664195 {wncd_x_R0-0}{1}: [auth-mgr-feat_acct] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] SM Notified attribute Add/Update addr 10.2.48.78
2023/07/11 08:53:18.898701225 {wncd_x_R0-0}{1}: [client-iplearn] [15475]: (info): MAC: aa66.f9c3.7213 IP-learn state transition: S_IPLEARN_IN_PROGRESS -> S_IPLEARN_COMPLETE
2023/07/11 08:53:18.898715251 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Received handoff_end, sub type: 0 of XID (441022) from (ipv4: 172.x.x.x )
2023/07/11 08:53:18.898745799 {wncd_x_R0-0}{1}: [mm-transition] [15475]: (info): MAC: aa66.f9c3.7213 MMIF FSM transition: S_MA_FOREIGN -> S_MA_IPV4_ADDRESS_UPDATE_PROCESSED_TR on E_MA_CO_IPV4_ADDRESS_UPDATE
2023/07/11 08:53:18.898746821 {wncd_x_R0-0}{1}: [mm-client] [15475]: (debug): MAC: aa66.f9c3.7213 Mobile IPv4 address update event received.
2023/07/11 08:53:18.898782273 {mobilityd_R0-0}{1}: [mm-transition] [16255]: (info): MAC: aa66.f9c3.7213 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from ipv4: 172.x.x.x
2023/07/11 08:53:18.898833399 {mobilityd_R0-0}{1}: [mm-client] [16255]: (info): MAC: aa66.f9c3.7213 Forwarding handoff_end, sub type: 0 of XID (441022) from (ipv4: 172.x.x.x ) to (WNCD[0])
2023/07/11 08:53:18.898857412 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : anchor-vlan 0 310 (0x136) ]
2023/07/11 08:53:18.898865604 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "SSID" ]
2023/07/11 08:53:18.898865754 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Sending handoff_end of XID (441022) to (WNCD[0])
2023/07/11 08:53:18.898867462 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : timeout 0 1800 (0x708) ]
2023/07/11 08:53:18.898879708 {wncd_x_R0-0}{1}: [ewlc-qos-client] [15475]: (info): MAC: aa66.f9c3.7213 Client QoS run state handler
2023/07/11 08:53:18.898914478 {wncd_x_R0-0}{1}: [rog-proxy-capwap] [15475]: (debug): Managed client RUN state notification: aa66.f9c3.7213
2023/07/11 08:53:18.899032122 {wncd_x_R0-0}{1}: [mm-client] [15475]: (debug): MAC: aa66.f9c3.7213 Received handoff_end, sub type: 0 of XID (441022) from (MobilityD[0])
2023/07/11 08:53:18.899067724 {wncd_x_R0-0}{1}: [mm-transition] [15475]: (info): MAC: aa66.f9c3.7213 MMIF FSM transition: S_MA_FOREIGN -> S_MA_HANDOFF_END_PROCESSED_TR on E_MA_HANDOFF_END_RCVD
2023/07/11 08:53:18.899162572 {wncd_x_R0-0}{1}: [mm-client] [15475]: (debug): MAC: aa66.f9c3.7213 Sending handoff_end_ack of XID (441022) to (MobilityD[0])
2023/07/11 08:53:18.899214242 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Received handoff_end_ack, sub type: 0 of XID (441022) from (WNCD[0])
2023/07/11 08:53:18.899222598 {wncd_x_R0-0}{1}: [client-orch-sm] [15475]: (info): MAC: aa66.f9c3.7213 Deleting the client, reason: 184, CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE, Client state S_CO_RUN
2023/07/11 08:53:18.899266200 {wncd_x_R0-0}{1}: [client-orch-sm] [15475]: (note): MAC: aa66.f9c3.7213 Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE, details: , fsm-state transition 00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|01|07|15|1a|1b|2c|37|46|48|4a|4c|51|5e|8a|aa|
2023/07/11 08:53:18.899270698 {mobilityd_R0-0}{1}: [mm-transition] [16255]: (info): MAC: aa66.f9c3.7213 MMFSM transition: S_MC_WAIT_HANDOFF_END_ACK -> S_MC_HANDOFF_END_ACK_PROCESSED_TR on E_MC_HANDOFF_END_ACK_RCVD from WNCD[0]
2023/07/11 08:53:18.899296076 {mobilityd_R0-0}{1}: [mm-client] [16255]: (info): MAC: aa66.f9c3.7213 Forwarding handoff_end_ack, sub type: 0 of XID (441022) from (WNCD[0]) to (ipv4: 172.x.x.x )
2023/07/11 08:53:18.899305122 {mobilityd_R0-0}{1}: [mm-pmtu] [16255]: (debug): Peer IP: 172.x.x.x PMTU size is 1385 and calculated additional header length is 76
2023/07/11 08:53:18.899321446 {mobilityd_R0-0}{1}: [mm-client] [16255]: (debug): MAC: aa66.f9c3.7213 Sending handoff_end_ack of XID (441022) to (ipv4: 172.x.x.x )
2023/07/11 08:53:18.899400233 {wncd_x_R0-0}{1}: [client-orch-sm] [15475]: (note): MAC: aa66.f9c3.7213 Delete mobile payload sent for BSSID: a00f.3709.9ece WTP mac: a00f.3709.9ec0 slot id: 1
2023/07/11 08:53:18.899407893 {wncd_x_R0-0}{1}: [client-orch-state] [15475]: (note): MAC: aa66.f9c3.7213 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS
2023/07/11 08:53:18.899450053 {wncd_x_R0-0}{1}: [ewlc-qos-voice] [15475]: (info): MAC: aa66.f9c3.7213 Successfully freed the bw for sip client
2023/07/11 08:53:18.899500061 {wncd_x_R0-0}{1}: [multicast-main] [15475]: (info): MAC: aa66.f9c3.7213 No Flex/Fabric main record exists for client
2023/07/11 08:53:18.899503049 {wncd_x_R0-0}{1}: [rog-proxy-capwap] [15475]: (debug): Managed client state notification: client left run state: aa66.f9c3.7213
2023/07/11 08:53:18.899661567 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (info): Anchor Vlan: 310
2023/07/11 08:53:18.899726855 {wncd_x_R0-0}{1}: [client-iplearn] [15475]: (info): MAC: aa66.f9c3.7213 IP-learn state transition: S_IPLEARN_COMPLETE -> S_IPLEARN_DELETE_IN_PROGRESS
2023/07/11 08:53:18.899857157 {wncd_x_R0-0}{1}: [dpath_svc] [15475]: (note): MAC: aa66.f9c3.7213 Client datapath entry deleted for ifid 0xa000002e
2023/07/11 08:53:18.899872005 {wncd_x_R0-0}{1}: [mm-transition] [15475]: (info): MAC: aa66.f9c3.7213 MMIF FSM transition: S_MA_WAIT_LOCAL_DELETE -> S_MA_LOCAL_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD
2023/07/11 08:53:18.899964442 {wncd_x_R0-0}{1}: [auth-mgr] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] Raised event DELETE (19)
2023/07/11 08:53:18.899968680 {wncd_x_R0-0}{1}: [auth-mgr] [15475]: (info): [aa66.f9c3.7213:capwap_9000007b] Disconnect request from SANET-SHIM (15) for aa66.f9c3.7213 / 0x99000797 - term: user-roamed-out, abort: Unknown, disc: binding change
2023/07/11 08:53:18.899969196 {wncd_x_R0-0}{1}: [sanet-shim-translate] [15475]: (note): MAC: aa66.f9c3.7213 Session manager disconnect event called, session label: 0x99000797
2023/07/11 08:53:18.899982954 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : anchor-vlan 0 310 (0x136) ]
2023/07/11 08:53:18.899990340 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "SSID" ]
2023/07/11 08:53:18.899992060 {wncd_x_R0-0}{1}: [aaa-attr-inf] [15475]: (info): [ Applied attribute : timeout 0 1800 (0x708) ]
2023/07/11 08:53:18.899996476 {wncd_x_R0-0}{1}: [client-auth] [15475]: (info): MAC: aa66.f9c3.7213 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_SANET_DELETE_IN_PROGRESS
2023/07/11 08:53:18.900012194 {wncd_x_R0-0}{1}: [dot11] [15475]: (info): MAC: aa66.f9c3.7213 Total length of Deauth/Disassoc: 2
2023/07/11 08:53:18.900092874 {wncd_x_R0-0}{1}: [dot11] [15475]: (info): MAC: aa66.f9c3.7213 Sent disassoc to client, disassoc reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 184, CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE.
2023/07/11 08:53:18.900095166 {wncd_x_R0-0}{1}: [dot11] [15475]: (info): MAC: aa66.f9c3.7213 Total length of Deauth/Disassoc: 2
2023/07/11 08:53:18.900151870 {wncd_x_R0-0}{1}: [dot11] [15475]: (info): MAC: aa66.f9c3.7213 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 184, CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE.

[marce1000]

 - Note that you can have these client debugs analyzed with :
                    https://cway.cisco.com/wireless-debug-analyzer/

 M.

[luiggi-moreira]

Hey @tomborkowski , did you ever get this solved? If so, could you kindly share what was the workaround or final solution? Thank you!