Client is unable to join wireless network , Pls see debug from WLC

[Ibrahim Jamil]

Hello Guys

Client is unable to join wireless network , below is the debug from WLC

y management suite, enabling Authentication
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a RSN Capabilities:  60
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a Marking Mobile as non-11w Capable
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning

*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a AID 1 in Assoc Req from flex AP 04:da:d2:2d:d4:80 is same as in mscb c4:85:08:6e:1f:9a
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a Encryption policy is set to 0x80000001
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a Sending 11w Flag 0 for Client C4:85:08:6E:1F:9A
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 04:da:d2:2d:d4:80 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_5: Oct 31 12:35:09.912: c4:85:08:6e:1f:9a apfPemAddUser2 (apf_policy.c:352) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Associated to Associated

*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a apfPemAddUser2:session timeout forstation c4:85:08:6e:1f:9a - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a Sending assoc-resp with status 0 station:c4:85:08:6e:1f:9a AP:04:da:d2:2d:d4:80-00 on apVapId 1
*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a Sending Assoc Response to station on BSSID 04:da:d2:2d:d4:80 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_5: Oct 31 12:35:09.913: c4:85:08:6e:1f:9a apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Associated to Associated

*spamApTask7: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Sent 1x initiate message to multi thread task for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a reauth_sm state transition 0 ---> 1 for mobile c4:85:08:6e:1f:9a at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Creating a PKC PMKID Cache entry for station c4:85:08:6e:1f:9a (RSN 2)
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Resetting MSCB PMK Cache Entry 0 for station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Adding BSSID 04:da:d2:2d:d4:80 to PMKID cache at index 0 for station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: New PMKID: (16)

*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947:      [0000] 4d 78 7a 0e bb 92 ba 5c 5d a4 a6 bb 7b 2b 0b 3b

*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Initiating RSN PSK to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a dot1x - moving mobile c4:85:08:6e:1f:9a into Force Auth state
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Skipping EAP-Success to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Found an cache entry for BSSID 04:da:d2:2d:d4:80 in PMKID cache at index 0 of station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Found an cache entry for BSSID 04:da:d2:2d:d4:80 in PMKID cache at index 0 of station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: Including PMKID in M1  (16)

*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947:      [0000] 4d 78 7a 0e bb 92 ba 5c 5d a4 a6 bb 7b 2b 0b 3b

*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Starting key exchange to mobile c4:85:08:6e:1f:9a, data packets will be dropped
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Sending EAPOL-Key Message to mobile c4:85:08:6e:1f:9a
   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.947: c4:85:08:6e:1f:9a Allocating EAP Pkt for retransmission to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.956: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.956: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.956: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:09.956: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:11.096: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:11.096: c4:85:08:6e:1f:9a Retransmit 1 of EAPOL-Key M1 (length 121) for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:11.101: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:11.101: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:11.101: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:11.101: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:12.109: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:12.109: c4:85:08:6e:1f:9a Retransmit 2 of EAPOL-Key M1 (length 121) for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:12.114: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:12.114: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:12.114: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:12.114: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:13.130: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Retransmit failure for EAPOL-Key M1 to mobile c4:85:08:6e:1f:9a, retransmit count 3, mscb deauth count 2
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Resetting MSCB PMK Cache Entry 0 for station c4:85:08:6e:1f:9a
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Removing BSSID 04:da:d2:2d:d4:80 from PMKID cache of station c4:85:08:6e:1f:9a
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Setting active key cache index 0 ---> 8
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Sent Deauthenticate to mobile on BSSID 04:da:d2:2d:d4:80 slot 0(caller 1x_ptsm.c:599)
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Setting active key cache index 8 ---> 8
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Deleting the PMK cache when de-authenticating the client.
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Global PMK Cache deletion failed.
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds
*dot1xMsgTask: Oct 31 12:35:13.140: c4:85:08:6e:1f:9a Freeing EAP Retransmit Bufer for mobile c4:85:08:6e:1f:9a
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Processing assoc-req station:c4:85:08:6e:1f:9a AP:04:da:d2:2d:d4:80-00 thread:5461120
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Association received from mobile on BSSID 04:da:d2:2d:d4:80 AP ccieap
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Global 200 Clients are allowed to AP radio

*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Max Client Trap Threshold: 0  cur: 1

*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 102

*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Re-applying interface policy for client

*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385)
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406)
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a In processSsidIE:5680 setting Central switched to TRUE
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Applying site-specific Local Bridging override for station c4:85:08:6e:1f:9a - vapId 1, site 'default-group', interface 'management'
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a Applying Local Bridging Interface Policy for station c4:85:08:6e:1f:9a - vlan 102, interface id 0, interface 'management'
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Oct 31 12:35:13.374: c4:85:08:6e:1f:9a extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Oct 31 12:35:13.374: RSNIE in Assoc. Req.: (22)

*apfMsConnTask_5: Oct 31 12:35:13.374:      [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_5: Oct 31 12:35:13.374:      [0016] ac 02 3c 00 00 00

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Processing RSN IE type 48, length 22 for mobile c4:85:08:6e:1f:9a
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a RSN Capabilities:  60
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Marking Mobile as non-11w Capable
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a AID 1 in Assoc Req from flex AP 04:da:d2:2d:d4:80 is same as in mscb c4:85:08:6e:1f:9a
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Encryption policy is set to 0x80000001
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Sending 11w Flag 0 for Client C4:85:08:6E:1F:9A
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 04:da:d2:2d:d4:80 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a apfPemAddUser2 (apf_policy.c:352) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Associated to Associated

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a apfPemAddUser2:session timeout forstation c4:85:08:6e:1f:9a - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Sending assoc-resp with status 0 station:c4:85:08:6e:1f:9a AP:04:da:d2:2d:d4:80-00 on apVapId 1
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a Sending Assoc Response to station on BSSID 04:da:d2:2d:d4:80 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_5: Oct 31 12:35:13.375: c4:85:08:6e:1f:9a apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Associated to Associated

*spamApTask7: Oct 31 12:35:13.411: c4:85:08:6e:1f:9a Sent 1x initiate message to multi thread task for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a reauth_sm state transition 0 ---> 1 for mobile c4:85:08:6e:1f:9a at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Creating a PKC PMKID Cache entry for station c4:85:08:6e:1f:9a (RSN 2)
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Resetting MSCB PMK Cache Entry 0 for station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Adding BSSID 04:da:d2:2d:d4:80 to PMKID cache at index 0 for station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: New PMKID: (16)

*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418:      [0000] 4d 78 7a 0e bb 92 ba 5c 5d a4 a6 bb 7b 2b 0b 3b

*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Initiating RSN PSK to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a dot1x - moving mobile c4:85:08:6e:1f:9a into Force Auth state
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Skipping EAP-Success to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Found an cache entry for BSSID 04:da:d2:2d:d4:80 in PMKID cache at index 0 of station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Found an cache entry for BSSID 04:da:d2:2d:d4:80 in PMKID cache at index 0 of station c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: Including PMKID in M1  (16)

*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418:      [0000] 4d 78 7a 0e bb 92 ba 5c 5d a4 a6 bb 7b 2b 0b 3b

*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.418: c4:85:08:6e:1f:9a Starting key exchange to mobile c4:85:08:6e:1f:9a, data packets will be dropped
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.419: c4:85:08:6e:1f:9a Sending EAPOL-Key Message to mobile c4:85:08:6e:1f:9a
   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.419: c4:85:08:6e:1f:9a Allocating EAP Pkt for retransmission to mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.434: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.434: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.434: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:13.434: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:14.556: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:14.556: c4:85:08:6e:1f:9a Retransmit 1 of EAPOL-Key M1 (length 121) for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:14.560: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:14.560: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:14.560: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:14.561: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:15.558: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:15.558: c4:85:08:6e:1f:9a Retransmit 2 of EAPOL-Key M1 (length 121) for mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:15.566: c4:85:08:6e:1f:9a Received EAPOL-Key from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:15.566: c4:85:08:6e:1f:9a Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:15.566: c4:85:08:6e:1f:9a Received EAPOL-key in PTK_START state (message 2) from mobile c4:85:08:6e:1f:9a
*Dot1x_NW_MsgTask_2: Oct 31 12:35:15.566: c4:85:08:6e:1f:9a Received EAPOL-key M2 with invalid MIC from mobile c4:85:08:6e:1f:9a version 2
*osapiBsnTimer: Oct 31 12:35:16.579: c4:85:08:6e:1f:9a 802.1x 'timeoutEvt' Timer expired for station c4:85:08:6e:1f:9a and for message = M2
*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a Retransmit failure for EAPOL-Key M1 to mobile c4:85:08:6e:1f:9a, retransmit count 3, mscb deauth count 3
*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a Blacklisting (if enabled) mobile c4:85:08:6e:1f:9a
*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a apfBlacklistMobileStationEntry2 (apf_ms.c:6172) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Associated to Exclusion-list (1)

*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a Scheduling deletion of Mobile Station:  (callerId: 44) in 10 seconds
*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a 0.0.0.0 8021X_REQD (3) Change state to START (0) last state 8021X_REQD (3)

*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Reached FAILURE: from line 5620
*dot1xMsgTask: Oct 31 12:35:16.588: c4:85:08:6e:1f:9a Scheduling deletion of Mobile Station:  (callerId: 9) in 10 seconds
*osapiBsnTimer: Oct 31 12:35:26.690: c4:85:08:6e:1f:9a apfMsExpireCallback (apf_ms.c:632) Expiring Mobile!
*apfReceiveTask: Oct 31 12:35:26.698: c4:85:08:6e:1f:9a Freeing EAP Retransmit Bufer for mobile c4:85:08:6e:1f:9a
*apfReceiveTask: Oct 31 12:35:26.698: c4:85:08:6e:1f:9a Scheduling deletion of Mobile Station:  (callerId: 46) in 60 seconds
*apfReceiveTask: Oct 31 12:35:26.698: c4:85:08:6e:1f:9a apfMsExpireMobileStation (apf_ms.c:7095) Changing state for mobile c4:85:08:6e:1f:9a on AP 04:da:d2:2d:d4:80 from Exclusion-list (1) to Exclusion-list (2)

*apfReceiveTask: Oct 31 12:35:26.698: c4:85:08:6e:1f:9a pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Oct 31 12:35:26.698: c4:85:08:6e:1f:9a 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [04:da:d2:2d:d4:80]

[Flavio Miranda]

@Ibrahim Jamil

By any chance do you have Clinet MFP active on the WLC ?

-If I helped you somehow, please, rate it as useful.-

[Ibrahim Jamil]

Hello flavio

how to check this mate???

thanks

[Flavio Miranda · Accepted solution]

SECURITY tab>  Layer 2 Security > Protected Management Frame

Disabled

Optional

Required

Keep it in disabled if not.

-If I helped you somehow, please, rate it as useful.-

[Ibrahim Jamil]

thanks sir

[Flavio Miranda]

You're welcome.

Thanks for rate.