Hi Dear
I have a problem with clients flapping constantly, I have a WLC 2504 and I have the debug, I don´t find in the debug a complete DHCP process, also authentication is [WPA2][Auth(802.1X + CCKM)], but some things bad in the debug with PMKID:
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Unable to compute a valid PMKID from MSCB PMK cache for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Searching for PMK in global PMK cache for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Found an entry in the global PMK cache for station 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.405: CCKM: AA (6)
*apfMsConnTask_5: Nov 09 14:17:29.405: [0000] 38 1c 1a 7d a6 c0
*apfMsConnTask_5: Nov 09 14:17:29.405: CCKM: SPA (6)
*apfMsConnTask_5: Nov 09 14:17:29.405: [0000] 28 b2 bd 8e b4 17
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Unable to compute a valid PMKID from global PMK cache for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Setting active key cache index 0 ---> 8
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 RUN (20) Deleted mobile LWAPP rule on AP [38:1c:1a:7d:a3:20]
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Updated location for station old AP 38:1c:1a:7d:a3:20-0, new AP 38:1c:1a:7d:a6:c0-0
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 apfMsRunStateDec
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 apfMs1xStateDec
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 START (0) Initializing policy
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 8021X_REQD (3) DHCP required on AP 38:1c:1a:7d:a6:c0 vapId 1 apVapId 1for this client
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Nov 09 14:17:29.405: 28:b2:bd:8e:b4:17 10.49.6.93 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 38:1c:1a:7d:a6:c0 vapId 1 apVapId 1 flex-acl-name:
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 28:b2:bd:8e:b4:17 on AP 38:1c:1a:7d:a6:c0 from Associated to Associated
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 apfPemAddUser2:session timeout forstation 28:b2:bd:8e:b4:17 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 Sending Assoc Response to station on BSSID 38:1c:1a:7d:a6:c0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_5: Nov 09 14:17:29.406: 28:b2:bd:8e:b4:17 apfProcessAssocReq (apf_80211.c:7510) Changing state for mobile 28:b2:bd:8e:b4:17 on AP 38:1c:1a:7d:a6:c0 from Associated to Associated
*apfMsConnTask_5: Nov 09 14:17:29.407: 28:b2:bd:8e:b4:17 Updating AID for REAP AP Client 38:1c:1a:7d:a6:c0 - AID ===> 10
*spamApTask7: Nov 09 14:17:29.409: 28:b2:bd:8e:b4:17 Sent 1x initiate message to multi thread task for mobile 28:b2:bd:8e:b4:17
*Dot1x_NW_MsgTask_7: Nov 09 14:17:29.409: 28:b2:bd:8e:b4:17 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_7: Nov 09 14:17:29.409: 28:b2:bd:8e:b4:17 dot1x - moving mobile 28:b2:bd:8e:b4:17 into Connecting state
*Dot1x_NW_MsgTask_7: Nov 09 14:17:29.410: 28:b2:bd:8e:b4:17 Sending EAP-Request/Identity to mobile 28:b2:bd:8e:b4:17 (EAP Id 1)
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Association received from mobile on BSSID 38:1c:1a:7d:a6:c0
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Max Client Trap Threshold: 0 cur: 3
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 6
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Re-applying interface policy for client
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 10.49.6.93 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 10.49.6.93 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 In processSsidIE:4363 setting Central switched to FALSE
*apfMsConnTask_5: Nov 09 14:17:29.814: 28:b2:bd:8e:b4:17 Applying site-specific Local Bridging override for station 28:b2:bd:8e:b4:17 - vapId 1, site 'default-group', interface 'bog-data'
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 Applying Local Bridging Interface Policy for station 28:b2:bd:8e:b4:17 - vlan 6, interface id 12, interface 'bog-data'
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 Processing RSN IE type 48, length 38 for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 Received RSN IE with 1 PMKIDs from mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.815: Received PMKID: (16)
*apfMsConnTask_5: Nov 09 14:17:29.815: [0000] 12 73 62 de 9e cf f8 33 19 e5 a1 6a 76 25 ee f9
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 Searching for PMKID in MSCB PMKID cache for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 No valid PMKID found in the MSCB PMKID cache for mobile 28:b2:bd:8e:b4:17
*apfMsConnTask_5: Nov 09 14:17:29.815: 28:b2:bd:8e:b4:17 Trying to compute a PMKID from MSCB PMK cache for mobile 28:b2:bd:8e:b4:17
Thanks for your help
