CSCus19735 APF-3-VALIDATE_DOT11i_CIPHERS_FAILED: Traceback client lost conection

mandy voon · ‎03-31-2015

Hi ,

I have the repeats log found at my WLC 5760.

*%APF-3-VALIDATE_DOT11i_CIPHERS_FAILED: 1 wcm: Could not validate Dot11i security IE. Received an invalid Broadcast OUI code from mobile.
Mobile:a8:06:00:ef:f2:5a[...It occurred 3 times/sec!.] -Traceback: 1#e1914dcb89a0b05d4d2654d68d09f67c :F63BA000+1906C2 :F63BA000+8238B9 :F63BA000+82945D :F63BA000+74A2D5 pthread:F633D000+58AF c:F4CF9000+D058E .

May i know what this logs means ?

Will it affect the other wireless end devices on same SSID or jus to this particular devices ?

Saurav Lodh · ‎04-13-2015

Looks like Bug CSCue88103

Symptoms:
Cisco Wireless LAN Controllers may log a traceback similar to the message below. This is caused by a wireless client requesting an invalid or
unsupported encryption cipher during authentication. The following message is informational only and does not have any material impact on device or
connection security.

A log message similar to the following may be seen:

*apfMsConnTask_0: Feb 28 14:25:59.293: #APF-3-VALIDATE_DOT11i_CIPHERS_FAILED:
apf_rsn_utils.c:841 Could not validate Dot11i security IE. Received an unsupported Multicast
802.11i OUI code from mobile.Mobile:00:11:22:33:44:55
-Traceback: 0x1019de50 0x1104434c 0x11049b30 0x10c12a28 0x12238810 0x122ab30

Conditions:
Devices running an affected version of WLC software.

Workaround:
None.

mohanak · ‎04-15-2015

Issue won't affect devices.

APF-3-VALIDATE_DOT11i_CIPHERS_FAILED: Traceback client lost conection

CSCus19735

Description

Symptom:
When issue happened have an error log, then traceback appear , client connect in this SSID will lost connection with WLC , 2-3 minutes later the issue disappear .

Dec 15 15:04:26: *%APF-3-VALIDATE_DOT11i_CIPHERS_FAILED: 1 wcm: Could not validate Dot11i security IE. Received an invalid Broadcast OUI code from mobile.Mobile:68:df:dd:99:65:84 -Traceback: 1#06cc8ebf24952131fcf4a17fbe05ccca :55471000+33D378 :55471000+A22BE8 :55471000+A29A7C :55471000+948288 pthread:2AEFA000+5DC8

Conditions:
find we some phone vendor "MI" phone connect this SSID will have this issue and traceback.

Workaround:
None the issue will disappear 2-3 minutes later.