EAPoL used ONLY between Supplicant and Authenticator? (or also device)

jonathan.maxwell · ‎03-30-2022

Hello.

Question: Is EAPoL used ONLY between Supplicant and Authenticator, or is it also used between supplicant and AP, and also endpoint device?

(Any helpful comments / solutions are greatly appreciated by me! <3)

---

Tech Fact: EAPoL (Extensible Authentication Protocol over LAN) is a network authentication protocol used in 802.1x (Port Based Network Access Control).
*** it is the encapsulation protocol used between Supplicant and Authenticator. ***

---

ISSUE: We have connection problems with some equipment connected to the Wifi via EAP-TLS certificate.
Authentications pass through a Cisco ISE and a Cisco WLC
===========

Situation Facts: There exists no SD-Access architecture. These are new machines connected to a unique SSID that already accommodates other equipment that is functional. All three types of devices use the same network, same SSID, same Access Point. Nothing has changed in the network before this problem started. Devices that have these symptoms have never been able to authenticate. This is new equipment.

-MAC/Apple: NOK, -Android: NOK, -Microsoft: OK

=================

Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**)
Retransmit failure for EAPOL-Key M3 to mobile (**same mac address**), retransmit count 3, mscb deauth count 0

*Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**) Resetting MSCB PMK Cache Entry @index 0 for station (**same mac address**)

*Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**) Removing BSSID (**other mac address**) from PMKID cache of station (**same mac address**)

*Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**) Setting active key cache index 0 ---> 8

*Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**) Setting active key cache index 8 ---> 8

*Dot1x_NW_MsgTask_0: Mar 24 11:21:24.675: [PA] (**same mac address**) Deleting the PMK cache when de-authenticating the client.....

---

jonathan.maxwell · ‎03-30-2022

Because the iphone is using latest IOS, I conclude the below researched workaround will not work...

-----

Retransmit failure for EAPOL-Key M3 to mobile 00:1e:8c:0f:a4:57, retransmit count 3, mscb deauth count 0

Sent Deauthenticate to mobile on BSSID 00:26:cb:94:44:c0 slot 0(caller 1x_ptsm.c:534)
Conditions

Authentication or Key Exchange max-retransmissions reached

Workaround

Check/update client driver, security config, certificates, etc.

-----

endpoint device IOS versions
Android : 9.1 (newest version is Android 12)

Apple : 15.4 (This is the LATEST IOS version)

Flavio Miranda · ‎03-30-2022

Try to run debug client and try to authenticate more then once. Based on the information above, it is not possible to afirm anything. Also, keep on eye on ISE logs, there can be the answer.

Flavio Miranda · ‎03-30-2022

"Question: Is EAPoL used ONLY between Supplicant and Authenticator, or is it also used between supplicant and AP, and also endpoint device?"

Supplicante is the endpoint device.

Authenticator is the Access Point.

EAPOL (EAP over LAN) runs between endpoint and AP.

MHM Cisco World · ‎03-30-2022

follow

Arshad Safrulla · ‎03-30-2022

EAP-TLS means devices needs a valid certificates from your internal CA to authenticate. Did you install the certificates in the Apple and Android devices to check?

If MS CA services used, AD might be configured to push the certificate and WLAN profile to when the user or device joins the domain. So it will be able to authenticate to the SSID.

___________________________________________
TAC recommended codes for AireOS WLC's
Best Practices for AireOS WLC's
TAC recommended codes for 9800 WLC's
Best Practices for 9800 WLC's
Cisco Wireless compatibility matrix
___________________________________________
Arshad Safrulla

jonathan.maxwell · ‎03-31-2022

Thank you for your reply.

I understand... "

Did you install the certificates in the Apple and Android devices to check?

If MS CA services used, AD might be configured to push the certificate and WLAN profile to when the user or device joins the domain. So it will be able to authenticate to the SSID."

If MS CA service is not used, what is the basic procedure to install the correct certificates into an iphone or other client device?

Arshad Safrulla · ‎03-31-2022

You need to install the certificates manually or if devices are managed use a system manager (remote endpoint manager) to push the certs to the devices

Below is valid only for Windows Devices

"If MS CA services used, AD might be configured to push the certificate and WLAN profile to when the user or device joins the domain. So it will be able to authenticate to the SSID."

___________________________________________
TAC recommended codes for AireOS WLC's
Best Practices for AireOS WLC's
TAC recommended codes for 9800 WLC's
Best Practices for 9800 WLC's
Cisco Wireless compatibility matrix
___________________________________________
Arshad Safrulla

jonathan.maxwell · ‎03-31-2022

Hello folks.

It is clear from the data below gained from executing "debug client [MAC-address]" on the WLC, that the client is failing AAA authorization. Please, what is the best debug commands to find out the source of this authorization failure?

Thank you!

“*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.279: [PA] (client mac address) Entering Backend Auth Response state for mobile 4c:6b:e8:d1:93:e8

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] (client mac address) Processing Access-Reject for mobile 4c:6b:e8:d1:93:e8

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] (client mac address) 0 PMK-remove groupcast messages sent

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] (client mac address) Deleted global PMK cache and MSCB PMKID/PMK cache entry for the client

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] (client mac address) Removing PMK cache due to EAP-Failure for mobile (client mac address) (EAP Id 139)

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] (client mac address) Sending EAP-Failure to mobile 4c:6b:e8:d1:93:e8 (EAP Id 139)

*Dot1x_NW_MsgTask_0: Mar 31 13:56:12.314: [PA] 4(client mac address) Entering Backend Auth Failure state (id=139) for mobile (client mac address)”

Arshad Safrulla · ‎03-31-2022

Was the correct certificate installed in the device? Is the Wi-Fi profile configured to use EAP=TLS?

___________________________________________
TAC recommended codes for AireOS WLC's
Best Practices for AireOS WLC's
TAC recommended codes for 9800 WLC's
Best Practices for 9800 WLC's
Cisco Wireless compatibility matrix
___________________________________________
Arshad Safrulla

jonathan.maxwell · ‎04-04-2022

Hi. When executing "debug aaa all enable" response is...

(Cisco Controller) >debug aaa all enable

(Cisco Controller) >*aaaQueueReader: Apr 04 13:06:39.323: [PA] 00000220: b2 de bc b8 7e c3 e8 fa 18 18 3a d9 52 19 0f 09 ....~.....:.R...
*aaaQueueReader: Apr 04 13:11:15.309: [PA] Unable to find requested user entry for 22d43c6ddb0a
*radiusTransportThread: Apr 04 13:11:15.334: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.334: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.334: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.334: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:15.400: [PA] Unable to find requested user entry for 96cea7c68fe0
*aaaQueueReader: Apr 04 13:11:15.400: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:15.400: [PA] Request Authenticator b7:ed:c4:e6:df:61:5d:5d:80:52:1f:62:aa:31:52:33
*radiusTransportThread: Apr 04 13:11:15.462: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.462: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.462: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.462: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:15.520: [PA] Unable to find requested user entry for 9ee9658c9e03
*aaaQueueReader: Apr 04 13:11:15.520: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:15.520: [PA] Request Authenticator f4:d4:9b:48:84:71:9f:c5:0a:8b:31:7c:96:b2:83:43
*aaaQueueReader: Apr 04 13:11:15.580: [PA] Unable to find requested user entry for 004dfb04d4bf
*aaaQueueReader: Apr 04 13:11:15.580: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:15.580: [PA] Request Authenticator cb:a7:5a:01:7e:3e:06:74:96:58:21:ee:6e:92:4e:10
*aaaQueueReader: Apr 04 13:11:15.639: [PA] Unable to find requested user entry for 5e496ac9fb21
*aaaQueueReader: Apr 04 13:11:15.639: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:15.639: [PA] Request Authenticator fa:a1:35:3f:20:5f:d3:e5:15:2f:44:6c:0f:61:2e:e6
*radiusTransportThread: Apr 04 13:11:15.643: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.643: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.643: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.643: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.935: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.935: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.935: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:15.935: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:16.121: [PA] Unable to find requested user entry for 867acec50d48
*aaaQueueReader: Apr 04 13:11:16.121: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.121: [PA] Request Authenticator 43:51:df:5a:19:7a:c3:b2:19:b1:f1:6e:9f:34:66:42
*aaaQueueReader: Apr 04 13:11:16.165: [PA] Unable to find requested user entry for de525c1c08ff
*aaaQueueReader: Apr 04 13:11:16.165: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.165: [PA] Request Authenticator 76:31:24:3d:f7:39:a6:63:43:ff:95:3d:b2:f0:9a:67
*aaaQueueReader: Apr 04 13:11:16.234: [PA] Unable to find requested user entry for 6cc7ec5effb3
*aaaQueueReader: Apr 04 13:11:16.234: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.234: [PA] Request Authenticator 09:05:82:42:0f:27:24:aa:aa:c2:9a:94:fa:02:73:d7
*aaaQueueReader: Apr 04 13:11:16.356: [PA] Unable to find requested user entry for 804e70aa8352
*aaaQueueReader: Apr 04 13:11:16.356: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.356: [PA] Request Authenticator aa:62:33:6a:8e:59:1f:a5:d6:da:ec:3e:03:30:2b:4d
*aaaQueueReader: Apr 04 13:11:16.439: [PA] Unable to find requested user entry for 7e24a83a0ca3
*aaaQueueReader: Apr 04 13:11:16.439: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.439: [PA] Request Authenticator a4:72:88:1c:31:f6:e7:be:ec:74:e4:dc:9c:53:70:51
*aaaQueueReader: Apr 04 13:11:16.641: [PA] Unable to find requested user entry for 30074d84ae55
*aaaQueueReader: Apr 04 13:11:16.641: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.641: [PA] Request Authenticator d7:fd:b2:dc:f1:88:3e:51:cb:cd:23:f7:18:86:83:82
*aaaQueueReader: Apr 04 13:11:16.820: [PA] Unable to find requested user entry for f26377318806
*aaaQueueReader: Apr 04 13:11:16.820: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.820: [PA] Request Authenticator 82:d1:b4:3b:d9:12:48:bb:c3:75:c9:b8:b1:f1:fe:81
*radiusTransportThread: Apr 04 13:11:16.835: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.835: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.835: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.835: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.880: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.880: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.880: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.917: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.917: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:16.917: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:16.920: [PA] Unable to find requested user entry for 5aa8373c7762
*aaaQueueReader: Apr 04 13:11:16.920: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.920: [PA] Request Authenticator 1b:35:f3:98:04:6e:81:7f:ec:42:4c:d5:17:ab:50:25
*aaaQueueReader: Apr 04 13:11:16.933: [PA] Unable to find requested user entry for 16f5662b016d
*aaaQueueReader: Apr 04 13:11:16.933: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:16.933: [PA] Request Authenticator 86:00:1b:a2:b7:71:2e:29:c5:9f:e6:eb:e0:3f:ca:89
*aaaQueueReader: Apr 04 13:11:17.200: [PA] Unable to find requested user entry for bc6ad1d2f3f2
*aaaQueueReader: Apr 04 13:11:17.200: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.200: [PA] Request Authenticator 09:f5:89:ea:0f:ca:49:00:14:d3:47:5a:d4:22:d0:8d
*aaaQueueReader: Apr 04 13:11:17.283: [PA] Unable to find requested user entry for b8c38553dd79
*aaaQueueReader: Apr 04 13:11:17.283: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.283: [PA] Request Authenticator 3f:ee:d6:74:00:bd:ee:51:6d:ef:bc:4a:87:dd:af:d1
*aaaQueueReader: Apr 04 13:11:17.292: [PA] Unable to find requested user entry for 048c9a272c6e
*aaaQueueReader: Apr 04 13:11:17.292: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.292: [PA] Request Authenticator 9a:ab:75:ce:89:38:42:ac:d5:38:fb:e6:9b:fb:71:12
*aaaQueueReader: Apr 04 13:11:17.413: [PA] Unable to find requested user entry for 9e4c6f476a9b
*aaaQueueReader: Apr 04 13:11:17.413: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.413: [PA] Request Authenticator fb:a6:54:99:30:c9:ca:5c:83:88:20:aa:f6:d6:6c:2a
*aaaQueueReader: Apr 04 13:11:17.488: [PA] Unable to find requested user entry for 361df46d5ad4
*aaaQueueReader: Apr 04 13:11:17.488: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.488: [PA] Request Authenticator 74:f2:7d:7f:5f:a7:9a:d8:b4:46:25:08:1a:50:00:45
*aaaQueueReader: Apr 04 13:11:17.493: [PA] Unable to find requested user entry for daffec4d96dc
*aaaQueueReader: Apr 04 13:11:17.493: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.493: [PA] Request Authenticator 98:ae:a3:bf:ff:c2:3a:be:d7:b6:e5:f0:d4:4e:29:99
*radiusTransportThread: Apr 04 13:11:17.606: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:17.606: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:17.606: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:17.606: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:17.748: [PA] Unable to find requested user entry for 1c232c46ecd1
*aaaQueueReader: Apr 04 13:11:17.748: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.748: [PA] Request Authenticator 5b:54:64:2b:c0:a2:71:33:b1:05:fb:de:18:25:69:e0
*aaaQueueReader: Apr 04 13:11:17.836: [PA] Unable to find requested user entry for daf4dc514aff
*aaaQueueReader: Apr 04 13:11:17.836: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.836: [PA] Request Authenticator 44:f5:55:59:47:de:80:74:ff:a0:80:7e:d1:fd:15:32
*aaaQueueReader: Apr 04 13:11:17.862: [PA] Unable to find requested user entry for 966c9c663ff0
*aaaQueueReader: Apr 04 13:11:17.862: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.862: [PA] Request Authenticator 32:ba:bc:7f:44:2b:5a:3c:d5:80:af:ea:45:9f:a5:31
*aaaQueueReader: Apr 04 13:11:17.960: [PA] Unable to find requested user entry for d462ea9eea2d
*aaaQueueReader: Apr 04 13:11:17.960: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.960: [PA] Request Authenticator 6e:f9:0d:dd:1e:77:e4:94:27:1c:e3:c6:4b:3c:b0:f3
*aaaQueueReader: Apr 04 13:11:17.963: [PA] Unable to find requested user entry for b2290be3a028
*aaaQueueReader: Apr 04 13:11:17.963: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.963: [PA] Request Authenticator 76:f0:b1:97:94:f1:72:12:6b:aa:51:65:de:af:39:39
*aaaQueueReader: Apr 04 13:11:17.982: [PA] Unable to find requested user entry for baef7ea15d91
*aaaQueueReader: Apr 04 13:11:17.982: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.982: [PA] Request Authenticator af:cd:c4:f2:79:43:1f:24:57:4c:16:ce:c7:6a:8d:11
*aaaQueueReader: Apr 04 13:11:17.990: [PA] Unable to find requested user entry for a89ced78e519
*aaaQueueReader: Apr 04 13:11:17.990: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:17.990: [PA] Request Authenticator ca:22:9e:9e:a9:c5:af:18:6f:84:3d:5d:57:13:29:b5
*aaaQueueReader: Apr 04 13:11:18.000: [PA] Unable to find requested user entry for 968ee23ae5e1
*aaaQueueReader: Apr 04 13:11:18.000: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.000: [PA] Request Authenticator a0:c0:73:e9:40:c5:46:50:a9:2d:da:3a:eb:69:49:13
*aaaQueueReader: Apr 04 13:11:18.090: [PA] Unable to find requested user entry for 96334dd4fcc0
*aaaQueueReader: Apr 04 13:11:18.090: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.090: [PA] Request Authenticator 5c:13:60:22:b1:e8:74:ce:54:e9:1e:f7:0e:05:3d:24
*aaaQueueReader: Apr 04 13:11:18.092: [PA] Unable to find requested user entry for ea91779aec8f
*aaaQueueReader: Apr 04 13:11:18.092: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.092: [PA] Request Authenticator 00:08:0d:ad:7a:94:60:3c:ec:c6:84:16:73:d7:4a:98
*aaaQueueReader: Apr 04 13:11:18.212: [PA] Unable to find requested user entry for aeecbf516195
*aaaQueueReader: Apr 04 13:11:18.212: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.212: [PA] Request Authenticator c8:a4:16:99:80:41:bf:72:46:2a:42:0b:52:f8:d5:ee
*radiusTransportThread: Apr 04 13:11:18.270: [PA] Radius Passive Fallback - Acct server is not ready 34.241.1.84 port 1813
*radiusTransportThread: Apr 04 13:11:18.270: [PA] Radius Passive Fallback - Auth server is not ready 34.241.1.84 port 1812
*aaaQueueReader: Apr 04 13:11:18.295: [PA] Unable to find requested user entry for f602fb8ecff4
*aaaQueueReader: Apr 04 13:11:18.295: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.354: [PA] Unable to find requested user entry for 6e4e1ce36297
*aaaQueueReader: Apr 04 13:11:18.354: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.354: [PA] Request Authenticator 51:04:16:9a:b4:1d:9d:08:d4:de:28:d1:6d:22:49:e3
*aaaQueueReader: Apr 04 13:11:18.430: [PA] Unable to find requested user entry for 9ee9658c9e03
*aaaQueueReader: Apr 04 13:11:18.430: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.430: [PA] Request Authenticator 4b:41:bd:52:ac:b7:e5:ae:d8:a5:3d:57:2b:f6:24:05
*aaaQueueReader: Apr 04 13:11:18.537: [PA] Unable to find requested user entry for ae2197b0ca3d
*aaaQueueReader: Apr 04 13:11:18.537: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.537: [PA] Request Authenticator 7e:74:42:53:28:d5:cb:eb:b8:fa:97:c1:86:ea:0b:57
*radiusTransportThread: Apr 04 13:11:18.824: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:18.824: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*radiusTransportThread: Apr 04 13:11:18.824: [PA] Vendor Specif Radius Attribute(code=26, avp_len=58, vId=311)
*aaaQueueReader: Apr 04 13:11:18.913: [PA] Unable to find requested user entry for 6278eab1d146
*aaaQueueReader: Apr 04 13:11:18.913: [PA] Request Authenticator 48:0f:69:ca:e4:53:0e:39:49:9d:f6:5a:5a:37:65:e5
*aaaQueueReader: Apr 04 13:11:18.959: [PA] Unable to find requested user entry for 9a583ece68d2
*aaaQueueReader: Apr 04 13:11:18.959: [PA] ReProcessAuthentication previous proto 8, next proto 40000001
*aaaQueueReader: Apr 04 13:11:18.959: [PA] Request Authenticator 5d:8a:31:3c:90:df:43:92:1d:65:6f:85:3a:c0:37:71
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Updating 11r vendor IE

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Processing assoc-req station:4c:6b:e8:d1:93:e8 AP:dc:8c:37:98:37:80-01 ssid : STIB-MIVB-POC thread:1c4e8d80
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 AVL Tree create mismatch, for the mobile, Mobile count 5468, avl count 5462

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Adding mobile on LWAPP AP dc:8c:37:98:37:80(1)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Association received from mobile on BSSID dc:8c:37:98:37:6c AP AP07-I080-E40
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Station: 4C:6B:E8:D1:93:E8 is associating to AP DC:8C:37:98:37:80 which is not XOR roam capable
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Rf profile 200 Clients are allowed to AP radio

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Max Client Trap Threshold: 12 cur: 11

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Applying Interface(management) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Re-applying interface policy for client

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2922)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2963)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfApplyWlanPolicy: Retaining (ACL [255] / Flexconnect ACL [65535]) recieved in AAA attributes on mobile
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 In processSsidIE:6558 setting Central switched to TRUE
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 In processSsidIE:6561 apVapId = 5 and Split Acl Id = 65535
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Applying site-specific Local Bridging override for station 4c:6b:e8:d1:93:e8 - vapId 36, site 'Belgolaise_I080', interface 'vlan1060'
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Applying Local Bridging Interface Policy for station 4c:6b:e8:d1:93:e8 - vlan 1060, interface id 100, interface 'vlan1060'
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 override from ap group, removing intf group from mscb
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Applying site-specific override for station 4c:6b:e8:d1:93:e8 - vapId 36, site 'Belgolaise_I080', interface 'vlan1060'
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Applying Interface(vlan1060) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 180

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Re-applying interface policy for client

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2922)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Changing Url ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2942)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2963)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Setting the NAS Id to interface specific Id 'WLC-I003'
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Marking this mobile as TGr capable.
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] RSNIE in Assoc. Req.: (20)

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] [0016] ac 03 0c 00

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Processing RSN IE type 48, length 20 for mobile 4c:6b:e8:d1:93:e8
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 RSN Capabilities: 12
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Marking Mobile as non-11w Capable
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Updating AID for REAP AP Client dc:8c:37:98:37:80 - AID ===> 54
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfVapSecurity=0x44000 L2=16384 SkipWeb=0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 AuthenticationRequired = 1
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Encryption policy is set to 0x80000001
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Vlan while overriding the policy = -1
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 sending to spamAddMobile vlanId -1 flex aclName = , flexAclId 65535

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP dc:8c:37:98:37:80 vapId 36 apVapId 5 flex-acl-name:
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfMsAssoStateInc
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfPemAddUser2 (apf_policy.c:416) Changing state for mobile 4c:6b:e8:d1:93:e8 on AP dc:8c:37:98:37:80 from Idle to Associated

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfPemAddUser2:session timeout forstation 4c:6b:e8:d1:93:e8 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Sending assoc-resp with status 0 station:4c:6b:e8:d1:93:e8 AP:dc:8c:37:98:37:80-01 on apVapId 5
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 VHT Operation IE: width 20/0 ch 116 freq0 0 freq1 0 msc0 0x3f msc1 0x3f
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Including FT Mobility Domain IE (length 5) in Initial assoc Resp to mobile
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Sending R1KH-ID as cc:16:7e:bd:bf:27
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Including FT IE (length 98) in Initial Assoc Resp to mobile
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 Sending Assoc Response (status: '0') to station on AP AP07-I080-E40 on BSSID dc:8c:37:98:37:8b ApVapId 5 Slot 1, mobility role 0
*apfMsConnTask_0: Apr 04 13:11:18.959: [PA] 4c:6b:e8:d1:93:e8 apfProcessAssocReq (apf_80211.c:11039) Changing state for mobile 4c:6b:e8:d1:93:e8 on AP dc:8c:37:98:37:80 from Associated to Associated

*spamApTask0: Apr 04 13:11:18.960: [PA] 4c:6b:e8:d1:93:e8 Successful transmission of LWAPP Add-Mobile to AP dc:8c:37:98:37:80
*spamApTask0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 Received ADD_MOBILE ack - Initiating 1x to STA 4c:6b:e8:d1:93:e8 (idx 31)
*spamApTask0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 Sent dot1x auth initiate message for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 reauth_sm state transition 0 ---> 1 for mobile 4c:6b:e8:d1:93:e8 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 EAP-PARAM Debug - eap-params for Wlan-Id :36 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 Station 4c:6b:e8:d1:93:e8 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 dot1x - moving mobile 4c:6b:e8:d1:93:e8 into Connecting state
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.963: [PA] 4c:6b:e8:d1:93:e8 Sending EAP-Request/Identity to mobile 4c:6b:e8:d1:93:e8 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Received EAPOL EAPPKT from mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Received Identity Response (count=1) from mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Resetting reauth count 1 to 0 for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 EAP State update from Connecting to Authenticating for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 dot1x - moving mobile 4c:6b:e8:d1:93:e8 into Authenticating state
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Entering Backend Auth Response state for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Created Cisco-Audit-Session-ID for the mobile: 04b4800a021415e056d24a62
*aaaQueueReader: Apr 04 13:11:18.974: [PA] AuthenticationRequest: 0x7fd97d54b348

*aaaQueueReader: Apr 04 13:11:18.974: [PA] Callback.....................................0x75c500

*aaaQueueReader: Apr 04 13:11:18.974: [PA] protocolType.................................0x00140001

*aaaQueueReader: Apr 04 13:11:18.974: [PA] proxyState...................................4C:6B:E8:D1:93:E8-02:00

*aaaQueueReader: Apr 04 13:11:18.974: [PA] Packet contains 19 AVPs (not shown)

*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 radiusServerFallbackPassiveStateUpdate: RADIUS server is ready 10.128.150.178 port 1812 index 12 active 1
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 radiusServerFallbackPassiveStateUpdate: RADIUS server is ready 10.128.150.179 port 1812 index 13 active 1
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 NAI-Realm not enabled on Wlan, radius servers will be selected as usual
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Send Radius Auth Request with pktId:184 into qid:8 of server at index:12
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Sending the packet to v4 host 10.128.150.178:1812
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 4c:6b:e8:d1:93:e8 Successful transmission of Authentication Packet (pktId 184) to 10.128.150.178:1812 from server queue 8, proxy state 4c:6b:e8:d1:93:e8-02:00
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000000: 01 b8 01 40 b9 c0 21 57 77 ba 42 8c 20 73 86 a7 ...@..!Ww.B..s..
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000010: c6 11 49 28 01 1e 45 6e 72 6f 6c 6c 20 64 65 76 ..I(..Enroll.dev
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000020: 69 63 65 73 20 53 54 49 42 e2 80 99 73 20 69 50 ices.STIB...s.iP
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000030: 61 64 59 03 04 83 06 00 00 00 01 1f 13 34 63 2d adY..........4c-
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000040: 36 62 2d 65 38 2d 64 31 2d 39 33 2d 65 38 1e 21 6b-e8-d1-93-e8.!
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000050: 64 63 2d 38 63 2d 33 37 2d 39 38 2d 33 37 2d 38 dc-8c-37-98-37-8
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000060: 30 3a 53 54 49 42 2d 4d 49 56 42 2d 50 4f 43 05 0:STIB-MIVB-POC.
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000070: 06 00 00 00 08 1a 31 00 00 00 09 01 2b 61 75 64 ......1.....+aud
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000080: 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 34 it-session-id=04
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000090: 62 34 38 30 30 61 30 32 31 34 31 35 65 30 35 36 b4800a021415e056
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000a0: 64 32 34 61 36 32 2c 25 36 32 34 61 64 32 35 36 d24a62,%624ad256
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000b0: 2f 34 63 3a 36 62 3a 65 38 3a 64 31 3a 39 33 3a /4c:6b:e8:d1:93:
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000c0: 65 38 2f 34 31 34 35 34 36 33 33 04 06 0a 80 b4 e8/41454633.....
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000d0: 04 20 0a 57 4c 43 2d 49 30 30 33 1a 0c 00 00 37 ...WLC-I003....7
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000e0: 63 01 06 00 00 00 24 06 06 00 00 00 02 0c 06 00 c.....$.........
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 000000f0: 00 05 14 3d 06 00 00 00 13 40 06 00 00 00 0d 41 ...=.....@.....A
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000100: 06 00 00 00 06 51 06 31 30 36 30 4f 23 02 01 00 .....Q.1060O#...
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000110: 21 01 45 6e 72 6f 6c 6c 20 64 65 76 69 63 65 73 !.Enroll.devices
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000120: 20 53 54 49 42 e2 80 99 73 20 69 50 61 64 50 12 .STIB...s.iPadP.
*aaaQueueReader: Apr 04 13:11:18.974: [PA] 00000130: 61 a6 20 95 ea 2c 28 8b a2 a7 8f 8f ed dd 30 60 a....,(.......0`
*radiusTransportThread: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Counted 3 AVPs (processed 133 bytes, left 0)
*radiusTransportThread: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Access-Challenge received from RADIUS server 10.128.150.178 (qid:8) with port:1812, pktId:184 for mobile 4c:6b:e8:d1:93:e8 receiveId = 2
*radiusTransportThread: Apr 04 13:11:18.977: [PA] AuthorizationResponse: 0xaae46a0

*radiusTransportThread: Apr 04 13:11:18.977: [PA] structureSize................................283

*radiusTransportThread: Apr 04 13:11:18.977: [PA] resultCode...................................255

*radiusTransportThread: Apr 04 13:11:18.977: [PA] protocolUsed.................................0x00000001

*radiusTransportThread: Apr 04 13:11:18.977: [PA] proxyState...................................4C:6B:E8:D1:93:E8-02:00

*radiusTransportThread: Apr 04 13:11:18.977: [PA] Packet contains 3 AVPs (not shown)

*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Processing Access-Challenge for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Entering Backend Auth Req state (id=16) for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 WARNING: updated EAP-Identifier 1 ===> 16 for STA 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Sending EAP Request from AAA to mobile 4c:6b:e8:d1:93:e8 (EAP Id 16)
*Dot1x_NW_MsgTask_0: Apr 04 13:11:18.977: [PA] 4c:6b:e8:d1:93:e8 Allocating EAP Pkt for retransmission to mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Received EAPOL EAPPKT from mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Received EAP Response from mobile 4c:6b:e8:d1:93:e8 (EAP Id 16, EAP Type 13)
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Resetting reauth count 0 to 0 for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Entering Backend Auth Response state for mobile 4c:6b:e8:d1:93:e8
*aaaQueueReader: Apr 04 13:11:19.041: [PA] AuthenticationRequest: 0x7fd5768ee270

*aaaQueueReader: Apr 04 13:11:19.041: [PA] Callback.....................................0x75c500

*aaaQueueReader: Apr 04 13:11:19.041: [PA] protocolType.................................0x00140001

*aaaQueueReader: Apr 04 13:11:19.041: [PA] proxyState...................................4C:6B:E8:D1:93:E8-02:01

*aaaQueueReader: Apr 04 13:11:19.041: [PA] Packet contains 20 AVPs (not shown)

*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 radiusServerFallbackPassiveStateUpdate: RADIUS server is ready 10.128.150.178 port 1812 index 12 active 1
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 radiusServerFallbackPassiveStateUpdate: RADIUS server is ready 10.128.150.179 port 1812 index 13 active 1
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 NAI-Realm not enabled on Wlan, radius servers will be selected as usual
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Send Radius Auth Request with pktId:185 into qid:8 of server at index:12
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Sending the packet to v4 host 10.128.150.178:1812
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 4c:6b:e8:d1:93:e8 Successful transmission of Authentication Packet (pktId 185) to 10.128.150.178:1812 from server queue 8, proxy state 4c:6b:e8:d1:93:e8-02:01
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000000: 01 b9 02 17 48 8c 97 ea d3 16 58 bb 90 fa 25 bb ....H.....X...%.
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000010: 51 5f 47 f3 01 1e 45 6e 72 6f 6c 6c 20 64 65 76 Q_G...Enroll.dev
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000020: 69 63 65 73 20 53 54 49 42 e2 80 99 73 20 69 50 ices.STIB...s.iP
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000030: 61 64 59 03 04 83 06 00 00 00 01 1f 13 34 63 2d adY..........4c-
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000040: 36 62 2d 65 38 2d 64 31 2d 39 33 2d 65 38 1e 21 6b-e8-d1-93-e8.!
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000050: 64 63 2d 38 63 2d 33 37 2d 39 38 2d 33 37 2d 38 dc-8c-37-98-37-8
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000060: 30 3a 53 54 49 42 2d 4d 49 56 42 2d 50 4f 43 05 0:STIB-MIVB-POC.
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000070: 06 00 00 00 08 1a 31 00 00 00 09 01 2b 61 75 64 ......1.....+aud
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000080: 69 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 34 it-session-id=04
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000090: 62 34 38 30 30 61 30 32 31 34 31 35 65 30 35 36 b4800a021415e056
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000a0: 64 32 34 61 36 32 2c 25 36 32 34 61 64 32 35 36 d24a62,%624ad256
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000b0: 2f 34 63 3a 36 62 3a 65 38 3a 64 31 3a 39 33 3a /4c:6b:e8:d1:93:
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000c0: 65 38 2f 34 31 34 35 34 36 33 33 04 06 0a 80 b4 e8/41454633.....
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000d0: 04 20 0a 57 4c 43 2d 49 30 30 33 1a 0c 00 00 37 ...WLC-I003....7
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000e0: 63 01 06 00 00 00 24 06 06 00 00 00 02 0c 06 00 c.....$.........
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000000f0: 00 05 14 3d 06 00 00 00 13 40 06 00 00 00 0d 41 ...=.....@.....A
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000100: 06 00 00 00 06 51 06 31 30 36 30 4f a3 02 10 00 .....Q.1060O....
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000110: a1 0d 80 00 00 00 97 16 03 01 00 92 01 00 00 8e ................
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000120: 03 03 62 4a d2 aa 77 b1 56 d7 92 54 85 d8 9f d8 ..bJ..w.V..T....
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000130: b3 23 8e 08 48 a8 2c 3a 14 af c1 5b c7 34 df 06 .#..H.,:...[.4..
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000140: c0 07 00 00 2c 00 ff c0 2c c0 2b c0 24 c0 23 c0 ....,...,.+.$.#.
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000150: 0a c0 09 c0 08 c0 30 c0 2f c0 28 c0 27 c0 14 c0 ......0./.(.'...
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000160: 13 c0 12 00 9d 00 9c 00 3d 00 3c 00 35 00 2f 00 ........=.<.5./.
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000170: 0a 01 00 00 39 00 0a 00 08 00 06 00 17 00 18 00 ....9...........
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000180: 19 00 0b 00 02 01 00 00 0d 00 12 00 10 04 01 02 ................
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000190: 01 05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 ................
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001a0: 05 01 00 00 00 00 00 12 00 00 00 17 00 00 18 57 ...............W
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001b0: 33 37 43 50 4d 53 65 73 73 69 6f 6e 49 44 3d 30 37CPMSessionID=0
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001c0: 34 62 34 38 30 30 61 30 32 31 34 31 35 65 30 35 4b4800a021415e05
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001d0: 36 64 32 34 61 36 32 3b 34 32 53 65 73 73 69 6f 6d24a62;42Sessio
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001e0: 6e 49 44 3d 50 49 53 4d 2d 41 50 54 41 43 58 30 nID=PISM-APTACX0
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 000001f0: 31 2d 5a 2f 34 33 37 34 38 37 34 30 30 2f 32 33 1-Z/437487400/23
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000200: 38 32 36 32 3b 50 12 9c b5 cc 27 51 de a8 63 ed 8262;P....'Q..c.
*aaaQueueReader: Apr 04 13:11:19.041: [PA] 00000210: 05 30 11 58 50 eb 60 .0.XP.`
*radiusTransportThread: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Counted 6 AVPs (processed 1145 bytes, left 0)
*radiusTransportThread: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Access-Challenge received from RADIUS server 10.128.150.178 (qid:8) with port:1812, pktId:185 for mobile 4c:6b:e8:d1:93:e8 receiveId = 2
*radiusTransportThread: Apr 04 13:11:19.075: [PA] AuthorizationResponse: 0xaae46a0

*radiusTransportThread: Apr 04 13:11:19.075: [PA] structureSize................................1361

*radiusTransportThread: Apr 04 13:11:19.075: [PA] resultCode...................................255

*radiusTransportThread: Apr 04 13:11:19.075: [PA] protocolUsed.................................0x00000001

*radiusTransportThread: Apr 04 13:11:19.075: [PA] proxyState...................................4C:6B:E8:D1:93:E8-02:01

*radiusTransportThread: Apr 04 13:11:19.075: [PA] Packet contains 3 AVPs (not shown)

*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Processing Access-Challenge for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Entering Backend Auth Req state (id=17) for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Sending EAP Request from AAA to mobile 4c:6b:e8:d1:93:e8 (EAP Id 17)
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.075: [PA] 4c:6b:e8:d1:93:e8 Reusing allocated memory for EAP Pkt for retransmission to mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.082: [PA] 4c:6b:e8:d1:93:e8 Received EAPOL EAPPKT from mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.082: [PA] 4c:6b:e8:d1:93:e8 Received EAP Response from mobile 4c:6b:e8:d1:93:e8 (EAP Id 17, EAP Type 13)
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.082: [PA] 4c:6b:e8:d1:93:e8 Resetting reauth count 0 to 0 for mobile 4c:6b:e8:d1:93:e8
*Dot1x_NW_MsgTask_0: Apr 04 13:11:19.082: [PA] 4c:6b:e8:d1:93:e8 Entering Backend Auth Response state for mobile 4c:6b:e8:d1:93:e8
*aaaQueueReader: Apr 04 13:11:19.082: [PA] AuthenticationRequest: 0x7fd97e0d3c70