el 09-06-2019 09:27 AM
Estimados como están tengo un red WIFI con 10 equipos modelos (AIR-CAP2602I-A-K9 y AIR-CAP1602I-A-K9) y Cisco Virtual Wireless Controller 8.0.133.0, se ha configurado la red para que tengan que loguearse con nombre de usuario y contraseña, a través de un servidor radius y por otro servidor se le asigna la dirección IP (DHCP).
He tenido varias quejas de usuarios que se les desconecta el WIFI a cada rato, alguno no se puede conectar, otros dice que nos les entrega ip (teniendo ip libres).
Haciendo el debug de un usuario y me aparece los siguiente.
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Re-applying interface policy for client
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface n asid:
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Check before Setting the NAS Id to WLAN specific Id ''
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Applying site-specific Local Bridging override for station d0:77:14:e7:34:3b - v apId 4, site 'MSO', interface 'management'
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Applying Local Bridging Interface Policy for station d0:77:14:e7:34:3b - vlan 0, interface id 0, interface 'management', nasId:''
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b override from ap group, removing intf group from mscb
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Applying site-specific override for station d0:77:14:e7:34:3b - vapId 4, site 'M SO', interface 'management'
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Re-applying interface policy for client
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface n asid:
*apfReceiveTask: Sep 05 14:30:38.261: d0:77:14:e7:34:3b Stopping deletion of Mobile Station: (callerId: 83)
*DHCP Socket Task: Sep 05 14:30:38.531: d0:77:14:e7:34:3b DHCP received op BOOTREPLY (2) (len 313,vlan 0, port 1, encap 0xec03)
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b DHCP received op BOOTREPLY (2) (len 313,vlan 0, port 1, encap 0xec03)
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b DHCP setting server from ACK (mscb=0xa7151c0 ip=0xa00193c)(server 10.200.1.11, yiaddr 10.0.25.60)
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) DHCP Address Re-established
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) Reached PLUMBFASTPATH: from line 7469
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) Change state to RUN (20) last state RUN (20)
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b Assigning Address 10.0.25.60 to mobile
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b DHCP success event for client. Clearing dhcp failure count for interface manag ement.
*DHCP Socket Task: Sep 05 14:30:38.549: d0:77:14:e7:34:3b DHCP success event for client. Clearing dhcp failure count for interface manag ement.
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b apfHreapClientCreate (apf_80211.c:13708) Changing state for mobile d0:77:14:e7:34:3b on AP 3c:5e:c3:61:c5:10 from Associated to Associated
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) Change state to RUN (20) last state RUN (20)
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b override for default ap group, marking intgrp NULL
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 65
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Re-applying interface policy for client
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Check before Setting the NAS Id to WLAN specific Id ''
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Applying site-specific Local Bridging override for station d0:77:14:e7:34:3b - vapId 4, site 'MSO', interface 'management'
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Applying Local Bridging Interface Policy for station d0:77:14:e7:34:3b - vlan 0, interface id 0, interface 'management', nasId:''
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b override from ap group, removing intf group from mscb
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Applying site-specific override for station d0:77:14:e7:34:3b - vapId 4, site 'MSO', interface 'management'
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Re-applying interface policy for client
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2435)
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2456)
*apfReceiveTask: Sep 05 14:30:41.930: d0:77:14:e7:34:3b Values before applying NASID - interfacetype:0, ovrd:0, mscb nasid:, interface nasid:
*apfReceiveTask: Sep 05 14:30:41.931: d0:77:14:e7:34:3b Stopping deletion of Mobile Station: (callerId: 83)
*DHCP Socket Task: Sep 05 14:30:42.165: d0:77:14:e7:34:3b DHCP received op BOOTREPLY (2) (len 313,vlan 0, port 1, encap 0xec03)
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b DHCP received op BOOTREPLY (2) (len 313,vlan 0, port 1, encap 0xec03)
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b DHCP setting server from ACK (mscb=0xa7151c0 ip=0xa00193c)(server 10.200.1.11, yiaddr 10.0.25.60)
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) DHCP Address Re-established
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) Reached PLUMBFASTPATH: from line 7469
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b 10.0.25.60 RUN (20) Change state to RUN (20) last state RUN (20)
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b Assigning Address 10.0.25.60 to mobile
*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b DHCP success event for client. Clearing dhcp failure count for interface management.
}*DHCP Socket Task: Sep 05 14:30:42.177: d0:77:14:e7:34:3b DHCP success event for client. Clearing dhcp failure count for interface management.
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b Received DELETE mobile, reason MN_REASSOC_TIMEOUT, from AP 3c:5e:c3:61:c5:10, slot 1 ...cleaning up mscb
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b PMK: Sending cache delete
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b Removing PMK cache entry for station d0:77:14:e7:34:3b
*spamApTask1: Sep 05 14:31:06.054: d0:77:14:e7:34:3b 0 PMK-remove groupcast messages sent
*osapiBsnTimer: Sep 05 14:31:07.007: d0:77:14:e7:34:3b apfMsExpireCallback (apf_ms.c:637) Expiring Mobile!
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b apfMsExpireMobileStation (apf_ms.c:7069) Changing state for mobile d0:77:14:e7:34:3b on AP 3c:5e:c3:61:c5:10 from Associated to Disassociated
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b Sent Deauthenticate to mobile on BSSID 3c:5e:c3:61:c5:10 slot 1(caller apf_ms.c:7163)
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b Setting active key cache index 8 ---> 8
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b Global PMK Cache deletion failed.
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b apfMsAssoStateDec
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b apfMsExpireMobileStation (apf_ms.c:7201) Changing state for mobile d0:77:14:e7:34:3b on AP 3c:5e:c3:61:c5:10 from Disassociated to Idle
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Sep 05 14:31:07.007: d0:77:14:e7:34:3b 10.0.25.60 START (0) Deleted mobile LWAPP rule on AP [3c:5e:c3:61:c5:10]
*apfReceiveTask: Sep 05 14:31:07.008: d0:77:14:e7:34:3b Deleting mobile on AP 3c:5e:c3:61:c5:10(1)
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b Adding mobile on LWAPP AP 3c:5e:c3:61:c5:10(1)
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b apfMsAssoStateInc
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b apfMsOpenStateInc
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b apfHreapClientCreate (apf_80211.c:13708) Changing state for mobile d0:77:14:e7:34:3b on AP 3c:5e:c3:61:c5:10 from Idle to Associated
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b apfMsRunStateInc
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b 0.0.0.0 START (0) Change state to RUN (20) last state START (0)
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b override for default ap group, marking intgrp NULL
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 65
*apfReceiveTask: Sep 05 14:31:15.147: d0:77:14:e7:34:3b Re-applying interface policy for client
Veo mucho Re-applying interface policy for client,
Quería ver cómo puedo capturar los paquetones estando en el WLC con algún usuario que se quiere conectar para poder analizarlo con el wireshark.
el 09-06-2019 10:08 AM
Hola @supercanal
El estado del cliente esta en RUN es decir que pasa la etapa de autenticacion y asociación, pareciera que esta atorado en el proceso de DHCP.
Espero que la información haya sido útil y si no tienes más preguntas recuerda cerrar el topic, seleccionando la respuesta como "Respuesta correcta"
**Please rate the answer if this information was useful***
**Por favor si la información fue util marca esta respuesta como correcta**
*Tu reconocimiento nos alienta a seguir participando en los foros *
Descubra y salve sus notas favoritas. Vuelva a encontrar las respuestas de los expertos, guías paso a paso, temas recientes y mucho más.
¿Es nuevo por aquí? Empiece con estos tips. Cómo usar la comunidad Guía para nuevos miembros
Navegue y encuentre contenido personalizado de la comunidad