09-02-2019 06:34 AM - edited 07-05-2021 10:56 AM
Every device are connect to SSID but one device not connect. 802.1X in use this SSID. Debug logs are here:
*IPv6_Msg_Task: Sep 02 06:09:27.837: b4:9c:df:4b:f0:f7 Link Local address fe80::467:6bd4:8946:e838 updated to mscb. Not Advancing pem state.Current state: mscb in apfMsMmInitial mobility state and client state APF_MS_STATE_AS
*apfOpenDtlSocket: Sep 02 06:10:39.339: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:a0 destination addr d0:ec:35:21:44:a0
*apfOpenDtlSocket: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:a0 destination addr d0:ec:35:21:44:a0
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Updating 11r vendor IE
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 ssid : ESKI thread:1e046cd8
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_4: Sep 02 06:10:39.691: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT4-KUZEY on BSSID d0:ec:35:21:44:a0 ApVapId 1 Slot 0, mobility role 1
*apfOpenDtlSocket: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:44:af destination addr d0:ec:35:21:44:af
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Updating 11r vendor IE
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-01 ssid : ESKI thread:1e046cd8
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_4: Sep 02 06:10:39.800: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT4-KUZEY on BSSID d0:ec:35:21:44:af ApVapId 1 Slot 1, mobility role 1
*apfOpenDtlSocket: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Recevied management frame ASSOCIATION REQUEST on BSSID d0:ec:35:21:42:e0 destination addr d0:ec:35:21:42:e0
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Updating 11r vendor IE
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Processing assoc-req station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:42:e0-00 ssid : ESKI thread:1e046018
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Ignoring 802.11 assoc request from mobile pending deletion
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Sending assoc-resp with status 12 station:b4:9c:df:4b:f0:f7 AP:d0:ec:35:21:44:a0-00 on apVapId 1
*apfMsConnTask_2: Sep 02 06:10:39.857: b4:9c:df:4b:f0:f7 Sending Assoc Response (status: 'Assoc denied unspecified') to station on AP AP-KAT5-KUZEY on BSSID d0:ec:35:21:42:e0 ApVapId 1 Slot 0, mobility role 1
*osapiBsnTimer: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireCallback (apf_ms.c:645) Expiring Mobile!
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireMobileStation (apf_ms.c:7869) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Associated to Disassociated
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Succesfully freed AID 5, slot 0 on AP d0:ec:35:21:44:a0, #client on this slot 3
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfSendDisAssocMsgDebug (apf_80211.c:3785) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Disassociated to Disassociated
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Sent Disassociate to mobile on AP d0:ec:35:21:44:a0-0 on BSSID d0:ec:35:21:44:a2(reason 1, caller apf_ms.c:7953)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Resetting MSCB PMK Cache Entry @index 0 for station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Removing BSSID d0:ec:35:21:44:a2 from PMKID cache of station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Setting active key cache index 0 ---> 8
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 DOT11R: Sending cache delete
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Removing PMK cache entry for station b4:9c:df:4b:f0:f7
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Sent Deauthenticate to mobile on BSSID d0:ec:35:21:44:a2 slot 0(caller apf_ms.c:7961)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsAssoStateDec
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsWepPskStateDec
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apfMsExpireMobileStation (apf_ms.c:8019) Changing state for mobile b4:9c:df:4b:f0:f7 on AP d0:ec:35:21:44:a0 from Disassociated to Idle
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 the value of url acl preserve flag is 0 for mobile b4:9c:df:4b:f0:f7 (caller pem_api.c:4921)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 10.34.0.239 START (0) Deleted mobile LWAPP rule on AP [d0:ec:35:21:44:a0]
*pemReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 10.34.0.239 Removed NPU entry.
*spamApTask0: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Setting DEL_MOBILE (seqno 0, action 6) ack state for STA on AP d0:ec:35:21:44:a0
*spamApTask0: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Delete Mobile request on slot 0 sent to the AP d0:ec:35:21:44:a0 IP: 10.34.0.156:5256
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Deleting mobile on AP d0:ec:35:21:44:a0(0)
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 apf_ms.c:5522 Clearing the SGT 0 of mobile
*apfReceiveTask: Sep 02 06:10:40.308: b4:9c:df:4b:f0:f7 Decrement the SGT 0 policy count reference by the clients 44
*spamApTask0: Sep 02 06:10:40.311: b4:9c:df:4b:f0:f7 apfUpdateDeleteAckInMscb (apf_api.c:54068) Expiring Mobile!
*spamApTask0: Sep 02 06:10:45.114: b4:9c:df:4b:f0:f7 Received DELETE mobile, reasonCode UNKNOWN, deleteReason 15 from AP d0:ec:35:21:44:a0, slot 1 ...cleaning up mscb
Do you have any idea for this problem?
09-02-2019 09:21 AM
- You may 'confront' the Wireless Debug Analyzer with these logs which you can find here :
https://developer.cisco.com/docs/wireless-troubleshooting-tools/#!wireless-troubleshooting-tools/wireless-troubleshooting-tools
M.
09-06-2019 07:36 AM
look at this bug:CSCvk36887
Symptom:
Some clients cannot associate to a specific SSID. If a debug client is enabled, the client will be in this loop:
Workaround:
Manually de-authenticate the client from the WLC using the command:
config client deauthenticate
09-06-2019 10:28 AM
Hi
The first thing to be verified is the certificate provisioning. Have this device properly provisioned with the right certificate?
But the problem seems to be on the association phase and not authentication. Which WLC your are using and which code version?
-If I helped you somehow, please, rate it as useful.-
09-06-2019 10:40 AM
Hola @SamedOrdek1709
what version are u running?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide