ipad regularly loses wifi connection.

[Marci]

Hi all,
I have an iPad here that regularly loses connection.
Catalyst 9800-CL 17.3.3
FT-802.11x on
Other Apple devices are behaving normally.

The first strange thing is that every few minutes there is an "Association received" and after a few more minutes CO_CLIENT_DELETE_REASON_GROUP_KEY_UPDATE_TIMEOUT.

Does anyone have similar behavior?

Spoiler

2021/06/04 11:18:42.733289 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Association received. BSSID 687d.b419.70cf, old BSSID 687d.b419.70cf, WLAN xxxx, Slot 1 AP 687d.b419.70c0, WZ-AP

2021/06/04 11:18:42.733837 {wncd_x_R0-0}{1}: [dot11] [18871]: (note): MAC: a4f1.e8b3.xxxx Association success. AID 4, Roaming = False, WGB = False, 11r = True, 11w = False 

2021/06/04 11:18:42.733955 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS

2021/06/04 11:18:42.734088 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:18:42.759560 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication initiated. method DOT1X, Policy VLAN 1,AAA override = 0 , NAC = 0

2021/06/04 11:18:42.759580 {wncd_x_R0-0}{1}: [sanet-shim-translate] [18871]: (ERR): a4f1.e8b3.xxxx wlan_profile Not Found : Device information attributes not populated

2021/06/04 11:18:43.135579 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication Key Exchange Start. Resolved VLAN: 1, Audit Session id: 1432B40A0000056ED5FBE02A

2021/06/04 11:18:43.177154 {wncd_x_R0-0}{1}: [client-keymgmt] [18871]: (note): MAC: a4f1.e8b3.xxxx EAP Key management successful. AKM:FT-DOT1X Cipher:CCMP WPA Version: WPA2

2021/06/04 11:18:43.177327 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility discovery triggered. Client mode: Flex - Local Switching

2021/06/04 11:18:43.177332 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS

2021/06/04 11:18:43.177369 {wncd_x_R0-0}{1}: [mm-client] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_INTRA_INSTANCE, Previous BSSID MAC: 687d.b419.70c0 Client IFID: 0xa000000f, Client Role: Local PoA: 0x9000000d PoP: 0x0

2021/06/04 11:18:43.177545 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x2 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:18:43.177584 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS

2021/06/04 11:18:43.177795 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS

2021/06/04 11:18:43.178436 {wncd_x_R0-0}{1}: [errmsg] [18871]: (info): %CLIENT_ORCH_LOG-6-CLIENT_ADDED_TO_RUN_STATE: Username entry (xxx) joined with ssid (xxxx) for device with MAC: a4f1.e8b3.xxxx

2021/06/04 11:18:43.178546 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN

2021/06/04 11:29:05.842712 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Association received. BSSID 687d.b419.70cf, old BSSID 687d.b419.70cf, WLAN xxxx, Slot 1 AP 687d.b419.70c0, WZ-AP

2021/06/04 11:29:05.843331 {wncd_x_R0-0}{1}: [dot11] [18871]: (note): MAC: a4f1.e8b3.xxxx Association success. AID 4, Roaming = False, WGB = False, 11r = True, 11w = False 

2021/06/04 11:29:05.843466 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS

2021/06/04 11:29:05.843626 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:29:05.870498 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication initiated. method DOT1X, Policy VLAN 1,AAA override = 0 , NAC = 0

2021/06/04 11:29:05.870533 {wncd_x_R0-0}{1}: [sanet-shim-translate] [18871]: (ERR): a4f1.e8b3.xxxx wlan_profile Not Found : Device information attributes not populated

2021/06/04 11:29:06.228490 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication Key Exchange Start. Resolved VLAN: 1, Audit Session id: 1432B40A0000056ED5FBE02A

2021/06/04 11:29:06.270026 {wncd_x_R0-0}{1}: [client-keymgmt] [18871]: (note): MAC: a4f1.e8b3.xxxx EAP Key management successful. AKM:FT-DOT1X Cipher:CCMP WPA Version: WPA2

2021/06/04 11:29:06.270227 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility discovery triggered. Client mode: Flex - Local Switching

2021/06/04 11:29:06.270234 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS

2021/06/04 11:29:06.270298 {wncd_x_R0-0}{1}: [mm-client] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_INTRA_INSTANCE, Previous BSSID MAC: 687d.b419.70c0 Client IFID: 0xa000000f, Client Role: Local PoA: 0x9000000d PoP: 0x0

2021/06/04 11:29:06.270499 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x2 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:29:06.270550 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS

2021/06/04 11:29:06.270779 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS

2021/06/04 11:29:06.272909 {wncd_x_R0-0}{1}: [errmsg] [18871]: (info): %CLIENT_ORCH_LOG-6-CLIENT_ADDED_TO_RUN_STATE: Username entry (xxx) joined with ssid (xxxx) for device with MAC: a4f1.e8b3.xxxx

2021/06/04 11:29:06.273038 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN

2021/06/04 11:39:28.849318 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Association received. BSSID 687d.b419.70cf, old BSSID 687d.b419.70cf, WLAN xxxx, Slot 1 AP 687d.b419.70c0, WZ-AP

2021/06/04 11:39:28.849944 {wncd_x_R0-0}{1}: [dot11] [18871]: (note): MAC: a4f1.e8b3.xxxx Association success. AID 4, Roaming = False, WGB = False, 11r = True, 11w = False 

2021/06/04 11:39:28.850077 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS

2021/06/04 11:39:28.850246 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:39:28.877165 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication initiated. method DOT1X, Policy VLAN 1,AAA override = 0 , NAC = 0

2021/06/04 11:39:28.877188 {wncd_x_R0-0}{1}: [sanet-shim-translate] [18871]: (ERR): a4f1.e8b3.xxxx wlan_profile Not Found : Device information attributes not populated

2021/06/04 11:39:29.257597 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx L2 Authentication Key Exchange Start. Resolved VLAN: 1, Audit Session id: 1432B40A0000056ED5FBE02A

2021/06/04 11:39:29.299053 {wncd_x_R0-0}{1}: [client-keymgmt] [18871]: (note): MAC: a4f1.e8b3.xxxx EAP Key management successful. AKM:FT-DOT1X Cipher:CCMP WPA Version: WPA2

2021/06/04 11:39:29.299279 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility discovery triggered. Client mode: Flex - Local Switching

2021/06/04 11:39:29.299279 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_MOBILITY_DISCOVERY_IN_PROGRESS

2021/06/04 11:39:29.299282 {wncd_x_R0-0}{1}: [mm-client] [18871]: (note): MAC: a4f1.e8b3.xxxx Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_INTRA_INSTANCE, Previous BSSID MAC: 687d.b419.70c0 Client IFID: 0xa000000f, Client Role: Local PoA: 0x9000000d PoP: 0x0

2021/06/04 11:39:29.299464 {wncd_x_R0-0}{1}: [client-auth] [18871]: (note): MAC: a4f1.e8b3.xxxx ADD MOBILE sent. Client state flags: 0x2 BSSID: MAC: 687d.b419.70cf capwap IFID: 0x9000000d

2021/06/04 11:39:29.299542 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS -> S_CO_DPATH_PLUMB_IN_PROGRESS

2021/06/04 11:39:29.299752 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS

2021/06/04 11:39:29.302322 {wncd_x_R0-0}{1}: [errmsg] [18871]: (info): %CLIENT_ORCH_LOG-6-CLIENT_ADDED_TO_RUN_STATE: Username entry (xxx) joined with ssid (xxxx) for device with MAC: a4f1.e8b3.xxxx

2021/06/04 11:39:29.302454 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN

2021/06/04 11:43:35.189926 {wncd_x_R0-0}{1}: [client-keymgmt] [18871]: (ERR): MAC: a4f1.e8b3.xxxx Keymgmt: Failed to eapol key m5 retrasmit failure. Max retries for M5 over

2021/06/04 11:43:35.190016 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Client move to idle state, delete reason: CO_CLIENT_DELETE_REASON_GROUP_KEY_UPDATE_TIMEOUT, BSSID MAC: 687d.b419.70cf, WTP MAC: 687d.b419.70c0

2021/06/04 11:43:35.190170 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_RUN -> S_CO_IDLE

2021/06/04 11:43:45.190129 {wncd_x_R0-0}{1}: [ewlc-infra-evq] [18871]: (ERR): a4f1.e8b3.xxxx CLIENT_STAGE_TIMEOUT State = IDLE, WLAN profile = xxxx, Policy profile = xxxx, AP name = WZ-AP

2021/06/04 11:43:45.190191 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_GROUP_KEY_UPDATE_TIMEOUT, fsm-state transition 82|87|13|17|18|28|33|42|44|46|48|4d|5c|5e|7f|82|87|13|17|18|28|33|42|44|46|48|4d|5c|5e|7f|26|55|

2021/06/04 11:43:45.190324 {wncd_x_R0-0}{1}: [client-orch-sm] [18871]: (note): MAC: a4f1.e8b3.xxxx Delete mobile payload sent forbssid: 687d.b419.70cf WTP mac: 687d.b419.70c0 slot id: 1 

2021/06/04 11:43:45.190340 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_IDLE -> S_CO_DELETE_IN_PROGRESS

2021/06/04 11:43:45.190884 {wncd_x_R0-0}{1}: [dpath_svc] [18871]: (note): MAC: a4f1.e8b3.xxxx Client datapath entry deleted for ifid 0xa000000f

2021/06/04 11:43:45.191085 {wncd_x_R0-0}{1}: [sanet-shim-translate] [18871]: (note): MAC: a4f1.e8b3.xxxx Session manager disconnect event called, session label: 0xe9000564

2021/06/04 11:43:45.192686 {wncd_x_R0-0}{1}: [client-orch-state] [18871]: (note): MAC: a4f1.e8b3.xxxx Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED

[balaji.bandi]

check this thread may help you :

https://community.cisco.com/t5/wireless/catalyst-9800-cl-client-losing-connectivity/td-p/4269460

https://community.cisco.com/t5/wireless-mobility-documents/802-11-association-status-802-11-deauth-reason-codes/ta-p/3148055

[Marci]

Hi,
in the previous post the solution was to deactivate FT.
Unfortunately, due to some VoIP requirements, this is not an option.
The SSID is also not on the session timeout 0.

[Scott Fella]

Well you need to have a way to test. You can always setup a test ssid if you don’t have a lab and see if disabling FT helps or not. Also if you have other iPads and they work, then you need to focus on the iPads or maybe something else in the configuration that might be causing an issue.
I have iPads old a new and not having any issue. Might be other setting in your security setup that needs to be turned off. Are these IPads new models or old ones?

[CiscoWiFiGuy]

Please have a Look into this link , that might help you :

https://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/technotes/8-6/Enterprise_Best_Practices_for_iOS_devices_and_Mac_computers_on_Cisco_Wireless_LAN.pdf

[Tony Rosolek]

Hey Marci,

did you find a solution for this problem? I'm experiencing similar issue with version 17.3.4. But my device is not an iPad but Cisco 8821 phone.

I think problem is related to (fast-)roaming. But as you, I cannot disable FT, due to VoIP requirements. 

My log shows same error as yours: "wlan_profile Not Found : Device information attributes not populated"

Probably AP does not find sufficient key.

[hasitha siriwardhana]

Any solution for this?

we are running 9130 APs with 17.3.3 OS.

(ERR): x.x.x  wlan_profile Not Found : Device information attributes not populated

[HARA-123]

Hello Guys,

Any solution to this issue? we are facing same issue

We are seeing the following errors:

[client-orch-sm] [23818]: (note): MAC: YYYY.YYYY.YYYY Association received. BSSID XXXX.XXXX.XXXX, old BSSID XXXX.XXXX.XXXX, WLAN TEST1 - 5GHz Only, Slot 1 AP ac4a.56d2.eec0, FR238-AP105
2022/05/23 17:25:26.872233 {wncd_x_R0-6}{1}: [ewlc-ageout-tw] [23818]: (warn): tw_name: WSA CLT EVT TW. Avl node not found when updating key, add it here. crt_slot_id:340 crt_delay:300 key_size:6, 16-byte key chunk 0: 24 41 8c ff 79 45 00 00 20 28 af 74 0b 7f 00 00
2022/05/23 17:25:26.872413 {wncd_x_R0-6}{1}: [dot11] [23818]: (note): MAC: YYYY.YYYY.YYYY Association success. AID 1, Roaming = False, WGB = False, 11r = False, 11w = False
2022/05/23 17:25:26.872666 {wncd_x_R0-6}{1}: [client-orch-state] [23818]: (note): MAC: YYYY.YYYY.YYYY Client state transition: S_CO_RUN -> S_CO_L2_AUTH_IN_PROGRESS
2022/05/23 17:25:26.872854 {wncd_x_R0-6}{1}: [client-auth] [23818]: (note): MAC: YYYY.YYYY.YYYY ADD MOBILE sent. Client state flags: 0x1 BSSID: MAC: XXXX.XXXX.XXXX capwap IFID: 0x918008b8
2022/05/23 17:25:26.881676 {wncd_x_R0-6}{1}: [sanet-shim-translate] [23818]: (ERR): YYYY.YYYY.YYYY wlan_profile Not Found : Device information attributes not populated
2022/05/23 17:25:26.881746 {wncd_x_R0-6}{1}: [client-auth] [23818]: (note): MAC: YYYY.YYYY.YYYY L2 Authentication initiated. method DOT1X, Policy VLAN 200,AAA override = 0 , NAC = 0
2022/05/23 17:25:28.097882 {wncd_x_R0-6}{1}: [client-auth] [23818]: (note): MAC: YYYY.YYYY.YYYY L2 Authentication Key Exchange Start. Resolved VLAN: 200, Audit Session id: 0600A90A0000E579F0AC02BE
2022/05/23 17:25:28.097893 {wncd_x_R0-6}{1}: [client-auth] [23818]: (ERR): MAC: YYYY.YYYY.YYYY Failed to populate Auth interface rsn pmk. Unable to get session timeout from sanet shim
2022/05/23 17:25:28.098191 {wncd_x_R0-6}{1}: [eap] [23818]: (ERR): TLS:Invalid directive (7)

Many thanks,

[marce1000]

 - Have these and or other debugs analyzed with : https://cway.cisco.com/tools/WirelessDebugAnalyzer/

 M.

[jonssonm1]

Hi, were you able to get this resolved? If so, what ended up doing the trick?

[Marci]

The only option was to disable bluetooth on iPad Pros

[Marci]

Occurs for me with all old ipad pro 9.7 all others work.