No authentication on WLC2504

[danielwilder]

I have just replaced several WAP321s with a WLC2504 and 2x 2702i and 1x1702i.

All works fine apart from one 802.11b device that connects to the WLC but does not authenticate.

This device has a static IP and connects okay, but shows on the client list as IP 0.0.0.0.

I have tried several options as already discussed on here, but have had no joy - including checking that DHCP server is not checked, enabling Passive Client and enabling global multicast.

The device connects without problems to the WAP321.

Any other ideas?

Thanks.

Regards

Daniel

[Scott Fella]

Migration from equipment to equipment or code to code doesn't mean things will always work. With 802.12b devices, the best thing is look at the driver version and also on the WLC to make sure that the 802.11b data rates are set as mandatory. These rates are 1, 2, 5.5, and 11.  Other than that, you would need to run a debug and see what is really happening. 

-Scott

[danielwilder]

Those rates are already set as mandatory and the device connects at 11mbs.

How do I get the debug log? I have set the console and buffered log to debugging using the GUI, but nothing appears in the log that seems to pertain to the problem i'm having.

Is there another log?

Regards

Daniel

[Scott Fella]

On the console or telnet/ssh and issue a debug client <MAC address>

-Scott

[danielwilder]

Hi Scott

This is the debug log. Unfortunately, it doesn't mean much (anything!) to me...

Regards

Daniel

apfMsConnTask_5: Dec 28 13:48:07.373:      [0016] ac 02 29 00

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Processing RSN IE type 48, length 20 for mobile 00:1e:c0:00:4c:c8
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 RSN Capabilities:  41
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfValidateDot11iCapabilities:1286 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Marking Mobile as non-11w Capable
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfValidateDot11wGroupMgmtCipher:1716, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Encryption policy is set to 0x80000001
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Sending 11w Flag 0 for Client 00:1E:C0:00:4C:C8
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP f4:4e:05:ad:8f:f0 vapId 3 apVapId 3 flex-acl-name:
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfMsAssoStateInc
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfMsWepPskStateInc
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:1e:c0:00:4c:c8 on AP f4:4e:05:ad:8f:f0 from Idle to Associated

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfPemAddUser2:session timeout forstation 00:1e:c0:00:4c:c8 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Sending assoc-resp with status 0 station:00:1e:c0:00:4c:c8 AP:f4:4e:05:ad:8f:f0-00 on apVapId 3
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 Sending Assoc Response to station on BSSID f4:4e:05:ad:8f:f2 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_5: Dec 28 13:48:07.373: 00:1e:c0:00:4c:c8 apfProcessAssocReq (apf_80211.c:9458) Changing state for mobile 00:1e:c0:00:4c:c8 on AP f4:4e:05:ad:8f:f0 from Associated to Associated

*spamApTask5: Dec 28 13:48:07.378: 00:1e:c0:00:4c:c8 Sent 1x initiate message to multi thread task for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.378: 00:1e:c0:00:4c:c8 reauth_sm state transition 0 ---> 1 for mobile 00:1e:c0:00:4c:c8 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.378: 00:1e:c0:00:4c:c8 Creating a PKC PMKID Cache entry for station 00:1e:c0:00:4c:c8 (RSN 2)
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.378: 00:1e:c0:00:4c:c8 Resetting MSCB PMK Cache Entry 0 for station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Adding BSSID f4:4e:05:ad:8f:f2 to PMKID cache at index 0 for station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379:      [0000] 2a 14 c7 1f 75 22 ec 35 cc 4a 20 07 72 12 9f eb

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Initiating RSN PSK to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 EAP-PARAM Debug - eap-params for Wlan-Id :3 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 dot1x - moving mobile 00:1e:c0:00:4c:c8 into Force Auth state
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Skipping EAP-Success to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Found an cache entry for BSSID f4:4e:05:ad:8f:f2 in PMKID cache at index 0 of station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Found an cache entry for BSSID f4:4e:05:ad:8f:f2 in PMKID cache at index 0 of station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: Including PMKID in M1  (16)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379:      [0000] 2a 14 c7 1f 75 22 ec 35 cc 4a 20 07 72 12 9f eb

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Starting key exchange to mobile 00:1e:c0:00:4c:c8, data packets will be dropped
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Sending EAPOL-Key Message to mobile 00:1e:c0:00:4c:c8
                                                                                                                    state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.379: 00:1e:c0:00:4c:c8 Allocating EAP Pkt for retransmission to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.407: 00:1e:c0:00:4c:c8 Received EAPOL-Key from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.407: 00:1e:c0:00:4c:c8 Received EAPOL-key in PTK_START state (message 2) from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00:1e:c0:00:4c:c8 Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00000000: 30 14 01 00 00 0f ac 04  01 00 00 0f ac 04 01 00  0...............
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00000010: 00 0f ac 02 29 00                                 ....).
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00:1e:c0:00:4c:c8 Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00000000: 01 00 00 0f ac 04 01 00  00 0f ac 04 01 00 00 0f  ................
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00000010: ac 02 29 00                                       ..).
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00:1e:c0:00:4c:c8 Stopping retransmission timer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00:1e:c0:00:4c:c8 Sending EAPOL-Key Message to mobile 00:1e:c0:00:4c:c8
                                                                                                                    state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.408: 00:1e:c0:00:4c:c8 Reusing allocated memory for  EAP Pkt for retransmission to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 Received EAPOL-Key from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 Stopping retransmission timer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 Freeing EAP Retransmit Bufer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.444: 00:1e:c0:00:4c:c8 Mobility query, PEM State: L2AUTHCOMPLETE

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 Building Mobile Announce :

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8   Building Client Payload:

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8     Client Ip: 0.0.0.0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8     Client Vlan Ip: 192.168.1.118, Vlan mask : 255.255.255.0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8     Client Vap Security: 1073758208

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8     Virtual Ip: 192.0.2.1

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8     ssid: DPD_BU

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8   Building VlanIpPayload.

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 Sending 11w Flag 0 for Client 00:1E:C0:00:4C:C8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP f4:4e:05:ad:8f:f0 vapId 3 apVapId 3 flex-acl-name:
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6461, Adding TMP rule
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
  type = Airespace AP - Learn IP address
  on AP f4:4e:05:ad:8f:f0, slot 0, interface = 1, QOS = 0
  IPv4 ACL ID = 255, IPv
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 0  Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:07.445: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*apfReceiveTask: Dec 28 13:48:07.446: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local
  Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 192.168.1.118
*apfReceiveTask: Dec 28 13:48:07.447: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Dec 28 13:48:07.447: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6077, Adding TMP rule
*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
  type = Airespace AP - Learn IP address
  on AP f4:4e:05:ad:8f:f0, slot 0, interface = 1, QOS = 0
  IPv4 ACL ID = 255,
*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 0  Local Bridging Vlan = 0, Local Bridging intf id = 0
*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*apfReceiveTask: Dec 28 13:48:07.448: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Dec 28 13:48:07.449: 00:1e:c0:00:4c:c8 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Dec 28 13:48:07.450: 00:1e:c0:00:4c:c8 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Dec 28 13:48:07.450: 00:1e:c0:00:4c:c8 Sent an XID frame
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Processing assoc-req station:00:1e:c0:00:4c:c8 AP:f4:4e:05:ad:8f:f0-00 thread:15101760
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Association received from mobile on BSSID f4:4e:05:ad:8f:f2 AP AP1
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Global 200 Clients are allowed to AP radio

*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Max Client Trap Threshold: 0  cur: 3

*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0

*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Re-applying interface policy for client

*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385)
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406)
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 In processSsidIE:5682 setting Central switched to TRUE
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 In processSsidIE:5685 apVapId = 3 and Split Acl Id = 65535
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Applying site-specific Local Bridging override for station 00:1e:c0:00:4c:c8 - vapId 3, site 'default-group', interface 'management'
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 Applying Local Bridging Interface Policy for station 00:1e:c0:00:4c:c8 - vlan 0, interface id 0, interface 'management'
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Dec 28 13:48:45.490: 00:1e:c0:00:4c:c8 STA - rates (4): 130 132 139 150 0 0 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Dec 28 13:48:45.491: RSNIE in Assoc. Req.: (20)

*apfMsConnTask_5: Dec 28 13:48:45.491:      [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_5: Dec 28 13:48:45.491:      [0016] ac 02 29 00

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Processing RSN IE type 48, length 20 for mobile 00:1e:c0:00:4c:c8
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 RSN Capabilities:  41
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 apfValidateDot11iCapabilities:1286 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Marking Mobile as non-11w Capable
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 apfValidateDot11wGroupMgmtCipher:1716, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 apfMs1xStateDec
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Encryption policy is set to 0x80000001
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Sending 11w Flag 0 for Client 00:1E:C0:00:4C:C8
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP f4:4e:05:ad:8f:f0 vapId 3 apVapId 3 flex-acl-name:
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:1e:c0:00:4c:c8 on AP f4:4e:05:ad:8f:f0 from Associated to Associated

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 apfPemAddUser2:session timeout forstation 00:1e:c0:00:4c:c8 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Sending assoc-resp with status 0 station:00:1e:c0:00:4c:c8 AP:f4:4e:05:ad:8f:f0-00 on apVapId 3
*apfMsConnTask_5: Dec 28 13:48:45.491: 00:1e:c0:00:4c:c8 Sending Assoc Response to station on BSSID f4:4e:05:ad:8f:f2 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_5: Dec 28 13:48:45.492: 00:1e:c0:00:4c:c8 apfProcessAssocReq (apf_80211.c:9458) Changing state for mobile 00:1e:c0:00:4c:c8 on AP f4:4e:05:ad:8f:f0 from Associated to Associated

*pemReceiveTask: Dec 28 13:48:45.494: 00:1e:c0:00:4c:c8 0.0.0.0 Removed NPU entry.
*spamApTask5: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Sent 1x initiate message to multi thread task for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 reauth_sm state transition 1 ---> 0 for mobile 00:1e:c0:00:4c:c8 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Creating a PKC PMKID Cache entry for station 00:1e:c0:00:4c:c8 (RSN 2)
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Resetting MSCB PMK Cache Entry 0 for station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Removing BSSID f4:4e:05:ad:8f:f2 from PMKID cache of station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Adding BSSID f4:4e:05:ad:8f:f2 to PMKID cache at index 0 for station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: New PMKID: (16)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497:      [0000] 2a 14 c7 1f 75 22 ec 35 cc 4a 20 07 72 12 9f eb

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Initiating RSN PSK to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 EAP-PARAM Debug - eap-params for Wlan-Id :3 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 dot1x - moving mobile 00:1e:c0:00:4c:c8 into Force Auth state
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Skipping EAP-Success to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Found an cache entry for BSSID f4:4e:05:ad:8f:f2 in PMKID cache at index 0 of station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Found an cache entry for BSSID f4:4e:05:ad:8f:f2 in PMKID cache at index 0 of station 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: Including PMKID in M1  (16)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497:      [0000] 2a 14 c7 1f 75 22 ec 35 cc 4a 20 07 72 12 9f eb

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Starting key exchange to mobile 00:1e:c0:00:4c:c8, data packets will be dropped
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Sending EAPOL-Key Message to mobile 00:1e:c0:00:4c:c8
                                                                                                                    state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.497: 00:1e:c0:00:4c:c8 Allocating EAP Pkt for retransmission to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Received EAPOL-Key from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Received EAPOL-key in PTK_START state (message 2) from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00000000: 30 14 01 00 00 0f ac 04  01 00 00 0f ac 04 01 00  0...............
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00000010: 00 0f ac 02 29 00                                 ....).
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00000000: 01 00 00 0f ac 04 01 00  00 0f ac 04 01 00 00 0f  ................
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00000010: ac 02 29 00                                       ..).
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Stopping retransmission timer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Sending EAPOL-Key Message to mobile 00:1e:c0:00:4c:c8
                                                                                                                    state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.526: 00:1e:c0:00:4c:c8 Reusing allocated memory for  EAP Pkt for retransmission to mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Received EAPOL-Key from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Stopping retransmission timer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Freeing EAP Retransmit Bufer for mobile 00:1e:c0:00:4c:c8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 Sending 11w Flag 0 for Client 00:1E:C0:00:4C:C8
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP f4:4e:05:ad:8f:f0 vapId 3 apVapId 3 flex-acl-name:
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) pemAdvanceState2 6432, Adding TMP rule
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Adding Fast Path rule
  type = Airespace AP - Learn IP address
  on AP f4:4e:05:ad:8f:f0, slot 0, interface = 1, QOS = 0
  IPv4 ACL ID = 255
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 0  Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6461, Adding TMP rule
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
  type = Airespace AP - Learn IP address
  on AP f4:4e:05:ad:8f:f0, slot 0, interface = 1, QOS = 0
  IPv4 ACL ID = 255,
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.563: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 0  Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.564: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.564: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.564: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 15206  AverageRate = 0, BurstRate = 0

*Dot1x_NW_MsgTask_0: Dec 28 13:48:45.564: 00:1e:c0:00:4c:c8 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Dec 28 13:48:45.565: 00:1e:c0:00:4c:c8 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0

[Scott Fella]

Post the SSID configuration:

show wlan <wlan id>

-Scott

[danielwilder]

Hi Scott

Enclosed.

Thanks..

Daniel

WLAN Identifier.................................. 3
Profile Name..................................... DPD_BU
Network Name (SSID).............................. DPD_BU
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
    Radius Profiling ............................ Disabled
     DHCP ....................................... Disabled
     HTTP ....................................... Disabled
    Local Profiling ............................. Enabled
     DHCP ....................................... Enabled
     HTTP ....................................... Enabled
  Radius-NAC State............................... Disabled
  SNMP-NAC State................................. Disabled
  Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200

--More-- or (q)uit
Number of Active Clients......................... 1
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... Durleston Park Drive
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream      Downstream
Average Data Rate................................   0             0

--More-- or (q)uit
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-Client Rate Limits........................... Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1

--More-- or (q)uit
Radius Servers
   Authentication................................ Global Servers
   Accounting.................................... Global Servers
      Interim Update............................. Enabled
      Interim Update Interval.................... 0
      Framed IPv6 Acct AVP ...................... Prefix
   Dynamic Interface............................. Disabled
   Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Security

   802.11 Authentication:........................ Open System
   FT Support.................................... Disabled
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
                                                               Auth Key Management
         802.1x.................................. Disabled

--More-- or (q)uit
         PSK..................................... Enabled
         CCKM.................................... Disabled
         FT-1X(802.11r).......................... Disabled
         FT-PSK(802.11r)......................... Disabled
         PMF-1X(802.11w)......................... Disabled
         PMF-PSK(802.11w)........................ Disabled
      FT Reassociation Timeout................... 20
      FT Over-The-DS mode........................ Enabled
      GTK Randomization.......................... Disabled
      SKC Cache Support.......................... Disabled
      CCKM TSF Tolerance......................... 1000
   WAPI.......................................... Disabled
   Wi-Fi Direct policy configured................ Disabled
   EAP-Passthrough............................... Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web Authentication Timeout.................... 300
   Web-Passthrough............................... Disabled
   Mac-auth-server............................... 0.0.0.0
   Web-portal-server............................. 0.0.0.0
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled

--More-- or (q)uit
   FlexConnect Local Switching................... Disabled
   FlexConnect Central Association............... Disabled
   flexconnect Central Dhcp Flag................. Disabled
   flexconnect nat-pat Flag...................... Disabled
   flexconnect Dns Override Flag................. Disabled
   flexconnect PPPoE pass-through................ Disabled
   flexconnect local-switching IP-source-guar.... Disabled
   FlexConnect Vlan based Central Switching ..... Disabled
   FlexConnect Local Authentication.............. Disabled
   FlexConnect Learn IP Address.................. Enabled
   Client MFP.................................... Optional
   PMF........................................... Disabled
   PMF Association Comeback Time................. 1
   PMF SA Query RetryTimeout..................... 200
   Tkip MIC Countermeasure Hold-down Timer....... 60
   Eap-params.................................... Disabled
AVC Visibilty.................................... Enabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Split Tunnel Configuration
    Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled

--More-- or (q)uit
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled
802.11v BSS Max Idle Service..................... Enabled
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled

 Mobility Anchor List
 WLAN ID     IP Address            Status
 -------     ---------------       ------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy

--More-- or (q)uit
----------------
Priority  Policy Name
--------  ---------------

(Cisco Controller) show>

[Scott Fella]

Does that 802.11b device support WPA2/AES?  If not, try to create a new wlan with WPA/TKIP. 

-Scott

[danielwilder]

It does support WPA2/AES. I have also tried WPA, WEP and open as well.

All give the same thing - no IP address.

At the moment i'm also running (but not at the same time) one of the old WAP321s in order to allow access to the device. Not a particularly dignified solution!

Daniel

[Scott Fella]

Don't know what to say... Does it even connect with an open SSID?

-Scott

[danielwilder]

No joy with an open SSID either.

The WLC just doesn't want to accept the IP address.

Who thought this would be so difficult!

Daniel

[Scott Fella]

Well with an open SSID, you eliminate most of all issues. The only thing that can be the other issue is dhcp. Open doesn't use any type of encryption, so if the device isn't getting an IP address it seems like something else. The device is really old and who knows why it doesn't want to get an IP address.

-Scott

[danielwilder]

Thanks for your help Scott.

It does appear to be a DHCP issue. I know that the WLC does not allow static IP addresses on the "guest" SSID. However, this isn't a guest SSID. I can't think of any other options that should be checked / unchecked to make it work.

Daniel

[Scott Fella]

WLC does allow static unless you enable dhcp required. If the device doesn't get an IP address when your testing using an open SSID, then I don't think there is anything you can change to make it work. 

-Scott

[danielwilder]

Once again, thanks for your time.

I have given up and in the new year will assign the device to the trash!

Daniel