el 09-18-2018 01:18 PM
Buenas tardes, tengo un problema con usuario que intenta conectarse a la red wireless, el usuario antes se conectaba a un SSID x y de repente solamente se puede conectar a otro SSID que tenemos en el WLC. El WLC no muestra ningun logg,como resolver para que se pueda conectar al ssid que le corresponponde? es solamente a un usuario al que le sucede.
el 09-19-2018 02:05 PM
Hola esneyder_an16@hotmail.com
A traves de la consola escribe la siguiente linea de comando
debug client <mac_del_cliente>
Y compartenos el output del comando.
Una duda ambas redes utilizan el mismo método de seguridad?
Saludos
***Please rate the answer if this information was useful***
**Por favor si la información fue util marca esta respuesta como correcta**
*Tu reconocimiento nos alienta a seguir participando en los foros *
el 09-19-2018 02:16 PM
Cuando ingresé el comando, y traté de conectar ese usuario al SSID no mostró nada y no se conectó, sin embargo cuando lo conecte a otro si.
(Cisco Controller) >debug client EE-2C-88-68-D7-1E
(Cisco Controller) >*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Pro cessing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2 fe0
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Association received fr om mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Max Client Trap Thresho ld: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying Interface(wire less_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Acc ess Vlan 4
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Re-applying interface p olicy for client
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po licy.c:2453)
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po licy.c:2474)
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC 01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e apfApplyWlanPolicy: App ly WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Check before Setting th e NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Setting the NAS Id to W LAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e In processSsidIE:5766 s etting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e In processSsidIE:5769 a pVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-g roup', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, inter face 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e processSsidIE statusCo de is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e processSsidIE ssid_don e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e suppRates statusCode i s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:35:24.478: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:35:24.478: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:35:24.478: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Received 802.11i PSK ke y management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Marking Mobile as non-1 1w Capable
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e pemApfAddMobileStation2 : APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Encryption policy is se t to 0x80000001
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Not Using WMM Complianc e code qosCap 00
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Vlan while overriding t he policy = -1
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e sending to spamAddMobil e vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-ac l-name:
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_pol icy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 f rom Associated to Associated
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sess ionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Stopping deletion of Mo bile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Func: apfPemAddUser2, M s Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e apfProcessAssocReq (apf _80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c: e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - I nitiating 1x to STA ee:2c:88:68:d7:1e (idx 62)
*spamApTask5: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e reauth_sm state tran sition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Resetting MSCB PMK C ache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Removing BSSID a0:23 :9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Setting active key c ache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Setting active key c ache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Adding BSSID a0:23:9 f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Initiating RSN PSK t o mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e EAP-PARAM Debug - ea p-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e dot1x - moving mobil e ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7 :1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7 :1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Starting key exchang e to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Sending EAPOL-Key Me ssage to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00 .00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Allocating EAP Pkt f or retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Received EAPOL-Key f rom mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Received EAPOL-key i n PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Dumping RSNIE receiv ed in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Dumping RSNIE receiv ed in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Stopping retransmiss ion timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Sending EAPOL-Key Me ssage to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Reusing allocated me mory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Received EAPOL-Key f rom mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Received EAPOL-key i n PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Stopping retransmiss ion timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Freeing EAP Retransm it Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 8021X_R EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Not Using WMM Compli ance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Vlan while overridin g the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e sending to spamAddMo bile vlanId -1 aclName = , flexAclId 65535
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHC OMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHC OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*spamApTask5: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*pemReceiveTask: Aug 29 14:35:24.491: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU e ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:35:24.498: ee:2c:88:68:d7:1e DHCP received op BOOTR EQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP (encap type 0xec0 3) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP processing DHCP R EQUEST (3)
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST , htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP xid: 0xd80fc02a (3624910890), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:8 8:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0 , yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0 , giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP requested ip: 1 72.16.32.67
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optle n=64
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP successfully brid ged packet to DS
*DHCP Socket Task: Aug 29 14:35:24.510: ee:2c:88:68:d7:1e DHCP received op BOOTR EPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP processing DHCP A CK (5)
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP xid: 0xd80fc02a (3624910890), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:8 8:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0 , yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0 , giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP server id: 172. 16.8.63 rcvd server id: 172.16.8.63
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP successfully bridged packet to STA
*apfMsConnTask_5: Aug 29 14:35:37.042: ee:2c:88:68:d7:1e Processing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2fe0
*apfMsConnTask_5: Aug 29 14:35:37.042: ee:2c:88:68:d7:1e Association received from mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Max Client Trap Threshold: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying Interface(wireless_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 4
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Re-applying interface policy for client
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2453)
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2474)
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Check before Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e In processSsidIE:5766 setting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e In processSsidIE:5769 apVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-group', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, interface 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:35:37.043: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:35:37.043: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:35:37.043: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Marking Mobile as non-11w Capable
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Encryption policy is set to 0x80000001
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_policy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfProcessAssocReq (apf_80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:35:37.045: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:35:37.045: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - Initiating 1x to STA ee:2c:88:68:d7:1e (idx 64)
*spamApTask5: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e reauth_sm state transition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Resetting MSCB PMK Cache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Removing BSSID a0:23:9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Adding BSSID a0:23:9f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Initiating RSN PSK to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e dot1x - moving mobile ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Starting key exchange to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Allocating EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Received EAPOL-key in PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.053: ee:2c:88:68:d7:1e Reusing allocated memory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Freeing EAP Retransmit Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*spamApTask5: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.056: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Aug 29 14:35:37.056: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP received op BOOTREQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP processing DHCP REQUEST (3)
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP xid: 0x6909cb0c (1762249484), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP requested ip: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optlen=64
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP successfully bridged packet to DS
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP received op BOOTREPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP processing DHCP ACK (5)
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP xid: 0x6909cb0c (1762249484), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP server id: 172.16.8.63 rcvd server id: 172.16.8.63
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP successfully bridged packet to STA
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Processing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2fe0
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Association received from mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Max Client Trap Threshold: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying Interface(wireless_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 4
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Re-applying interface policy for client
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2453)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2474)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Check before Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e In processSsidIE:5766 setting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e In processSsidIE:5769 apVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-group', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, interface 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:36:14.175: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:36:14.175: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:36:14.175: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Marking Mobile as non-11w Capable
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Encryption policy is set to 0x80000001
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_policy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfProcessAssocReq (apf_80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:36:14.179: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:36:14.179: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - Initiating 1x to STA ee:2c:88:68:d7:1e (idx 69)
*spamApTask5: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e reauth_sm state transition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Resetting MSCB PMK Cache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Removing BSSID a0:23:9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Adding BSSID a0:23:9f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Initiating RSN PSK to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e dot1x - moving mobile ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Starting key exchange to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Allocating EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Received EAPOL-key in PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Reusing allocated memory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Freeing EAP Retransmit Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.190: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*spamApTask5: Aug 29 14:36:14.191: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*pemReceiveTask: Aug 29 14:36:14.191: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP received op BOOTREQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP processing DHCP REQUEST (3)
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP xid: 0x118e1ba (18407866), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP requested ip: 172.16.32.67
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optlen=64
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP successfully bridged packet to DS
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP received op BOOTREPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP processing DHCP ACK (5)
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP xid: 0x118e1ba (18407866), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP server id: 172.16.8.63 rcvd server id: 172.16.8.63
(Cisco Controller) >show client detail EE-2C-88-68-D7-1E
Client MAC Address............................... ee:2c:88:68:d7:1e
Client Username ................................. N/A
AP MAC Address................................... a0:23:9f:5d:8c:e0
AP Name.......................................... AP_P2_ENA
AP radio slot Id................................. 1
Client State..................................... Associated
Client User Group................................
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 4
Wireless LAN Network Name (SSID)................. INEC_Tablets
Wireless LAN Profile Name........................ Wireless_Tablets
Hotspot (802.11u)................................ Not Supported
BSSID............................................ a0:23:9f:5d:8c:ec
Connected For ................................... 189 secs
Channel.......................................... 44
IP Address....................................... 172.16.32.67
Gateway Address.................................. Unknown
Netmask.......................................... Unknown
Association Id................................... 9
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0
--More-- or (q)uit
Session Timeout.................................. 0
Client CCX version............................... 4
Client E2E version............................... 1
QoS Level........................................ Silver
Avg data Rate.................................... 0
Burst data Rate.................................. 0
Avg Real time data Rate.......................... 0
Burst Real Time data Rate........................ 0
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Power Save....................................... OFF
Current Rate..................................... m9 ss2
Supported Rates.................................. 6.0,9.0,12.0,18.0,24.0,36.0,
............................................. 48.0,54.0
Mobility State................................... Local
Mobility Move Count.............................. 0
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Policy Manager Rule Created...................... Yes
Audit Session ID................................. ac10063500020ba75b86f37d
--More-- or (q)uit
AAA Role Type.................................... none
Local Policy Applied............................. none
IPv4 ACL Name.................................... none
FlexConnect ACL Applied Status................... Unavailable
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Layer2 ACL Name.................................. none
Layer2 ACL Applied Status........................ Unavailable
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
No. of mDNS Services Advertised.................. 0
Policy Type...................................... WPA2
Authentication Key Management.................... PSK
Encryption Cipher................................ CCMP (AES)
Protected Management Frame ...................... No
Management Frame Protection...................... No
EAP Type......................................... Unknown
Interface........................................ wireless_tablets
VLAN............................................. 4
Quarantine VLAN.................................. 0
Access VLAN...................................... 4
Local Bridging VLAN.............................. 4
--More-- or (q)uit
Client Capabilities:
CF Pollable................................ Not implemented
CF Poll Request............................ Not implemented
Short Preamble............................. Not implemented
PBCC....................................... Not implemented
Channel Agility............................ Not implemented
Listen Interval............................ 225
Fast BSS Transition........................ Not implemented
11v Support................................ Not Supported
Client Wifi Direct Capabilities:
WFD capable................................ No
Manged WFD capable......................... No
Cross Connection Capable................... No
Support Concurrent Operation............... No
Fast BSS Transition Details:
Client Statistics:
Number of Bytes Received................... 3112439
Number of Bytes Sent....................... 118924978
Total Number of Bytes Sent................. 118924978
Total Number of Bytes Recv................. 3112439
Number of Bytes Sent (last 90s)............ 1591
Number of Bytes Recv (last 90s)............ 3428
Number of Packets Received................. 25460
--More-- or (q)uit
Number of Packets Sent..................... 84166
Number of Interim-Update Sent.............. 0
Number of EAP Id Request Msg Timeouts...... 0
Number of EAP Id Request Msg Failures...... 0
Number of EAP Request Msg Timeouts......... 0
Number of EAP Request Msg Failures......... 0
Number of EAP Key Msg Timeouts............. 1
Number of EAP Key Msg Failures............. 0
Number of Data Retries..................... 2438
Number of RTS Retries...................... 0
Number of Duplicate Received Packets....... 73
Number of Decrypt Failed Packets........... 0
Number of Mic Failured Packets............. 0
Number of Mic Missing Packets.............. 0
Number of RA Packets Dropped............... 0
Number of Policy Errors.................... 0
Radio Signal Strength Indicator............ -39 dBm
Signal to Noise Ratio...................... 53 dB
Client Rate Limiting Statistics:
Number of Data Packets Received............ 0
Number of Data Rx Packets Dropped.......... 0
Number of Data Bytes Received.............. 0
Number of Data Rx Bytes Dropped............ 0
--More-- or (q)uit
Number of Realtime Packets Received........ 0
Number of Realtime Rx Packets Dropped...... 0
Number of Realtime Bytes Received.......... 0
Number of Realtime Rx Bytes Dropped........ 0
Number of Data Packets Sent................ 0
Number of Data Tx Packets Dropped.......... 0
Number of Data Bytes Sent.................. 0
Number of Data Tx Bytes Dropped............ 0
Number of Realtime Packets Sent............ 0
Number of Realtime Tx Packets Dropped...... 0
Number of Realtime Bytes Sent.............. 0
Number of Realtime Tx Bytes Dropped........ 0
Nearby AP Statistics:
AP_P2_Consultorio(slot 0)
antenna0: 51 secs ago.................... -94 dBm
antenna1: 51 secs ago.................... -94 dBm
AP_P2_Capacitacio(slot 0)
antenna0: 122 secs ago................... -94 dBm
antenna1: 122 secs ago................... -91 dBm
AP_P2_Capacitacio(slot 1)
antenna0: 45 secs ago.................... -89 dBm
antenna1: 45 secs ago.................... -92 dBm
AP_P1_Multimedia(slot 0)
--More-- or (q)uit
antenna0: 6 secs ago..................... -99 dBm
antenna1: 6 secs ago..................... -98 dBm
AP_P3_Muestreo(slot 0)
antenna0: 7 secs ago..................... -74 dBm
antenna1: 7 secs ago..................... -65 dBm
AP_P3_Muestreo(slot 1)
antenna0: 49 secs ago.................... -90 dBm
antenna1: 49 secs ago.................... -92 dBm
AP_P1_CentroInfor(slot 0)
antenna0: 676 secs ago................... -99 dBm
antenna1: 676 secs ago................... -99 dBm
AP_P2_ENA(slot 0)
antenna0: 6 secs ago..................... -43 dBm
antenna1: 6 secs ago..................... -55 dBm
AP_P2_ENA(slot 1)
antenna0: 6 secs ago..................... -40 dBm
antenna1: 6 secs ago..................... -50 dBm
AP_P4_Economica(slot 0)
antenna0: 451 secs ago................... -92 dBm
antenna1: 451 secs ago................... -98 dBm
AP_P1_Biblioteca(slot 0)
antenna0: 6 secs ago..................... -76 dBm
antenna1: 6 secs ago..................... -66 dBm
--More-- or (q)uit
AP_P1_Biblioteca(slot 1)
antenna0: 121 secs ago................... -87 dBm
antenna1: 121 secs ago................... -86 dBm
AP_P1_Archivo(slot 0)
antenna0: 123 secs ago................... -95 dBm
antenna1: 123 secs ago................... -95 dBm
DNS Server details:
DNS server IP ............................. 0.0.0.0
DNS server IP ............................. 0.0.0.0
Assisted Roaming Prediction List details:
Client Dhcp Required: False
Allowed (URL)IP Addresses
-------------------------
AVC Profile Name: ............................... none
el 09-19-2018 03:45 PM
@Daniel Ordóñez Flores ha escrito:
Hola esneyder_an16@hotmail.com
A traves de la consola escribe la siguiente linea de comando
debug client <mac_del_cliente>
Y compartenos el output del comando.
Una duda ambas redes utilizan el mismo método de seguridad?
Saludos
***Please rate the answer if this information was useful***
**Por favor si la información fue util marca esta respuesta como correcta**
*Tu reconocimiento nos alienta a seguir participando en los foros *
Cuando ingresé el comando, y traté de conectar ese usuario al SSID no mostró nada y no se conectó, sin embargo cuando lo conecte a otro si,ambas tienen la misma configuración de seguridad.
(Cisco Controller) >debug client EE-2C-88-68-D7-1E
(Cisco Controller) >*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Pro cessing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2 fe0
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Association received fr om mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Max Client Trap Thresho ld: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying Interface(wire less_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Acc ess Vlan 4
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Re-applying interface p olicy for client
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po licy.c:2453)
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po licy.c:2474)
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC 01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e apfApplyWlanPolicy: App ly WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Check before Setting th e NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Setting the NAS Id to W LAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e In processSsidIE:5766 s etting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e In processSsidIE:5769 a pVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-g roup', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:35:24.477: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, inter face 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e processSsidIE statusCo de is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e processSsidIE ssid_don e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e suppRates statusCode i s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:35:24.478: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:35:24.478: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:35:24.478: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Received 802.11i PSK ke y management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Marking Mobile as non-1 1w Capable
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) C hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e pemApfAddMobileStation2 : APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Encryption policy is se t to 0x80000001
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Not Using WMM Complianc e code qosCap 00
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Vlan while overriding t he policy = -1
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e sending to spamAddMobil e vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-ac l-name:
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_pol icy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 f rom Associated to Associated
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sess ionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Stopping deletion of Mo bile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:35:24.478: ee:2c:88:68:d7:1e Func: apfPemAddUser2, M s Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e apfProcessAssocReq (apf _80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c: e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:35:24.479: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - I nitiating 1x to STA ee:2c:88:68:d7:1e (idx 62)
*spamApTask5: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e reauth_sm state tran sition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Resetting MSCB PMK C ache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Removing BSSID a0:23 :9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Setting active key c ache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Setting active key c ache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Adding BSSID a0:23:9 f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e Initiating RSN PSK t o mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.481: ee:2c:88:68:d7:1e EAP-PARAM Debug - ea p-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e dot1x - moving mobil e ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7 :1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7 :1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Starting key exchang e to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Sending EAPOL-Key Me ssage to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00 .00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.482: ee:2c:88:68:d7:1e Allocating EAP Pkt f or retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Received EAPOL-Key f rom mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.486: ee:2c:88:68:d7:1e Received EAPOL-key i n PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Dumping RSNIE receiv ed in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Dumping RSNIE receiv ed in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Stopping retransmiss ion timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Sending EAPOL-Key Me ssage to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.487: ee:2c:88:68:d7:1e Reusing allocated me mory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Received EAPOL-Key f rom mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Ignoring invalid EAP OL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Received EAPOL-key i n PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Stopping retransmiss ion timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Freeing EAP Retransm it Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 8021X_R EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Not Using WMM Compli ance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e Vlan while overridin g the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e sending to spamAddMo bile vlanId -1 aclName = , flexAclId 65535
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHC OMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.489: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHC OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20 ) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*spamApTask5: Aug 29 14:35:24.490: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*pemReceiveTask: Aug 29 14:35:24.491: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU e ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:35:24.498: ee:2c:88:68:d7:1e DHCP received op BOOTR EQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP (encap type 0xec0 3) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP processing DHCP R EQUEST (3)
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST , htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP xid: 0xd80fc02a (3624910890), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:8 8:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0 , yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0 , giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP requested ip: 1 72.16.32.67
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optle n=64
*DHCP Socket Task: Aug 29 14:35:24.499: ee:2c:88:68:d7:1e DHCP successfully brid ged packet to DS
*DHCP Socket Task: Aug 29 14:35:24.510: ee:2c:88:68:d7:1e DHCP received op BOOTR EPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP processing DHCP A CK (5)
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP xid: 0xd80fc02a (3624910890), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:8 8:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0 , yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0 , giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP server id: 172. 16.8.63 rcvd server id: 172.16.8.63
*DHCP Socket Task: Aug 29 14:35:24.511: ee:2c:88:68:d7:1e DHCP successfully bridged packet to STA
*apfMsConnTask_5: Aug 29 14:35:37.042: ee:2c:88:68:d7:1e Processing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2fe0
*apfMsConnTask_5: Aug 29 14:35:37.042: ee:2c:88:68:d7:1e Association received from mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Max Client Trap Threshold: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying Interface(wireless_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 4
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Re-applying interface policy for client
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2453)
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2474)
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Check before Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e In processSsidIE:5766 setting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e In processSsidIE:5769 apVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-group', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, interface 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:35:37.043: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:35:37.043: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:35:37.043: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:35:37.043: ee:2c:88:68:d7:1e Marking Mobile as non-11w Capable
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Encryption policy is set to 0x80000001
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_policy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:35:37.044: ee:2c:88:68:d7:1e apfProcessAssocReq (apf_80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:35:37.045: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:35:37.045: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - Initiating 1x to STA ee:2c:88:68:d7:1e (idx 64)
*spamApTask5: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e reauth_sm state transition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Resetting MSCB PMK Cache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Removing BSSID a0:23:9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Adding BSSID a0:23:9f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Initiating RSN PSK to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e dot1x - moving mobile ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Starting key exchange to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.050: ee:2c:88:68:d7:1e Allocating EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Received EAPOL-key in PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.052: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.053: ee:2c:88:68:d7:1e Reusing allocated memory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e Freeing EAP Retransmit Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.054: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*spamApTask5: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.055: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:35:37.056: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Aug 29 14:35:37.056: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP received op BOOTREQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP processing DHCP REQUEST (3)
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP xid: 0x6909cb0c (1762249484), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP requested ip: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optlen=64
*DHCP Socket Task: Aug 29 14:35:37.060: ee:2c:88:68:d7:1e DHCP successfully bridged packet to DS
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP received op BOOTREPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP processing DHCP ACK (5)
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP xid: 0x6909cb0c (1762249484), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP server id: 172.16.8.63 rcvd server id: 172.16.8.63
*DHCP Socket Task: Aug 29 14:35:37.068: ee:2c:88:68:d7:1e DHCP successfully bridged packet to STA
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Processing assoc-req station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 thread:151c2fe0
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Association received from mobile on BSSID a0:23:9f:5d:8c:ec AP AP_P2_ENA
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Max Client Trap Threshold: 0 cur: 3
*apfMsConnTask_5: Aug 29 14:36:14.174: ee:2c:88:68:d7:1e Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying Interface(wireless_tablets) policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 4
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Re-applying interface policy for client
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2453)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2474)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:WLC_INEC01, interface nasid:WLC_INEC01, APgrpset:0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Check before Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Setting the NAS Id to WLAN specific Id 'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e In processSsidIE:5766 setting Central switched to TRUE
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e In processSsidIE:5769 apVapId = 4 and Split Acl Id = 65535
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying site-specific Local Bridging override for station ee:2c:88:68:d7:1e - vapId 4, site 'default-group', interface 'wireless_tablets'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Applying Local Bridging Interface Policy for station ee:2c:88:68:d7:1e - vlan 4, interface id 15, interface 'wireless_tablets', nasId:'WLC_INEC01'
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Aug 29 14:36:14.175: RSNIE in Assoc. Req.: (22)
*apfMsConnTask_5: Aug 29 14:36:14.175: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f
*apfMsConnTask_5: Aug 29 14:36:14.175: [0016] ac 02 3c 00 00 00
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Processing RSN IE type 48, length 22 for mobile ee:2c:88:68:d7:1e
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Received 802.11i PSK key management suite, enabling Authentication
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e RSN Capabilities: 60
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e Marking Mobile as non-11w Capable
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfMsRunStateDec
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e apfMs1xStateDec
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Aug 29 14:36:14.175: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Initializing policy
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Encryption policy is set to 0x80000001
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfPemAddUser2 (apf_policy.c:353) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfPemAddUser2:session timeout forstation ee:2c:88:68:d7:1e - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Sending assoc-resp with status 0 station:ee:2c:88:68:d7:1e AP:a0:23:9f:5d:8c:e0-01 on apVapId 4
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e Sending Assoc Response to station on BSSID a0:23:9f:5d:8c:ec (status 0) ApVapId 4 Slot 1
*apfMsConnTask_5: Aug 29 14:36:14.176: ee:2c:88:68:d7:1e apfProcessAssocReq (apf_80211.c:9629) Changing state for mobile ee:2c:88:68:d7:1e on AP a0:23:9f:5d:8c:e0 from Associated to Associated
*pemReceiveTask: Aug 29 14:36:14.179: ee:2c:88:68:d7:1e 172.16.32.67 Removed NPU entry.
*spamApTask5: Aug 29 14:36:14.179: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*spamApTask5: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Received ADD_MOBILE ack - Initiating 1x to STA ee:2c:88:68:d7:1e (idx 69)
*spamApTask5: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Sent 1x initiate message to multi thread task for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e reauth_sm state transition 0 ---> 0 for mobile ee:2c:88:68:d7:1e at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Creating a PKC PMKID Cache entry for station ee:2c:88:68:d7:1e (RSN 2)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Resetting MSCB PMK Cache Entry 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Removing BSSID a0:23:9f:5d:8c:ec from PMKID cache of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Setting active key cache index 0 ---> 8
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Adding BSSID a0:23:9f:5d:8c:ec to PMKID cache at index 0 for station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: New PMKID: (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Initiating RSN PSK to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e dot1x - moving mobile ee:2c:88:68:d7:1e into Force Auth state
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Skipping EAP-Success to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.182: ee:2c:88:68:d7:1e Found an cache entry for BSSID a0:23:9f:5d:8c:ec in PMKID cache at index 0 of station ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: [0000] fa 2e bf 2b 98 e2 5d 55 c7 7b 01 2a 77 c0 1b dd
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Starting key exchange to mobile ee:2c:88:68:d7:1e, data packets will be dropped
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.183: ee:2c:88:68:d7:1e Allocating EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Received EAPOL-key in PTK_START state (message 2) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Dumping RSNIE received in Association request:
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000000: 30 16 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000010: 00 0f ac 02 3c 00 00 00 ....<...
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Dumping RSNIE received in EAPOL M2 :
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: 00000010: ac 02 3c 00 00 00 ..<...
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Sending EAPOL-Key Message to mobile ee:2c:88:68:d7:1e
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.185: ee:2c:88:68:d7:1e Reusing allocated memory for EAP Pkt for retransmission to mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Received EAPOL-Key from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Stopping retransmission timer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Freeing EAP Retransmit Bufer for mobile ee:2c:88:68:d7:1e
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e apfMs1xStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP a0:23:9f:5d:8c:e0 vapId 4 apVapId 4 flex-acl-name:
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e apfMsRunStateInc
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Reached PLUMBFASTPATH: from line 6756
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Adding Fast Path rule
type = Airespace AP Client
on AP a0:23:9f:5d:8c:e0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 15 Local Bridging Vlan = 4, Local Bridging intf id = 15
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.189: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*Dot1x_NW_MsgTask_6: Aug 29 14:36:14.190: ee:2c:88:68:d7:1e 172.16.32.67 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*spamApTask5: Aug 29 14:36:14.191: ee:2c:88:68:d7:1e Successful transmission of LWAPP Add-Mobile to AP a0:23:9f:5d:8c:e0
*pemReceiveTask: Aug 29 14:36:14.191: ee:2c:88:68:d7:1e 172.16.32.67 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP received op BOOTREQUEST (1) (len 308,vlan 0, port 13, encap 0xec03)
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP processing DHCP REQUEST (3)
*DHCP Socket Task: Aug 29 14:36:14.193: ee:2c:88:68:d7:1e DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP xid: 0x118e1ba (18407866), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP requested ip: 172.16.32.67
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=4, datalen =18, optlen=64
*DHCP Socket Task: Aug 29 14:36:14.194: ee:2c:88:68:d7:1e DHCP successfully bridged packet to DS
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP received op BOOTREPLY (2) (len 308,vlan 4, port 13, encap 0xec00)
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP processing DHCP ACK (5)
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP xid: 0x118e1ba (18407866), secs: 0, flags: 8000
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP chaddr: ee:2c:88:68:d7:1e
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP ciaddr: 0.0.0.0, yiaddr: 172.16.32.67
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP siaddr: 0.0.0.0, giaddr: 172.16.32.65
*DHCP Socket Task: Aug 29 14:36:14.208: ee:2c:88:68:d7:1e DHCP server id: 172.16.8.63 rcvd server id: 172.16.8.63
(Cisco Controller) >show client detail EE-2C-88-68-D7-1E
Client MAC Address............................... ee:2c:88:68:d7:1e
Client Username ................................. N/A
AP MAC Address................................... a0:23:9f:5d:8c:e0
AP Name.......................................... AP_P2_ENA
AP radio slot Id................................. 1
Client State..................................... Associated
Client User Group................................
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 4
Wireless LAN Network Name (SSID)................. INEC_Tablets
Wireless LAN Profile Name........................ Wireless_Tablets
Hotspot (802.11u)................................ Not Supported
BSSID............................................ a0:23:9f:5d:8c:ec
Connected For ................................... 189 secs
Channel.......................................... 44
IP Address....................................... 172.16.32.67
Gateway Address.................................. Unknown
Netmask.......................................... Unknown
Association Id................................... 9
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0
--More-- or (q)uit
Session Timeout.................................. 0
Client CCX version............................... 4
Client E2E version............................... 1
QoS Level........................................ Silver
Avg data Rate.................................... 0
Burst data Rate.................................. 0
Avg Real time data Rate.......................... 0
Burst Real Time data Rate........................ 0
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Power Save....................................... OFF
Current Rate..................................... m9 ss2
Supported Rates.................................. 6.0,9.0,12.0,18.0,24.0,36.0,
............................................. 48.0,54.0
Mobility State................................... Local
Mobility Move Count.............................. 0
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Policy Manager Rule Created...................... Yes
Audit Session ID................................. ac10063500020ba75b86f37d
--More-- or (q)uit
AAA Role Type.................................... none
Local Policy Applied............................. none
IPv4 ACL Name.................................... none
FlexConnect ACL Applied Status................... Unavailable
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Layer2 ACL Name.................................. none
Layer2 ACL Applied Status........................ Unavailable
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
No. of mDNS Services Advertised.................. 0
Policy Type...................................... WPA2
Authentication Key Management.................... PSK
Encryption Cipher................................ CCMP (AES)
Protected Management Frame ...................... No
Management Frame Protection...................... No
EAP Type......................................... Unknown
Interface........................................ wireless_tablets
VLAN............................................. 4
Quarantine VLAN.................................. 0
Access VLAN...................................... 4
Local Bridging VLAN.............................. 4
--More-- or (q)uit
Client Capabilities:
CF Pollable................................ Not implemented
CF Poll Request............................ Not implemented
Short Preamble............................. Not implemented
PBCC....................................... Not implemented
Channel Agility............................ Not implemented
Listen Interval............................ 225
Fast BSS Transition........................ Not implemented
11v Support................................ Not Supported
Client Wifi Direct Capabilities:
WFD capable................................ No
Manged WFD capable......................... No
Cross Connection Capable................... No
Support Concurrent Operation............... No
Fast BSS Transition Details:
Client Statistics:
Number of Bytes Received................... 3112439
Number of Bytes Sent....................... 118924978
Total Number of Bytes Sent................. 118924978
Total Number of Bytes Recv................. 3112439
Number of Bytes Sent (last 90s)............ 1591
Number of Bytes Recv (last 90s)............ 3428
Number of Packets Received................. 25460
--More-- or (q)uit
Number of Packets Sent..................... 84166
Number of Interim-Update Sent.............. 0
Number of EAP Id Request Msg Timeouts...... 0
Number of EAP Id Request Msg Failures...... 0
Number of EAP Request Msg Timeouts......... 0
Number of EAP Request Msg Failures......... 0
Number of EAP Key Msg Timeouts............. 1
Number of EAP Key Msg Failures............. 0
Number of Data Retries..................... 2438
Number of RTS Retries...................... 0
Number of Duplicate Received Packets....... 73
Number of Decrypt Failed Packets........... 0
Number of Mic Failured Packets............. 0
Number of Mic Missing Packets.............. 0
Number of RA Packets Dropped............... 0
Number of Policy Errors.................... 0
Radio Signal Strength Indicator............ -39 dBm
Signal to Noise Ratio...................... 53 dB
Client Rate Limiting Statistics:
Number of Data Packets Received............ 0
Number of Data Rx Packets Dropped.......... 0
Number of Data Bytes Received.............. 0
Number of Data Rx Bytes Dropped............ 0
--More-- or (q)uit
Number of Realtime Packets Received........ 0
Number of Realtime Rx Packets Dropped...... 0
Number of Realtime Bytes Received.......... 0
Number of Realtime Rx Bytes Dropped........ 0
Number of Data Packets Sent................ 0
Number of Data Tx Packets Dropped.......... 0
Number of Data Bytes Sent.................. 0
Number of Data Tx Bytes Dropped............ 0
Number of Realtime Packets Sent............ 0
Number of Realtime Tx Packets Dropped...... 0
Number of Realtime Bytes Sent.............. 0
Number of Realtime Tx Bytes Dropped........ 0
Nearby AP Statistics:
AP_P2_Consultorio(slot 0)
antenna0: 51 secs ago.................... -94 dBm
antenna1: 51 secs ago.................... -94 dBm
AP_P2_Capacitacio(slot 0)
antenna0: 122 secs ago................... -94 dBm
antenna1: 122 secs ago................... -91 dBm
AP_P2_Capacitacio(slot 1)
antenna0: 45 secs ago.................... -89 dBm
antenna1: 45 secs ago.................... -92 dBm
AP_P1_Multimedia(slot 0)
--More-- or (q)uit
antenna0: 6 secs ago..................... -99 dBm
antenna1: 6 secs ago..................... -98 dBm
AP_P3_Muestreo(slot 0)
antenna0: 7 secs ago..................... -74 dBm
antenna1: 7 secs ago..................... -65 dBm
AP_P3_Muestreo(slot 1)
antenna0: 49 secs ago.................... -90 dBm
antenna1: 49 secs ago.................... -92 dBm
AP_P1_CentroInfor(slot 0)
antenna0: 676 secs ago................... -99 dBm
antenna1: 676 secs ago................... -99 dBm
AP_P2_ENA(slot 0)
antenna0: 6 secs ago..................... -43 dBm
antenna1: 6 secs ago..................... -55 dBm
AP_P2_ENA(slot 1)
antenna0: 6 secs ago..................... -40 dBm
antenna1: 6 secs ago..................... -50 dBm
AP_P4_Economica(slot 0)
antenna0: 451 secs ago................... -92 dBm
antenna1: 451 secs ago................... -98 dBm
AP_P1_Biblioteca(slot 0)
antenna0: 6 secs ago..................... -76 dBm
antenna1: 6 secs ago..................... -66 dBm
--More-- or (q)uit
AP_P1_Biblioteca(slot 1)
antenna0: 121 secs ago................... -87 dBm
antenna1: 121 secs ago................... -86 dBm
AP_P1_Archivo(slot 0)
antenna0: 123 secs ago................... -95 dBm
antenna1: 123 secs ago................... -95 dBm
DNS Server details:
DNS server IP ............................. 0.0.0.0
DNS server IP ............................. 0.0.0.0
Assisted Roaming Prediction List details:
Client Dhcp Required: False
Allowed (URL)IP Addresses
-------------------------
AVC Profile Name: ............................... none
el 09-20-2018 10:13 AM
Hola de nuevo esneyder_an16@hotmail.com
De acuerdo al "show2 que nos compartes en el policy state el usuario de ve en estado "RUN", estas seguro que no se conecta el usuario?
el 09-20-2018 03:55 PM
el 09-21-2018 09:40 AM
Hola @Jhosbell Verdesca De Aguiar
esneyder_an16@hotmail.com publico el debug que esta corriendo en la WLC. Lo extraño es que el policy marca al usuario en esta RUN. Por ello le pedimos revise si es que en verdad no se conecta a la red o es un tema ajeno a la misma
Así que, peticiones si esta llegando a la WLC
Descubra y salve sus notas favoritas. Vuelva a encontrar las respuestas de los expertos, guías paso a paso, temas recientes y mucho más.
¿Es nuevo por aquí? Empiece con estos tips. Cómo usar la comunidad Guía para nuevos miembros
Navegue y encuentre contenido personalizado de la comunidad