Problems with 802.1x and Atheros cards

[lynne.meeks]

We have just discovered a problem with 802.1x authentication and Atheros cards.

We have seen this on both MAC OS X 10.6.0 systems and an XP System

This appears to be a DHCP problem in that clients don't get an IP address unless they reboot- which usually fixes it. Sometimes the controller will think the client is connected with a valid IP but the client doesn't actually get the address (never sends an ACK to the offer)

Then it will work until they try to reconnect again after a suspend or roaming to a new AP

Anybody seen this? It's making our network look bad since we have a lot of MACs with Atheros cards...

thanks,

Lynne

[dennischolmes]

I thought this would be a fix for you guys. Let me know if you have any continued problems. 6.0.196.0 fixed a lot of issues seen in 188. Please mark this as resolved if the problems are fixed so that others can search the database easier.

[kirbus_inc]

Looks like since the upgrade we still have a few that are seeing this problem with the atherso 5004x cards. Has anyone else experienced any problems since the upgrade?

[nuttawut44010162]

II'm running 6.0.196.0. I'm having same problem with intel adapter.  Any update please let me know.

*Jun 29 13:15:06.336: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*Jun 29 13:15:06.336: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:25:84:90:36:50 vapId 3 apVapId 3
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) pemAdvanceState2 4457, Adding TMP rule
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) Adding Fast Path rule
  type = Airespace AP - Learn IP address
  on AP 00:25:84:90:36:50, slot 0, interface = 29, QOS = 0
  ACL Id = 255, Ju
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) Successfully plumbed mobile rule (ACL ID 255)
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7)

*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 4473, Adding TMP rule
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
  type = Airespace AP - Learn IP address
  on AP 00:25:84:90:36:50, slot 0, interface = 29, QOS = 0
  ACL Id = 255, Jumb
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (ACL ID 255)
*Jun 29 13:15:06.337: 00:1b:77:81:b8:25 Stopping retransmission timer for mobile 00:1b:77:81:b8:25
*Jun 29 13:15:06.340: 00:1b:77:81:b8:25 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*Jun 29 13:15:06.343: 00:1b:77:81:b8:25 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*Jun 29 13:16:20.840: CCKM: Send CCKM cache entry
*Jun 29 13:16:46.918: CCKM: Send CCKM cache entry
*Jun 29 13:17:06.229: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) DHCP Policy timeout
*Jun 29 13:17:06.229: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) Pem timed out, Try to delete client in 10 secs.
*Jun 29 13:17:06.229: 00:1b:77:81:b8:25 Scheduling deletion of Mobile Station:  (callerId: 12) in 10 seconds
*Jun 29 13:17:16.234: 00:1b:77:81:b8:25 apfMsExpireCallback (apf_ms.c:418) Expiring Mobile!
*Jun 29 13:17:16.234: 00:1b:77:81:b8:25 apfMsExpireMobileStation (apf_ms.c:4427) Changing state for mobile 00:1b:77:81:b8:25 on AP 00:25:84:90:36:50 from Associated to Disassociated

*Jun 29 13:17:16.234: 00:1b:77:81:b8:25 Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
*Jun 29 13:17:26.234: 00:1b:77:81:b8:25 apfMsExpireCallback (apf_ms.c:418) Expiring Mobile!
*Jun 29 13:17:26.236: 00:1b:77:81:b8:25 Sent Deauthenticate to mobile on BSSID 00:25:84:90:36:50 slot 0(caller apf_ms.c:4511)
*Jun 29 13:17:26.236: 00:1b:77:81:b8:25 apfMsExpireMobileStation (apf_ms.c:4548) Changing state for mobile 00:1b:77:81:b8:25 on AP 00:25:84:90:36:50 from Disassociated to Idle

*Jun 29 13:17:26.237: 00:1b:77:81:b8:25 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [00:25:84:90:36:50]
*Jun 29 13:17:26.237: 00:1b:77:81:b8:25 Username entry deleted for mobile
*Jun 29 13:17:26.237: 00:1b:77:81:b8:25 Deleting mobile on AP 00:25:84:90:36:50(0)
*Jun 29 13:17:26.242: 00:1b:77:81:b8:25 0.0.0.0 Removed NPU entry.
*Jun 29 13:17:26.244: 00:1b:77:81:b8:25 Adding mobile on LWAPP AP 00:25:84:90:36:50(0)
*Jun 29 13:17:26.244: 00:1b:77:81:b8:25 Scheduling deletion of Mobile Station:  (callerId: 23) in 5 seconds
*Jun 29 13:17:26.244: 00:1b:77:81:b8:25 apfProcessProbeReq (apf_80211.c:4694) Changing state for mobile 00:1b:77:81:b8:25 on AP 00:25:84:90:36:50 from Idle to Probe

[p-allen]

We are seeing the same issue and are on version 6.0.199.0 and have an Intel wireless card. I have a tac case open and trying to find the issue.

[p-allen]

If anyone has the Intel wireless card and is having issues they should try the fix from Dell named SetWiFiBT.exe. I think it can be found in R162289.exe

Let me know if this helps. I installed it on my HP/Compaq 2510p and so far so good.

[phil.wightman]

We are experiencing the same issues here. Has anyone found a solution? I have opened a TAC case but with this being intermittent, it may take a while before Cisco can advice me on correct solution.

Thanks

[nuttawut44010162]

We are hitting the bug CSCtd84852. This bug is fixed in WLC release 7.0 which is now available on CCO

Now, I'm running 7.0.98.0. The problem is never come again.

Hope this help.

Nuttawut.

[oocl]

We are running in 7.0.98.0 but still hit the same error.... the case just happen on one ipod user