08-30-2018 05:48 AM - edited 07-05-2021 09:04 AM
Cisco 5508 WLC (Version 8.2.170)
Cisco AIR-AP2802I-E-K9 Access Points
Seeing random disconnects and in ability to connect to WIFI network.
Following is an example of the errors being seen on the controller;
*Dot1x_NW_MsgTask_0: Aug 30 13:30:51.080: %APF-3-ENCRYPTPOLICY_NOT_FOUND: apf_spam.c:468 Unable to find Encryption Policy for Mobile: f0:79:60:4c:42:28. Traffic Type:Unicast, Security Method:Wifi.
*Dot1x_NW_MsgTask_0: Aug 30 13:30:51.079: %APF-1-INVALID_ENC_POL_SET: apf_spam.c:353 Invalid encryption policy set for RSN.
-Traceback: 0x1029dbb0 0x1043e3f8 0x1043ea5c 0x1041da78 0x104220c4 0x10422770 0x1041e2fc 0x115a286c 0x1044cc24 0x110817d0 0x1286a440 0x128ec01c
*Dot1x_NW_MsgTask_2: Aug 30 13:30:51.046: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:449 Invalid replay counter from client 84:b5:41:5d:30:3a - got 00 00 00 00 00 00 00 00, expected 00 00 00 00 00 00 00 01
*Dot1x_NW_MsgTask_0: Aug 30 13:30:49.840: %DOT1X-3-CLIENT_NOT_FOUND: dot1x_msg_task.c:1565 Unable to process 802.1X 1 msg - client f0:79:60:43:19:18 not found
*Dot1x_NW_MsgTask_2: Aug 30 13:30:49.260: %APF-3-ENCRYPTPOLICY_NOT_FOUND: apf_spam.c:468 Unable to find Encryption Policy for Mobile: cc:44:63:2e:93:6a. Traffic Type:Unicast, Security Method:Wifi.
*Dot1x_NW_MsgTask_2: Aug 30 13:30:49.260: %APF-1-INVALID_ENC_POL_SET: apf_spam.c:353 Invalid encryption policy set for RSN.
-Traceback: 0x1029dbb0 0x1043e3f8 0x1043ea5c 0x1041da78 0x104220c4 0x10422770 0x1041e2fc 0x115a286c 0x1044cc24 0x110817d0 0x1286a440 0x128ec01c
*Dot1x_NW_MsgTask_0: Aug 30 13:30:44.834: %DOT1X-3-CLIENT_NOT_FOUND: dot1x_msg_task.c:1565 Unable to process 802.1X 1 msg - client f0:79:60:43:19:18 not found
*Dot1x_NW_MsgTask_0: Aug 30 13:30:44.416: %APF-3-ENCRYPTPOLICY_NOT_FOUND: apf_spam.c:468 Unable to find Encryption Policy for Mobile: f0:79:60:4c:42:28. Traffic Type:Unicast, Security Method:Wifi.
*Dot1x_NW_MsgTask_0: Aug 30 13:30:44.416: %APF-1-INVALID_ENC_POL_SET: apf_spam.c:353 Invalid encryption policy set for RSN.
-Traceback: 0x1029dbb0 0x1043e3f8 0x1043ea5c 0x1041da78 0x104220c4 0x10422770 0x1041e2fc 0x115a286c 0x1044cc24 0x110817d0 0x1286a440 0x128ec01c
*Dot1x_NW_MsgTask_6: Aug 30 13:30:44.078: %APF-3-ENCRYPTPOLICY_NOT_FOUND: apf_spam.c:468 Unable to find Encryption Policy for Mobile: 70:e7:2c:8b:b4:d6. Traffic Type:Unicast, Security Method:Wifi.
*Dot1x_NW_MsgTask_6: Aug 30 13:30:44.077: %APF-1-INVALID_ENC_POL_SET: apf_spam.c:353 Invalid encryption policy set for RSN.
Have found the following bug - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy04282 - but no indication as to conditions/workaround/fix.
Any help greatly appreciated.
08-30-2018 06:27 AM
08-31-2018 07:31 AM
The bug you identified does in fact clearly show that it was fixed in 8.3(102.0).
So upgrading to latest 8.3 release 8.3.143.0 should be your starting point in my opinion.
If that doesn't solve the problem then TAC case next.
Regards
Rich
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide