Solved: Re: Some andriod mobile users are unable to connect Wireless Guest Net

mohd-shakir · ‎07-08-2025

Hi Cisco Team,

Some andriod mobile users are unable to connect Wireless Guest Network, Below are the logs which is collected through WLC.

WLC AIR-CT5520-K9 Version :8.10.185.0

AP - 3700 Series

(Cisco Controller) >debug client 6a:c9:29:12:82:36
Debugging session started on Jul 08 10:37:19.974 for WLC AIR-CT5520-K9 Version :8.10.185.0 SN :XXXXXXX0V3 Hostname abcwlc01-wan
*spamApTask0: Jul 08 10:37:20.779: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:20.839: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:20.897: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:20.958: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:23.767: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:23.827: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:23.882: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:23.943: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:28.702: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:28.892: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:28.969: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:29.134: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:37:29.443: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:29.502: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:37:30.074: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*radiusTransportThread: Jul 08 10:37:35.443: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:37:35.443: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*radiusTransportThread: Jul 08 10:37:57.026: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:37:57.026: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*radiusTransportThread: Jul 08 10:38:19.107: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:38:19.107: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*spamApTask0: Jul 08 10:38:38.820: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:38.889: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:38.947: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:42.293: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:42.459: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:42.531: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*radiusTransportThread: Jul 08 10:38:42.551: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:38:42.551: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*spamApTask2: Jul 08 10:38:42.593: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:44.930: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:44.990: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:45.043: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:45.103: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:47.536: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:47.596: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:47.650: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:47.710: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:49.012: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:49.166: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:49.227: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:49.287: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:50.636: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:50.700: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:50.766: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:51.127: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:52.247: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:52.308: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:52.371: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:52.435: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:53.752: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:38:53.812: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:53.877: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:53.948: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*radiusTransportThread: Jul 08 10:38:57.531: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:38:57.531: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*spamApTask0: Jul 08 10:38:57.923: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:57.996: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:38:58.123: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:02.056: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:02.114: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:02.392: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:16.393: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:16.453: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:16.519: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:16.715: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:17.796: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:17.857: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:17.906: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:17.973: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*radiusTransportThread: Jul 08 10:39:18.487: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:39:18.487: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*spamApTask0: Jul 08 10:39:18.882: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:18.943: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*apfReceiveTask: Jul 08 10:39:18.971: [PA] apfMmProcessMessage: Freeing the mm pkt for non existing client

*spamApTask2: Jul 08 10:39:19.010: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:19.070: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:21.604: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:21.670: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:21.714: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:35.906: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:36.077: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:36.170: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:36.236: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:37.031: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:37.092: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:37.151: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:37.212: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:38.075: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:38.136: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:38.189: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*radiusTransportThread: Jul 08 10:39:38.341: [PA] Radius Passive Fallback - Acct server is not ready 10.160.7.33 port 1813
*radiusTransportThread: Jul 08 10:39:38.341: [PA] Radius Passive Fallback - Auth server is not ready 10.160.7.33 port 1812
*spamApTask2: Jul 08 10:39:38.872: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:39.647: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:39.707: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:39.758: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:39.833: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:41.168: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:fe (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask0: Jul 08 10:39:41.324: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:7c:ae:f1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:41.393: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:e1 (slot 0), status 43 0 Non-WPA2 in Adaptive 802.11r
*spamApTask2: Jul 08 10:39:41.460: [PA] 6a:c9:29:12:82:36 Association Failed on REAP AP BSSID 74:a2:e6:95:0a:ee (slot 1), status 43 0 Non-WPA2 in Adaptive 802.11r

Rich R · ‎07-10-2025

It also goes without saying @mohd-shakir that you should be using the last available version of AireOS (8.10.196.0) to ensure you have all available bug fixes applied. It might not fix the problem but on the other hand it might. It just makes no sense to troubleshoot with a code version missing numerous known bug fixes. See the TAC recommended link below.

Regarding your question @mohd-shakir
> Is there any way where I can find solution with FT enable for Apple devices and also Non FT device can connect wireless network without facing any problem.
This is long since already covered in the Best Practice guide:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-6/b_Cisco_Wireless_LAN_Controller_Configuration_Best_Practices.html#concept_1A131FF12E8A4C4FB69B359F5BEA12BB
On AireOS you should disable FT to avoid problems with devices that can't handle Adaptive FT.

On 9800 this is addressed by Mixed Mode:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html#Enable80211rFastTransition
But that only applies to FT capable security methods anyway so should be disabled for an open (L2 security None) SSID which makes FT pointless.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

View solution in original post

marce1000 · ‎07-08-2025

- @mohd-shakir Disable FT on the wlan. Seems like those devices are not compatible with FT enabled or in adaptive.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

mohd-shakir · ‎07-08-2025

@marce1000 Hi, We are having MAC Filtering method under L2 Security.

Which FT option we need to use i.e. Enable/Disable/Adaptive.

Could you please elaborate each option in one line, its humble request ?

marce1000 · ‎07-08-2025

- @mohd-shakir On the controller CLI issue the command :
config wlan security ft disable <wlan-id>

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

eglinsky2012 · ‎07-08-2025

Enabled means that the client must utilize 802.11r (fast transition) to connect (unless you also enable non-FT AKMs, more on that below). There are two main benefits: 1) Seamless roaming between APs (no need to re-authenticate to each AP the client roams to), which is good for voice/video applications; 2) Reducing the load on the RADIUS server (if the SSID is using RADIUS), since the client does not do a full authentication sequence when roaming.

Disabled means 11r will not be used at all.

The intent behind Adaptive was so Apple and Samsung devices would use 11r while devices that do not support 11r would join without it. However, over time, the consensus across various discussion platforms has been that Adaptive causes more issues than it solves and you're better off either having Fast Transition set to Enabled or Disabled. We have had it Enabled for a few years and I have yet to find a client that absolutely will not connect to that network.

Particularly if your SSID uses 802.1x, I would suggest first trying to set it to Enabled (instead of Adaptive) to see if that works. If you are using 802.1x, in the Authentication Key Management section, check off 802.1x-SHA1 in addition to the FT 802.1x. This is how we've had it for many years on our 8540s, but when we first set up our 9800s, we did not enable it and it did cause issues with several clients in the first building we moved to 9800s. I still see clients joining non-FT occasionally.

More information in this post: https://mac-wifi.com/ciscos-802-11r-ft-settings-adaptive-mode-explained/

mohd-shakir · ‎07-08-2025

Hi eglinsky2012,

In my case we are using L2 MAC Filtering authentication method under Guest WLAN, and at the site some devices are laptop, desktop, Apple and Android phone as well.

So which option [ FT - Disable/Enable/Adaptive] you will recommend to us?

eglinsky2012 · ‎07-09-2025

I should have asked this before. What is your "Layer 2 Security" set to? Can you share a screenshot of the whole Security > Layer 2 config?

mohd-shakir · ‎07-09-2025

@eglinsky2012 Hi, here is the security snap along with L2/L3/AAA Servers.

Leo Laohoo · ‎07-08-2025

@mohd-shakir wrote:
Some andriod mobile users are unable to connect Wireless Guest Network

If these are Android 10, then refer to CSCvu24770.

Saikat Nandy · ‎07-08-2025

Thanks @Leo Laohoo for the heads up but don't think it is applicable as the defect was filed for COS APs but here it is IOS - 3700 series APs.
@mohd-shakir since you said this is guest SSID, I don't think they need too much roaming. So you can disable FT.

mohd-shakir · ‎07-09-2025

@Saikat Nandy Yes this is Guest SSID.

Is there any way where I can find solution with FT enable for Apple devices and also Non FT device can connect wireless network without facing any problem.

FYI - in Our Guest SSID we are using MAC filtering.

Rich R · ‎07-10-2025

It also goes without saying @mohd-shakir that you should be using the last available version of AireOS (8.10.196.0) to ensure you have all available bug fixes applied. It might not fix the problem but on the other hand it might. It just makes no sense to troubleshoot with a code version missing numerous known bug fixes. See the TAC recommended link below.

Regarding your question @mohd-shakir
> Is there any way where I can find solution with FT enable for Apple devices and also Non FT device can connect wireless network without facing any problem.
This is long since already covered in the Best Practice guide:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-6/b_Cisco_Wireless_LAN_Controller_Configuration_Best_Practices.html#concept_1A131FF12E8A4C4FB69B359F5BEA12BB
On AireOS you should disable FT to avoid problems with devices that can't handle Adaptive FT.

On 9800 this is addressed by Mixed Mode:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html#Enable80211rFastTransition
But that only applies to FT capable security methods anyway so should be disabled for an open (L2 security None) SSID which makes FT pointless.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

mohd-shakir · ‎07-10-2025

Thanks everyone who helped me in this case.

You guys are awesome and have good day

eglinsky2012 · ‎07-10-2025

@mohd-shakir Did disabling Fast Transition resolve the issue? Agreed that that is the best solution since your Layer 2 Security is set to None.