Some wireless Guest client (Android and IPhone)are not working on Guest SSID

[anilaccentiaccna]

Hi All,

Could you please help me to resolve this issue. 

These phones are stuck in DHCP REQD stage on Foreign controller but having Ip address in Mobility anchor controller.

only below message is getting in logs. Also I could see the log on Cisco ISE for the MAC. 

But as its not having IP address on foreign controller so its not redirecting it to CWA page.

*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc apfMmProcessResponse: Got Anchor Close from mmMipAnchorResendTimeoutHandler for mobile 5c:1d:d9:59:82:dc, delete mobile. reason code = 2 MmRole : 0
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Handoff
Peer = 139.114.154.230, Old Anchor = 139.114.154.230, New Anchor = 0.0.0.0
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc 0.0.0.0 DHCP_REQD (7) Reached ERROR: from line 7036
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc apfMmProcessCloseResponse (apf_mm.c:682) Expiring Mobile!
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc apfMsExpireMobileStation (apf_ms.c:7442) Changing state for mobile 5c:1d:d9:59:82:dc on AP 00:fe:c8:73:86:30 from Associated to Disassociated

*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc apfMsAssoStateDec
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc apfMsExpireMobileStation (apf_ms.c:7581) Changing state for mobile 5c:1d:d9:59:82:dc on AP 00:fe:c8:73:86:30 from Disassociated to Idle

*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Aug 27 14:06:58.930: [SA] 5c:1d:d9:59:82:dc 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [00:fe:c8:73:86:30]
*apfReceiveTask: Aug 27 14:06:58.931: [SA] 5c:1d:d9:59:82:dc 0 PMK-remove groupcast messages sent
*apfReceiveTask: Aug 27 14:06:58.931: [SA] 5c:1d:d9:59:82:dc Deleting mobile on AP 00:fe:c8:73:86:30(1)
*spamApTask7: Aug 27 14:06:58.955: [SA] 5c:1d:d9:59:82:dc apfUpdateDeleteAckInMscb (apf_api.c:50821) Expiring Mobile!
*apfMsConnTask_3: Aug 27 14:07:06.346: [SA] 5c:1d:d9:59:82:dc Processing assoc-req station:5c:1d:d9:59:82:dc AP:00:fe:c8:73:86:30-01 ssid : posten.guest thread:18f474a0
*apfMsConnTask_3: Aug 27 14:07:06.346: [SA] 5c:1d:d9:59:82:dc Created Acct-Session-ID (5d651cea/5c:1d:d9:59:82:dc/2959762) for the mobile
*apfMsConnTask_3: Aug 27 14:07:06.346: [SA] 5c:1d:d9:59:82:dc Adding mobile on LWAPP AP 00:fe:c8:73:86:30(1)
*apfMsConnTask_3: Aug 27 14:07:06.346: [SA] 5c:1d:d9:59:82:dc Association received from mobile on BSSID 00:fe:c8:73:86:2c AP ap.112.0001.100.15x02
*apfMsConnTask_3: Aug 27 14:07:06.347: [SA] 5c:1d:d9:59:82:dc Station: 5c:1d:d9:59:82:dc 11v BSS Transition not enabled on the AP 00:FE:C8:73:86:30
*apfMsConnTask_3: Aug 27 14:07:06.347: [SA] 5c:1d:d9:59:82:dc Global 200 Clients are allowed to AP radio

*apfMsConnTask_3: Aug 27 14:07:06.347: [SA] 5c:1d:d9:59:82:dc Max Client Trap Threshold: 0 cur: 9

I have seen one of the same issue but different ssid resolved by you. Could you please help me in this.

Thanks in advance!

@Rasika Nayanajith 

[marce1000]

 - Track the problem with the Wireless Debug Analyzer (e.g.) :

                    https://developer.cisco.com/docs/wireless-troubleshooting-tools/#!wireless-troubleshooting-tools/wireless-troubleshooting-tools

 M.

[Rasika Nayanajith]

What interface you map guest SSID on your foreign controller ? Is that map to dummy interface or real interface that configured with a DHCP server ? I would simply map it onto a dummy interface

HTH

Rasika

[anilaccentiaccna]

Hello Sir,

On the foreign controller Guest SSID is mapped with management interface which provide connectivity between Central controller through mobility tunnel.
On the central controller we have the interface where further it send traffic.
Its working form all other foreign controller only this location few iphone user are affected

[Rasika Nayanajith]

"Its working form all other foreign controller only this location few iphone user are affected"

Is there any common factor in those affected phones (ie model, iOS version,etc)

You can see below feature is enabled on your WLC. With this, you have to open a webpage on iphone to redirect to geuest captive portal.

config network web-auth captive-bypass enable

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/b_cg81_chapter_01010111.pdf

HTH

Rasika

*** Pls rate all useful responses ***