Solved: WiFi Calling call drops when roaming on 1850 network

CavanRover · ‎09-07-2022

I have 4 APs (AIR-AP1852I-E-K9) on a Cisco Mobility Express 1850 network. Running version 8.10.151.0

I recently started using Wi-Fi Calling on my iPhone 11 Pro with the Eir network in Ireland. It works great, apart from when i move through the house. The instant my phone roams to a different AP, the call audio stops and after 5-6 seconds the call drops altogether. I can reproduce this easily.

I have the phone on a 5Ghz SSID. Signal is excellent throughout the house.

So on the CLI, I enabled debug on that iPhone MAC and i can see these messages the instant it does the roaming. Does anything here stand out as being a problem?

*apfReceiveTask: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Received management frame FT AUTH             on BSSID 18:8b:45:08:b7:2d destination addr 18:8b:45:08:b7:2d slotid 1
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Doing preauth for this client over the Air
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Doing local roaming for destination address 18:8b:45:08:b7:2d
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 FT Auth. Rx  Snonce ..86:07...39:3C
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Found TGr reauth entry for AP 18:8b:45:08:b7:2d
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Got 1 AKMs in RSNIE
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 RSNIE AKM matches with PMK cache entry :0x4
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 pmkRoName derived sucessfully
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Validate FTIE for R0KH-ID, Store SNonce passed
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 FT Auth from flex Client. Update the Anonce from req..8E:4D...A6:0C
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Removing TGr reauth entry for AP 18:8b:45:08:b7:2d
*apfMsConnTask_0: Sep 06 21:12:08.507: 44:4a:db:39:5f:58 Created a new preauth entry for AP:18:8b:45:08:b7:2d
*apfMsConnTask_0: Sep 06 21:12:08.507: 00000000: 30 18 01 00 00 0f ac 04  01 00 00 0f ac 04 02 00  0...............
*apfMsConnTask_0: Sep 06 21:12:08.507: 00000010: 00 0f ac 02 00 0f ac 04  28 00                    ........(.
*apfMsConnTask_0: Sep 06 21:12:08.507: 00000000: 30 2a 01 00 00 0f ac 04  01 00 00 0f ac 04 02 00  0*..............
*apfMsConnTask_0: Sep 06 21:12:08.507: 00000010: 00 0f ac 02 00 0f ac 04  28 00 01 00 3c fc 07 92  ........(...<...
*apfMsConnTask_0: Sep 06 21:12:08.507: 00000020: 76 a6 57 4f 2d 21 8f a3  14 b5 53 1c              v.WO-!....S.
*apfReceiveTask: Sep 06 21:12:08.514: 44:4a:db:39:5f:58 Received management frame ACTION              on BSSID 18:8b:45:08:b7:2d destination addr 18:8b:45:08:b7:2d slotid 1
*apfMsConnTask_0: Sep 06 21:12:08.514: 44:4a:db:39:5f:58 Got action frame from the client (ActionCategory:5), payloadLen:156
*apfReceiveTask: Sep 06 21:12:08.515: 44:4a:db:39:5f:58 Received management frame REASSOCIATION REQUEST  on BSSID 18:8b:45:08:b7:2d destination addr 18:8b:45:08:b7:2d slotid 1
*apfMsConnTask_0: Sep 06 21:12:08.515: 44:4a:db:39:5f:58 Updating 11r vendor IE 

*apfMsConnTask_0: Sep 06 21:12:08.515: 44:4a:db:39:5f:58 Updating the client capabiility as 5
*apfMsConnTask_0: Sep 06 21:12:08.515: 44:4a:db:39:5f:58 Processing assoc-req station:44:4a:db:39:5f:58 AP:18:8b:45:08:b7:20-01 ssid : Yoshi Valley 5G thread:32f90630
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Station:  44:4A:DB:39:5F:58  trying to join WLAN with RSSI -60. Checking for XOR roam conditions on AP:  18:8B:45:08:B7:20  Slot: 1
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Station:  44:4A:DB:39:5F:58  is associating to AP  18:8B:45:08:B7:20  which is not XOR roam capable
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58  Setting hasApChnaged Flag as true. It is a roam scenario.

*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Client AVC Roaming context transfer needed? YES
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Setting RTTS enabled to 0 
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Reassociation received from mobile on BSSID 18:8b:45:08:b7:2d AP LivingRoom
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Station:  44:4A:DB:39:5F:58  trying to join WLAN with RSSI -60. Checking for XOR roam conditions on AP:  18:8B:45:08:B7:20  Slot: 1
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Station:  44:4A:DB:39:5F:58  is associating to AP  18:8B:45:08:B7:20  which is not XOR roam capable
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 pmkid is validated by AP, 
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Global 200 Clients are allowed to AP radio

*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Max Client Trap Threshold: 0  cur: 0

*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Rf profile 600 Clients are allowed to AP wlan

*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Updated local bridging VLAN to 0 while applying WLAN policy
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 Updated session timeout to 0 and Sleep timeout to 720 while applying WLAN policy
*apfMsConnTask_0: Sep 06 21:12:08.516: 44:4a:db:39:5f:58 override for default ap group, marking intgrp NULL
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 In processSsidIE:7657 setting Central switched to FALSE
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Disabling flexconnect central association for the client
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Applying site-specific Local Bridging override for station 44:4a:db:39:5f:58 - vapId 3, site 'default-group', interface 'management'
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Set Client Non AP specific WLAN apfMsAccessVlan = 5 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 This apfMsAccessVlan may be changed later from AAA after L2 Auth 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Cleared localSwitchingVlan, may be assigned later based on AAA override 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 processSsidIE  statusCode is 0 and status is 0 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 STA - rates (6): 152 36 48 72 96 108 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 suppRates  statusCode is 0 and gotSuppRatesElement is 1 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Marking this mobile as TGr capable.
*apfMsConnTask_0: Sep 06 21:12:08.517: RSNIE in Assoc. Req.: (38)

*apfMsConnTask_0: Sep 06 21:12:08.517:      [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f

*apfMsConnTask_0: Sep 06 21:12:08.517:      [0016] ac 04 0c 00 01 00 90 07 a0 cd c0 f2 9f 4a 5f b2

*apfMsConnTask_0: Sep 06 21:12:08.517:      [0032] 3d 55 83 9a cf 6b

*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Processing RSN IE type 48, length 38 for mobile 44:4a:db:39:5f:58
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Selected Unicast cipher CCMP128 for client device
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 RSN Capabilities:  12
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 non-11w Capable mobile 
*apfMsConnTask_0: Sep 06 21:12:08.517: 44:4a:db:39:5f:58 Received RSN IE(AKM:4) with 1 PMKIDs
*apfMsConnTask_0: Sep 06 21:12:08.517: R1KHID+S1KHID: (12)

*apfMsConnTask_0: Sep 06 21:12:08.517:      [0000] 5b 95 7b e6 f3 e9 44 4a db 39 5f 58

*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Roaming succeed for this client.
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Setting active key cache index 0 ---> 8
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Resetting MSCB PMK Cache Entry @index 0 for station 44:4a:db:39:5f:58
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Setting active key cache index 8 ---> 8
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Setting active key cache index 8 ---> 0
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Created PKC PMK Cache entry for station 44:4a:db:39:5f:58 (RSN 2) on BSSID 2c:0b:e9:c4:77:4d
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 the value of url acl preserve flag is 1 for mobile 44:4a:db:39:5f:58 (caller pem_api.c:5285)
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) Deleted mobile LWAPP rule on AP [2c:0b:e9:c4:77:40]
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Succesfully freed AID 2, slot 1 on AP 2c:0b:e9:c4:77:40, #client on this slot 3
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Updated location for station old AP 2c:0b:e9:c4:77:40 oldSlot 1, new AP 18:8b:45:08:b7:20 newSlot 1, AID 0 MsType 0 MobilityRole 1
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Assigning flex webauth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 3
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Assigned flex post-auth IPv4-ACL ID :65535, IPv6-ACL ID:65535 for AP WLAN ID : 3
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Updating AID for REAP AP Client 18:8b:45:08:b7:20 - AID ===> 1
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 Reassoc Req BSSID 18:8b:45:08:b7:2d AP(LivingRoom) slot 1 ssid (Yoshi Valley 5G) Tmstmp 35978 AID 1 stCode 0/0 apChngd 1 oldAp 2C:0B:E9:C4:77:40 
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 apfMsRunStateDec
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 apfMs1xStateDec
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) Change state to START (0) last state RUN (20)

*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 the value of url acl preserve flag is 0 for mobile 44:4a:db:39:5f:58 (caller pem_api.c:3818)
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 10.66.77.163 START (0) Initializing policy
*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58 10.66.77.163 START (0) Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_0: Sep 06 21:12:08.518: 44:4a:db:39:5f:58  apfVapSecurity=0x40004000 L2=16384 SkipWeb=0 
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58  AuthenticationRequired = 1 
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 10.66.77.163 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 Encryption policy is set to 0x80000004
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 Flex Central Auth Client
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 Setting the action to initiate 1x 4 way handshake upon Add_Mobile_Ack for station with encrypt policy:[80000004] 
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 10.66.77.163 8021X_REQD (3) Client already has IP 10.66.77.163, DHCP Not required on AP 18:8b:45:08:b7:20 vapId 3 apVapId 3
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 Vlan while overriding the policy = -1
*apfMsConnTask_0: Sep 06 21:12:08.519: 44:4a:db:39:5f:58 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 10.66.77.163 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:8b:45:08:b7:20 vapId 3 apVapId 3 flex acl-name: v6acl-name
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 apfPemAddUser2 (apf_policy.c:465) Changing state for mobile 44:4a:db:39:5f:58 on AP 18:8b:45:08:b7:20 from Associated to Associated

*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 apfPemAddUser2:session timeout forstation 44:4a:db:39:5f:58 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0 
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0

*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 Sending assoc-resp with status 0 station:44:4a:db:39:5f:58 AP:18:8b:45:08:b7:20-01 on apVapId 3
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 VHT Operation IE: width 80/1 ch 100 freq0 106 freq1 0 msc0 0xff msc1 0xff
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 Including FT Mobility Domain IE (length 5) in reassociation assoc Resp to mobile 
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 Sending Assoc Response (status: '0') to station on AP LivingRoom on BSSID 18:8b:45:08:b7:2d ApVapId 3 Slot 1, mobility role 1
*apfMsConnTask_0: Sep 06 21:12:08.521: 44:4a:db:39:5f:58 apfProcessAssocReq (apf_80211.c:12969) Changing state for mobile 44:4a:db:39:5f:58 on AP 18:8b:45:08:b7:20 from Associated to Associated

*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 IP context - srcApMac:  18:8B:45:08:B7:20  msMac:  44:4A:DB:39:5F:58  msIpAddr:  10.66.77.163 msIpv6Cnt: 2
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 msIpv6Addr[1] : 2001:0bb6:9f01:4cc8:e997:0b37:df76:00f0 
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 msIpv6Addr[2] : fe80:0000:0000:0000:1ced:9bdf:13b9:602f 
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 Sending client IP( 10.66.77.163 ) context in AddMobile
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 Add SGT:0 to AP 18:8b:45:08:b7:20
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Sep 06 21:12:08.522: 44:4a:db:39:5f:58 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Sep 06 21:12:08.523: 44:4a:db:39:5f:58 Successful transmission of LWAPP Add-Mobile to AP 18:8b:45:08:b7:20 slotId 1 idx@10
*spamApTask0: Sep 06 21:12:08.523: 44:4a:db:39:5f:58 Setting ADD_MOBILE (idx 10, seqno 255, action 1, count 255, last count 255) ack state for STA on AP 18:8b:45:08:b7:20
*spamApTask0: Sep 06 21:12:08.529: 44:4a:db:39:5f:58 Received add/del ack packet with sequence number: got 255 expected 255 action = 1
*spamApTask0: Sep 06 21:12:08.529: 44:4a:db:39:5f:58 Received ADD_MOBILE ack - Initiating 1x to STA 44:4a:db:39:5f:58 (idx 10)
*spamApTask0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 APF Initiating 1x to STA 44:4a:db:39:5f:58
*spamApTask0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Sent dot1x auth initiate message for mobile 44:4a:db:39:5f:58
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 dot1xProcessInitiate1XtoMobile to mobile station 44:4a:db:39:5f:58 (mscb 101, msg 101)
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 reauth_sm state transition 0 ---> 0 for mobile 44:4a:db:39:5f:58 at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 11r roamed client, ft force auth with pskMode : 1
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Finishing FT roaming for mobile 44:4a:db:39:5f:58
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 EAP-PARAM Debug - eap-params for Wlan-Id :3 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 dot1x - moving mobile 44:4a:db:39:5f:58 into Force Auth state
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Skipping EAP-Success to mobile 44:4a:db:39:5f:58 (encryptBit:0)
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 apfMs1xStateInc
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 10.66.77.163 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Flex Central Auth Client
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 10.66.77.163 L2AUTHCOMPLETE (4) Client already has IP 10.66.77.163, DHCP Not required on AP 18:8b:45:08:b7:20 vapId 3 apVapId 3
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 flex webauth acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 flex webauth ipv6 acl id to be sent :65535 name : client acl id :65535 name :
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 Vlan while overriding the policy = -1
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.530: 44:4a:db:39:5f:58 sending to spamAddMobile vlanId -1 aclName = , flexAclId 65535

*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:8b:45:08:b7:20 vapId 3 apVapId 3 flex acl-name: v6acl-name
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 apfMsRunStateInc
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)

*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) Reached PLUMBFASTPATH: from line 7508, null
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) Not adding NPU. L3-auth not required on this local switching local DHCP client.
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 Initiating Accounting request(1) update for mobile
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 PemLocationConfigured [1]Adding VSA with NAS update and Role[1] with state[0]
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) No 11v BTM 
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 10.66.77.163 RUN (20) NO release MSCB
*apfReceiveTask: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 plumbed kck, kek. sent msg to multi thread dot1x for plumbing replay counter. rc:0
*spamApTask0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 IP context - srcApMac:  18:8B:45:08:B7:20  msMac:  44:4A:DB:39:5F:58  msIpAddr:  10.66.77.163 msIpv6Cnt: 2
*spamApTask0: Sep 06 21:12:08.531: 44:4a:db:39:5f:58 msIpv6Addr[1] : 2001:0bb6:9f01:4cc8:e997:0b37:df76:00f0 
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 msIpv6Addr[2] : fe80:0000:0000:0000:1ced:9bdf:13b9:602f 
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Sending client IP( 10.66.77.163 ) context in AddMobile
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Received 4WAY completed message from AP
*Dot1x_NW_MsgTask_0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 wpaState is 4; not processing DOT1X_4WAY_COMPLETED_AT_AP
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Add SGT:0 to AP 18:8b:45:08:b7:20
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Add CTS mobile SGT - Encoded the capwap payload for the mobile with SGT 0
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Flex Ipv6 pre-auth acl is not present, not Encoding Flex Ipv6 acl for add mobile Payload
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Flex Ipv6 post auth acl is not present, not updating add mobile Payload
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Successful transmission of LWAPP Add-Mobile to AP 18:8b:45:08:b7:20 slotId 1 idx@11
*spamApTask0: Sep 06 21:12:08.532: 44:4a:db:39:5f:58 Setting ADD_MOBILE (idx 12,  action 0, last count 255) ack state for STA on AP 18:8b:45:08:b7:20
*CAPWAP DATA: Sep 06 21:12:08.540: 44:4a:db:39:5f:58 IAPP-IP-UPDATE(0):891 Bytes received for client

CavanRover · ‎09-11-2022

Ok I finally figured out the issue. It was nothing to do with the CME configuration. I upgraded my router firmware, and the problem is now gone.

View solution in original post

marce1000 · ‎09-07-2022

- Below you will find output from your debugging file when processed with : https://cway.cisco.com/wireless-debug-analyzer/ , try yourself and also check or toggle flags on top of the tool :

Show Time

Show Task

Show Translated

Show Original

Show Prior First Connection

Show All

TimeTaskTranslated

Sep 06 21:12:08.516	*apfMsConnTask_0	Client roamed to AP/BSSID BSSID 18:8b:45:08:b7:2d AP LivingRoom
Sep 06 21:12:08.517	*apfMsConnTask_0	WLC recognizes that the client is 802.11r-capable
Sep 06 21:12:08.517	*apfMsConnTask_0	The WLC/AP has found from client association request Information Element that claims PMKID Caching support
Sep 06 21:12:08.518	*apfMsConnTask_0	FT fast-secure roaming is successful for this client.
Sep 06 21:12:08.519	*apfMsConnTask_0	Client is entering the 802.1x or PSK Authentication state
Sep 06 21:12:08.521	*apfMsConnTask_0	WLC/AP is sending an Association Response to the client with status code 0 = Successful association
Sep 06 21:12:08.530	*Dot1x_NW_MsgTask_0	Client has completed PSK Dot1x or WEP authentication phase
Sep 06 21:12:08.531	*Dot1x_NW_MsgTask_0	Client has entered RUN state

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

CavanRover · ‎09-08-2022

Thank you marce.

I have obtained a new log from the iPhone 11 Pro itself. This is the time when the call drops:

error 10:30:49.591382+0100 wifid LQM-WiFi: WiFi Latency: TxLat-hist [1(0 %) / 0(0 %) / 0(0 %) / 0(0 %)] RxLat-hist [1(0 %) / 0(0 %) / 0(0 %) / 0(0 %)] intermittent-state = 
error 10:30:50.796610+0100 wifid WiFiLQAMgrLinkRecommendationNotify: channel score: chq=3, tx-lat=5, rx-lat=5, tx-loss=5, rx-loss=5, p95-lat=0, RT=0x0, link-recommendation=0x0

Attached are the full logs. I tried connecting to an open SSID to rule out auth issues and still the same issue persists.

Here are my RT settings:

And APs:

marce1000 · ‎09-08-2022

- Use a separate WLAN for voice and set voice QoS-priorities according to : https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/quality_of_service.html

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Finbarr Brady · ‎09-09-2022

Did you try disabling fast roaming?

CavanRover · ‎09-09-2022

Thank you. Tried the suggestions but still the issue persists.

WiFi config:

(Cisco Controller) >show wlan 3


WLAN Identifier.................................. 3
Profile Name..................................... Yoshi Valley 5G
Network Name (SSID).............................. Yoshi Valley 5G
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
Random MAC Filtering............................. Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
    Radius Profiling ............................ Disabled
     DHCP ....................................... Disabled
     HTTP ....................................... Disabled
    Local Profiling ............................. Disabled
     DHCP ....................................... Disabled
     HTTP ....................................... Disabled
  Radius-NAC State............................... Disabled
  SNMP-NAC State................................. Disabled
  Quarantine VLAN................................ 0
Maximum Clients Allowed.......................... Unlimited

--More-- or (q)uit
Security Group Tag............................... Unknown(0)
Maximum number of Clients per AP Radio........... 200
ATF Policy....................................... 0
Number of Active Clients......................... 0
Number of Active Random-Mac Clients.............. 0
Exclusionlist Timeout............................ 180 seconds.   diff-60
Session Timeout.................................. 86400 seconds. diff-1800
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
Sleep Client Auto Auth Feature................... Enabled.       diff-not exist
Web Auth Captive Bypass Mode..................... Enabled
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured

--More-- or (q)uit
DHCP Server...................................... Default
DHCP Scope Name.................................. none
Central NAT...................................... Disabled
Central NAT Peer-Peer Blocking................... Disabled
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Tunnel Profile................................... Unconfigured
EoGRE Override VLAN state........................ disable
EoGRE Override VLAN ID........................... 0
Quality of Service............................... Platinum
Per-BSSID Rate Limits............................ Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-Client Rate Limits........................... Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-WLAN Rate Limits............................. Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0

--More-- or (q)uit
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Required.   diff-allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None			diff-802.1P (Tag=0)
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11a only
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Global Servers	diff-Disabled
   Accounting.................................... Global Servers	diff-Disabled
      Interim Update............................. Enabled
      Interim Update Interval.................... 0
      Framed IPv6 Acct AVP ...................... Prefix

--More-- or (q)uit
   Authorization ACA............................. Disabled
   Accounting ACA................................ Disabled
   Dynamic Interface............................. Disabled
   Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Radius Authentication caching.................... Disabled
Mu-Mimo.......................................... Enabled
Security

   802.11 Authentication:........................ Open System
   FT Support.................................... Disabled
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2/WPA3)........ Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
      WPA3 (RSN IE).............................. Disabled
      WPA2/WPA3 Encryption Ciphers
         TKIP Cipher............................. Disabled
         CCMP128/AES Cipher...................... Enabled
         CCMP256 Cipher.......................... Disabled
         GCMP128 Cipher.......................... Disabled

--More-- or (q)uit
         GCMP256 Cipher.......................... Disabled
      OSEN IE.................................... Disabled
      Auth Key Management
         802.1x.................................. Disabled
         802.1x-SHA2............................. Disabled
         PSK..................................... Enabled
         PSK-SHA2................................ Disabled
         CCKM.................................... Disabled
         FT-1X(802.11r).......................... Disabled
         FT-PSK(802.11r)......................... Disabled
         OSEN-1X................................. Disabled
         SUITEB-1X............................... Disabled
         SUITEB192-1X............................ Disabled
         OWE..................................... Disabled
         SAE..................................... Disabled
      PMKID in 4way-handshake.................... Disabled
      OWE Transition Mode........................ Disabled
      OWE Transition Mode WLAN id................ 0
      Auto Key PSK .............................. Disabled
      FT Reassociation Timeout................... 20
      FT Over-The-DS mode........................ Disabled
      GTK Randomization.......................... Disabled
      SKC Cache Support.......................... Disabled

--More-- or (q)uit
      CCKM TSF Tolerance......................... 1000
   Wi-Fi Direct policy configured................ Disabled
   EAP-Passthrough............................... Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web Authentication Timeout.................... 300
   Web-Passthrough............................... Disabled
   Mac-auth-server............................... 0.0.0.0
   Web-portal-server............................. 0.0.0.0
   qrscan-des-key................................ 
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   FlexConnect Local Switching................... Enabled
   FlexConnect Central Association............... Disabled
   flexconnect Central Dhcp Flag................. Disabled
   flexconnect nat-pat Flag...................... Disabled
   flexconnect Dns Override Flag................. Disabled
   flexconnect PPPoE pass-through................ Disabled
   flexconnect local-switching IP-source-guar.... Disabled
   FlexConnect Vlan based Central Switching ..... Disabled
   FlexConnect Local Authentication.............. Enabled
   FlexConnect Learn IP Address.................. Enabled

--More-- or (q)uit
   Flexconnect Post-Auth IPv4 ACL................ Unconfigured
   Flexconnect Post-Auth IPv6 ACL................ Unconfigured
   Client MFP.................................... Optional
   PMF........................................... Disabled
   PMF Association Comeback Time................. 1
   PMF SA Query RetryTimeout..................... 200
   Tkip MIC Countermeasure Hold-down Timer....... 60
   Eap-params.................................... Disabled
AVC Visibilty.................................... Enabled
Flex Avc Profile Name............................ Yoshi Valley 5G
OpenDns Profile Name............................. None
OpenDns Wlan Mode................................ ignore
OpenDns Wlan Dhcp Option 6....................... enable
Flow Monitor Name................................ None
Split Tunnel Configuration
    Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Enabled

--More-- or (q)uit
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Enabled
802.11v BSS Max Idle Service..................... Enabled
802.11v BSS Transition Service................... Enabled
802.11v BSS Transition Disassoc Imminent......... Disabled
802.11v BSS Transition Disassoc Timer............ 200
802.11v BSS Transition OpRoam Disassoc Timer..... 40
802.11v BSS Transition Neigh List Dual Band...... Disabled
DMS DB is empty
Band Select...................................... Enabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Broadcast Tagging................................ Disabled
PRP.............................................. Disabled
Fast Receive..................................... Disabled
11ax Downlink MU-MIMO............................ Disabled
11ax Uplink MU-MIMO.............................. Disabled
11ax Downlink OFDMA.............................. Disabled
11ax Uplink OFDMA................................ Disabled
11ax Admin state................................. Enabled
Wifi Alliance Multiband Operation................ Disabled
11ax Target Wake Time............................ Enabled

--More-- or (q)uit
Advanced Scheduling Requests..................... Disabled

 Mobility Anchor List
 WLAN ID     IP Address            Status                             Priority
 -------     ---------------       ------                             --------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

Local Policy
----------------
Priority  Policy Name
--------  ---------------

QoS Fastlane Status.............................. Enabled
Selective Reanchoring Status..................... Disable
Lobby Admin Access............................... Disabled

 Fabric Status
--------------

Fabric status.................................... Disable

--More-- or (q)uit
Vnid Name........................................ 
Vnid............................................. 0
Applied SGT Tag.................................. 0
Peer Ip Address.................................. 0.0.0.0
Flex Acl Name.................................... 
Flex IPv6 Acl Name............................... 
Flex Avc Policy Name............................. 

U3-Interface................................... Disable

U3-Reporting Interval.......................... 30

(Cisco Controller) >

CavanRover · ‎09-11-2022

Ok I finally figured out the issue. It was nothing to do with the CME configuration. I upgraded my router firmware, and the problem is now gone.