04-24-2017 06:50 AM - edited 07-05-2021 06:55 AM
Win 10 laptop is not connecting to WLAN (802.1x - EPA-TLS)
Here are the logs:
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Processing assoc-req station:a4:4e:31:45:f8:0c AP:f8:4f:57:79:ec:60-00 thread:151aec40
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Adding mobile on LWAPP AP f8:4f:57:79:ec:60(0)
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Association received from mobile on BSSID f8:4f:57:79:ec:62 AP XYZAP015
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Global 200 Clients are allowed to AP radio
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Max Client Trap Threshold: 0 cur: 0
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c override for default ap group, marking intgrp NULL
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Applying Interface(corp) policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c Re-applying interface policy for client
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2485)
*apfMsConnTask_5: Apr 24 15:32:09.961: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2506)
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c In processSsidIE:5756 setting Central switched to TRUE
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c In processSsidIE:5759 apVapId = 1 and Split Acl Id = 65535
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Applying site-specific Local Bridging override for station a4:4e:31:45:f8:0c - vapId 3, site 'APG3', interface 'corp'
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Applying Local Bridging Interface Policy for station a4:4e:31:45:f8:0c - vlan 92, interface id 14, interface 'corp', nasId:''
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c override from ap group, removing intf group from mscb
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Applying site-specific override for station a4:4e:31:45:f8:0c - vapId 3, site 'APG3', interface 'corp'
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Applying Interface(corp) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 92
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Re-applying interface policy for client
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2485)
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2506)
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Apr 24 15:32:09.962: RSNIE in Assoc. Req.: (18)
*apfMsConnTask_5: Apr 24 15:32:09.962: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 40
*apfMsConnTask_5: Apr 24 15:32:09.962: [0016] 96 00
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Processing RSN IE type 48, length 18 for mobile a4:4e:31:45:f8:0c
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c CCKM: Mobile is using CCKM
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c RSN Capabilities: 0
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Marking Mobile as non-11w Capable
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Received RSN IE with 0 PMKIDs from mobile a4:4e:31:45:f8:0c
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Apr 24 15:32:09.962: a4:4e:31:45:f8:0c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Encryption policy is set to 0x80000001
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP f8:4f:57:79:ec:60 vapId 3 apVapId 1 flex-acl-name:
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c apfMsAssoStateInc
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c apfPemAddUser2 (apf_policy.c:381) Changing state for mobile a4:4e:31:45:f8:0c on AP f8:4f:57:79:ec:60 from Idle to Associated
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c apfPemAddUser2:session timeout forstation a4:4e:31:45:f8:0c - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Sending assoc-resp with status 0 station:a4:4e:31:45:f8:0c AP:f8:4f:57:79:ec:60-00 on apVapId 1
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c Sending Assoc Response to station on BSSID f8:4f:57:79:ec:60 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_5: Apr 24 15:32:09.963: a4:4e:31:45:f8:0c apfProcessAssocReq (apf_80211.c:9614) Changing state for mobile a4:4e:31:45:f8:0c on AP f8:4f:57:79:ec:60 from Associated to Associated
*spamApTask5: Apr 24 15:32:09.965: a4:4e:31:45:f8:0c Successful transmission of LWAPP Add-Mobile to AP f8:4f:57:79:ec:60
*spamApTask5: Apr 24 15:32:09.969: a4:4e:31:45:f8:0c Received ADD_MOBILE ack - Initiating 1x to STA a4:4e:31:45:f8:0c (idx 18)
*spamApTask5: Apr 24 15:32:09.969: a4:4e:31:45:f8:0c Sent 1x initiate message to multi thread task for mobile a4:4e:31:45:f8:0c
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c reauth_sm state transition 0 ---> 1 for mobile a4:4e:31:45:f8:0c at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c EAP-PARAM Debug - eap-params for Wlan-Id :3 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c Station a4:4e:31:45:f8:0c setting dot1x reauth timeout = 0
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c Stopping reauth timeout for a4:4e:31:45:f8:0c
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c dot1x - moving mobile a4:4e:31:45:f8:0c into Connecting state
*Dot1x_NW_MsgTask_4: Apr 24 15:32:09.970: a4:4e:31:45:f8:0c Sending EAP-Request/Identity to mobile a4:4e:31:45:f8:0c (EAP Id 1)
*apfMsConnTask_7: Apr 24 15:32:10.879: a4:4e:31:45:f8:0c Processing assoc-req station:a4:4e:31:45:f8:0c AP:f8:4f:57:79:e6:c0-00 thread:151af400
*apfMsConnTask_7: Apr 24 15:32:10.879: a4:4e:31:45:f8:0c Association received from mobile on BSSID f8:4f:57:79:e6:c2 AP XYZAP010
*apfMsConnTask_7: Apr 24 15:32:10.879: a4:4e:31:45:f8:0c Global 200 Clients are allowed to AP radio
*apfMsConnTask_7: Apr 24 15:32:10.879: a4:4e:31:45:f8:0c Max Client Trap Threshold: 0 cur: 0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Applying Interface(corp) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 92
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Re-applying interface policy for client
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2485)
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2506)
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Check before Setting the NAS Id to WLAN specific Id ''
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c In processSsidIE:5756 setting Central switched to TRUE
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c In processSsidIE:5759 apVapId = 1 and Split Acl Id = 65535
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Applying site-specific Local Bridging override for station a4:4e:31:45:f8:0c - vapId 3, site 'APG3', interface 'corp'
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Applying Local Bridging Interface Policy for station a4:4e:31:45:f8:0c - vlan 92, interface id 14, interface 'corp', nasId:''
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c override from ap group, removing intf group from mscb
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Applying site-specific override for station a4:4e:31:45:f8:0c - vapId 3, site 'APG3', interface 'corp'
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Applying Interface(corp) policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 92
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Re-applying interface policy for client
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2485)
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2506)
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Values before applying NASID - interfacetype:3, ovrd:0, mscb nasid:, interface nasid:, APgrpset:0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Apr 24 15:32:10.880: RSNIE in Assoc. Req.: (18)
*apfMsConnTask_7: Apr 24 15:32:10.880: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 40
*apfMsConnTask_7: Apr 24 15:32:10.880: [0016] 96 00
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c Processing RSN IE type 48, length 18 for mobile a4:4e:31:45:f8:0c
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c CCKM: Mobile is using CCKM
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c RSN Capabilities: 0
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Marking Mobile as non-11w Capable
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Received RSN IE with 0 PMKIDs from mobile a4:4e:31:45:f8:0c
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Setting active key cache index 8 ---> 8
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c unsetting PmkIdValidatedByAp
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [f8:4f:57:79:ec:60]
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Updated location for station old AP f8:4f:57:79:ec:60-0, new AP f8:4f:57:79:e6:c0-0
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Encryption policy is set to 0x80000001
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP f8:4f:57:79:e6:c0 vapId 3 apVapId 1 flex-acl-name:
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c apfPemAddUser2 (apf_policy.c:381) Changing state for mobile a4:4e:31:45:f8:0c on AP f8:4f:57:79:e6:c0 from Associated to Associated
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c apfPemAddUser2:session timeout forstation a4:4e:31:45:f8:0c - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Sending assoc-resp with status 0 station:a4:4e:31:45:f8:0c AP:f8:4f:57:79:e6:c0-00 on apVapId 1
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c Sending Assoc Response to station on BSSID f8:4f:57:79:e6:c0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_7: Apr 24 15:32:10.881: a4:4e:31:45:f8:0c apfProcessAssocReq (apf_80211.c:9614) Changing state for mobile a4:4e:31:45:f8:0c on AP f8:4f:57:79:e6:c0 from Associated to Associated
*spamApTask5: Apr 24 15:32:10.884: a4:4e:31:45:f8:0c Delete Mobile request sent to the AP 10.24.80.25:16324
*spamApTask1: Apr 24 15:32:10.884: a4:4e:31:45:f8:0c Successful transmission of LWAPP Add-Mobile to AP f8:4f:57:79:e6:c0
*spamApTask1: Apr 24 15:32:10.887: a4:4e:31:45:f8:0c Received ADD_MOBILE ack - Initiating 1x to STA a4:4e:31:45:f8:0c (idx
*spamApTask1: Apr 24 15:32:10.887: a4:4e:31:45:f8:0c Sent 1x initiate message to multi thread task for mobile a4:4e:31:45:f8:0c
*Dot1x_NW_MsgTask_4: Apr 24 15:32:10.887: a4:4e:31:45:f8:0c reauth_sm state transition 1 ---> 0 for mobile a4:4e:31:45:f8:0c at 1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_4: Apr 24 15:32:10.888: a4:4e:31:45:f8:0c EAP-PARAM Debug - eap-params for Wlan-Id :3 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_4: Apr 24 15:32:10.888: a4:4e:31:45:f8:0c Disable re-auth, use PMK lifetime.
*Dot1x_NW_MsgTask_4: Apr 24 15:32:10.888: a4:4e:31:45:f8:0c dot1x - moving mobile a4:4e:31:45:f8:0c into Connecting state
*Dot1x_NW_MsgTask_4: Apr 24 15:32:10.888: a4:4e:31:45:f8:0c Sending EAP-Request/Identity to mobile a4:4e:31:45:f8:0c (EAP Id 1)
*osapiBsnTimer: Apr 24 15:32:40.785: a4:4e:31:45:f8:0c 802.1x 'txWhen' Timer expired for station a4:4e:31:45:f8:0c and for message = M0
*dot1xMsgTask: Apr 24 15:32:40.785: a4:4e:31:45:f8:0c dot1x - moving mobile a4:4e:31:45:f8:0c into Connecting state
*dot1xMsgTask: Apr 24 15:32:40.785: a4:4e:31:45:f8:0c fv to mobile a4:4e:31:45:f8:0c (EAP Id 2)
*osapiBsnTimer: Apr 24 15:33:10.785: a4:4e:31:45:f8:0c 802.1x 'txWhen' Timer expired for station a4:4e:31:45:f8:0c and for message = M0
*dot1xMsgTask: Apr 24 15:33:10.785: a4:4e:31:45:f8:0c dot1x - moving mobile a4:4e:31:45:f8:0c into Connecting state
Thanks
Solved! Go to Solution.
04-24-2017 07:26 AM
Is it with every win 10 laptop? First thing to look at is the wireless NIC drivers especially if other win OS is working properly. I'm assuming this is the case since you only mentioned win 10 doesn't work.
-Scott
*** Please rate helpful posts ***
04-25-2017 12:48 AM
Hi,
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c CCKM: Mobile is using CCKM
802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Enabled
PSK..................................... Disabled
CCKM.................................... Enabled
I can see in you are using 802.1x + CCKM. in this case clients connected will work with CCKM if they support it and those who do not support CCKM will work normally without CCKM support. So even if your device does not support CCKM it should probably work.
Can you please check if you are getting the same problem when you rae using only 802.1x ?(means remove cckm from wlan and give a try!!!)
Regards
Dont forget to rate helpful posts
04-24-2017 07:26 AM
Is it with every win 10 laptop? First thing to look at is the wireless NIC drivers especially if other win OS is working properly. I'm assuming this is the case since you only mentioned win 10 doesn't work.
-Scott
*** Please rate helpful posts ***
04-24-2017 10:40 PM
Most of the WIN7 and WIn 10 laptops are working fine.
Wireless NIC driver of the non working laptop is updated.
did you find anything wrong in the debug logs ?
Thanks
04-24-2017 11:07 PM
Hi,
Check if you ruining this version: Win 10 version 1511
if yes then you might be hinting this bug:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuw88770/?referring_site=bugquickviewclick
Regards
Dont forget to rate helpful posts
04-25-2017 12:31 AM
Update the win 10 version to 1703 ...still same issue.
Please check my logs if you find anything in that ?
04-25-2017 12:36 AM
Please paste the output of the commands:
sh wlan <id>
Dont forget to rate helpful posts
04-25-2017 12:44 AM
here is the output:
(WLC1) >show wlan 6
WLAN Identifier.................................. 6
Profile Name..................................... Corp
Network Name (SSID).............................. Corp
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Enabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Enabled
DHCP ....................................... Enabled
HTTP ....................................... Enabled
Local Profiling ............................. Enabled
DHCP ....................................... Enabled
HTTP ....................................... Enabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 3
Exclusionlist.................................... Disabled
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 720 minutes
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... none
CHD per WLAN..................................... Disabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ Corpuser
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
DHCP Address Assignment Required................. Enabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=0)
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 172.21.xx.xx 1812
Authentication................................ 172.21.xx.xx 1812
Accounting.................................... 172.21.xx.xx 1813
Accounting.................................... 172.21.xx.xx 1813
Interim Update............................. Disabled
Interim Update Interval.................... 0
Framed IPv6 Acct AVP ...................... Prefix
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Radius NAI-Realm................................. Disabled
Security
802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Enabled
PSK..................................... Disabled
CCKM.................................... Enabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
FT Reassociation Timeout................... 5
FT Over-The-DS mode........................ Enabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web Authentication Timeout.................... 300
Web-Passthrough............................... Disabled
Mac-auth-server............................... 0.0.0.0
Web-portal-server............................. 0.0.0.0
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
FlexConnect Central Association............... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Split Tunnel Configuration
Split Tunnel................................. Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
802.11v Directed Multicast Service............... Disabled
802.11v BSS Max Idle Service..................... Enabled
DMS DB is empty
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Universal Ap Admin............................... Disabled
Mobility Anchor List
WLAN ID IP Address Status
------- --------------- ------
802.11u........................................ Disabled
MSAP Services.................................. Disabled
--More-- or (q)uit
Local Policy
----------------
Priority Policy Name
-------- ---------------
(WLC1) >
Thanks
04-25-2017 12:48 AM
Hi,
*apfMsConnTask_7: Apr 24 15:32:10.880: a4:4e:31:45:f8:0c CCKM: Mobile is using CCKM
802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Enabled
PSK..................................... Disabled
CCKM.................................... Enabled
I can see in you are using 802.1x + CCKM. in this case clients connected will work with CCKM if they support it and those who do not support CCKM will work normally without CCKM support. So even if your device does not support CCKM it should probably work.
Can you please check if you are getting the same problem when you rae using only 802.1x ?(means remove cckm from wlan and give a try!!!)
Regards
Dont forget to rate helpful posts
04-25-2017 01:04 AM
Thanks Sandeep & Scott.
Once I removed CCKM it worked.
You guys are awesome.
Thanks again.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide