WLC 5500/8.0.152/Problem Authentication

[Sebastian Albert]

Hello everyone, to see if someone can help me, we are having problems to authenticate in the wifi network and we are receiving this log.

* osapiBsnTimer: Jan 08 11: 13: 27.705: [PA] 10: 0b: a9: 14: bd: 10 802.1x 'timeoutEvt' Timer expired for station 10: 0b: a9: 14: bd: 10 and for message = M0
* dot1xMsgTask: Jan 08 11: 13: 27.705: [PA] 10: 0b: a9: 14: bd: 10 Retransmit 2 of EAP-Request (length 1016) for mobile 10: 0b: a9: 14: bd: 10
* apfReceiveTask: Jan 08 11: 13: 31.309: [PA] apfMmProcessMessage: Freeing the mm pkt for non existing client

* osapiBsnTimer: Jan 08 11: 13: 57.705: [PA] 10: 0b: a9: 14: bd: 10 802.1x 'timeoutEvt' Timer expired for station 10: 0b: a9: 14: bd: 10 and for message = M0
* dot1xMsgTask: Jan 08 11: 13: 57.705: [PA] 10: 0b: a9: 14: bd: 10 Retransmit failure for EAP-Request to mobile 10: 0b: a9: 14: bd: 10

Anyone know what can it be ?

Many thanks!

[Leo Laohoo]

The limited logs shows the WLC sending authentication requests to the client and the client is not responding (Timer expired for station).

[Sebastian Albert]

Thanks Leo, i upload the completed debug.

[Leo Laohoo]

Before I do any troubleshooting:
1. Is this issue affecting only ONE wireless client or a lot?
2. If you create an SSID with OPEN authentication, can the client(s) connect or not?

[Rasika Nayanajith]

Hi 

You can analyze given output using below analyzer.

https://cway.cisco.com/tools/WirelessDebugAnalyzer/

As per that analyzis, you can see all the time client does not reponded in 4 way handshaking, so WLC/AP deauthenticate client. I would check this client and see if its drivers updated.

Read below document for detailed understanding of client association & roaming behaviours

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116493-technote-technology-00.html

Here is 2nd attempt

Here is 3rd attempt

HTH

Rasika

*** Pls rate all useful responses ***

[Sebastian Albert]

Hi Rasika! 

Thanks for everything, the client has updated the drivers and it happens with all the devices. What we find strange is that with a standalone AP and configured the same authentication server works. It only happens when the AP is this local or flexconect mode associated with the WLC.

[Sebastian Albert]

Hi recently, we had tried it on an SSID that has WPA2 with MAC-Filtering, it only validates against the WLC, and it works OK.

Attach the log.