Sunteți pe pagina 1din 117

172.21.72.

21
), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP
0.0.0
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP
2.21.72.4
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP

chaddr: 00:23:6
8:e5:77:f7
ciaddr: 0.0.0.0
, yiaddr: 0.
siaddr: 0.0.0.0
, giaddr: 17
requested ip: 1
72.21.72.21
server id: 192.
227.56.197 r

cvd server id: 1.1.1.1


*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1
(len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control bl
ock settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:36.146: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:36.148: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len
308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:57:36.148: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418,
port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethern
et, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP xid: 0xb7f49e13
(3086261779)
, secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 17
2.21.72.21
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.
0.0.0
*DHCP Socket Task: Feb 19 13:57:36.149: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd ser
ver id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Association received fr
om mobile on
BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP
radio
*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 1
0

*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Rf profile 600 Clients


are allowed t
o AP wlan
*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile,
role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:57:38.260: 00:23:68:e5:77:f7 Re-applying interface p
olicy for cli
ent
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4
ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6
ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Centra
l switched to TRUE
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 an
d Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 Applying site-specific
Local Bridgin
g override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Po
licy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:57:38.261: 00:23:68:e5:77:f7 Applying site-specific
override for
station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile,
role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 Re-applying interface p
olicy for cli
ent
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4
ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6
ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and s
tatus is 0
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 f

inish_flag is 0
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 9
6 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSu
ppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20
for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state t
o START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_
WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing
policy
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state
to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change st
ate to 8021X_REQD (3) last state AUTHCHECK (2)
*pemReceiveTask: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap
00
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed
mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:57:38.262: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Ch
anging state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associat
ed
*apfMsConnTask_6: Feb 19 13:57:38.263: 00:23:68:e5:77:f7 apfPemAddUser2:session
timeout forst
ation 00:23:68:e5:77:f7 - Session Tout 0, apfMsTimeOut '0' and sess
ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:57:38.263: 00:23:68:e5:77:f7 Stopping deletion of Mo
bile Station:
(callerId: 48)
*apfMsConnTask_6: Feb 19 13:57:38.263: 00:23:68:e5:77:f7 Func: apfPemAddUser2, M
s Timeout = 0
, Session Timeout = 0
*apfMsConnTask_6: Feb 19 13:57:38.263: 00:23:68:e5:77:f7 Sending Assoc Response
to station on
BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:57:38.263: 00:23:68:e5:77:f7 apfProcessAssocReq (apf

_80211.c:7510
) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Asso
ciated
*spamApTask3: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread
task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry
for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0
for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a
from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Setting active key c
ache index 0
---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Setting active key c
ache index 8
---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to
PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267:

[0000] 4a 59 03 4f 73 eb 27 68 9e
c5 9c 4c dd

da 38 27
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Initiating RSN PSK t
o mobile 00:2
3:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5
:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68
:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68
:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.267: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.268:

[0000] 4a 59 03 4f 73 eb 27 68 9e
c5 9c 4c dd

da 38 27
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.268: 00:23:68:e5:77:f7 Starting key exchang
e to mobile 0
0:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:57:38.268: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobi
le 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.

00.00.00
*osapiBsnTimer: Feb 19 13:57:39.459: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for
station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:57:39.459: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 12
1) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.463: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00
:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.463: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1
) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.463: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START s
tate (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.463: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for
mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.463: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobi
le 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.0
0.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00
:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1
) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGO
TIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for
mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Chang
e state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qos
Cap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) P
lumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) C
hange state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLU
MBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast
Path rule

type = Airespace AP Client


on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path r
ule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridgin
g intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfull
y plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:57:39.468: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP xid: 0xeb0105d0
(3942712784), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:46.955: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:57:46.956: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:57:46.956: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:46.956: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:46.957: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:57:46.957: 00:23:68:e5:77:f7 DHCP sending REPLY to

STA (len 418, port 13, vlan 50)


*DHCP Socket Task: Feb 19 13:57:46.957: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:57:46.957: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:57:46.957: 00:23:68:e5:77:f7 DHCP xid: 0xeb0105d0
(3942712784), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:46.958: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:46.958: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:57:46.958: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:46.958: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:57:46.964: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:57:46.964: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:46.964: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:46.964: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:57:46.964: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP xid: 0xeb0105d0
(3942712784), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:46.965: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP xid: 0xeb0105d0
(3942712784), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7

*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0


, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:46.968: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:31:ef:a9
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 1
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_7: Feb 19 13:57:49.569: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_7: Feb 19 13:57:49.570: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18

*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 suppRates statusCode i


s 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 68:86:a7:31:ef:a0-1
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:31:ef:a0 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_7: Feb 19 13:57:49.571: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:31:ef:a0 f
rom Associated to Associated
*apfMsConnTask_7: Feb 19 13:57:49.571:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_7: Feb 19 13:57:49.571:
bile Station: (callerId: 48)
*apfMsConnTask_7: Feb 19 13:57:49.571:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_7: Feb 19 13:57:49.572: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:31:ef:aa (status 0) ApVapId 6 Slot 1
*apfMsConnTask_7: Feb 19 13:57:49.572: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:31:ef:
a0 from Associated to Associated
*spamApTask6: Feb 19 13:57:49.574: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8

*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Setting active key c


ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:31:ef:aa to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575:
7a 7e c8 98 cc bb 46

[0000] 6f 16 69 e1 50 4d b8 b8 bc

*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:31:ef:aa in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:31:ef:aa in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575:
7a 7e c8 98 cc bb 46

[0000] 6f 16 69 e1 50 4d b8 b8 bc

*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:57:49.575: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:57:50.659: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:57:50.659: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.664: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.664: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 Not Using WMM Compli


ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.667: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:31:ef:a0 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:31:ef:a0, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:57:50.668: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP xid: 0x28d5d355
(685101909), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP sending REQUEST t

o 172.21.72.1 (len 350, port 13, vlan 91)


*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:58.918: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:58.919: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP xid: 0x28d5d355
(685101909), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:58.920: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP xid: 0x28d5d355
(685101909), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:57:58.928: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:57:58.929: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)

*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP sending REPLY to


STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP xid: 0x28d5d355
(685101909), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:57:58.930: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:00.761: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:00.762: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:00.762: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:00.762: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:00.762: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po

licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:31:ef:a0]
*pemReceiveTask: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:31:ef:a0-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:58:00.763: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:58:00.764:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:00.764:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:00.764:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:00.764: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated

*spamApTask3: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Sent 1x initiate message to


multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:31:ef:aa from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.767: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:00.768: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:01.860: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:58:01.860: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.863: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.864: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.864: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.864: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.864: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.866: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.866: 00:23:68:e5:77:f7 Ignoring invalid EAP


OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.866: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.866: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.866: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
client *pemReceiveTask: Feb 19 13:58:01.867: 00:23:68:e5:77:f7 172.21.72.21 Adde
d NPU entry of type 1, dtlFlags 0x0
*SNMPTask: Feb 19 13:58:10.179: 00:23:68:e5:77:f7 Central Switch = TRUE
*SNMPTask: Feb 19 13:58:10.183: 00:23:68:e5:77:f7 Central Switch = TRUE
*SNMPTask: Feb 19 13:58:10.186: 00:23:68:e5:77:f7 Central Switch = TRUE
de*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP received op BOO
TREQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:10.459: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)

*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP transmitting DHCP


DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP xid: 0xaa4f215f
(2857312607), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:10.460: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP xid: 0xaa4f215f
(2857312607), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:10.461: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP xid: 0xaa4f215f
(2857312607), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:10.466: 00:23:68:e5:77:f7 DHCP requested ip: 1

72.21.72.21
*DHCP Socket Task: Feb 19 13:58:10.467: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:10.467: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:10.467: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:10.467: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP xid: 0xaa4f215f
(2857312607), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:10.468: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
?
(Cisco Controller) >client declient de*apfMsConnTask_6: Feb 19 13:58:12.317: 00:
23:68:e5:77:f7 Association received from mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:12.317: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:12.317: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 13:58:12.317: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:12.318: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:12.318: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:12.318: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:12.318: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'

*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 Applying Local Bridging


Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:12.319: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:58:12.320:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:12.320:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:12.320:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:12.320: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 13:58:12.321: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.324:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:12.325: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask
_7: Feb 19 13:58:12.325: 00:23:68:e5:77:f7 Sending EAPOL-Key Message to mobile 0
0:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00.00.
00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:13.459: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:58:13.460: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.463: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.463: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.463: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.463: 00:23:68:e5:77:f7 Stopping retransmiss

ion timer for mobile 00:23:68:e5:77:f7


*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.463: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.466: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.467: 00:23:68:e5:77:f7 172.21.72.21
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.467: 00:23:68:e5:77:f7 172.21.72.21
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.467: 00:23:68:e5:77:f7 172.21.72.21
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:13.467: 00:23:68:e5:77:f7 172.21.72.21
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)

RUN (20
RUN (20

RUN (20
Bridgin
RUN (20

c*pemReceiveTask: Feb 19 13:58:13.467: 0


0:23:68:e5:77:f7 172.21.72.21 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selecting relay 1

- control block settings:


dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:16.075: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP xid: 0x4362b899
(1130543257), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:16.076: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP xid: 0x4362b899
(1130543257), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:16.077: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:16.082: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:16.082: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:16.082: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP xid: 0x4362b899
(1130543257), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6

8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
l*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.
0, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:16.083: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP xid: 0x4362b899
(1130543257), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
ient ?
(Cisco Controller) >client ?
(Cisco Controller) >client *DHCP Socket Task: Feb 19 13:58:16.084: 00:23:68:e5:7
7:f7 DHCP server id: 1.1.1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:58:18.185: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:18.185: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:18.185: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 12
*apfMsConnTask_6: Feb 19 13:58:18.186: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:18.186: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:18.186: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:18.186: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po

*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 In processSsidIE:4309 s


etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:58:18.187: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*pemReceiveTask: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated

*apfMsConnTask_6: Feb 19 13:58:18.188:


timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:18.188:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:18.188:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:18.188: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:58:18.190: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.190: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.190: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.190: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.190: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:18.191: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:19
.259: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer expired for station 00:23:68:e
5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:58:19.260: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key

M1 (length 121) for mobile 00:23:68:e5:77:f7


*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.263: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.263: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.263: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.263: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.263: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.265: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.265: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:19.266: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Ta
sk: Feb 19 13:58:22.523: 00:23:68:e5:77:f7 DHCP received op BOOTREQUEST (1) (len
308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:22.523: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:22.523: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:22.523: 00:23:68:e5:77:f7 DHCP selecting relay 2

- control block settings:


dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP xid: 0x965d150e
(2522682638), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:22.524: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP xid: 0x965d150e
(2522682638), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:22.525: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:22.526: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)

*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP transmitting DHCP


REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP xid: 0x965d150e
(2522682638), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:58:22.530: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:22.531: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:22.531: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:22.531: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP xid: 0x965d150e
(2522682638), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:22.532: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
config client *apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Associati
on received from mobile on BSSID 04:da:d2:90:89:29
*apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 4
*apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:58:25.138: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C

hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_5: Feb 19 13:58:25.139: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 04:da:d2:90:89:20-1
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK


(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Feb 19 13:58:25.140: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_5: Feb 19 13:58:25.141: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_5: Feb 19 13:58:25.141: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:20 f
rom Associated to Associated
*apfMsConnTask_5: Feb 19 13:58:25.141:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_5: Feb 19 13:58:25.141:
bile Station: (callerId: 48)
*apfMsConnTask_5: Feb 19 13:58:25.141:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_5: Feb 19 13:58:25.141: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 04:da:d2:90:89:2a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_5: Feb 19 13:58:25.141: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:
20 from Associated to Associated
*spamApTask7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Adding BSSID 04:da:d
2:90:89:2a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:25.143: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
?
ccx
Configure Cisco Client Extension(CCX) diagnostic options.
deauthenticate Disconnects a client.
(Cisco Controller) >config client *osapiBsnTimer: Feb 19 13:58:26.259: 00:23:68:
e5:77:f7 802.1x 'timeoutEvt' Timer expired for station 00:23:68:e5:77:f7 and for
message = M2
*dot1xMsgTask: Feb 19 13:58:26.259: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.276: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.276: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.276: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.276: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.277: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7
) Adding Fast Path rule
type = Airespace AP Client
on AP 04:da:d2:90:89:20, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID =

172.21.72.21 RUN (20


172.21.72.21 RUN (20

172.21.72.21 RUN (20


15206 Local Bridgin

g Vlan = 91, Local Bridging intf id = 16


*Dot1x_NW_MsgTask_7: Feb 19 13:58:26.280: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:26.281: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
?
ccx
Configure Cisco Client Extension(CCX) diagnostic options.
deauthenticate Disconnects a client.
(Cisco Controller) >config client ?
ccx
Configure Cisco Client Extension(CCX) diagnostic options.
deauthenticate Disconnects a client.
(Cisco Controller) >config client ?
ccx
Configure Cisco Client Extension(CCX) diagnostic options.
deauthenticate Disconnects a client.
(Cisco Controller) >config client dee*DHCP Socket Task: Feb 19 13:58:32.611: 00:
23:68:e5:77:f7 DHCP received op BOOTREQUEST (1) (len 308,vlan 50, port 13, encap
0xec03)
*DHCP Socket Task: Feb 19 13:58:32.611: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:32.611: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:32.611: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:32.611: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP xid: 0x9c37c5a8
(2620900776), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP selecting relay 2

- control block settings:


dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:32.612: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP xid: 0x9c37c5a8
(2620900776), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:32.613: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:32.614: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP xid: 0x9c37c5a8
(2620900776), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:58:32.618: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:32.619: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:32.619: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:32.619: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)

*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP transmitting DHCP


ACK (5)
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP xid: 0x9c37c5a8
(2620900776), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:32.620: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:34.451: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:34.452: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C

hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [04:da:d2:90:89:20]
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 Updated location for st
ation old AP 04:da:d2:90:89:20-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:58:34.453: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:58:34.454:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:34.454:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:34.454:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:34.454: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:34.454: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 13:58:34.455: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Creating a PKC PMKID


Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Removing BSSID 04:da
:d2:90:89:2a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:34.457: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
?
(Cisco Controller) >config client dee*osapiBsnTimer: Feb 19 13:58:35.459: 00:23:
68:e5:77:f7 802.1x 'timeoutEvt' Timer expired for station 00:23:68:e5:77:f7 and
for message = M2
*dot1xMsgTask: Feb 19 13:58:35.460: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.463: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.463: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.463: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.463: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.463: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 Ignoring invalid EAP


OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.467: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:35.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:35.468: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
authenticate ?
<MAC addr>

Enter a MAC address.

(Cisco Controller) >config client deauthenticate 0023.68e5.77f7


(Cisco Controller) >*emWeb: Feb 19 13:58:39.301: 00:23:68:e5:77:f7 apfMsDeleteBy
Mscb Scheduling mobile for deletion with deleteReason 6, reasonCode 252
*emWeb: Feb 19 13:58:39.301: 00:23:68:e5:77:f7 Scheduling deletion of Mobile Sta
tion: (callerId: 30) in 1 seconds
*osapiBsnTimer: Feb 19 13:58:40.259: 00:23:68:e5:77:f7 apfMsExpireCallback (apf_
ms.c:615) Expiring Mobile!
*apfReceiveTask: Feb 19 13:58:40.259: 00:23:68:e5:77:f7 apfMsExpireMobileStation
(apf_ms.c:5835) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:9
1:40 from Associated to Disassociated
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Sent Deauthenticate to m
obile on BSSID 68:86:a7:d6:91:40 slot 1(caller apf_ms.c:5929)
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Resetting MSCB PMK Cache
Entry 0 for station 00:23:68:e5:77:f7
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Removing BSSID 68:86:a7:
d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Setting active key cache
index 0 ---> 8
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Deleting the PMK cache w
hen de-authenticating the client.

*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Global PMK Cache deletio


n failed.
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 apfMsAssoStateDec
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 apfMsExpireMobileStation
(apf_ms.c:5967) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:9
1:40 from Disassociated to Idle
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 pemApfDeleteMobileStatio
n2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 172.21.72.21 START (0) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfReceiveTask: Feb 19 13:58:40.260: 00:23:68:e5:77:f7 Deleting mobile on AP 68
:86:a7:d6:91:40(1)
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Adding mobile on LWAPP
AP 68:86:a7:d6:91:40(1)
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 9
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Assigned interface 'vla
n91' from interface group 'fhivpump' for the client
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 0.0.0.0 START (0) Chang
ing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy
.c:2018)
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 0.0.0.0 START (0) Chang
ing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy
.c:2246)
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:41.552: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client

*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 START (0) Chang


ing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy
.c:2018)
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 START (0) Chang
ing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy
.c:2246)
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 START (0) Initi
alizing policy
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 START (0) Chang
e state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 AUTHCHECK (2) C
hange state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 0.0.0.0 8021X_REQD (3)
Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-acl-nam
e:
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 apfMsAssoStateInc
*apfMsConnTask_6: Feb 19 13:58:41.553: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Idle to Associated
*apfMsConnTask_6: Feb 19 13:58:41.553:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:41.553:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:41.553:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:41.554: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:41.554: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Adding BSSID 68:86:a

7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7


*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:41.556: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:42.659: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:58:42.660: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.663: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.663: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.665: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.665: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.665: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 8021X_REQD (
3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 L2AUTHCOMPLE

TE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flexacl-name:


*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 L2AUTHCOMPLE
TE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7
) pemAdvanceState2 5952, Adding TMP rule
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7
) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IP
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 0.0.0.0 Added NPU entry
of type 9, dtlFlags 0x0
*pemReceiveTask: Feb 19 13:58:42.666: 00:23:68:e5:77:f7 Sent an XID frame
*apfReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7) St
ate Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, c
lient state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7) pe
mAdvanceState2 5576, Adding TMP rule
*apfReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7) Re
placing Fast Path rule
type = Airespace AP - Learn IP address
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255,
*apfReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7) Fa
st Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridging Vl
an = 91, Local Bridging intf id = 16
*apfReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7) Su
ccessfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 0.0.0.0 Added NPU entry
of type 9, dtlFlags 0x0
*pemReceiveTask: Feb 19 13:58:45.660: 00:23:68:e5:77:f7 Sent an XID frame
*DHCP Socket Task: Feb 19 13:58:45.923: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:45.923: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0 VLAN: 0
*DHCP Socket Task: Feb 19 13:58:45.923: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:45.923: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP selected relay 2
- 192.227.32.62 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port 1
3)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port

13)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP xid: 0x7154e875
(1901389941), secs: 6, flags: 0
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP selected relay 2
- 192.227.32.62 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port 1
3)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 2
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP xid: 0x7154e875
(1901389941), secs: 6, flags: 0
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:45.924: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:45.925: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:45.925: 00:23:68:e5:77:f7 DHCP setting server fr
om OFFER (server 192.227.56.197, yiaddr 172.21.72.21)
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP xid: 0x7154e875
(1901389941), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:45.926: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:45.927: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:45.930: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:45.930: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:

dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,


dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP xid: 0x7154e875
(1901389941), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:45.931: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:45.932: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:45.932: 00:23:68:e5:77:f7 Overriding interface o
f client from 'vlan91' to 'vlan91' within interface group 'fhivpump'
*DHCP Socket Task: Feb 19 13:58:45.932: 00:23:68:e5:77:f7 Applying Interface pol
icy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*DHCP Socket Task: Feb 19 13:58:45.932: 00:23:68:e5:77:f7 Re-applying interface
policy for client
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7)
Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_p
olicy.c:2018)
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 0.0.0.0 DHCP_REQD (7)
Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_p
olicy.c:2246)
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 Static IP client assoc
iated to interface vlan91 which can support client subnet.
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 apfMsRunStateInc
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 172.21.72.21 DHCP_REQD
(7) Change state to RUN (20) last state DHCP_REQD (7)
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 172.21.72.21
Reached PLUMBFASTPATH: from line 6556
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 172.21.72.21
Replacing Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 172.21.72.21
Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local

RUN (20)
RUN (20)

RUN (20)
Bridging

Vlan = 91, Local Bridging intf id = 16


*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 172.21.72.21 RUN (20)
Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 Assigning Address 172.
21.72.21 to mobile
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 DHCP success event for
client. Clearing dhcp failure count for interface vlan91.
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 DHCP success event for
client. Clearing dhcp failure count for interface vlan91.
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:45.933: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP xid: 0x7154e875
(1901389941), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*pemReceiveTask: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*pemReceiveTask: Feb 19 13:58:45.934: 00:23:68:e5:77:f7 Sending a gratuitous ARP
for 172.21.72.21, VLAN Id 91
*DHCP Socket Task: Feb 19 13:58:46.718: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:46.718: 00:23:68:e5:77:f7 DHCP dropping OFFER fr
om 192.227.32.62 (yiaddr 172.21.72.129)
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 04:da:d2:90:89:29
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 4
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:58:48.039: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7
etting Central switched to TRUE
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7
pVapId = 6 and Split Acl Id = 65535

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
In processSsidIE:4309 s
In processSsidIE:4312 a

*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 Applying site-specific


Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Feb 19 13:58:48.040: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 04:da:d2:90:89:20-1
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:20 f
rom Associated to Associated

*pemReceiveTask: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU


entry.
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 apfPemAddUser2:session
timeout forstation 00:23:68:e5:77:f7 - Session Tout 0, apfMsTimeOut '0' and sess
ionTimerRunning flag is 0
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 Stopping deletion of Mo
bile Station: (callerId: 48)
*apfMsConnTask_5: Feb 19 13:58:48.041: 00:23:68:e5:77:f7 Func: apfPemAddUser2, M
s Timeout = 0, Session Timeout = 0
*apfMsConnTask_5: Feb 19 13:58:48.042: 00:23:68:e5:77:f7 Sending Assoc Response
to station on BSSID 04:da:d2:90:89:2a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_5: Feb 19 13:58:48.042: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:
20 from Associated to Associated
*spamApTask7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Adding BSSID 04:da:d
2:90:89:2a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:48.044: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:49.059: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2

*dot1xMsgTask: Feb 19 13:58:49.059: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key


M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.075: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.075: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.075: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.075: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.076: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.079: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 04:da:d2:90:89:20, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:49.080: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:49.081: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:58:51.540: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:51.540: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:51.540: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)

*DHCP Socket Task: Feb 19 13:58:51.540: 00:23:68:e5:77:f7 DHCP selecting relay 2


- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:58:51.540: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP xid: 0x629f501d
(1654607901), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:51.541: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP xid: 0x629f501d
(1654607901), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:51.543: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port

13)
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP xid: 0x629f501d
(1654607901), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:58:51.550: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:58:51.551: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:58:51.551: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:58:51.552: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:58:51.552: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:58:51.552: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:58:51.552: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:58:51.553: 00:23:68:e5:77:f7 DHCP xid: 0x629f501d
(1654607901), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:58:51.553: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:58:51.553: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:58:51.553: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:58:51.553: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:53.397: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client

*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C


hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:53.398: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [04:da:d2:90:89:20]
*pemReceiveTask: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 Updated location for st
ation old AP 04:da:d2:90:89:20-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK


(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:58:53.399:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:58:53.399:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:58:53.399:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:58:53.399: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Removing BSSID 04:da
:d2:90:89:2a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.401: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:58:53.402: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:58:54.459: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:58:54.460: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.463: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.463: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.463: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.463: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.463: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.468: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:58:54.469: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0

*DHCP Socket Task: Feb 19 13:59:01.939: 00:23:68:e5:77:f7 DHCP received op BOOTR


EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP xid: 0x97bf2c0b
(2545888267), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:01.940: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:01.941: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP xid: 0x97bf2c0b
(2545888267), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0

*DHCP Socket Task: Feb 19 13:59:01.942: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP xid: 0x97bf2c0b
(2545888267), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:01.948: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:01.949: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:01.949: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:01.949: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:01.949: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:01.949: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:01.950: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP xid: 0x97bf2c0b
(2545888267), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:01.951: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:59:03.792: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:03.793: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:03.793: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11

*apfMsConnTask_6: Feb 19 13:59:03.793: 00:23:68:e5:77:f7 Rf profile 600 Clients


are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:03.793: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:03.793: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:03.794: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy

*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 172.21.72.21 START (0)


Change state to AUTHCHECK (2) last state START (0)
*pemReceiveTask: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:03.795:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:03.795:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:59:03.795:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:59:03.795: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7

*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: Including PMKID in M1 (16)


*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.799: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:59:03.800: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:04.859: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:04.860: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.863: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.863: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.863: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.863: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.863: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.865: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID =
g Vlan = 91, Local Bridging intf id = 16

172.21.72.21 RUN (20


172.21.72.21 RUN (20

172.21.72.21 RUN (20


15206 Local Bridgin

*Dot1x_NW_MsgTask_7: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20


) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:59:04.866: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP xid: 0x9f7a158b
(2675578251), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:07.556: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:07.557: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP xid: 0x9f7a158b
(2675578251), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7

*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0


, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:07.558: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:07.562: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:07.562: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:07.562: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP xid: 0x9f7a158b
(2675578251), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:07.563: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP xid: 0x9f7a158b
(2675578251), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:07.564: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Global 200 Clients are

allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 12
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:09.661: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:09.662: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*pemReceiveTask: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:09.663: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:59:09.664: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:09.664:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:09.664:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:59:09.664:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:59:09.664: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:59:09.664: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:59:09.665: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.665: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.665: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77

:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:59:09.666: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:10.859: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:10.860: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.863: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.863: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.863: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.863: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.863: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0

IPv4 ACL ID = 255, IPv6 ACL ID =


*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:10.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:59:10.867: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*SNMPTask: Feb 19 13:59:11.307: 00:23:68:e5:77:f7 Central Switch = TRUE
*SNMPTask: Feb 19 13:59:11.311: 00:23:68:e5:77:f7 Central Switch = TRUE
*SNMPTask: Feb 19 13:59:11.315: 00:23:68:e5:77:f7 Central Switch = TRUE
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP xid: 0x8e284dff
(2385006079), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:16.500: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP transmitting DHCP

OFFER (2)
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP xid: 0x8e284dff
(2385006079), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:16.502: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP xid: 0x8e284dff
(2385006079), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:16.507: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:16.508: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:16.508: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:16.508: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP xid: 0x8e284dff
(2385006079), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21

*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0


, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:16.509: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_5: Feb 19 13:59:19.119: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 04:da:d2:90:89:29
*apfMsConnTask_5: Feb 19 13:59:19.119: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_5: Feb 19 13:59:19.119: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 4
*apfMsConnTask_5: Feb 19 13:59:19.119: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_5: Feb 19 13:59:19.119: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:59:19.120: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:59:19.120: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:59:19.120: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:59:19.120: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_5: Feb 19 13:59:19.120: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i

*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Processing RSN IE type


48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 04:da:d2:90:89:20-1
*apfMsConnTask_5: Feb 19 13:59:19.121: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:20 f
rom Associated to Associated
*apfMsConnTask_5: Feb 19 13:59:19.122:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_5: Feb 19 13:59:19.122:
bile Station: (callerId: 48)
*apfMsConnTask_5: Feb 19 13:59:19.122:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 04:da:d2:90:89:2a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_5: Feb 19 13:59:19.122: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:
20 from Associated to Associated
*spamApTask7: Feb 19 13:59:19.124: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.124: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.124: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0

*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Adding BSSID 04:da:d


2:90:89:2a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:59:19.125: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:20.259: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:20.259: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.264: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.265: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.265: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.265: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.265: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00

*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.268: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC


OMPLETE (4) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 04:da:d2:90:89:20, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:59:20.269: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP xid: 0x3971ac7f
(963751039), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:23.676: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:23.677: 00:23:68:e5:77:f7 DHCP selecting relay 2

- control block settings:


dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:23.677: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP xid: 0x3971ac7f
(963751039), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:23.678: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:23.687: 00:23:68:e5:77:f7 DHCP xid: 0x3971ac7f
(963751039), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:23.688: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:23.689: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:23.689: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)

*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP transmitting DHCP


ACK (5)
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP xid: 0x3971ac7f
(963751039), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:23.690: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:59:25.538: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:25.539: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:25.539: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 10
*apfMsConnTask_6: Feb 19 13:59:25.539: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:25.539: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:25.539: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C

hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:25.540: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [04:da:d2:90:89:20]
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 Updated location for st
ation old AP 04:da:d2:90:89:20-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:25.541:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:25.541:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:59:25.541:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:59:25.541: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 13:59:25.542: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 13:59:25.543: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.543: 00:23:68:e5:77:f7 Creating a PKC PMKID


Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.543: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.543: 00:23:68:e5:77:f7 Removing BSSID 04:da
:d2:90:89:2a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:59:25.544: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:26.659: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:26.660: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.663: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.663: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7:
n PTKINITNEGOTIATING
*Dot1x_NW_MsgTask_7:
ion timer for mobile
*Dot1x_NW_MsgTask_7:
*Dot1x_NW_MsgTask_7:
EQD (3) Change state

Feb 19 13:59:26.666: 00:23:68:e5:77:f7 Received EAPOL-key i


state (message 4) from mobile 00:23:68:e5:77:f7
Feb 19 13:59:26.666: 00:23:68:e5:77:f7 Stopping retransmiss
00:23:68:e5:77:f7
Feb 19 13:59:26.666: 00:23:68:e5:77:f7 apfMs1xStateInc
Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 Not Using WMM Compli


ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:26.666: 00:23:68:e5:77:f7 172.21.72.21
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
no debug all

RUN (20
RUN (20

RUN (20
Bridgin
RUN (20

Incorrect usage. Use the '?' or <TAB> key to list commands.


(Cisco Controller) >*pemReceiveTask: Feb 19 13:59:26.667: 00:23:68:e5:77:f7 172.
21.72.21 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP transmitting DHCP

DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP xid: 0x41bc18ae
(1102846126), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:33.764: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:33.765: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:33.765: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:33.765: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP xid: 0x41bc18ae
(1102846126), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:33.766: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP xid: 0x41bc18ae
(1102846126), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21

*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:33.771: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:33.772: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP xid: 0x41bc18ae
(1102846126), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:33.773: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 12
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:35.606: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte

rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:35.607:
override for station 00:23:68:e5:77:f7
an91'
*apfMsConnTask_6: Feb 19 13:59:35.607:
cy on Mobile, role Local. Ms NAC State

00:23:68:e5:77:f7 Applying site-specific


- vapId 7, site 'allwlans', interface 'vl
00:23:68:e5:77:f7 Applying Interface poli
2 Quarantine Vlan 0 Access Vlan 91

*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7 Re-applying interface p


olicy for client
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:35.607: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:35.608:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:35.608:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:59:35.608:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1

*apfMsConnTask_6: Feb 19 13:59:35.608: 00:23:68:e5:77:f7 apfProcessAssocReq (apf


_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 13:59:35.609: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.612: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 13:59:35.613: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:36.659: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:36.659: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.663: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.663: 00:23:68:e5:77:f7 Sending EAPOL-Key Me

ssage to mobile 00:23:68:e5:77:f7


state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.665: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.665: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.665: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.665: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.665: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 13:59:36.666: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91

*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP selected relay 1


- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP xid: 0xa1cf85 (
10604421), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:41.668: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:41.669: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:41.669: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:41.669: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:41.669: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:41.669: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP xid: 0xa1cf85 (
10604421), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:41.670: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP xid: 0xa1cf85 (
10604421), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0

*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0


, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:41.675: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:41.676: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:41.676: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP xid: 0xa1cf85 (
10604421), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:41.677: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
q*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Association received f
rom mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 12
*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:43.782: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
In processSsidIE:4309 s
In processSsidIE:4312 a
Applying site-specific

Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'


, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:43.783: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*pemReceiveTask: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 apfPemAddUser2:session
timeout forstation 00:23:68:e5:77:f7 - Session Tout 0, apfMsTimeOut '0' and sess
ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 Stopping deletion of Mo

bile Station: (callerId: 48)


*apfMsConnTask_6: Feb 19 13:59:43.784: 00:23:68:e5:77:f7 Func: apfPemAddUser2, M
s Timeout = 0, Session Timeout = 0
*apfMsConnTask_6: Feb 19 13:59:43.785: 00:23:68:e5:77:f7 Sending Assoc Response
to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:59:43.785: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 13:59:43.788: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.788: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
no *Dot1x_NW_MsgTask_7: Feb 19 13:59:43.789: 00:23:68:e5:77:f7 Sending EAPOL-Key
Message to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter
00.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:44.859: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:44.860: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.863: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.863: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.863: 00:23:68:e5:77:f7 Received EAPOL-key i

n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7


*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.863: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.863: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.865: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.865: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.865: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.865: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.21.72.21
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
debug client

RUN (20
RUN (20

RUN (20
Bridgin
RUN (20

Incorrect usage. Use the '?' or <TAB> key to list commands.


(Cisco Controller) >*pemReceiveTask: Feb 19 13:59:44.866: 00:23:68:e5:77:f7 172.
21.72.21 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,

dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:


9
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:47.492: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP xid: 0x5bd4a00e
(1540661262), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:47.493: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP xid: 0x5bd4a00e
(1540661262), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:47.494: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:47.499: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)

*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST


, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP xid: 0x5bd4a00e
(1540661262), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:47.500: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP xid: 0x5bd4a00e
(1540661262), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
no debug ?
(Cisco Controller) >no debug ?
(Cisco Controller) >no debug *DHCP Socket Task: Feb 19 13:59:47.503: 00:23:68:e5
:77:f7 DHCP server id: 1.1.1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 04:da:d2:90:89:29
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 5
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:59:50.108: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C

hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_5: Feb 19 13:59:50.109: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 04:da:d2:90:89:20-1
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)

*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK


(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_5: Feb 19 13:59:50.110: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:20 f
rom Associated to Associated
*apfMsConnTask_5: Feb 19 13:59:50.110:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_5: Feb 19 13:59:50.110:
bile Station: (callerId: 48)
*apfMsConnTask_5: Feb 19 13:59:50.110:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_5: Feb 19 13:59:50.111: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 04:da:d2:90:89:2a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_5: Feb 19 13:59:50.111: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:
20 from Associated to Associated
*spamApTask7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Adding BSSID 04:da:d
2:90:89:2a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
?
(Cisco Controller) >no debug ?
(Cisco Controller) >no debug ?
(Cisco Controller) >no debug ?
(Cisco Controller) >no debug *Dot1x_NW_MsgTask_7: Feb 19 13:59:50.114: 00:23:68:
e5:77:f7 Sending EAPOL-Key Message to mobile 00:23:68:e5:77:f7
state INITPMK (
message 1), replay counter 00.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:51.259: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:51.259: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.263: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.263: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.263: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.263: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.263: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7
) Adding Fast Path rule
type = Airespace AP Client
on AP 04:da:d2:90:89:20, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.267: 00:23:68:e5:77:f7
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID =
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:51.268: 00:23:68:e5:77:f7

172.21.72.21 RUN (20


172.21.72.21 RUN (20

172.21.72.21 RUN (20


15206 Local Bridgin
172.21.72.21 RUN (20

) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
?
(Cisco Controller) >no debu*pemReceiveTask: Feb 19 13:59:51.268: 00:23:68:e5:77:
f7 172.21.72.21 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:52.693: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP xid: 0xbfdf86fe
(3219097342), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:52.694: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:52.695: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:52.695: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP xid: 0xbfdf86fe
(3219097342), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7

*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0


, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:52.696: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP xid: 0xbfdf86fe
(3219097342), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:52.702: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 13:59:52.703: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP xid: 0xbfdf86fe
(3219097342), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 13:59:52.704: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 13:59:52.705: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
?
clear
config
debug
eping

Clear selected configuration elements.


Configure switch options and settings.
Manages system debug options.
Send Ethernet-over-IP echo packets to a specified mobility peer I

P address.
help
license
linktest
logout
mping
s.
ping
redundancy
reset
save
show
test
transfer

Help
Manage Software License
Perform a link test to a specified MAC address.
Exit this session. Any unsaved changes are lost.
Send Mobility echo packets to a specified mobility peer IP addres
Send ICMP echo packets to a specified IP address.
Manage HA Redundancy
Reset options.
Save switch configurations.
Display switch options and settings.
Test trigger commands
Transfer a file to or from the switch.

(Cisco Controller) >?


clear
config
debug
eping
P address.
help
license
linktest
logout
mping
s.
ping
redundancy
reset
save
show
test
transfer

Clear selected configuration elements.


Configure switch options and settings.
Manages system debug options.
Send Ethernet-over-IP echo packets to a specified mobility peer I
Help
Manage Software License
Perform a link test to a specified MAC address.
Exit this session. Any unsaved changes are lost.
Send Mobility echo packets to a specified mobility peer IP addres
Send ICMP echo packets to a specified IP address.
Manage HA Redundancy
Reset options.
Save switch configurations.
Display switch options and settings.
Test trigger commands
Transfer a file to or from the switch.

(Cisco Controller) >*DHCP Socket Task: Feb 19 13:59:52.705: 00:23:68:e5:77:f7 DH


CP server id: 1.1.1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:54.542: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po

licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 13:59:54.543: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [04:da:d2:90:89:20]
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 Updated location for st
ation old AP 04:da:d2:90:89:20-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD

(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac


l-name:
*apfMsConnTask_6: Feb 19 13:59:54.544: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 13:59:54.544:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 13:59:54.544:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 13:59:54.544:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 13:59:54.545: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 13:59:54.545: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 13:59:54.545: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Removing BSSID 04:da
:d2:90:89:2a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
?

clear
config
debug
eping
P address.
help
license
linktest
logout
mping
s.
ping
redundancy
reset
save
show
test
transfer

Clear selected configuration elements.


Configure switch options and settings.
Manages system debug options.
Send Ethernet-over-IP echo packets to a specified mobility peer I
Help
Manage Software License
Perform a link test to a specified MAC address.
Exit this session. Any unsaved changes are lost.
Send Mobility echo packets to a specified mobility peer IP addres
Send ICMP echo packets to a specified IP address.
Manage HA Redundancy
Reset options.
Save switch configurations.
Display switch options and settings.
Test trigger commands
Transfer a file to or from the switch.

(Cisco Controller) >?


clear
config
debug
eping
P address.
help
license
linktest
logout
mping
s.
ping
redundancy
reset
save
show
test
transfer

Clear selected configuration elements.


Configure switch options and settings.
Manages system debug options.
Send Ethernet-over-IP echo packets to a specified mobility peer I
Help
Manage Software License
Perform a link test to a specified MAC address.
Exit this session. Any unsaved changes are lost.
Send Mobility echo packets to a specified mobility peer IP addres
Send ICMP echo packets to a specified IP address.
Manage HA Redundancy
Reset options.
Save switch configurations.
Display switch options and settings.
Test trigger commands
Transfer a file to or from the switch.

(Cisco Controller) >?


clear
config
debug
eping
P address.
help
license
linktest
logout
mping
s.
ping
redundancy
reset
save
show
test
transfer

Clear selected configuration elements.


Configure switch options and settings.
Manages system debug options.
Send Ethernet-over-IP echo packets to a specified mobility peer I
Help
Manage Software License
Perform a link test to a specified MAC address.
Exit this session. Any unsaved changes are lost.
Send Mobility echo packets to a specified mobility peer IP addres
Send ICMP echo packets to a specified IP address.
Manage HA Redundancy
Reset options.
Save switch configurations.
Display switch options and settings.
Test trigger commands
Transfer a file to or from the switch.

(Cisco Controller) >*Dot1x_NW_MsgTask_7: Feb 19 13:59:54.548: 00:23:68:e5:77:f7


Sending EAPOL-Key Message to mobile 00:23:68:e5:77:f7
state INITPMK (message 1
), replay counter 00.00.00.00.00.00.00.00
*osapiBsnTimer: Feb 19 13:59:55.659: 00:23:68:e5:77:f7 802.1x 'timeoutEvt' Timer
expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 13:59:55.660: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.663: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.663: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.665: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.665: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.665: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 13:59:55.666: 00:23:68:e5:77:f7 172.21.72.21
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
no debug
Incorrect usage. Use the '?' or <TAB> key to list commands.

RUN (20
RUN (20

RUN (20
Bridgin
RUN (20

(Cisco Controller) >debug ?


11k
Configures the 802.11k debug options.
11w-pmf
Configures the 802.11w debug options.
aaa
Configures the AAA debug options.
airewave-director Configures the RRM debug options
ap
Configures debug of Cisco AP.
arp
Configures debug of ARP.
avc
Configures debug of AVC.
bcast
Configures debug of broadcast.
cac
Configures the call admission control (CAC) debug options.
call-control Configures the call control (CC) debug options.
capwap
Configures the CAPWAP debug options
cckm
Configures the CCKM debug options.
ccxdiag
Configures the CCX Diagnostic debug options.
ccxrm
Configures the CCX_RM debug options.
ccxs69
Configures the CCX S69 debug options.
cdp
Configures debug of cdp.
client
Enables debugs for common client problems for upto 10 clients.
cts
Configures the CTS debug options.
dhcp
Configures the DHCP debug options.
disable-all
Disables all debug messages.
dot11
Configures the 802.11 events debug options.
--More-- or (q)uit
(Cisco Controller) debug>*pemReceiveTask: Feb 19 13:59:55.667: 00:23:68:e5:77:f7
172.21.72.21 Added NPU entry of type 1, dtlFlags 0x0
*DHCP Socket Task: Feb 19 14:00:04.132: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:04.132: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:04.132: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:04.132: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP xid: 0x3e6d9ec0
(1047371456), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0

, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:04.133: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP xid: 0x3e6d9ec0
(1047371456), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:04.134: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:04.135: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP xid: 0x3e6d9ec0
(1047371456), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 14:00:04.139: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 14:00:04.140: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:04.140: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91

*DHCP Socket Task: Feb 19 14:00:04.140: 00:23:68:e5:77:f7 DHCP selected relay 2


- NONE
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP xid: 0x3e6d9ec0
(1047371456), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
show debug*DHCP Socket Task: Feb 19 14:00:04.141: 00:23:68:e5:77:f7 DHCP serve
r id: 1.1.1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 14:00:05.981: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 14:00:05.981: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 14:00:05.982: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 14:00:05.982: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 14:00:05.982: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:05.982: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7 Re-applying interface p

olicy for client


*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:05.983: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 14:00:05.984:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 14:00:05.984:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 14:00:05.984:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 14:00:05.984: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 14:00:05.985: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 14:00:05.986: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7

*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.986: 00:23:68:e5:77:f7 Creating a PKC PMKID


Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 14:00:05.987: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
Incorrect usage. Use the '?' or <TAB> key to list commands.
(Cisco Controller) debug>*osapiBsnTimer: Feb 19 14:00:07.059: 00:23:68:e5:77:f7
802.1x 'timeoutEvt' Timer expired for station 00:23:68:e5:77:f7 and for message
= M2
*dot1xMsgTask: Feb 19 14:00:07.060: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.063: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.063: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.063: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.063: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.063: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay

counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.066: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 14:00:07.067: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 14:00:07.068: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
exit
(Cisco Controller) >no debug client
Incorrect usage. Use the '?' or <TAB> key to list commands.
(Cisco Controller) >*SNMPTask: Feb 19 14:00:13.428: 00:23:68:e5:77:f7 Central Sw
itch = TRUE
*SNMPTask: Feb 19 14:00:13.432: 00:23:68:e5:77:f7 Central Switch = TRUE
no*SNMPTask: Feb 19 14:00:13.436: 00:23:68:e5:77:f7 Central Switch = TRUE
*DHCP Socket Task: Feb 19 14:00:14.220: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:14.220: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:14.220: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:14.220: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9

*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP selected relay 2


- NONE
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP xid: 0xec8dde01
(3968720385), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:14.221: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:14.222: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:14.222: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:14.222: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 14:00:14.222: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:14.223: 00:23:68:e5:77:f7 DHCP xid: 0xec8dde01
(3968720385), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:14.223: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:14.223: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:14.223: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:14.223: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1

*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP xid: 0xec8dde01


(3968720385), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:14.230: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:14.231: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 14:00:14.231: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 14:00:14.231: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:14.231: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:14.231: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP xid: 0xec8dde01
(3968720385), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
?
(Cisco Controller) >no ?
(Cisco Controller) >no ?
(Cisco Controller) >no *DHCP Socket Task: Feb 19 14:00:14.232: 00:23:68:e5:77:f7
DHCP server id: 1.1.1.1 rcvd server id: 192.227.56.197
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Association received fr
om mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 12
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:16.326: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po

licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 14:00:16.327: 00:23:68:e5:77:f7
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7
hange state to START (0) last state RUN (20)

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
processSsidIE statusCo
processSsidIE ssid_don
STA - rates (8): 12 18
suppRates statusCode i
Processing RSN IE type
apfMsRunStateDec
apfMs1xStateDec
172.21.72.21 RUN (20) C

*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 pemApfAddMobileStation2


: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol

icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f


rom Associated to Associated
*apfMsConnTask_6: Feb 19 14:00:16.328:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 14:00:16.328:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 14:00:16.328:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 14:00:16.328: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*pemReceiveTask: Feb 19 14:00:16.331: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*spamApTask3: Feb 19 14:00:16.331: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.331: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 14:00:16.332: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00

?
(Cisco Controller) >no ?
(Cisco Controller) >no ?
(Cisco Controller) >no ?
(Cisco Controller) >no ?
(Cisco Controller) >no *osapiBsnTimer: Feb 19 14:00:17.459: 00:23:68:e5:77:f7 80
2.1x 'timeoutEvt' Timer expired for station 00:23:68:e5:77:f7 and for message =
M2
*dot1xMsgTask: Feb 19 14:00:17.460: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.463: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.463: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.463: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.463: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.463: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 14:00:17.468: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 14:00:17.469: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
clear debug*DHCP
Socket Task: Feb 19 14:00:25.140: 00:23:68:e5:77:f7 DHCP received op BOOTREQUES
T (1) (len 308,vlan 50, port 13, encap 0xec03)

*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selecting relay 1


- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP xid: 0x442224af
(1143088303), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:25.141: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:25.143: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:25.143: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:25.143: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 14:00:25.143: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:25.144: 00:23:68:e5:77:f7 DHCP xid: 0x442224af
(1143088303), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:25.144: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:25.144: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:25.144: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:25.144: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197

*DHCP Socket Task: Feb 19 14:00:25.148: 00:23:68:e5:77:f7 DHCP received op BOOTR


EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:25.148: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP xid: 0x442224af
(1143088303), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:25.149: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP xid: 0x442224af
(1143088303), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:25.150: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:25.151: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:25.151: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:25.151: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
Incorrect usage. Use the '?' or <TAB> key to list commands.
(Cisco Controller) >clear ?
acl-counters
advanced
ap

Clear the ACl counters for given acl name.


Clear advanced configuration
Clear the join stats contents on Cisco AP(s).

arp
Clear the ARP table.
avc
Clear AVC commands.
cac
Clear Cac commands.
client
Clear stats for a client.
config
Reset configuration data to factory defaults.
crash-files
Clears WLC crash and core files.
ext-webauth-url Clear the Global/Per-Profile External Web Authentication URL.
ipv6
Clear IPv6 Information
license
Displays License related information.
location
Clears Location based system parameters
login-banner Clear controller login banner.
mdns
Clears mDNS service database
mesh
Clears stranded ap entries.
msglog
Clear message log entries.
nmsp
NMSP related information.
pmipv6
Proxy mobility
redirect-url Clear the custom Web Authentication Redirect URL.
stats
Clear statistics counters.
--More-- or (q)uit*apfMsConnTask_5: Feb 19 14:00:27.758: 00:23:68:e5:77:f7 Assoc
iation received from mobile on BSSID 04:da:d2:90:89:29
*apfMsConnTask_5: Feb 19 14:00:27.758: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_5: Feb 19 14:00:27.758: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 4
*apfMsConnTask_5: Feb 19 14:00:27.759: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_5: Feb 19 14:00:27.759: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 14:00:27.759: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_5: Feb 19 14:00:27.759: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 14:00:27.759: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 In processSsidIE:4309 s
etting Central switched to TRUE
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client

*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C


hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [68:86:a7:d6:91:40]
*pemReceiveTask: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 Updated location for st
ation old AP 68:86:a7:d6:91:40-1, new AP 04:da:d2:90:89:20-1
*apfMsConnTask_5: Feb 19 14:00:27.760: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6 flex-ac
l-name:
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:20 f
rom Associated to Associated
*apfMsConnTask_5: Feb 19 14:00:27.761:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_5: Feb 19 14:00:27.761:
bile Station: (callerId: 48)
*apfMsConnTask_5: Feb 19 14:00:27.761:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 04:da:d2:90:89:2a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_5: Feb 19 14:00:27.761: 00:23:68:e5:77:f7 apfProcessAssocReq (apf

_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 04:da:d2:90:89:


20 from Associated to Associated
*spamApTask7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Removing BSSID 68:86
:a7:d6:91:4a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Adding BSSID 04:da:d
2:90:89:2a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.763: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 04:da:d2:90:89:2a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764:
cc ae ca d7 ce 4a 68

[0000] b0 ca c1 34 82 9f d9 86 48

*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 14:00:27.764: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00
.00.00.00.00.00.00.00
(Cisco Controller) clear>*osapiBsnTimer: Feb 19 14:00:28.859: 00:23:68:e5:77:f7
802.1x 'timeoutEvt' Timer expired for station 00:23:68:e5:77:f7 and for message
= M2
*dot1xMsgTask: Feb 19 14:00:28.860: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.863: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.863: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.863: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.863: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.863: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7

state PTKINITNEGOTIATING (message 3), replay


counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 04:da:d2:90:89:20 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.866: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 04:da:d2:90:89:20, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 14:00:28.867: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 14:00:28.867: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0
debug client 0023.4512.2333
Incorrect usage. Use the '?' or <TAB> key to list commands.
(Cisco Controller) clear>*DHCP Socket Task: Feb 19 14:00:38.661: 00:23:68:e5:77:
f7 DHCP received op BOOTREQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:38.661: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:38.661: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:38.661: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 255.255.255.0,
dhcpGateway: 172.21.72.1, dhcpRelay: 172.21.72.4 VLAN:
9
*DHCP Socket Task: Feb 19 14:00:38.661: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP selecting relay 1

- control block settings:


dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP transmitting DHCP
DISCOVER (1)
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP xid: 0x3c329b33
(1009949491), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:38.662: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP transmitting DHCP
OFFER (2)
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP xid: 0x3c329b33
(1009949491), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:38.664: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP received op BOOTR
EQUEST (1) (len 308,vlan 50, port 13, encap 0xec03)
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP selecting relay 1
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP selected relay 1
- 192.227.56.197 (local address 172.21.72.4, gateway 172.21.72.1, VLAN 91, port
13)
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP transmitting DHCP
REQUEST (3)
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP op: BOOTREQUEST
, htype: Ethernet, hlen: 6, hops: 1
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP xid: 0x3c329b33
(1009949491), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6

8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 172.21.72.4
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP requested ip: 1
72.21.72.21
*DHCP Socket Task: Feb 19 14:00:38.671: 00:23:68:e5:77:f7 DHCP server id: 192.
227.56.197 rcvd server id: 1.1.1.1
*DHCP Socket Task: Feb 19 14:00:38.672: 00:23:68:e5:77:f7 DHCP sending REQUEST t
o 172.21.72.1 (len 350, port 13, vlan 91)
*DHCP Socket Task: Feb 19 14:00:38.672: 00:23:68:e5:77:f7 DHCP selecting relay 2
- control block settings:
dhcpServer: 192.227.56.197, dhcpNetmask: 0.0.0.0,
dhcpGateway: 0.0.0.0, dhcpRelay: 172.21.72.4 VLAN: 91
*DHCP Socket Task: Feb 19 14:00:38.672: 00:23:68:e5:77:f7 DHCP selected relay 2
- NONE
*DHCP Socket Task: Feb 19 14:00:38.673: 00:23:68:e5:77:f7 DHCP received op BOOTR
EPLY (2) (len 308,vlan 91, port 13, encap 0xec00)
*DHCP Socket Task: Feb 19 14:00:38.673: 00:23:68:e5:77:f7 DHCP sending REPLY to
STA (len 418, port 13, vlan 50)
*DHCP Socket Task: Feb 19 14:00:38.673: 00:23:68:e5:77:f7 DHCP transmitting DHCP
ACK (5)
*DHCP Socket Task: Feb 19 14:00:38.673: 00:23:68:e5:77:f7 DHCP op: BOOTREPLY,
htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 19 14:00:38.673: 00:23:68:e5:77:f7 DHCP xid: 0x3c329b33
(1009949491), secs: 0, flags: 0
*DHCP Socket Task: Feb 19 14:00:38.674: 00:23:68:e5:77:f7 DHCP chaddr: 00:23:6
8:e5:77:f7
*DHCP Socket Task: Feb 19 14:00:38.674: 00:23:68:e5:77:f7 DHCP ciaddr: 0.0.0.0
, yiaddr: 172.21.72.21
*DHCP Socket Task: Feb 19 14:00:38.674: 00:23:68:e5:77:f7 DHCP siaddr: 0.0.0.0
, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 19 14:00:38.674: 00:23:68:e5:77:f7 DHCP server id: 1.1.
1.1 rcvd server id: 192.227.56.197
exit
(Cisco Controller) >*apfMsConnTask_6: Feb 19 14:00:40.522: 00:23:68:e5:77:f7 Ass
ociation received from mobile on BSSID 68:86:a7:d6:91:49
*apfMsConnTask_6: Feb 19 14:00:40.523: 00:23:68:e5:77:f7 Global 200 Clients are
allowed to AP radio
*apfMsConnTask_6: Feb 19 14:00:40.523: 00:23:68:e5:77:f7 Max Client Trap Thresho
ld: 0 cur: 11
*apfMsConnTask_6: Feb 19 14:00:40.523: 00:23:68:e5:77:f7 Rf profile 600 Clients
are allowed to AP wlan
*apfMsConnTask_6: Feb 19 14:00:40.523: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:40.523: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 14:00:40.524: 00:23:68:e5:77:f7
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7

172.21.72.21 RUN (20) C


255) --- (caller apf_po
172.21.72.21 RUN (20) C
255) --- (caller apf_po
In processSsidIE:4309 s

etting Central switched to TRUE


*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7 In processSsidIE:4312 a
pVapId = 6 and Split Acl Id = 65535
*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7 Applying site-specific
Local Bridging override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans'
, interface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7 Applying Local Bridging
Interface Policy for station 00:23:68:e5:77:f7 - vlan 91, interface id 16, inte
rface 'vlan91'
*apfMsConnTask_6: Feb 19 14:00:40.525: 00:23:68:e5:77:f7 Applying site-specific
override for station 00:23:68:e5:77:f7 - vapId 7, site 'allwlans', interface 'vl
an91'
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 Applying Interface poli
cy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 91
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 Re-applying interface p
olicy for client
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2018)
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hanging IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_po
licy.c:2246)
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 processSsidIE statusCo
de is 0 and status is 0
*apfMsConnTask_6: Feb 19 14:00:40.526: 00:23:68:e5:77:f7 processSsidIE ssid_don
e_flag is 0 finish_flag is 0
*apfMsConnTask_6: Feb 19 14:00:40.527: 00:23:68:e5:77:f7 STA - rates (8): 12 18
24 36 48 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_6: Feb 19 14:00:40.527: 00:23:68:e5:77:f7 suppRates statusCode i
s 0 and gotSuppRatesElement is 1
*apfMsConnTask_6: Feb 19 14:00:40.527: 00:23:68:e5:77:f7 Processing RSN IE type
48, length 20 for mobile 00:23:68:e5:77:f7
*apfMsConnTask_6: Feb 19 14:00:40.527: 00:23:68:e5:77:f7 pemApfDeleteMobileStati
on2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*pemReceiveTask: Feb 19 14:00:40.527: 00:23:68:e5:77:f7 172.21.72.21 Removed NPU
entry.
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) D
eleted mobile LWAPP rule on AP [04:da:d2:90:89:20]
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 Updated location for st
ation old AP 04:da:d2:90:89:20-1, new AP 68:86:a7:d6:91:40-1
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 apfMsRunStateDec
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 apfMs1xStateDec
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 172.21.72.21 RUN (20) C
hange state to START (0) last state RUN (20)
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 pemApfAddMobileStation2
: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_6: Feb 19 14:00:40.528: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Initializing policy
*apfMsConnTask_6: Feb 19 14:00:40.529: 00:23:68:e5:77:f7 172.21.72.21 START (0)
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_6: Feb 19 14:00:40.529: 00:23:68:e5:77:f7 172.21.72.21 AUTHCHECK
(2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_6: Feb 19 14:00:40.529: 00:23:68:e5:77:f7 Not Using WMM Complianc
e code qosCap 00
*apfMsConnTask_6: Feb 19 14:00:40.529: 00:23:68:e5:77:f7 172.21.72.21 8021X_REQD

(3) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6 flex-ac


l-name:
*apfMsConnTask_6: Feb 19 14:00:40.530: 00:23:68:e5:77:f7 apfPemAddUser2 (apf_pol
icy.c:276) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:40 f
rom Associated to Associated
*apfMsConnTask_6: Feb 19 14:00:40.530:
timeout forstation 00:23:68:e5:77:f7 ionTimerRunning flag is 0
*apfMsConnTask_6: Feb 19 14:00:40.530:
bile Station: (callerId: 48)
*apfMsConnTask_6: Feb 19 14:00:40.530:
s Timeout = 0, Session Timeout = 0

00:23:68:e5:77:f7 apfPemAddUser2:session
Session Tout 0, apfMsTimeOut '0' and sess
00:23:68:e5:77:f7 Stopping deletion of Mo
00:23:68:e5:77:f7 Func: apfPemAddUser2, M

*apfMsConnTask_6: Feb 19 14:00:40.530: 00:23:68:e5:77:f7 Sending Assoc Response


to station on BSSID 68:86:a7:d6:91:4a (status 0) ApVapId 6 Slot 1
*apfMsConnTask_6: Feb 19 14:00:40.531: 00:23:68:e5:77:f7 apfProcessAssocReq (apf
_80211.c:7510) Changing state for mobile 00:23:68:e5:77:f7 on AP 68:86:a7:d6:91:
40 from Associated to Associated
*spamApTask3: Feb 19 14:00:40.532: 00:23:68:e5:77:f7 Sent 1x initiate message to
multi thread task for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Creating a PKC PMKID
Cache entry for station 00:23:68:e5:77:f7 (RSN 2)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Resetting MSCB PMK C
ache Entry 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Removing BSSID 04:da
:d2:90:89:2a from PMKID cache of station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Setting active key c
ache index 0 ---> 8
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Setting active key c
ache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Adding BSSID 68:86:a
7:d6:91:4a to PMKID cache at index 0 for station 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Initiating RSN PSK t


o mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 dot1x - moving mobil
e 00:23:68:e5:77:f7 into Force Auth state
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Found an cache entry
for BSSID 68:86:a7:d6:91:4a in PMKID cache at index 0 of station 00:23:68:e5:77
:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533:
c5 9c 4c dd da 38 27

[0000] 4a 59 03 4f 73 eb 27 68 9e

*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Starting key exchang


e to mobile 00:23:68:e5:77:f7, data packets will be dropped
*Dot1x_NW_MsgTask_7: Feb 19 14:00:40.533: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state INITPMK (message 1), replay counter 00

.00.00.00.00.00.00.00
debug clie*osapiBsnTimer: Feb 19 14:00:41.659: 00:23:68:e5:77:f7 802.1x 'timeout
Evt' Timer expired for station 00:23:68:e5:77:f7 and for message = M2
*dot1xMsgTask: Feb 19 14:00:41.660: 00:23:68:e5:77:f7 Retransmit 1 of EAPOL-Key
M1 (length 121) for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.663: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.663: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.663: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTK_START state (message 2) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.663: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.663: 00:23:68:e5:77:f7 Sending EAPOL-Key Me
ssage to mobile 00:23:68:e5:77:f7
state PTKINITNEGOTIATING (message 3), replay
counter 00.00.00.00.00.00.00.02
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.665: 00:23:68:e5:77:f7 Received EAPOL-Key f
rom mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 Ignoring invalid EAP
OL version (1) in EAPOL-key message from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 Received EAPOL-key i
n PTKINITNEGOTIATING state (message 4) from mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 Stopping retransmiss
ion timer for mobile 00:23:68:e5:77:f7
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 8021X_R
EQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 Not Using WMM Compli
ance code qosCap 00
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:d6:91:40 vapId 7 apVapId 6
flex-acl-name:
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 apfMsRunStateInc
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 L2AUTHC
OMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Reached PLUMBFASTPATH: from line 6076
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Adding Fast Path rule
type = Airespace AP Client
on AP 68:86:a7:d6:91:40, slot 1, interface = 13, QOS = 0
IPv4 ACL ID = 255, IPv6 ACL ID =
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridgin
g Vlan = 91, Local Bridging intf id = 16
*Dot1x_NW_MsgTask_7: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 RUN (20
) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 19 14:00:41.666: 00:23:68:e5:77:f7 172.21.72.21 Added NPU e
ntry of type 1, dtlFlags 0x0

S-ar putea să vă placă și