=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2014.09.22 10:14:14 =~=~=~=~=~=~=~=~=~=~=~= (Cisco Controller) >show debug MAC Addr 1.................................. 00:80:48:78:50:65 Debug Flags Enabled: dhcp packet enabled. dot11 mobile enabled. dot11 state enabled dot1x events enabled. dot1x states enabled. mobility client handoff enabled. pem events enabled. pem state enabled. 802.11r event debug enabled. 802.11w event debug enabled. CCKM client debug enabled. (Cisco Controller) >show debug            debug client 00:80:48:78:50:65                              debug l2roam detail enable (Cisco Controller) >debug l2roam detail enable                            show debug            debug client 00:80:48:78:50:65 (Cisco Controller) >? clear Clear selected configuration elements. config Configure switch options and settings. cping Send capwap echo packets to a specified mobility peer IP address. debug Manages system debug options. eping Send Ethernet-over-IP echo packets to a specified mobility peer IP address. grep Print lines matching a pattern. help Help license Manage Software License linktest Perform a link test to a specified MAC address. logout Exit this session. Any unsaved changes are lost. mping Send Mobility echo packets to a specified mobility peer IP address. ping Send ICMP echo packets to a specified IP address. reset Reset options. save Save switch configurations. show Display switch options and settings. test Test trigger commands transfer Transfer a file to or from the switch. (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 10:27:38.823: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:27:38.824: RSNIE in Assoc. Req.: (38) *apfMsConnTask_7: Sep 22 10:27:38.824: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 10:27:38.824: [0016] ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 *apfMsConnTask_7: Sep 22 10:27:38.824: [0032] 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 10:27:38.824: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: Received PMKID: (16) *apfMsConnTask_7: Sep 22 10:27:38.825: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Found a valid PMKID in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Setting active key cache index 0 ---> 0 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 68:86:a7:29:cf:60 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *pemReceiveTask: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 10:27:38.825: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 10:27:38.826: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 10:27:38.836: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.836: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.836: 00:80:48:78:50:65 Initiating RSN with existing PMK to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.836: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.836: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.836: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Force Auth state *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Skipping EAP-Success to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Username entry (sani.tized) already exists in name table, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Username entry (sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Applying cached RADIUS Override values for mobile 00:80:48:78:50:65 (caller 1x_auth_pae.c:779) *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.837: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.872: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000010: 00 0f ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 .........i...... *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000020: d9 56 49 41 1f 0c ed a3 .VIA.... *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000010: ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 .......i.......V *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00000020: 49 41 1f 0c ed a3 IA.... *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.873: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.884: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 68:86:a7:29:cf:60, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:27:38.885: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*pemReceiveTask: Sep 22 10:27:38.886: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_7: Sep 22 10:39:43.780: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:39:43.781: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:39:43.782: RSNIE in Assoc. Req.: (38) *apfMsConnTask_7: Sep 22 10:39:43.782: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 10:39:43.782: [0016] ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 *apfMsConnTask_7: Sep 22 10:39:43.782: [0032] 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: Received PMKID: (16) *apfMsConnTask_7: Sep 22 10:39:43.782: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Found a valid PMKID in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 Setting active key cache index 0 ---> 0 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 68:86:a7:29:cf:60 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_7: Sep 22 10:39:43.782: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 10:39:43.783: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *pemReceiveTask: Sep 22 10:39:43.784: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *spamApTask3: Sep 22 10:39:43.788: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.788: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.788: 00:80:48:78:50:65 Initiating RSN with existing PMK to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Force Auth state *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Skipping EAP-Success to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Username entry (sani.tized) already exists in name table, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Username entry (sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Applying cached RADIUS Override values for mobile 00:80:48:78:50:65 (caller 1x_auth_pae.c:779) *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.789: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.822: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000010: 00 0f ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 .........i...... *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000020: d9 56 49 41 1f 0c ed a3 .VIA.... *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000010: ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 .......i.......V *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00000020: 49 41 1f 0c ed a3 IA.... *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.823: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 68:86:a7:29:cf:60, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.838: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.839: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.839: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.839: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:39:43.839: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 10:39:43.839: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_2: Sep 22 10:42:20.516: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:42:20.517: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:42:20.518: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 10:42:20.518: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:42:20.518: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Removing BSSID 68:86:a7:29:cf:60 from PMKID cache of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 10:42:20.518: 00:80:48:78:50:65 10.0.45.201 RUN (20) Deleted mobile LWAPP rule on AP [68:86:a7:29:cf:60] *pemReceiveTask: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Updated location for station old AP 68:86:a7:29:cf:60-0, new AP 6c:99:89:77:41:e0-0 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:42:20.519: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:42:20.523: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.523: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.523: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.523: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.523: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.523: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.538: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.544: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.544: 00:80:48:78:50:65 Entering Backend Auth Req state (id=163) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.544: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 163 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.544: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 163) *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.544: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.577: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.577: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 163, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.577: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.577: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.579: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.579: 00:80:48:78:50:65 Entering Backend Auth Req state (id=164) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.579: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 164) *Dot1x_NW_MsgTask_5: Sep 22 10:42:20.580: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *spamApTask3: Sep 22 10:42:34.033: 00:80:48:78:50:65 Received DELETE mobile, reason MN_REASSOC_TIMEOUT, from AP 68:86:a7:29:cf:60, slot 0 ...cleaning up mscb *spamApTask3: Sep 22 10:42:34.033: 00:80:48:78:50:65 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 68:86:a7:29:cf:60, slot 0. STA connecting AP: 6c:99:89:77:41:e0, slot 0 *osapiBsnTimer: Sep 22 10:42:50.404: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:42:50.404: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 1016) for mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:43:20.404: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:43:20.404: 00:80:48:78:50:65 Retransmit 2 of EAP-Request (length 1016) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.426: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.426: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 164, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.426: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.426: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.429: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.429: 00:80:48:78:50:65 Entering Backend Auth Req state (id=165) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.429: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 165) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.429: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.445: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.445: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 165, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.445: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.445: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.447: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.447: 00:80:48:78:50:65 Entering Backend Auth Req state (id=166) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.447: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 166) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.447: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.518: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.519: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 166, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.519: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.519: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.522: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.522: 00:80:48:78:50:65 Entering Backend Auth Req state (id=167) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.522: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 167) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.522: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.533: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.533: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 167, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.533: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.533: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 Processing Access-Reject for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 apfMsPeapSimReqFailureCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 PMK: Sending cache delete *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 Removing PMK cache entry for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 1 PMK-remove groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 Removing PMK cache due to EAP-Failure for mobile 00:80:48:78:50:65 (EAP Id 167) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 Sending EAP-Failure to mobile 00:80:48:78:50:65 (EAP Id 167) *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.536: 00:80:48:78:50:65 Entering Backend Auth Failure state (id=167) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.537: 00:80:48:78:50:65 Setting quiet timer for 5 seconds for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:20.537: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Unknown state *osapiBsnTimer: Sep 22 10:43:25.404: 00:80:48:78:50:65 802.1x 'quiteWhile' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:43:25.404: 00:80:48:78:50:65 quiet timer completed for mobile 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 10:43:25.404: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:43:25.404: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 169) *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 10:43:31.129: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:43:31.130: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:43:31.130: RSNIE in Assoc. Req.: (38) *apfMsConnTask_7: Sep 22 10:43:31.130: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 10:43:31.130: [0016] ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 *apfMsConnTask_7: Sep 22 10:43:31.130: [0032] 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: Received PMKID: (16) *apfMsConnTask_7: Sep 22 10:43:31.131: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 No valid PMKID found in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Trying to compute a PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_7: Sep 22 10:43:31.131: [0000] 68 86 a7 29 cf 60 *apfMsConnTask_7: Sep 22 10:43:31.131: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_7: Sep 22 10:43:31.131: [0000] 68 86 a7 29 cf 60 *apfMsConnTask_7: Sep 22 10:43:31.131: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_7: Sep 22 10:43:31.131: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Unable to compute a valid PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Searching for PMK in global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Unable to compute a valid PMKID from global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Updated location for station old AP 6c:99:89:77:41:e0-0, new AP 68:86:a7:29:cf:60-0 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 Updating AID for REAP AP Client 68:86:a7:29:cf:60 - AID ===> 1 *apfMsConnTask_7: Sep 22 10:43:31.131: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 10:43:31.132: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 10:43:31.137: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.137: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.137: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.138: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.138: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.138: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.218: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.223: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.223: 00:80:48:78:50:65 Entering Backend Auth Req state (id=224) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.223: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 224 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.223: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 224) *Dot1x_NW_MsgTask_5: Sep 22 10:43:31.223: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:44:01.204: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:44:01.204: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 10) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.216: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.216: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 224, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.216: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.216: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.219: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.219: 00:80:48:78:50:65 Entering Backend Auth Req state (id=225) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.220: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 225) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.220: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.245: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.245: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 225, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.245: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.245: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.247: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.247: 00:80:48:78:50:65 Entering Backend Auth Req state (id=226) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.247: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 226) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.247: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.264: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.264: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 226, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.264: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.264: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.265: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.266: 00:80:48:78:50:65 Entering Backend Auth Req state (id=227) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.266: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 227) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.266: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.328: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.328: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 227, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.328: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.328: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.339: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.339: 00:80:48:78:50:65 Entering Backend Auth Req state (id=228) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.339: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 228) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.339: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.350: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.350: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 228, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.350: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.350: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.352: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.352: 00:80:48:78:50:65 Entering Backend Auth Req state (id=229) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.352: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 229) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.352: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.364: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.364: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 229, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.364: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.364: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.366: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.366: 00:80:48:78:50:65 Entering Backend Auth Req state (id=230) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.366: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 230) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.366: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.394: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.394: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 230, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.394: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.394: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.428: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.428: 00:80:48:78:50:65 Entering Backend Auth Req state (id=231) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.428: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 231) *Dot1x_NW_MsgTask_5: Sep 22 10:44:01.428: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:44:31.404: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:44:31.404: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 95) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.418: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.419: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 231, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.419: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.419: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 Processing Access-Reject for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 apfMsPeapSimReqFailureCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 1 PMK-remove groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 Removing PMK cache due to EAP-Failure for mobile 00:80:48:78:50:65 (EAP Id 231) *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 Sending EAP-Failure to mobile 00:80:48:78:50:65 (EAP Id 231) *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 Entering Backend Auth Failure state (id=231) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 Setting quiet timer for 5 seconds for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:31.423: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Unknown state *apfMsConnTask_7: Sep 22 10:44:35.138: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 10:44:35.138: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 10:44:35.138: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:44:35.139: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:44:35.140: RSNIE in Assoc. Req.: (38) *apfMsConnTask_7: Sep 22 10:44:35.140: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 10:44:35.140: [0016] ac 01 00 00 01 00 ef 69 f4 b0 8d 99 9e c8 d9 56 *apfMsConnTask_7: Sep 22 10:44:35.140: [0032] 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: Received PMKID: (16) *apfMsConnTask_7: Sep 22 10:44:35.140: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 No valid PMKID found in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Trying to compute a PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_7: Sep 22 10:44:35.140: [0000] 68 86 a7 29 cf 60 *apfMsConnTask_7: Sep 22 10:44:35.140: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_7: Sep 22 10:44:35.140: [0000] 68 86 a7 29 cf 60 *apfMsConnTask_7: Sep 22 10:44:35.140: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_7: Sep 22 10:44:35.140: [0000] ef 69 f4 b0 8d 99 9e c8 d9 56 49 41 1f 0c ed a3 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Unable to compute a valid PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Searching for PMK in global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Unable to compute a valid PMKID from global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 68:86:a7:29:cf:60 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.140: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 10:44:35.141: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 10:44:35.149: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:44:35.150: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:44:35.150: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:44:35.150: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:44:35.150: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:44:35.150: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *osapiBsnTimer: Sep 22 10:45:05.004: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:45:05.004: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:45:05.004: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 2) *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 Received Identity Response (count=2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 Resetting reauth count 2 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.024: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.030: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.030: 00:80:48:78:50:65 Entering Backend Auth Req state (id=234) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.030: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 2 ===> 234 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.030: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 234) *Dot1x_NW_MsgTask_5: Sep 22 10:45:05.030: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:45:35.004: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:45:35.004: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 10) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.015: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.015: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 234, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.015: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.016: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.018: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.018: 00:80:48:78:50:65 Entering Backend Auth Req state (id=235) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.018: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 235) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.018: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.035: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.035: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 235, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.035: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.035: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.036: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.036: 00:80:48:78:50:65 Entering Backend Auth Req state (id=236) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.036: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 236) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.036: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.053: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.053: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 236, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.053: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.053: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.054: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.054: 00:80:48:78:50:65 Entering Backend Auth Req state (id=237) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.055: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 237) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.055: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.123: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.123: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 237, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.123: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.123: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.134: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.134: 00:80:48:78:50:65 Entering Backend Auth Req state (id=238) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.134: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 238) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.134: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.149: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.149: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 238, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.149: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.149: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.151: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.151: 00:80:48:78:50:65 Entering Backend Auth Req state (id=239) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.151: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 239) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.151: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.169: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.169: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 239, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.170: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.170: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.171: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.171: 00:80:48:78:50:65 Entering Backend Auth Req state (id=240) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.171: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 240) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.171: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.201: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.201: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 240, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.201: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.201: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.214: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.214: 00:80:48:78:50:65 Entering Backend Auth Req state (id=241) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.214: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 241) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.214: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.226: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.226: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 241, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.226: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.226: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.227: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.227: 00:80:48:78:50:65 Entering Backend Auth Req state (id=242) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.227: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 242) *Dot1x_NW_MsgTask_5: Sep 22 10:45:35.227: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:45:46.823: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:45:46.824: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 10:45:46.824: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:45:46.824: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:45:46.824: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Deleted mobile LWAPP rule on AP [68:86:a7:29:cf:60] *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Updated location for station old AP 68:86:a7:29:cf:60-0, new AP 6c:99:89:77:41:e0-0 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:45:46.825: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:45:46.830: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:45:46.830: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:45:46.830: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:45:46.830: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:45:46.830: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:45:46.831: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *osapiBsnTimer: Sep 22 10:46:16.804: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:46:16.804: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:46:16.804: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 2) *osapiBsnTimer: Sep 22 10:46:46.804: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:46:46.804: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:46:46.804: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 3) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 Received Identity Response (count=3) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 Resetting reauth count 3 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.816: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.823: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.823: 00:80:48:78:50:65 Entering Backend Auth Req state (id=171) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.823: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 3 ===> 171 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.823: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 171) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.823: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.854: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.854: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 171, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.854: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.854: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.856: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.856: 00:80:48:78:50:65 Entering Backend Auth Req state (id=172) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.856: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 172) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.856: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.870: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.870: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 172, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.870: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.870: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.871: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.871: 00:80:48:78:50:65 Entering Backend Auth Req state (id=173) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.871: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 173) *Dot1x_NW_MsgTask_5: Sep 22 10:46:46.871: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:46:58.348: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:46:58.348: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:46:58.348: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:46:58.348: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:46:58.349: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:46:58.350: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 10:46:58.350: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:46:58.350: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:46:58.350: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 10:46:58.351: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:46:58.351: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:46:58.355: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.355: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.355: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.355: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.356: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.356: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.365: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.375: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.375: 00:80:48:78:50:65 Entering Backend Auth Req state (id=136) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.375: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 136 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.375: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 136) *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.375: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.388: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.388: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 136, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.388: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.388: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.390: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.390: 00:80:48:78:50:65 Entering Backend Auth Req state (id=137) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.390: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 137) *Dot1x_NW_MsgTask_5: Sep 22 10:46:58.390: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:47:28.204: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:47:28.204: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 1016) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.226: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.226: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 137, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.226: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.226: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.228: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.228: 00:80:48:78:50:65 Entering Backend Auth Req state (id=138) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.229: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 138) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.229: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.242: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.242: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 138, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.242: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.242: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.244: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.244: 00:80:48:78:50:65 Entering Backend Auth Req state (id=139) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.244: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 139) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.244: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.305: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.305: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 139, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.305: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.305: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.308: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.308: 00:80:48:78:50:65 Entering Backend Auth Req state (id=140) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.308: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 140) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.308: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.319: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.319: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 140, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.319: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.320: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Processing Access-Reject for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 apfMsPeapSimReqFailureCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 1 PMK-remove groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Removing PMK cache due to EAP-Failure for mobile 00:80:48:78:50:65 (EAP Id 140) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Sending EAP-Failure to mobile 00:80:48:78:50:65 (EAP Id 140) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Entering Backend Auth Failure state (id=140) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 apfBlacklistMobileStationEntry2 (apf_ms.c:6172) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Exclusion-list (1) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 44) in 10 seconds *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to START (0) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 10.0.45.201 START (0) Reached FAILURE: from line 5620 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 9) in 10 seconds *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Max AAA failure for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 Setting quiet timer for 5 seconds for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:47:28.327: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Unknown state *osapiBsnTimer: Sep 22 10:47:33.204: 00:80:48:78:50:65 802.1x 'quiteWhile' Timer expired for station 00:80:48:78:50:65 and for message = M0 *osapiBsnTimer: Sep 22 10:47:38.204: 00:80:48:78:50:65 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Sent Deauthenticate to mobile on BSSID 6c:99:89:77:41:e0 slot 0(caller apf_ms.c:7065) *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Deleting the PMK cache when de-authenticating the client. *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Global PMK Cache deletion failed. *apfReceiveTask: Sep 22 10:47:38.204: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *apfReceiveTask: Sep 22 10:47:38.205: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 46) in 60 seconds *apfReceiveTask: Sep 22 10:47:38.205: 00:80:48:78:50:65 apfMsExpireMobileStation (apf_ms.c:7095) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Exclusion-list (1) to Exclusion-list (2) *apfReceiveTask: Sep 22 10:47:38.205: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 22 10:47:38.205: 00:80:48:78:50:65 10.0.45.201 START (0) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *spamApTask6: Sep 22 10:47:57.709: 00:80:48:78:50:65 Received DELETE mobile, reason MN_REASSOC_TIMEOUT, from AP 6c:99:89:77:41:e0, slot 0 ...cleaning up mscb *spamApTask6: Sep 22 10:47:57.709: 00:80:48:78:50:65 Ignoring delete request from AP due to mobile in exclusion list or marked for deletion already *osapiBsnTimer: Sep 22 10:48:38.204: 00:80:48:78:50:65 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 10:48:38.204: 00:80:48:78:50:65 Username entry deleted for mobile *apfReceiveTask: Sep 22 10:48:38.204: 00:80:48:78:50:65 apfMsAssoStateDec *apfReceiveTask: Sep 22 10:48:38.204: 00:80:48:78:50:65 Deleting mobile on AP 6c:99:89:77:41:e0(0) *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Adding mobile on LWAPP AP 68:86:a7:29:cf:60(0) *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_7: Sep 22 10:51:47.270: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 0 0 0 0 0 0 0 0 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 10:51:47.271: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 10:51:47.271: RSNIE in Assoc. Req.: (20) *apfMsConnTask_7: Sep 22 10:51:47.272: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 10:51:47.272: [0016] ac 01 00 00 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Updating AID for REAP AP Client 68:86:a7:29:cf:60 - AID ===> 1 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 0.0.0.0 START (0) Initializing policy *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 apfMsAssoStateInc *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Idle to Associated *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 10:51:47.272: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 10:51:47.273: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 10:51:47.273: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 10:51:47.273: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 10:51:47.277: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 1 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:51:47.277: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *osapiBsnTimer: Sep 22 10:52:17.204: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:52:17.204: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:52:17.204: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 2) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 Received Identity Response (count=2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 Resetting reauth count 2 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.214: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.220: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.220: 00:80:48:78:50:65 Entering Backend Auth Req state (id=27) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.221: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 2 ===> 27 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.221: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 27) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.221: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.232: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.232: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 27, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.232: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.232: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.234: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.234: 00:80:48:78:50:65 Entering Backend Auth Req state (id=28) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.234: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 28) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.234: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.249: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.249: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 28, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.249: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.249: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.251: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.251: 00:80:48:78:50:65 Entering Backend Auth Req state (id=29) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.252: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 29) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.252: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.268: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.268: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 29, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.268: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.268: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.269: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.269: 00:80:48:78:50:65 Entering Backend Auth Req state (id=30) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.270: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 30) *Dot1x_NW_MsgTask_5: Sep 22 10:52:17.270: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:52:47.204: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:52:47.205: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 452) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.220: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.220: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 30, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.221: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.221: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.223: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.223: 00:80:48:78:50:65 Entering Backend Auth Req state (id=31) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.223: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 31) *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.223: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.233: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.233: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 31, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.233: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.233: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.240: 00:80:48:78:50:65 Processing Access-Reject for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.240: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.240: 00:80:48:78:50:65 apfMsPeapSimReqFailureCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 1 PMK-remove groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 Removing PMK cache due to EAP-Failure for mobile 00:80:48:78:50:65 (EAP Id 31) *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 Sending EAP-Failure to mobile 00:80:48:78:50:65 (EAP Id 31) *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 Entering Backend Auth Failure state (id=31) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 Setting quiet timer for 5 seconds for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:47.241: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Unknown state *osapiBsnTimer: Sep 22 10:52:52.204: 00:80:48:78:50:65 802.1x 'quiteWhile' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:52:52.204: 00:80:48:78:50:65 quiet timer completed for mobile 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 10:52:52.204: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 10:52:52.204: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 33) *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:52:57.342: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:52:57.343: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 10:52:57.343: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:52:57.343: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 10:52:57.343: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [68:86:a7:29:cf:60] *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Updated location for station old AP 68:86:a7:29:cf:60-0, new AP 6c:99:89:77:41:e0-0 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:52:57.344: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:52:57.349: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.349: 00:80:48:78:50:65 reauth_sm state transition 1 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.349: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.349: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.350: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.350: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.362: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.363: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.363: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.363: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.363: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.363: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.369: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.369: 00:80:48:78:50:65 Entering Backend Auth Req state (id=190) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.369: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 190 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.369: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 190) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.369: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.383: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.383: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 190, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.383: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.383: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.385: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.385: 00:80:48:78:50:65 Entering Backend Auth Req state (id=191) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.385: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 191) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.385: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.411: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.411: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 191, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.411: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.411: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.413: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.413: 00:80:48:78:50:65 Entering Backend Auth Req state (id=192) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.413: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 192) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.413: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.439: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.439: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 192, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.439: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.439: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.442: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.442: 00:80:48:78:50:65 Entering Backend Auth Req state (id=193) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.442: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 193) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.442: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.514: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.514: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 193, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.514: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.514: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.526: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.526: 00:80:48:78:50:65 Entering Backend Auth Req state (id=194) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.526: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 194) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.526: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.536: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.537: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 194, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.537: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.537: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.538: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.538: 00:80:48:78:50:65 Entering Backend Auth Req state (id=195) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.538: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 195) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.538: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.560: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.560: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 195, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.560: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.560: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.562: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.562: 00:80:48:78:50:65 Entering Backend Auth Req state (id=196) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.562: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 196) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.562: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.593: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.593: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 196, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.593: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.593: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.616: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.616: 00:80:48:78:50:65 Entering Backend Auth Req state (id=197) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.616: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 197) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.616: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.632: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.632: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 197, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.632: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.632: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.634: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.634: 00:80:48:78:50:65 Entering Backend Auth Req state (id=198) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.634: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 198) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.634: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.638: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.638: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 198, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.638: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.638: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.660: 00:80:48:78:50:65 Processing Access-Accept for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Username entry (sani.tized) created for mobile, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Username entry (sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Inserting AAA Override struct for mobile MAC: 00:80:48:78:50:65, source 4 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.661: 00:80:48:78:50:65 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Creating a PKC PMKID Cache entry for station 00:80:48:78:50:65 (RSN 2) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Adding BSSID 6c:99:89:77:41:e0 to PMKID cache at index 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: New PMKID: (16) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: [0000] 15 2c 49 40 65 1f 06 69 f9 6f b7 40 b9 9a f6 05 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 PMK sent to mobility group *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.662: 00:80:48:78:50:65 Sending EAP-Success to mobile 00:80:48:78:50:65 (EAP Id 198) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: [0000] 15 2c 49 40 65 1f 06 69 f9 6f b7 40 b9 9a f6 05 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Entering Backend Auth Success state (id=198) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 Received Auth Success while in Authenticating state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.663: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticated state *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.706: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.707: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.707: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.707: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.707: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 10:52:57.707: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:52:58.804: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M3 *dot1xMsgTask: Sep 22 10:52:58.804: 00:80:48:78:50:65 Retransmit 1 of EAPOL-Key M3 (length 155) for mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:52:59.804: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M3 *dot1xMsgTask: Sep 22 10:52:59.804: 00:80:48:78:50:65 Retransmit 2 of EAPOL-Key M3 (length 155) for mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:53:00.804: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M3 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Retransmit failure for EAPOL-Key M3 to mobile 00:80:48:78:50:65, retransmit count 3, mscb deauth count 0 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Removing BSSID 6c:99:89:77:41:e0 from PMKID cache of station 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Sent Deauthenticate to mobile on BSSID 6c:99:89:77:41:e0 slot 0(caller 1x_ptsm.c:599) *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 Deleting the PMK cache when de-authenticating the client. *dot1xMsgTask: Sep 22 10:53:00.804: 00:80:48:78:50:65 PMK: Sending cache delete *dot1xMsgTask: Sep 22 10:53:00.805: 00:80:48:78:50:65 Removing PMK cache entry for station 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 10:53:00.805: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds *dot1xMsgTask: Sep 22 10:53:00.805: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:53:02.329: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:53:02.330: RSNIE in Assoc. Req.: (38) *apfMsConnTask_2: Sep 22 10:53:02.330: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:53:02.330: [0016] ac 01 00 00 01 00 15 2c 49 40 65 1f 06 69 f9 6f *apfMsConnTask_2: Sep 22 10:53:02.330: [0032] b7 40 b9 9a f6 05 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:53:02.330: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: Received PMKID: (16) *apfMsConnTask_2: Sep 22 10:53:02.331: [0000] 15 2c 49 40 65 1f 06 69 f9 6f b7 40 b9 9a f6 05 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 No valid PMKID found in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Trying to compute a PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_2: Sep 22 10:53:02.331: [0000] 6c 99 89 77 41 e0 *apfMsConnTask_2: Sep 22 10:53:02.331: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_2: Sep 22 10:53:02.331: [0000] 6c 99 89 77 41 e0 *apfMsConnTask_2: Sep 22 10:53:02.331: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_2: Sep 22 10:53:02.331: [0000] 15 2c 49 40 65 1f 06 69 f9 6f b7 40 b9 9a f6 05 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Unable to compute a valid PMKID from MSCB PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Searching for PMK in global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Unable to compute a valid PMKID from global PMK cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 0.0.0.0 START (0) Initializing policy *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:53:02.331: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:53:02.332: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:53:02.342: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 1 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.342: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.353: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.359: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.359: 00:80:48:78:50:65 Entering Backend Auth Req state (id=135) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.359: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 135 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.359: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 135) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.359: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.373: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.373: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 135, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.373: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.374: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.376: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.376: 00:80:48:78:50:65 Entering Backend Auth Req state (id=136) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.376: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 136) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.376: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.392: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.392: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 136, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.392: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.392: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.393: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.394: 00:80:48:78:50:65 Entering Backend Auth Req state (id=137) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.394: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 137) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.394: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.410: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.410: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 137, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.410: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.410: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.411: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.412: 00:80:48:78:50:65 Entering Backend Auth Req state (id=138) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.412: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 138) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.412: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.492: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.492: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 138, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.492: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.492: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.504: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.504: 00:80:48:78:50:65 Entering Backend Auth Req state (id=139) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.504: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 139) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.504: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.518: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.518: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 139, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.518: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.518: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.520: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.520: 00:80:48:78:50:65 Entering Backend Auth Req state (id=140) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.520: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 140) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.520: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.535: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.535: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 140, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.535: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.535: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.537: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.537: 00:80:48:78:50:65 Entering Backend Auth Req state (id=141) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.537: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 141) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.537: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.564: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.564: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 141, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.564: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.564: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.572: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.572: 00:80:48:78:50:65 Entering Backend Auth Req state (id=142) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.572: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 142) *Dot1x_NW_MsgTask_5: Sep 22 10:53:02.572: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 10:53:32.404: 00:80:48:78:50:65 802.1x 'timeoutEvt' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 10:53:32.404: 00:80:48:78:50:65 Retransmit 1 of EAP-Request (length 95) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.413: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.413: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 142, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.413: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.413: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.416: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.416: 00:80:48:78:50:65 Entering Backend Auth Req state (id=143) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.416: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 143) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.416: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.427: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.427: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 143, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.427: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.427: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Processing Access-Accept for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.448: 00:80:48:78:50:65 Inserting AAA Override struct for mobile MAC: 00:80:48:78:50:65, source 4 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Creating a PKC PMKID Cache entry for station 00:80:48:78:50:65 (RSN 2) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Adding BSSID 6c:99:89:77:41:e0 to PMKID cache at index 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: New PMKID: (16) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: [0000] c2 1b 3f 2c 47 47 3c 13 5c 3d 02 d8 3e e9 1e 25 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 PMK sent to mobility group *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.449: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Sending EAP-Success to mobile 00:80:48:78:50:65 (EAP Id 143) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: [0000] c2 1b 3f 2c 47 47 3c 13 5c 3d 02 d8 3e e9 1e 25 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Entering Backend Auth Success state (id=143) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 Received Auth Success while in Authenticating state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.450: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticated state *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.482: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.482: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.482: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000010: 00 0f ac 01 00 00 01 00 15 2c 49 40 65 1f 06 69 .........,I@e..i *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000020: f9 6f b7 40 b9 9a f6 05 .o.@.... *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000010: ac 01 00 00 01 00 15 2c 49 40 65 1f 06 69 f9 6f .......,I@e..i.o *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00000020: b7 40 b9 9a f6 05 .@.... *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.483: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Mobility query, PEM State: L2AUTHCOMPLETE *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Building Mobile Announce : *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Building Client Payload: *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Client Ip: 0.0.0.0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Client Vlan Ip: 10.0.45.7, Vlan mask : 255.255.254.0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Client Vap Security: 278528 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Virtual Ip: 1.1.1.1 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 ssid: e-connect *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.503: 00:80:48:78:50:65 Building VlanIpPayload. *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 Mobile Announce sent to 1 members of the local group. *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6486, Adding TMP rule *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 255, IP *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:53:32.504: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 10:53:32.505: 00:80:48:78:50:65 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *apfOrphanSocketTask: Sep 22 10:53:32.816: 00:80:48:78:50:65 Orphan Packet from DS - IP 10.0.45.201 *pemReceiveTask: Sep 22 10:53:32.816: 00:80:48:78:50:65 0.0.0.0 Removed NPU entry. *apfReceiveTask: Sep 22 10:53:35.404: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.1.1.21 *apfReceiveTask: Sep 22 10:53:35.404: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED *apfReceiveTask: Sep 22 10:53:35.404: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6102, Adding TMP rule *apfReceiveTask: Sep 22 10:53:35.404: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 255, IP *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255) *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 Installing Orphan Pkt IP address 10.0.45.201 for station *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 Static IP client associated to interface rolling stock dc spanned vlan which can support client subnet. *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 apfMsRunStateInc *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7) *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 7148 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Replacing Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.405: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 10:53:35.406: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *apfReceiveTask: Sep 22 10:53:35.406: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *apfReceiveTask: Sep 22 10:53:35.406: 00:80:48:78:50:65 Assigning Address 10.0.45.201 to mobile *apfReceiveTask: Sep 22 10:53:35.406: 00:80:48:78:50:65 Successfully installed IP address 10.0.45.201 for station *pemReceiveTask: Sep 22 10:53:35.407: 00:80:48:78:50:65 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *pemReceiveTask: Sep 22 10:53:35.408: 00:80:48:78:50:65 Sent an XID frame *pemReceiveTask: Sep 22 10:53:35.408: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 (Cisco Controller) >*pemReceiveTask: Sep 22 10:53:35.408: 00:80:48:78:50:65 Sending a gratuitous ARP for 10.0.45.201, VLAN Id 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:58:23.162: 00:80:48:78:50:65 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_5: Sep 22 10:58:23.162: 00:80:48:78:50:65 reauth_sm state transition 1 ---> 1 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_5: Sep 22 10:58:23.162: 00:80:48:78:50:65 Received EAPOL START from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:23.162: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:58:23.162: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 146) *apfMsConnTask_2: Sep 22 10:58:29.853: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 10:58:29.853: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 10:58:29.853: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 10:58:29.853: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:58:29.854: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 10:58:29.855: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 10:58:29.855: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 10:58:29.855: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Removing BSSID 6c:99:89:77:41:e0 from PMKID cache of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 10:58:29.855: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *pemReceiveTask: Sep 22 10:58:29.856: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 10:58:29.856: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 10:58:29.860: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.860: 00:80:48:78:50:65 reauth_sm state transition 1 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.860: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.860: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.860: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.860: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.871: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.871: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.871: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.871: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.872: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.872: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.879: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.879: 00:80:48:78:50:65 Entering Backend Auth Req state (id=219) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.879: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 219 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.879: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 219) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.879: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.891: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.891: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 219, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.891: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.891: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.894: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.894: 00:80:48:78:50:65 Entering Backend Auth Req state (id=220) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.894: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 220) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.894: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.909: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.910: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 220, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.910: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.910: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.911: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.911: 00:80:48:78:50:65 Entering Backend Auth Req state (id=221) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.911: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 221) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.911: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.927: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.927: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 221, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.927: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.928: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.931: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.931: 00:80:48:78:50:65 Entering Backend Auth Req state (id=222) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.931: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 222) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.931: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.996: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.996: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 222, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.996: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:29.996: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.008: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.008: 00:80:48:78:50:65 Entering Backend Auth Req state (id=223) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.008: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 223) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.008: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.030: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.030: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 223, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.030: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.030: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.031: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.031: 00:80:48:78:50:65 Entering Backend Auth Req state (id=224) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.031: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 224) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.031: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.042: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.042: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 224, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.042: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.042: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.044: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.044: 00:80:48:78:50:65 Entering Backend Auth Req state (id=225) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.044: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 225) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.044: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.086: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.086: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 225, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.086: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.086: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.097: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.097: 00:80:48:78:50:65 Entering Backend Auth Req state (id=226) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.097: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 226) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.097: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.110: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.110: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 226, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.110: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.111: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.113: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.113: 00:80:48:78:50:65 Entering Backend Auth Req state (id=227) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.113: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 227) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.113: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.130: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.130: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 227, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.130: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.130: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.153: 00:80:48:78:50:65 Processing Access-Accept for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.153: 00:80:48:78:50:65 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.153: 00:80:48:78:50:65 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Inserting AAA Override struct for mobile MAC: 00:80:48:78:50:65, source 4 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Creating a PKC PMKID Cache entry for station 00:80:48:78:50:65 (RSN 2) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.154: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Adding BSSID 6c:99:89:77:41:e0 to PMKID cache at index 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: New PMKID: (16) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: [0000] 10 d9 27 ba db 09 7b 5d ba a5 f2 d5 85 b1 0d 2b *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 PMK: Sending cache delete *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 PMK sent to mobility group *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.155: 00:80:48:78:50:65 Sending EAP-Success to mobile 00:80:48:78:50:65 (EAP Id 227) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: [0000] 10 d9 27 ba db 09 7b 5d ba a5 f2 d5 85 b1 0d 2b *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Entering Backend Auth Success state (id=227) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 Received Auth Success while in Authenticating state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.156: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticated state *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.185: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.186: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.215: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 10:58:30.216: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 10:58:30.217: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_2: Sep 22 11:01:34.400: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:01:34.400: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:01:34.400: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:01:34.400: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:01:34.401: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:01:34.402: RSNIE in Assoc. Req.: (38) *apfMsConnTask_2: Sep 22 11:01:34.402: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:01:34.402: [0016] ac 01 00 00 01 00 10 d9 27 ba db 09 7b 5d ba a5 *apfMsConnTask_2: Sep 22 11:01:34.402: [0032] f2 d5 85 b1 0d 2b *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Processing RSN IE type 48, length 38 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Received RSN IE with 1 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: Received PMKID: (16) *apfMsConnTask_2: Sep 22 11:01:34.402: [0000] 10 d9 27 ba db 09 7b 5d ba a5 f2 d5 85 b1 0d 2b *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Searching for PMKID in MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Found a valid PMKID in the MSCB PMKID cache for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Setting active key cache index 0 ---> 0 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *pemReceiveTask: Sep 22 11:01:34.402: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_2: Sep 22 11:01:34.402: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:01:34.403: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:01:34.408: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.408: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.408: 00:80:48:78:50:65 Initiating RSN with existing PMK to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.408: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.408: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Force Auth state *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Skipping EAP-Success to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Username entry (sani.tized) already exists in name table, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Username entry (sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Applying cached RADIUS Override values for mobile 00:80:48:78:50:65 (caller 1x_auth_pae.c:779) *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: [0000] 10 d9 27 ba db 09 7b 5d ba a5 f2 d5 85 b1 0d 2b *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.409: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000010: 00 0f ac 01 00 00 01 00 10 d9 27 ba db 09 7b 5d ..........'...{] *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000020: ba a5 f2 d5 85 b1 0d 2b .......+ *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000010: ac 01 00 00 01 00 10 d9 27 ba db 09 7b 5d ba a5 ........'...{].. *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00000020: f2 d5 85 b1 0d 2b .....+ *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.437: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.438: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.447: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 11:01:34.448: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 11:01:34.448: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 11:02:15.077: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 11:02:15.078: RSNIE in Assoc. Req.: (20) *apfMsConnTask_7: Sep 22 11:02:15.078: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 11:02:15.078: [0016] ac 01 00 00 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Removing BSSID 6c:99:89:77:41:e0 from PMKID cache of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 11:02:15.078: 00:80:48:78:50:65 10.0.45.201 RUN (20) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *pemReceiveTask: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Updated location for station old AP 6c:99:89:77:41:e0-0, new AP 68:86:a7:29:cf:60-0 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Updating AID for REAP AP Client 68:86:a7:29:cf:60 - AID ===> 1 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 11:02:15.079: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 11:02:15.085: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.085: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.085: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.085: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.085: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.085: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.173: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.173: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.173: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.173: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.174: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.174: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.179: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.179: 00:80:48:78:50:65 Entering Backend Auth Req state (id=162) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.179: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 162 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.179: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 162) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.179: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.217: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.217: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 162, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.217: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.217: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.219: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.219: 00:80:48:78:50:65 Entering Backend Auth Req state (id=163) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.219: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 163) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.219: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.254: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.254: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 163, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.254: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.254: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.255: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.255: 00:80:48:78:50:65 Entering Backend Auth Req state (id=164) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.255: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 164) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.255: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.308: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.308: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 164, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.308: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.308: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.310: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.310: 00:80:48:78:50:65 Entering Backend Auth Req state (id=165) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.310: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 165) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.310: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.400: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.400: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 165, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.400: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.400: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.412: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.412: 00:80:48:78:50:65 Entering Backend Auth Req state (id=166) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.412: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 166) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.412: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.421: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.421: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 166, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.421: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.421: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.422: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.422: 00:80:48:78:50:65 Entering Backend Auth Req state (id=167) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.422: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 167) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.422: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.499: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.499: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 167, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.499: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.499: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.501: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.501: 00:80:48:78:50:65 Entering Backend Auth Req state (id=168) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.501: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 168) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.501: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.521: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.521: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 168, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.521: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.521: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.544: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.544: 00:80:48:78:50:65 Entering Backend Auth Req state (id=169) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.544: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 169) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.544: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.550: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.550: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 169, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.550: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.550: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.552: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.552: 00:80:48:78:50:65 Entering Backend Auth Req state (id=170) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.552: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 170) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.552: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.630: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.630: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 170, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.630: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.630: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Processing Access-Accept for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.647: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Inserting AAA Override struct for mobile MAC: 00:80:48:78:50:65, source 4 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Creating a PKC PMKID Cache entry for station 00:80:48:78:50:65 (RSN 2) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Adding BSSID 68:86:a7:29:cf:60 to PMKID cache at index 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: New PMKID: (16) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: [0000] 54 56 5e 2d 0b fb 04 35 2a 55 fb 40 e9 34 48 67 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 PMK: Sending cache delete *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.648: 00:80:48:78:50:65 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 PMK sent to mobility group *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Sending EAP-Success to mobile 00:80:48:78:50:65 (EAP Id 170) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: [0000] 54 56 5e 2d 0b fb 04 35 2a 55 fb 40 e9 34 48 67 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.649: 00:80:48:78:50:65 Entering Backend Auth Success state (id=170) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.650: 00:80:48:78:50:65 Received Auth Success while in Authenticating state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.650: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticated state *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.669: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.670: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.677: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.677: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 68:86:a7:29:cf:60, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.678: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 11:02:15.679: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 11:02:15.679: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:16.750: 00:80:48:78:50:65 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_5: Sep 22 11:02:16.750: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 1 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_5: Sep 22 11:02:16.750: 00:80:48:78:50:65 Received EAPOL START from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:16.750: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:02:16.750: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 173) *apfMsConnTask_7: Sep 22 11:02:23.721: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 thread:150e5040 *apfMsConnTask_7: Sep 22 11:02:23.721: 00:80:48:78:50:65 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 11:02:23.722: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 11:02:23.723: RSNIE in Assoc. Req.: (20) *apfMsConnTask_7: Sep 22 11:02:23.723: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 11:02:23.723: [0016] ac 01 00 00 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Removing BSSID 68:86:a7:29:cf:60 from PMKID cache of station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 AID 1 in Assoc Req from flex AP 68:86:a7:29:cf:60 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *pemReceiveTask: Sep 22 11:02:23.723: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_7: Sep 22 11:02:23.723: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:68:86:a7:29:cf:60-00 on apVapId 1 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:60 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Sep 22 11:02:23.724: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Associated *spamApTask3: Sep 22 11:02:23.729: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.729: 00:80:48:78:50:65 reauth_sm state transition 1 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.729: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.729: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.729: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.729: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.736: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.742: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.742: 00:80:48:78:50:65 Entering Backend Auth Req state (id=155) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.742: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 155 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.742: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 155) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.742: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.748: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.748: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 155, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.748: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.748: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.750: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.750: 00:80:48:78:50:65 Entering Backend Auth Req state (id=156) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.750: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 156) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.750: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.764: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.764: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 156, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.764: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.764: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.766: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.766: 00:80:48:78:50:65 Entering Backend Auth Req state (id=157) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.766: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 157) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.766: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.779: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.779: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 157, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.779: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.779: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.781: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.781: 00:80:48:78:50:65 Entering Backend Auth Req state (id=158) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.781: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 158) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.781: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.833: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.833: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 158, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.833: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.833: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.847: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.847: 00:80:48:78:50:65 Entering Backend Auth Req state (id=159) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.847: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 159) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.847: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.854: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.854: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 159, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.854: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.854: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.856: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.856: 00:80:48:78:50:65 Entering Backend Auth Req state (id=160) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.856: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 160) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.856: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.863: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.863: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 160, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.863: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.863: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.864: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.864: 00:80:48:78:50:65 Entering Backend Auth Req state (id=161) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.864: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 161) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.864: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.885: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.885: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 161, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.885: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.885: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.901: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.901: 00:80:48:78:50:65 Entering Backend Auth Req state (id=162) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.901: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 162) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.901: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.906: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.907: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 162, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.907: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.907: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.910: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.910: 00:80:48:78:50:65 Entering Backend Auth Req state (id=163) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.910: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 163) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.910: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.913: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.914: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 163, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.914: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.914: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Processing Access-Accept for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Re-applying interface policy for client *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.931: 00:80:48:78:50:65 Inserting AAA Override struct for mobile MAC: 00:80:48:78:50:65, source 4 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Creating a PKC PMKID Cache entry for station 00:80:48:78:50:65 (RSN 2) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Adding BSSID 68:86:a7:29:cf:60 to PMKID cache at index 0 for station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: New PMKID: (16) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: [0000] 2a eb af 2b c9 ea d8 2c e0 ef 93 55 f2 d2 1e 1e *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 PMK: Sending cache delete *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.932: 00:80:48:78:50:65 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 PMK sent to mobility group *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Sending EAP-Success to mobile 00:80:48:78:50:65 (EAP Id 163) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: [0000] 2a eb af 2b c9 ea d8 2c e0 ef 93 55 f2 d2 1e 1e *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Starting key exchange to mobile 00:80:48:78:50:65, data packets will be dropped *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Entering Backend Auth Success state (id=163) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 Received Auth Success while in Authenticating state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.933: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticated state *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.954: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.954: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.954: 00:80:48:78:50:65 Received EAPOL-key in PTK_START state (message 2) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 PMK: Sending cache add *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 Sending EAPOL-Key Message to mobile 00:80:48:78:50:65 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.955: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Received EAPOL-Key from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Stopping retransmission timer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 apfMs1xStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 apfMsRunStateInc *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 68:86:a7:29:cf:60, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.961: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.962: 00:80:48:78:50:65 10.0.45.201 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.962: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *Dot1x_NW_MsgTask_5: Sep 22 11:02:23.962: 00:80:48:78:50:65 10.0.45.201 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) >*pemReceiveTask: Sep 22 11:02:23.962: 00:80:48:78:50:65 10.0.45.201 Added NPU entry of type 1, dtlFlags 0x0 *emWeb: Sep 22 11:09:11.724: 00:80:48:78:50:65 Cleaning up state for STA 00:80:48:78:50:65 due to event for AP 68:86:a7:29:cf:60(0) *apfReceiveTask: Sep 22 11:09:11.724: 00:80:48:78:50:65 apfSendDisAssocMsgDebug (apf_80211.c:3158) Changing state for mobile 00:80:48:78:50:65 on AP 68:86:a7:29:cf:60 from Associated to Disassociated *apfReceiveTask: Sep 22 11:09:11.724: 00:80:48:78:50:65 Sent Disassociate to mobile on AP 68:86:a7:29:cf:60-0 (reason 1, caller apf_ms.c:6945) *apfReceiveTask: Sep 22 11:09:11.724: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:09:19.390: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 10.0.45.201 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:09:19.391: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 11:09:19.391: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:09:19.391: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Found an cache entry for BSSID 68:86:a7:29:cf:60 in PMKID cache at index 0 of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Removing BSSID 68:86:a7:29:cf:60 from PMKID cache of station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.391: 00:80:48:78:50:65 Resetting MSCB PMK Cache Entry 0 for station 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 RUN (20) Deleted mobile LWAPP rule on AP [68:86:a7:29:cf:60] *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Updated location for station old AP 68:86:a7:29:cf:60-0, new AP 6c:99:89:77:41:e0-0 *pemReceiveTask: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 Removed NPU entry. *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 3 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfMsRunStateDec *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfMs1xStateDec *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 START (0) Initializing policy *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfMsAssoStateInc *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Disassociated to Associated *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:09:19.392: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:09:19.393: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:09:19.393: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:09:19.393: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:09:19.397: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 1 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 Station 00:80:48:78:50:65 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 Stopping reauth timeout for 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:09:19.398: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 3 *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:31.055: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:09:31.056: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 11:09:31.056: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:09:31.056: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 AID 3 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:31.056: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:09:31.057: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:09:31.062: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:09:31.062: 00:80:48:78:50:65 reauth_sm state transition 1 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:09:31.062: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:09:31.062: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:09:31.062: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:09:31.062: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *osapiBsnTimer: Sep 22 11:10:01.004: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 11:10:01.004: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 11:10:01.004: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 2) (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*osapiBsnTimer: Sep 22 11:10:31.004: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 11:10:31.004: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 11:10:31.004: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 3) *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 Received Identity Response (count=3) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 Resetting reauth count 3 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.021: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.027: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.027: 00:80:48:78:50:65 Entering Backend Auth Req state (id=186) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.027: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 3 ===> 186 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.027: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 186) *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.027: 00:80:48:78:50:65 Allocating EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.037: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.037: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 186, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.037: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.037: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.039: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.039: 00:80:48:78:50:65 Entering Backend Auth Req state (id=187) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.039: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 187) *Dot1x_NW_MsgTask_5: Sep 22 11:10:31.039: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 (Cisco Controller) >debug client 00:80:48:78:50:65                   *apfMsConnTask_2: Sep 22 11:10:55.323: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:10:55.324: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:10:55.325: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 11:10:55.325: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:10:55.325: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 AID 3 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:10:55.325: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:10:55.326: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:10:55.329: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:10:55.329: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:10:55.329: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:10:55.329: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:10:55.329: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:10:55.330: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:13.033: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:11:13.034: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 11:11:13.034: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:11:13.034: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 AID 3 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 11:11:13.034: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:11:13.035: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:11:13.038: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.039: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.039: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.039: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.039: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.039: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.058: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.058: 00:80:48:78:50:65 Received Identity Response (count=1) from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.058: 00:80:48:78:50:65 Resetting reauth count 1 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.059: 00:80:48:78:50:65 EAP State update from Connecting to Authenticating for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.059: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Authenticating state *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.059: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.071: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.071: 00:80:48:78:50:65 Entering Backend Auth Req state (id=40) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.071: 00:80:48:78:50:65 WARNING: updated EAP-Identifier 1 ===> 40 for STA 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.071: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 40) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.071: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.084: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.084: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 40, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.084: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.085: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.089: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.089: 00:80:48:78:50:65 Entering Backend Auth Req state (id=41) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.089: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 41) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.089: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.106: 00:80:48:78:50:65 Received EAPOL EAPPKT from mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.106: 00:80:48:78:50:65 Received EAP Response from mobile 00:80:48:78:50:65 (EAP Id 41, EAP Type 25) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.106: 00:80:48:78:50:65 Resetting reauth count 0 to 0 for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.106: 00:80:48:78:50:65 Entering Backend Auth Response state for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.112: 00:80:48:78:50:65 Processing Access-Challenge for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.112: 00:80:48:78:50:65 Entering Backend Auth Req state (id=42) for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.112: 00:80:48:78:50:65 Sending EAP Request from AAA to mobile 00:80:48:78:50:65 (EAP Id 42) *Dot1x_NW_MsgTask_5: Sep 22 11:11:13.112: 00:80:48:78:50:65 Reusing allocated memory for EAP Pkt for retransmission to mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Processing assoc-req station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Max Client Trap Threshold: 0 cur: 2 *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 11:11:18.094: 00:80:48:78:50:65 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Applying site-specific Local Bridging override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Applying Local Bridging Interface Policy for station 00:80:48:78:50:65 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Applying site-specific override for station 00:80:48:78:50:65 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 11:11:18.095: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 11:11:18.095: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 11:11:18.095: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Processing RSN IE type 48, length 20 for mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Received RSN IE with 0 PMKIDs from mobile 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 11:11:18.095: 00:80:48:78:50:65 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 AID 3 in Assoc Req from flex AP 6c:99:89:77:41:e0 is same as in mscb 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 10.0.45.201 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Sending 11w Flag 0 for Client 00:80:48:78:50:65 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 10.0.45.201 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 apfPemAddUser2:session timeout forstation 00:80:48:78:50:65 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Sending assoc-resp with status 0 station:00:80:48:78:50:65 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 11:11:18.096: 00:80:48:78:50:65 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 11:11:18.100: 00:80:48:78:50:65 Sent 1x initiate message to multi thread task for mobile 00:80:48:78:50:65 *Dot1x_NW_MsgTask_5: Sep 22 11:11:18.101: 00:80:48:78:50:65 reauth_sm state transition 0 ---> 0 for mobile 00:80:48:78:50:65 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_5: Sep 22 11:11:18.101: 00:80:48:78:50:65 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_5: Sep 22 11:11:18.101: 00:80:48:78:50:65 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_5: Sep 22 11:11:18.101: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *Dot1x_NW_MsgTask_5: Sep 22 11:11:18.101: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 1) *osapiBsnTimer: Sep 22 11:11:48.008: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 11:11:48.008: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 11:11:48.008: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 2) *osapiBsnTimer: Sep 22 11:12:18.008: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 11:12:18.008: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 11:12:18.008: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 3) *osapiBsnTimer: Sep 22 11:12:48.008: 00:80:48:78:50:65 802.1x 'txWhen' Timer expired for station 00:80:48:78:50:65 and for message = M0 *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Connecting state *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 Sending EAP-Request/Identity to mobile 00:80:48:78:50:65 (EAP Id 4) *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 Reached Max EAP-Identity Request retries (3) for STA 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 Sent Deauthenticate to mobile on BSSID 6c:99:89:77:41:e0 slot 0(caller 1x_auth_pae.c:4116) *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 Deleting the PMK cache when de-authenticating the client. *dot1xMsgTask: Sep 22 11:12:48.008: 00:80:48:78:50:65 PMK: Sending cache delete *dot1xMsgTask: Sep 22 11:12:48.009: 00:80:48:78:50:65 Removing PMK cache entry for station 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 11:12:48.009: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 6) in 10 seconds *dot1xMsgTask: Sep 22 11:12:48.009: 00:80:48:78:50:65 dot1x - moving mobile 00:80:48:78:50:65 into Disconnected state *dot1xMsgTask: Sep 22 11:12:48.009: 00:80:48:78:50:65 Not sending EAP-Failure for STA 00:80:48:78:50:65 *dot1xMsgTask: Sep 22 11:12:48.009: 00:80:48:78:50:65 Freeing EAP Retransmit Bufer for mobile 00:80:48:78:50:65 *osapiBsnTimer: Sep 22 11:12:58.008: 00:80:48:78:50:65 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 11:12:58.008: 00:80:48:78:50:65 apfMsExpireMobileStation (apf_ms.c:6971) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Associated to Disassociated *apfReceiveTask: Sep 22 11:12:58.008: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds *osapiBsnTimer: Sep 22 11:13:08.008: 00:80:48:78:50:65 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Sent Deauthenticate to mobile on BSSID 6c:99:89:77:41:e0 slot 0(caller apf_ms.c:7065) *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Setting active key cache index 8 ---> 8 *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Deleting the PMK cache when de-authenticating the client. *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Global PMK Cache deletion failed. *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Accounting NAI-Realm: sani.tized, from Mscb username : sani.tized *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 apfMsAssoStateDec *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 apfMsExpireMobileStation (apf_ms.c:7103) Changing state for mobile 00:80:48:78:50:65 on AP 6c:99:89:77:41:e0 from Disassociated to Idle *apfReceiveTask: Sep 22 11:13:08.009: 00:80:48:78:50:65 Scheduling deletion of Mobile Station: (callerId: 47) in 10 seconds *osapiBsnTimer: Sep 22 11:13:18.008: 00:80:48:78:50:65 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 11:13:18.008: 00:80:48:78:50:65 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 22 11:13:18.008: 00:80:48:78:50:65 10.0.45.201 START (0) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfReceiveTask: Sep 22 11:13:18.008: 00:80:48:78:50:65 Username entry deleted for mobile *apfReceiveTask: Sep 22 11:13:18.009: 00:80:48:78:50:65 Deleting mobile on AP 6c:99:89:77:41:e0(0)              debug client 00:80:48:78:50:65                              debug l2roam detail enable                            debug client 00:80:48:78:50:65                               (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >debug client 00:80:48:78:50:65                 a4:17:31:25:00:e7 (Cisco Controller) >*apfMsConnTask_2: Sep 22 11:13:43.634: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:15:22.676: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:17:04.042: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:18:44.065: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:20:23.314: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:22:01.354: a4:17:31:25:00:e7 Got action frame from this client. (Cisco Controller) >*apfMsConnTask_2: Sep 22 11:23:40.315: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:25:23.585: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:27:05.803: a4:17:31:25:00:e7 Got action frame from this client. *dot1xMsgTask: Sep 22 11:28:29.816: a4:17:31:25:00:e7 Key exchange done, data packets from mobile a4:17:31:25:00:e7 should be forwarded shortly *dot1xMsgTask: Sep 22 11:28:29.816: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02 *dot1xMsgTask: Sep 22 11:28:29.816: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *dot1xMsgTask: Sep 22 11:28:29.816: a4:17:31:25:00:e7 Updated broadcast key sent to mobile A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 11:28:29.826: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:28:29.826: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:28:29.826: a4:17:31:25:00:e7 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:28:29.826: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:28:29.826: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 11:28:48.039: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:30:29.010: a4:17:31:25:00:e7 Got action frame from this client. (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_2: Sep 22 11:32:08.554: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:33:51.356: a4:17:31:25:00:e7 Got action frame from this client. (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_2: Sep 22 11:35:34.570: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 11:37:16.707: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_1: Sep 22 11:38:57.077: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 thread:150e3a80 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 18:9c:5d:70:f0:33 AP AP-07 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 11:38:57.078: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_1: Sep 22 11:38:57.079: RSNIE in Assoc. Req.: (38) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_1: Sep 22 11:38:57.079: [0016] ac 01 00 00 01 00 8c 3b 51 ab 46 a9 e0 ed f7 d4 *apfMsConnTask_1: Sep 22 11:38:57.079: [0032] 31 3b be b6 ab 3d *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Processing RSN IE type 48, length 38 for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Received RSN IE with 1 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.079: Received PMKID: (16) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 8c 3b 51 ab 46 a9 e0 ed f7 d4 31 3b be b6 ab 3d *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Searching for PMKID in MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 No valid PMKID found in the MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.079: a4:17:31:25:00:e7 Trying to compute a PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.079: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 18 9c 5d 70 f0 30 *apfMsConnTask_1: Sep 22 11:38:57.079: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 18 9c 5d 70 f0 3f *apfMsConnTask_1: Sep 22 11:38:57.079: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 8c 3b 51 ab 46 a9 e0 ed f7 d4 31 3b be b6 ab 3d *apfMsConnTask_1: Sep 22 11:38:57.079: CCKM: AA (6) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] 18 9c 5d 70 f0 3f *apfMsConnTask_1: Sep 22 11:38:57.079: CCKM: SPA (6) *apfMsConnTask_1: Sep 22 11:38:57.079: [0000] a4 17 31 25 00 e7 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Adding BSSID 18:9c:5d:70:f0:3f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.080: New PMKID: (16) *apfMsConnTask_1: Sep 22 11:38:57.080: [0000] 8c 3b 51 ab 46 a9 e0 ed f7 d4 31 3b be b6 ab 3d *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Computed a valid PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 0 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Updated location for station old AP 6c:99:89:77:41:e0-0, new AP 18:9c:5d:70:f0:30-1 *pemReceiveTask: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:f0:30 - AID ===> 1 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_1: Sep 22 11:38:57.080: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 on apVapId 1 *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:f0:3f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_1: Sep 22 11:38:57.081: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *spamApTask1: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Initiating RSN with existing PMK to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Force Auth state *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Skipping EAP-Success to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) already exists in name table, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Applying cached RADIUS Override values for mobile a4:17:31:25:00:e7 (caller 1x_auth_pae.c:779) *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.085: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: [0000] 8c 3b 51 ab 46 a9 e0 ed f7 d4 31 3b be b6 ab 3d *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.086: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000010: 00 0f ac 01 00 00 01 00 8c 3b 51 ab 46 a9 e0 ed .........;Q.F... *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000020: f7 d4 31 3b be b6 ab 3d ..1;...= *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000010: ac 01 00 00 01 00 8c 3b 51 ab 46 a9 e0 ed f7 d4 .......;Q.F..... *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: 00000020: 31 3b be b6 ab 3d 1;...= *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.093: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 18:9c:5d:70:f0:30, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.097: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.098: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.098: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 11:38:57.098: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 11:38:57.100: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 thread:150e3e20 *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 6c:99:89:77:41:ec AP AP-03 *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 12:13:35.534: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:13:35.535: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 12:13:35.535: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 12:13:35.535: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Removing BSSID 18:9c:5d:70:f0:3f from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:13:35.535: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 12:13:35.536: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 12:13:35.536: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 12:13:35.536: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 12:13:35.536: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [18:9c:5d:70:f0:30] *pemReceiveTask: Sep 22 12:13:35.536: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_2: Sep 22 12:13:35.536: a4:17:31:25:00:e7 Updated location for station old AP 18:9c:5d:70:f0:30-1, new AP 6c:99:89:77:41:e0-1 *apfMsConnTask_2: Sep 22 12:13:35.538: a4:17:31:25:00:e7 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 12:13:35.538: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 on apVapId 1 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 6c:99:89:77:41:ef (status 0) ApVapId 1 Slot 1 *apfMsConnTask_2: Sep 22 12:13:35.539: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 12:13:35.544: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.544: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.544: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.544: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.544: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.544: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.581: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.589: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.589: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=227) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.589: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 227 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.589: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 227) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.589: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.594: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.594: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 227, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.594: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.594: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.596: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.596: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=228) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.596: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 228) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.596: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.603: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.603: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 228, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.603: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.603: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.604: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.604: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=229) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.604: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 229) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.604: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.611: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.611: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 229, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.611: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.611: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.612: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.612: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=230) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.612: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 230) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.612: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.619: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.619: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 230, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.619: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.619: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.631: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.631: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=231) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.631: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 231) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.631: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.636: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.636: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 231, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.636: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.636: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.637: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.638: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=232) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.638: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 232) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.638: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.642: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.642: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 232, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.642: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.642: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.643: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.643: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=233) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.643: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 233) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.643: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.651: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.651: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 233, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.651: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.651: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.659: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.659: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=234) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.659: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 234) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.659: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.664: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.664: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 234, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.664: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.664: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.665: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.665: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=235) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.666: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 235) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.666: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.671: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.671: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 235, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.671: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.671: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.689: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Adding BSSID 6c:99:89:77:41:ef to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: [0000] cc ea 7e 78 02 ee 4c 5f f3 20 09 c0 ef de aa f8 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.690: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 235) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: [0000] cc ea 7e 78 02 ee 4c 5f f3 20 09 c0 ef de aa f8 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.691: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.692: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=235) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.692: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.692: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.700: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.700: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.700: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.700: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.701: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.705: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:13:35.706: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) > (Cisco Controller) >*pemReceiveTask: Sep 22 12:13:35.707: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_1: Sep 22 12:18:27.397: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-00 thread:150e3a80 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 18:9c:5d:70:f0:3c AP AP-07 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 1 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:18:27.398: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_1: Sep 22 12:18:27.399: RSNIE in Assoc. Req.: (20) *apfMsConnTask_1: Sep 22 12:18:27.399: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_1: Sep 22 12:18:27.399: [0016] ac 01 00 00 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Removing BSSID 6c:99:89:77:41:ef from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *pemReceiveTask: Sep 22 12:18:27.399: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_1: Sep 22 12:18:27.399: a4:17:31:25:00:e7 Updated location for station old AP 6c:99:89:77:41:e0-1, new AP 18:9c:5d:70:f0:30-0 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:f0:30 - AID ===> 2 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-00 on apVapId 1 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:f0:30 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_1: Sep 22 12:18:27.400: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *spamApTask1: Sep 22 12:18:27.405: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:27.405: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:18:27.405: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:18:27.405: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:18:27.405: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:18:27.405: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *apfMsConnTask_1: Sep 22 12:18:48.767: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 thread:150e3a80 *apfMsConnTask_1: Sep 22 12:18:48.767: a4:17:31:25:00:e7 Association received from mobile on BSSID 18:9c:5d:70:f0:33 AP AP-07 *apfMsConnTask_1: Sep 22 12:18:48.767: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_1: Sep 22 12:18:48.768: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_1: Sep 22 12:18:48.769: RSNIE in Assoc. Req.: (38) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_1: Sep 22 12:18:48.769: [0016] ac 01 00 00 01 00 8b cb 4c 45 ab 3a e1 e6 48 fa *apfMsConnTask_1: Sep 22 12:18:48.769: [0032] a4 35 81 4f 98 0c *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Processing RSN IE type 48, length 38 for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Received RSN IE with 1 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: Received PMKID: (16) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 8b cb 4c 45 ab 3a e1 e6 48 fa a4 35 81 4f 98 0c *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Searching for PMKID in MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 No valid PMKID found in the MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Trying to compute a PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 18 9c 5d 70 f0 30 *apfMsConnTask_1: Sep 22 12:18:48.769: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 18 9c 5d 70 f0 3f *apfMsConnTask_1: Sep 22 12:18:48.769: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 8b cb 4c 45 ab 3a e1 e6 48 fa a4 35 81 4f 98 0c *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Unable to compute a valid PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Searching for PMK in global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Found an entry in the global PMK cache for station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: CCKM: AA (6) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] 18 9c 5d 70 f0 3f *apfMsConnTask_1: Sep 22 12:18:48.769: CCKM: SPA (6) *apfMsConnTask_1: Sep 22 12:18:48.769: [0000] a4 17 31 25 00 e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 computed a valid PMKID from global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *apfMsConnTask_1: Sep 22 12:18:48.769: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 0) on BSSID 18:9c:5d:70:f0:3f *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Adding BSSID 18:9c:5d:70:f0:3f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:18:48.770: New PMKID: (16) *apfMsConnTask_1: Sep 22 12:18:48.770: [0000] 8b cb 4c 45 ab 3a e1 e6 48 fa a4 35 81 4f 98 0c *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Deleted mobile LWAPP rule on AP [18:9c:5d:70:f0:30] *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Updated location for station old AP 18:9c:5d:70:f0:30-0, new AP 18:9c:5d:70:f0:30-1 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:f0:30 - AID ===> 1 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Initializing policy *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_1: Sep 22 12:18:48.770: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 on apVapId 1 *apfMsConnTask_1: Sep 22 12:18:48.771: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:f0:3f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_1: Sep 22 12:18:48.771: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *spamApTask1: Sep 22 12:18:48.779: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.779: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.779: a4:17:31:25:00:e7 Initiating RSN with existing PMK to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.779: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Force Auth state *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Skipping EAP-Success to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) already exists in name table, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Applying cached RADIUS Override values for mobile a4:17:31:25:00:e7 (caller 1x_auth_pae.c:779) *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: [0000] 8b cb 4c 45 ab 3a e1 e6 48 fa a4 35 81 4f 98 0c *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:18:48.780: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *osapiBsnTimer: Sep 22 12:18:49.860: a4:17:31:25:00:e7 802.1x 'timeoutEvt' Timer expired for station a4:17:31:25:00:e7 and for message = M2 *dot1xMsgTask: Sep 22 12:18:49.860: a4:17:31:25:00:e7 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000010: 00 0f ac 01 00 00 01 00 8b cb 4c 45 ab 3a e1 e6 ..........LE.:.. *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000020: 48 fa a4 35 81 4f 98 0c H..5.O.. *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000010: ac 01 00 00 01 00 8b cb 4c 45 ab 3a e1 e6 48 fa ........LE.:..H. *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: 00000020: a4 35 81 4f 98 0c .5.O.. *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.866: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.867: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.02 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.867: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.872: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.872: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.872: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 18:9c:5d:70:f0:30, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.873: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:18:49.874: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >*pemReceiveTask: Sep 22 12:18:49.874: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *spamApTask1: Sep 22 12:19:03.250: a4:17:31:25:00:e7 Received DELETE mobile, reason MN_REASSOC_TIMEOUT, from AP 18:9c:5d:70:f0:30, slot 0 ...cleaning up mscb *spamApTask1: Sep 22 12:19:03.250: a4:17:31:25:00:e7 Warning, ignore the DELETE_MOBILE_PAYLOAD from AP: 18:9c:5d:70:f0:30, slot 0. STA connecting AP: 18:9c:5d:70:f0:30, slot 1 *apfMsConnTask_2: Sep 22 12:20:39.357: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 6c:99:89:77:41:ec AP AP-03 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:20:39.358: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:20:39.359: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 12:20:39.359: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 12:20:39.359: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Removing BSSID 18:9c:5d:70:f0:3f from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [18:9c:5d:70:f0:30] *pemReceiveTask: Sep 22 12:20:39.359: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_2: Sep 22 12:20:39.359: a4:17:31:25:00:e7 Updated location for station old AP 18:9c:5d:70:f0:30-1, new AP 6c:99:89:77:41:e0-0 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 12:20:39.360: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 12:20:39.364: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:39.365: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:20:39.365: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:20:39.365: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:20:39.365: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:20:39.365: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *apfMsConnTask_2: Sep 22 12:20:52.074: a4:17:31:25:00:e7 Got action frame from this client. *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.410: a4:17:31:25:00:e7 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.410: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.410: a4:17:31:25:00:e7 Received EAPOL START from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.410: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.410: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 2) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.425: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.431: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.431: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=108) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.431: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 2 ===> 108 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.431: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 108) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.431: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.448: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.448: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 108, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.448: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.448: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.450: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.450: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=109) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.450: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 109) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.450: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.466: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.466: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 109, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.466: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.466: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.468: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.468: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=110) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.468: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 110) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.468: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.486: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.486: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 110, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.486: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.486: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.489: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.489: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=111) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.489: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 111) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.489: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.514: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.514: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 111, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.514: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.514: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.528: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.528: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=112) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.528: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 112) *Dot1x_NW_MsgTask_7: Sep 22 12:20:57.528: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 reauth_sm state transition 1 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 Received EAPOL START from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Aborting state *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.536: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 114) *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.549: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.555: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.555: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=10) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.555: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 114 ===> 10 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.555: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 10) *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.555: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.563: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.563: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 10, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.563: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.563: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.565: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.565: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=11) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.565: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 11) *Dot1x_NW_MsgTask_7: Sep 22 12:21:15.565: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 reauth_sm state transition 1 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 Received EAPOL START from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Aborting state *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.570: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 13) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.583: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.593: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.593: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=5) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.593: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 13 ===> 5 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.593: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 5) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.593: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.603: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.603: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 5, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.603: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.603: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.605: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.605: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=6) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.605: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 6) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.605: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.619: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.619: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 6, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.619: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.619: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.621: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.621: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=7) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.621: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 7) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.621: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.639: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.640: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 7, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.640: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.640: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.641: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.641: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=8) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.641: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 8) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.641: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.665: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.665: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 8, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.665: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.665: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.676: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.676: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=9) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.676: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 9) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.676: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.684: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.684: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 9, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.684: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.684: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.685: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.685: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=10) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.685: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 10) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.685: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.692: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.692: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 10, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.692: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.692: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.694: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.694: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=11) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.694: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 11) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.694: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.711: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.711: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 11, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.711: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.711: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.722: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.722: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=12) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.722: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 12) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.722: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.732: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.732: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 12, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.733: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.733: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.734: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.734: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=13) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.734: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 13) *Dot1x_NW_MsgTask_7: Sep 22 12:21:33.734: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *osapiBsnTimer: Sep 22 12:22:03.664: a4:17:31:25:00:e7 802.1x 'timeoutEvt' Timer expired for station a4:17:31:25:00:e7 and for message = M0 *dot1xMsgTask: Sep 22 12:22:03.664: a4:17:31:25:00:e7 Retransmit 1 of EAP-Request (length 47) for mobile a4:17:31:25:00:e7 *osapiBsnTimer: Sep 22 12:22:33.664: a4:17:31:25:00:e7 802.1x 'timeoutEvt' Timer expired for station a4:17:31:25:00:e7 and for message = M0 *dot1xMsgTask: Sep 22 12:22:33.664: a4:17:31:25:00:e7 Retransmit 2 of EAP-Request (length 47) for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:22:56.853: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 thread:150e3e20 *apfMsConnTask_2: Sep 22 12:22:56.853: a4:17:31:25:00:e7 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 12:22:56.854: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:22:56.855: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 12:22:56.855: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 12:22:56.855: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Updated location for station old AP 6c:99:89:77:41:e0-0, new AP 6c:99:89:77:41:e0-1 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Initializing policy *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3) *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 12:22:56.855: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 on apVapId 1 *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 6c:99:89:77:41:ef (status 0) ApVapId 1 Slot 1 *apfMsConnTask_2: Sep 22 12:22:56.856: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 12:22:56.864: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.864: a4:17:31:25:00:e7 reauth_sm state transition 1 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.864: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.864: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.864: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.864: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.894: a4:17:31:25:00:e7 Reset the reauth counter since EAPOL START has been received!!! *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.894: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.894: a4:17:31:25:00:e7 Received EAPOL START from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.894: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.894: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 2) *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.902: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.902: a4:17:31:25:00:e7 Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.910: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.918: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.918: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=174) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.918: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 2 ===> 174 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.918: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 174) *Dot1x_NW_MsgTask_7: Sep 22 12:22:56.918: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *spamApTask6: Sep 22 12:23:23.795: a4:17:31:25:00:e7 Received DELETE mobile, reason MN_REASSOC_TIMEOUT, from AP 6c:99:89:77:41:e0, slot 1 ...cleaning up mscb *spamApTask6: Sep 22 12:23:23.796: a4:17:31:25:00:e7 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4 *spamApTask6: Sep 22 12:23:23.796: a4:17:31:25:00:e7 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds *spamApTask6: Sep 22 12:23:23.796: a4:17:31:25:00:e7 PMK: Sending cache delete *spamApTask6: Sep 22 12:23:23.796: a4:17:31:25:00:e7 Removing PMK cache entry for station a4:17:31:25:00:e7 *spamApTask6: Sep 22 12:23:23.796: a4:17:31:25:00:e7 1 PMK-remove groupcast messages sent *osapiBsnTimer: Sep 22 12:23:24.668: a4:17:31:25:00:e7 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 12:23:24.668: a4:17:31:25:00:e7 apfMsExpireMobileStation (apf_ms.c:6971) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Disassociated *apfReceiveTask: Sep 22 12:23:24.668: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *apfReceiveTask: Sep 22 12:23:24.668: a4:17:31:25:00:e7 Sent Deauthenticate to mobile on BSSID 6c:99:89:77:41:e0 slot 1(caller apf_ms.c:7065) *apfReceiveTask: Sep 22 12:23:24.668: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *apfReceiveTask: Sep 22 12:23:24.668: a4:17:31:25:00:e7 Deleting the PMK cache when de-authenticating the client. *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 Global PMK Cache deletion failed. *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 apfMsAssoStateDec *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 apfMsExpireMobileStation (apf_ms.c:7103) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Disassociated to Idle *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 10.0.45.119 START (0) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 Username entry deleted for mobile *apfReceiveTask: Sep 22 12:23:24.669: a4:17:31:25:00:e7 Deleting mobile on AP 6c:99:89:77:41:e0(1) *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-00 thread:150e3e20 *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Adding mobile on LWAPP AP 6c:99:89:77:41:e0(0) *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Association received from mobile on BSSID 6c:99:89:77:41:e3 AP AP-03 *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0 *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:24:13.981: a4:17:31:25:00:e7 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 12:24:13.982: RSNIE in Assoc. Req.: (20) *apfMsConnTask_2: Sep 22 12:24:13.982: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 12:24:13.982: [0016] ac 01 00 00 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 12:24:13.982: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 0.0.0.0 START (0) Initializing policy *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfMsAssoStateInc *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Idle to Associated *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-00 on apVapId 1 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 6c:99:89:77:41:e0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_2: Sep 22 12:24:13.983: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 12:24:13.987: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:24:13.988: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.032: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.038: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.038: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=27) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.038: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 27 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.038: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 27) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.038: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.061: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.061: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 27, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.061: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.061: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.063: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.063: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=28) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.063: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 28) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.063: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.090: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.090: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 28, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.090: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.090: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.092: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.092: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=29) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.092: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 29) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.092: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.106: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.106: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 29, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.106: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.106: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.107: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.107: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=30) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.107: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 30) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.107: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.122: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.122: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 30, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.122: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.122: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.133: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.133: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=31) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.133: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 31) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.133: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.149: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.149: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 31, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.149: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.149: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.150: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.150: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=32) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.150: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 32) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.150: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.158: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.158: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 32, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.158: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.158: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.159: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.159: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=33) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.160: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 33) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.160: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.178: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.178: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 33, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.178: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.178: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.192: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.192: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=34) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.192: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 34) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.192: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.199: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.199: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 34, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.199: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.199: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.201: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.201: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=35) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.201: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 35) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.201: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.220: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.220: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 35, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.220: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.220: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) created for mobile, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Username entry (hidden\sani.tized) created in mscb for mobile, length = 253 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.236: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Adding BSSID 6c:99:89:77:41:e0 to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: [0000] 58 fc 31 5e 49 c5 6b e2 e0 58 9c 32 ea f8 86 c2 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.237: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 35) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:e0 in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: [0000] 58 fc 31 5e 49 c5 6b e2 e0 58 9c 32 ea f8 86 c2 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.238: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.239: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.239: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=35) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.239: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.239: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.249: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.250: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.250: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Mobility query, PEM State: L2AUTHCOMPLETE *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Building Mobile Announce : *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Building Client Payload: *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Client Ip: 0.0.0.0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Client Vlan Ip: 10.0.45.7, Vlan mask : 255.255.254.0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Client Vap Security: 278528 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 Virtual Ip: 1.1.1.1 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.260: a4:17:31:25:00:e7 ssid: e-connect *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 Building VlanIpPayload. *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 Mobile Announce sent to 1 members of the local group. *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6486, Adding TMP rule *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 255, IP *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 12:24:14.261: a4:17:31:25:00:e7 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *apfOrphanSocketTask: Sep 22 12:24:15.723: a4:17:31:25:00:e7 Orphan Packet from DS - IP 10.0.45.119 *pemReceiveTask: Sep 22 12:24:15.723: a4:17:31:25:00:e7 0.0.0.0 Removed NPU entry. *apfReceiveTask: Sep 22 12:24:17.072: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.1.1.21 *apfReceiveTask: Sep 22 12:24:17.072: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED *apfReceiveTask: Sep 22 12:24:17.072: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6102, Adding TMP rule *apfReceiveTask: Sep 22 12:24:17.072: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule type = Airespace AP - Learn IP address on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 255, IP *apfReceiveTask: Sep 22 12:24:17.072: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255) *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 Installing Orphan Pkt IP address 10.0.45.119 for station *pemReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 Static IP client associated to interface rolling stock dc spanned vlan which can support client subnet. *pemReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 Sent an XID frame *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 apfMsRunStateInc *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7) *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 7148 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Replacing Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 0, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.073: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *apfReceiveTask: Sep 22 12:24:17.074: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *apfReceiveTask: Sep 22 12:24:17.074: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *apfReceiveTask: Sep 22 12:24:17.074: a4:17:31:25:00:e7 Assigning Address 10.0.45.119 to mobile *apfReceiveTask: Sep 22 12:24:17.074: a4:17:31:25:00:e7 Successfully installed IP address 10.0.45.119 for station *pemReceiveTask: Sep 22 12:24:17.076: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *pemReceiveTask: Sep 22 12:24:17.076: a4:17:31:25:00:e7 Sending a gratuitous ARP for 10.0.45.119, VLAN Id 1145 (Cisco Controller) >*apfMsConnTask_2: Sep 22 12:25:53.899: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:27:31.329: a4:17:31:25:00:e7 Got action frame from this client. *dot1xMsgTask: Sep 22 12:28:37.880: a4:17:31:25:00:e7 Key exchange done, data packets from mobile a4:17:31:25:00:e7 should be forwarded shortly *dot1xMsgTask: Sep 22 12:28:37.880: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02 *dot1xMsgTask: Sep 22 12:28:37.880: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *dot1xMsgTask: Sep 22 12:28:37.880: a4:17:31:25:00:e7 Updated broadcast key sent to mobile A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:28:37.889: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:28:37.889: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:28:37.889: a4:17:31:25:00:e7 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:28:37.890: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:28:37.890: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 12:29:13.248: a4:17:31:25:00:e7 Got action frame from this client. (Cisco Controller) >*apfMsConnTask_2: Sep 22 12:30:54.359: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:32:33.410: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:34:11.378: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:35:49.633: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:37:30.665: a4:17:31:25:00:e7 Got action frame from this client. *apfMsConnTask_2: Sep 22 12:39:11.665: a4:17:31:25:00:e7 Got action frame from this client. (Cisco Controller) >*emWeb: Sep 22 12:41:10.070: a4:17:31:25:00:e7 Cleaning up state for STA a4:17:31:25:00:e7 due to event for AP 6c:99:89:77:41:e0(0) *apfReceiveTask: Sep 22 12:41:10.070: a4:17:31:25:00:e7 apfSendDisAssocMsgDebug (apf_80211.c:3158) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Disassociated *apfReceiveTask: Sep 22 12:41:10.070: a4:17:31:25:00:e7 Sent Disassociate to mobile on AP 6c:99:89:77:41:e0-0 (reason 1, caller apf_ms.c:6945) *apfReceiveTask: Sep 22 12:41:10.070: a4:17:31:25:00:e7 Scheduling deletion of Mobile Station: (callerId: 45) in 10 seconds *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:68:86:a7:29:cf:60-01 thread:150e5040 *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Association received from mobile on BSSID 68:86:a7:29:cf:63 AP AP-01 *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 12:41:13.535: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_7: Sep 22 12:41:13.536: RSNIE in Assoc. Req.: (38) *apfMsConnTask_7: Sep 22 12:41:13.536: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_7: Sep 22 12:41:13.536: [0016] ac 01 00 00 01 00 ff 0b 0d 35 df fa fb fa 4d 58 *apfMsConnTask_7: Sep 22 12:41:13.536: [0032] 07 fc c9 d6 2d 80 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Processing RSN IE type 48, length 38 for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_7: Sep 22 12:41:13.536: a4:17:31:25:00:e7 Received RSN IE with 1 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: Received PMKID: (16) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] ff 0b 0d 35 df fa fb fa 4d 58 07 fc c9 d6 2d 80 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Searching for PMKID in MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 No valid PMKID found in the MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Trying to compute a PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] 68 86 a7 29 cf 60 *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] 68 86 a7 29 cf 6f *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] ff 0b 0d 35 df fa fb fa 4d 58 07 fc c9 d6 2d 80 *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: AA (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] 68 86 a7 29 cf 6f *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: SPA (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] a4 17 31 25 00 e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Unable to compute a valid PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Searching for PMK in global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Found an entry in the global PMK cache for station a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: AA (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] 68 86 a7 29 cf 6f *apfMsConnTask_7: Sep 22 12:41:13.537: CCKM: SPA (6) *apfMsConnTask_7: Sep 22 12:41:13.537: [0000] a4 17 31 25 00 e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Unable to compute a valid PMKID from global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfMsConnTask_7: Sep 22 12:41:13.537: a4:17:31:25:00:e7 Updated location for station old AP 6c:99:89:77:41:e0-0, new AP 68:86:a7:29:cf:60-1 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Updating AID for REAP AP Client 68:86:a7:29:cf:60 - AID ===> 1 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfMsAssoStateInc *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 68:86:a7:29:cf:60 from Disassociated to Associated *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:68:86:a7:29:cf:60-01 on apVapId 1 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 68:86:a7:29:cf:6f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_7: Sep 22 12:41:13.538: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 68:86:a7:29:cf:60 from Associated to Associated *pemReceiveTask: Sep 22 12:41:13.539: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *spamApTask3: Sep 22 12:41:13.543: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 1 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:47 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.544: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.583: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.588: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.588: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=33) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.588: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 33 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.588: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 33) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.589: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.594: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.594: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 33, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.594: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.594: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.596: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.596: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=34) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.596: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 34) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.596: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.603: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.603: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 34, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.603: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.603: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.604: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.604: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=35) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.604: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 35) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.604: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.611: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.611: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 35, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.611: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.611: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.612: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.612: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=36) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.612: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 36) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.612: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.617: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.617: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 36, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.617: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.617: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.629: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.629: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=37) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.629: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 37) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.629: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.634: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.634: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 37, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.634: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.634: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.635: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.635: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=38) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.635: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 38) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.635: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.640: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.640: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 38, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.640: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.640: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.641: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.641: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=39) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.641: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 39) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.641: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.650: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.651: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 39, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.651: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.651: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.657: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.657: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=40) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.657: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 40) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.657: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.662: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.662: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 40, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.662: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.662: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.663: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.663: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=41) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.663: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 41) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.663: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.669: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.669: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 41, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.669: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.669: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.683: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Removing BSSID 6c:99:89:77:41:e0 from PMKID cache of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Adding BSSID 68:86:a7:29:cf:6f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: [0000] c2 81 89 80 d8 51 ea b7 63 81 6c a5 b7 2b 96 7c *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.684: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 41) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Found an cache entry for BSSID 68:86:a7:29:cf:6f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Found an cache entry for BSSID 68:86:a7:29:cf:6f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: [0000] c2 81 89 80 d8 51 ea b7 63 81 6c a5 b7 2b 96 7c *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.685: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=41) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.686: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.686: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000010: 00 0f ac 01 00 00 01 00 ff 0b 0d 35 df fa fb fa ...........5.... *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000020: 4d 58 07 fc c9 d6 2d 80 MX....-. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000010: ac 01 00 00 01 00 ff 0b 0d 35 df fa fb fa 4d 58 .........5....MX *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: 00000020: 07 fc c9 d6 2d 80 ....-. *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.695: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.696: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.696: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.699: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 68:86:a7:29:cf:60 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 68:86:a7:29:cf:60, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:41:13.700: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 12:41:13.701: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >2~2~ Incorrect usage. Use the '?' or key to list commands. (Cisco Controller) >*dot1xMsgTask: Sep 22 12:50:39.884: a4:17:31:25:00:e7 Key exchange done, data packets from mobile a4:17:31:25:00:e7 should be forwarded shortly *dot1xMsgTask: Sep 22 12:50:39.884: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02 *dot1xMsgTask: Sep 22 12:50:39.884: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *dot1xMsgTask: Sep 22 12:50:39.884: a4:17:31:25:00:e7 Updated broadcast key sent to mobile A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:50:39.889: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:50:39.889: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:50:39.889: a4:17:31:25:00:e7 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:50:39.889: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:50:39.889: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 thread:150e3a80 *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 18:9c:5d:70:f0:3c AP AP-07 *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_1: Sep 22 12:51:11.656: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_1: Sep 22 12:51:11.657: RSNIE in Assoc. Req.: (20) *apfMsConnTask_1: Sep 22 12:51:11.657: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_1: Sep 22 12:51:11.657: [0016] ac 01 00 00 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Found an cache entry for BSSID 68:86:a7:29:cf:6f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Removing BSSID 68:86:a7:29:cf:6f from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_1: Sep 22 12:51:11.657: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [68:86:a7:29:cf:60] *pemReceiveTask: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Updated location for station old AP 68:86:a7:29:cf:60-1, new AP 18:9c:5d:70:f0:30-1 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:f0:30 - AID ===> 1 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_1: Sep 22 12:51:11.658: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f0:30-01 on apVapId 1 *apfMsConnTask_1: Sep 22 12:51:11.659: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:f0:3f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_1: Sep 22 12:51:11.659: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f0:30 from Associated to Associated *spamApTask1: Sep 22 12:51:11.664: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.664: a4:17:31:25:00:e7 reauth_sm state transition 1 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.664: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.664: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.664: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.664: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.703: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.711: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.711: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=74) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.711: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 74 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.711: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 74) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.711: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.715: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.715: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 74, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.715: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.715: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.717: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.717: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=75) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.717: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 75) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.717: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.723: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.724: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 75, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.724: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.724: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.725: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.725: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=76) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.725: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 76) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.725: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.731: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.731: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 76, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.731: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.731: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.733: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.733: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=77) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.733: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 77) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.733: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.740: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.740: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 77, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.740: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.740: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.752: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.752: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=78) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.752: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 78) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.752: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.756: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.756: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 78, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.756: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.756: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.758: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.758: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=79) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.758: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 79) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.758: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.762: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.762: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 79, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.762: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.762: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.764: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.764: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=80) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.764: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 80) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.764: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.771: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.771: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 80, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.771: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.771: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.783: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.783: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=81) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.783: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 81) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.783: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.792: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.792: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 81, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.792: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.792: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.794: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.794: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=82) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.794: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 82) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.794: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.799: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.799: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 82, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.799: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.800: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.825: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Adding BSSID 18:9c:5d:70:f0:3f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: [0000] 9b ef 67 ce 18 85 5a 12 7e 6b bd ad 38 7d c4 33 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.826: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 82) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: [0000] 9b ef 67 ce 18 85 5a 12 7e 6b bd ad 38 7d c4 33 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=82) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.827: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.834: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.834: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.834: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.834: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.835: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f0:30 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 18:9c:5d:70:f0:30, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.840: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.841: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.841: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.841: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.841: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:51:11.841: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 12:51:11.841: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 (Cisco Controller) > (Cisco Controller) >*apfMsConnTask_4: Sep 22 12:57:45.712: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:ed:70-01 thread:150e4560 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 18:9c:5d:70:ed:7c AP AP-05 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_4: Sep 22 12:57:45.713: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_4: Sep 22 12:57:45.714: RSNIE in Assoc. Req.: (20) *apfMsConnTask_4: Sep 22 12:57:45.714: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_4: Sep 22 12:57:45.714: [0016] ac 01 00 00 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f0:3f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Removing BSSID 18:9c:5d:70:f0:3f from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [18:9c:5d:70:f0:30] *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Updated location for station old AP 18:9c:5d:70:f0:30-1, new AP 18:9c:5d:70:ed:70-1 *pemReceiveTask: Sep 22 12:57:45.714: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:ed:70 - AID ===> 1 *apfMsConnTask_4: Sep 22 12:57:45.714: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:ed:70 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:ed:70 from Associated to Associated *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_4: Sep 22 12:57:45.716: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:ed:70-01 on apVapId 1 *apfMsConnTask_4: Sep 22 12:57:45.717: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:ed:7f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_4: Sep 22 12:57:45.717: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:ed:70 from Associated to Associated *spamApTask2: Sep 22 12:57:45.722: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.722: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.722: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.722: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.722: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.722: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.760: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.766: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.766: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=164) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.766: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 164 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.766: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 164) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.766: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.788: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.788: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 164, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.788: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.788: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.790: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.790: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=165) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.790: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 165) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.790: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.795: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.795: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 165, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.795: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.795: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.796: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.796: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=166) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.796: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 166) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.796: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.803: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.803: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 166, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.803: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.803: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.805: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.805: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=167) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.805: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 167) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.805: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.811: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.811: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 167, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.811: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.811: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.824: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.824: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=168) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.824: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 168) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.824: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.828: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.828: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 168, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.828: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.828: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.830: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.830: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=169) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.830: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 169) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.830: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.834: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.834: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 169, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.834: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.834: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.835: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.835: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=170) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.835: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 170) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.836: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.843: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.843: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 170, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.843: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.843: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.849: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.849: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=171) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.849: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 171) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.849: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.854: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.854: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 171, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.854: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.854: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.856: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.856: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=172) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.856: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 172) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.856: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.861: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.861: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 172, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.861: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.861: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.880: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.881: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Adding BSSID 18:9c:5d:70:ed:7f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: [0000] 2b ce 0b 24 13 06 47 c4 14 56 d4 ab 60 e6 eb f7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.882: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 172) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:ed:7f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:ed:7f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: [0000] 2b ce 0b 24 13 06 47 c4 14 56 d4 ab 60 e6 eb f7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=172) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.883: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.890: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.891: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.895: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.895: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:ed:70 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 18:9c:5d:70:ed:70, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.896: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 12:57:45.897: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) > (Cisco Controller) >*pemReceiveTask: Sep 22 12:57:45.897: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 thread:150e3e20 *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 6c:99:89:77:41:ec AP AP-03 *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_2: Sep 22 13:08:07.249: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_2: Sep 22 13:08:07.250: RSNIE in Assoc. Req.: (38) *apfMsConnTask_2: Sep 22 13:08:07.250: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_2: Sep 22 13:08:07.250: [0016] ac 01 00 00 01 00 cc ea 7e 78 02 ee 4c 5f f3 20 *apfMsConnTask_2: Sep 22 13:08:07.250: [0032] 09 c0 ef de aa f8 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Processing RSN IE type 48, length 38 for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_2: Sep 22 13:08:07.250: a4:17:31:25:00:e7 Received RSN IE with 1 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.250: Received PMKID: (16) *apfMsConnTask_2: Sep 22 13:08:07.250: [0000] cc ea 7e 78 02 ee 4c 5f f3 20 09 c0 ef de aa f8 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Searching for PMKID in MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 No valid PMKID found in the MSCB PMKID cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Trying to compute a PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: Find PMK in cache: BSSID = (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] 6c 99 89 77 41 e0 *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: Find PMK in cache: realAA = (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] 6c 99 89 77 41 ef *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: Find PMK in cache: PMKID = (16) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] cc ea 7e 78 02 ee 4c 5f f3 20 09 c0 ef de aa f8 *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: AA (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] 6c 99 89 77 41 ef *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: SPA (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] a4 17 31 25 00 e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Unable to compute a valid PMKID from MSCB PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Searching for PMK in global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Found an entry in the global PMK cache for station a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: AA (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] 6c 99 89 77 41 ef *apfMsConnTask_2: Sep 22 13:08:07.251: CCKM: SPA (6) *apfMsConnTask_2: Sep 22 13:08:07.251: [0000] a4 17 31 25 00 e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Unable to compute a valid PMKID from global PMK cache for mobile a4:17:31:25:00:e7 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [18:9c:5d:70:ed:70] *pemReceiveTask: Sep 22 13:08:07.251: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Updated location for station old AP 18:9c:5d:70:ed:70-1, new AP 6c:99:89:77:41:e0-1 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 Updating AID for REAP AP Client 6c:99:89:77:41:e0 - AID ===> 1 *apfMsConnTask_2: Sep 22 13:08:07.251: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:6c:99:89:77:41:e0-01 on apVapId 1 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 6c:99:89:77:41:ef (status 0) ApVapId 1 Slot 1 *apfMsConnTask_2: Sep 22 13:08:07.252: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 6c:99:89:77:41:e0 from Associated to Associated *spamApTask6: Sep 22 13:08:07.257: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.257: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.257: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.257: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.257: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.257: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.297: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.303: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.303: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=251) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.303: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 251 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.303: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 251) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.303: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.308: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.308: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 251, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.308: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.308: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.310: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.310: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=252) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.310: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 252) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.310: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.317: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.317: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 252, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.317: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.317: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.318: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.318: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=253) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.318: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 253) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.318: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.324: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.325: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 253, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.325: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.325: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.326: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.326: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=254) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.326: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 254) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.326: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.331: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.331: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 254, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.331: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.331: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.341: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.341: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=255) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.341: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 255) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.341: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.346: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.346: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 255, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.346: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.346: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.347: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.347: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=1) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.347: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 255 ===> 1 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.347: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.347: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.351: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.352: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 1, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.352: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.352: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.353: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.353: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=2) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.353: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 2) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.353: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.360: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.360: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 2, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.360: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.360: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.371: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.371: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=3) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.371: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 3) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.371: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.376: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.376: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 3, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.376: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.376: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.377: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.377: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=4) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.377: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 4) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.377: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.383: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.383: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 4, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.383: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.383: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.399: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Removing BSSID 18:9c:5d:70:ed:7f from PMKID cache of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Adding BSSID 6c:99:89:77:41:ef to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: [0000] 48 24 43 e8 22 65 c4 d1 4f 8d 4f 8e 61 33 5f 2c *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.400: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 4) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: [0000] 48 24 43 e8 22 65 c4 d1 4f 8d 4f 8e 61 33 5f 2c *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=4) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.401: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.409: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.409: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000000: 30 26 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0&.............. *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000010: 00 0f ac 01 00 00 01 00 cc ea 7e 78 02 ee 4c 5f ..........~x..L_ *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000020: f3 20 09 c0 ef de aa f8 ........ *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000010: ac 01 00 00 01 00 cc ea 7e 78 02 ee 4c 5f f3 20 ........~x..L_.. *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: 00000020: 09 c0 ef de aa f8 ...... *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.410: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.415: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 6c:99:89:77:41:e0 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 6c:99:89:77:41:e0, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 13:08:07.416: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) (Cisco Controller) >*pemReceiveTask: Sep 22 13:08:07.417: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Processing assoc-req station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f5:70-01 thread:150e4560 *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Reassociation received from mobile on BSSID 18:9c:5d:70:f5:7c AP AP-06 *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Global 200 Clients are allowed to AP radio *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Max Client Trap Threshold: 0 cur: 0 *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Rf profile 600 Clients are allowed to AP wlan *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'permit-YY' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 In processSsidIE:5680 setting Central switched to TRUE *apfMsConnTask_4: Sep 22 13:18:06.758: a4:17:31:25:00:e7 In processSsidIE:5683 apVapId = 1 and Split Acl Id = 65535 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Applying site-specific Local Bridging override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Applying Local Bridging Interface Policy for station a4:17:31:25:00:e7 - vlan 1145, interface id 12, interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Re-applying interface policy for client *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 processSsidIE statusCode is 0 and status is 0 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 processSsidIE ssid_done_flag is 0 finish_flag is 0 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 STA - rates (8): 140 18 152 36 176 72 96 108 48 72 96 108 0 0 0 0 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 suppRates statusCode is 0 and gotSuppRatesElement is 1 *apfMsConnTask_4: Sep 22 13:18:06.759: RSNIE in Assoc. Req.: (20) *apfMsConnTask_4: Sep 22 13:18:06.759: [0000] 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f *apfMsConnTask_4: Sep 22 13:18:06.759: [0016] ac 01 00 00 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Processing RSN IE type 48, length 20 for mobile a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Received 802.11i 802.1X key management suite, enabling dot1x Authentication *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 RSN Capabilities: 0 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 apfValidateDot11iCapabilities:1122 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Marking Mobile as non-11w Capable *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Received RSN IE with 0 PMKIDs from mobile a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Found an cache entry for BSSID 6c:99:89:77:41:ef in PMKID cache at index 0 of station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Removing BSSID 6c:99:89:77:41:ef from PMKID cache of station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *apfMsConnTask_4: Sep 22 13:18:06.759: a4:17:31:25:00:e7 apfValidateDot11wGroupMgmtCipher:1552, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Deleted mobile LWAPP rule on AP [6c:99:89:77:41:e0] *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Updated location for station old AP 6c:99:89:77:41:e0-1, new AP 18:9c:5d:70:f5:70-1 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Updating AID for REAP AP Client 18:9c:5d:70:f5:70 - AID ===> 1 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 apfMsRunStateDec *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 apfMs1xStateDec *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Change state to START (0) last state RUN (20) *pemReceiveTask: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 START (0) Initializing policy *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 START (0) Change state to AUTHCHECK (2) last state START (0) *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2) *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Encryption policy is set to 0x80000001 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f5:70 vapId 4 apVapId 1 flex-acl-name: *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f5:70 from Associated to Associated *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 apfPemAddUser2:session timeout forstation a4:17:31:25:00:e7 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Stopping deletion of Mobile Station: (callerId: 48) *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0 *apfMsConnTask_4: Sep 22 13:18:06.760: a4:17:31:25:00:e7 Sending assoc-resp with status 0 station:a4:17:31:25:00:e7 AP:18:9c:5d:70:f5:70-01 on apVapId 1 *apfMsConnTask_4: Sep 22 13:18:06.761: a4:17:31:25:00:e7 Sending Assoc Response to station on BSSID 18:9c:5d:70:f5:7f (status 0) ApVapId 1 Slot 1 *apfMsConnTask_4: Sep 22 13:18:06.761: a4:17:31:25:00:e7 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f5:70 from Associated to Associated *spamApTask3: Sep 22 13:18:06.767: a4:17:31:25:00:e7 Sent 1x initiate message to multi thread task for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.767: a4:17:31:25:00:e7 reauth_sm state transition 0 ---> 0 for mobile a4:17:31:25:00:e7 at 1x_reauth_sm.c:53 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.767: a4:17:31:25:00:e7 EAP-PARAM Debug - eap-params for Wlan-Id :4 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.767: a4:17:31:25:00:e7 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.767: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Connecting state *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.767: a4:17:31:25:00:e7 Sending EAP-Request/Identity to mobile a4:17:31:25:00:e7 (EAP Id 1) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 Received Identity Response (count=1) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 Resetting reauth count 1 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 EAP State update from Connecting to Authenticating for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticating state *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.806: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.813: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.813: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=71) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.813: a4:17:31:25:00:e7 WARNING: updated EAP-Identifier 1 ===> 71 for STA a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.813: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 71) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.813: a4:17:31:25:00:e7 Allocating EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.821: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.822: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 71, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.822: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.822: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.823: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.823: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=72) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.823: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 72) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.823: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.830: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.830: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 72, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.830: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.830: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.832: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.832: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=73) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.832: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 73) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.832: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.838: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.838: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 73, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.838: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.838: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.840: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.840: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=74) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.840: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 74) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.840: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.846: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.846: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 74, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.846: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.846: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.857: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.857: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=75) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.857: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 75) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.857: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.862: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.862: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 75, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.862: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.862: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.864: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.864: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=76) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.864: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 76) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.864: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.880: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.880: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 76, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.880: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.880: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.882: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.882: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=77) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.882: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 77) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.882: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.889: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.889: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 77, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.889: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.889: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.898: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.898: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=78) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.898: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 78) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.898: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.908: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.908: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 78, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.908: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.908: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.910: a4:17:31:25:00:e7 Processing Access-Challenge for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.910: a4:17:31:25:00:e7 Entering Backend Auth Req state (id=79) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.910: a4:17:31:25:00:e7 Sending EAP Request from AAA to mobile a4:17:31:25:00:e7 (EAP Id 79) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.910: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.916: a4:17:31:25:00:e7 Received EAPOL EAPPKT from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.916: a4:17:31:25:00:e7 Received EAP Response from mobile a4:17:31:25:00:e7 (EAP Id 79, EAP Type 25) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.916: a4:17:31:25:00:e7 Resetting reauth count 0 to 0 for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.916: a4:17:31:25:00:e7 Entering Backend Auth Response state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Processing Access-Accept for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Resetting web IPv4 acl from 255 to 255 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Resetting web IPv4 Flex acl from 65535 to 65535 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 override for default ap group, marking intgrp NULL *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 apfApplyWlanPolicy: Retaining the ACL recieved in AAA attributes 255 on mobile *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 override from ap group, removing intf group from mscb *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Applying site-specific override for station a4:17:31:25:00:e7 - vapId 4, site 'zzz--AP', interface 'rolling stock dc spanned vlan' *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1145 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Re-applying interface policy for client *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.942: a4:17:31:25:00:e7 Inserting AAA Override struct for mobile MAC: a4:17:31:25:00:e7, source 4 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'permit-YY' (ACL ID 0) --- (caller apf_policy.c:2532) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Setting re-auth timeout to 0 seconds, got from WLAN config. *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Station a4:17:31:25:00:e7 setting dot1x reauth timeout = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Stopping reauth timeout for a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Creating a PKC PMKID Cache entry for station a4:17:31:25:00:e7 (RSN 2) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 8 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Setting active key cache index 8 ---> 0 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Adding BSSID 18:9c:5d:70:f5:7f to PMKID cache at index 0 for station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: New PMKID: (16) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: [0000] 9d 25 75 0c ac a3 92 74 cc fe 03 b2 f4 c9 1e 28 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Disabling re-auth since PMK lifetime can take care of same. *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 PMK: Sending cache delete *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 unsetting PmkIdValidatedByAp *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Zeroize AAA Overrides from local for station *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 Adding Audit session ID payload in Mobility handoff *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 1 PMK-update groupcast messages sent *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.943: a4:17:31:25:00:e7 PMK sent to mobility group *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.944: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.944: a4:17:31:25:00:e7 Sending EAP-Success to mobile a4:17:31:25:00:e7 (EAP Id 79) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Freeing AAACB from Dot1xCB as AAA auth is done for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f5:7f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Found an cache entry for BSSID 18:9c:5d:70:f5:7f in PMKID cache at index 0 of station a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: Including PMKID in M1 (16) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: [0000] 9d 25 75 0c ac a3 92 74 cc fe 03 b2 f4 c9 1e 28 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Starting key exchange to mobile a4:17:31:25:00:e7, data packets will be dropped *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Entering Backend Auth Success state (id=79) for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 Received Auth Success while in Authenticating state for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.946: a4:17:31:25:00:e7 dot1x - moving mobile a4:17:31:25:00:e7 into Authenticated state *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Received EAPOL-key in PTK_START state (message 2) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Dumping RSNIE received in Association request: *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: 00000000: 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 0............... *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: 00000010: 00 0f ac 01 00 00 ...... *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Dumping RSNIE received in EAPOL M2 : *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: 00000000: 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ................ *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: 00000010: ac 01 00 00 .... *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 PMK: Sending cache add *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Sending EAPOL-Key Message to mobile a4:17:31:25:00:e7 state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.953: a4:17:31:25:00:e7 Reusing allocated memory for EAP Pkt for retransmission to mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 Received EAPOL-Key from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 Stopping retransmission timer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 Freeing EAP Retransmit Bufer for mobile a4:17:31:25:00:e7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 apfMs1xStateInc *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 apfMsPeapSimReqCntInc *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 apfMsPeapSimReqSuccessCntInc *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.958: a4:17:31:25:00:e7 10.0.45.119 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 Not Using WMM Compliance code qosCap 00 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 Sending 11w Flag 0 for Client A4:17:31:25:00:E7 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 18:9c:5d:70:f5:70 vapId 4 apVapId 1 flex-acl-name: *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 apfMsRunStateInc *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4) *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Reached PLUMBFASTPATH: from line 6629 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Adding Fast Path rule type = Airespace AP Client on AP 18:9c:5d:70:f5:70, slot 1, interface = 13, QOS = 0 IPv4 ACL ID = 0, IPv6 ACL ID = 255 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 1145, Local Bridging intf id = 12 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0 *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *Dot1x_NW_MsgTask_7: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 0, IPv6 ACL ID 255, L2 ACL ID 255) *pemReceiveTask: Sep 22 13:18:06.959: a4:17:31:25:00:e7 10.0.45.119 Added NPU entry of type 1, dtlFlags 0x0 *spamApTask3: Sep 22 13:39:02.574: a4:17:31:25:00:e7 Received DELETE mobile, reason MN_IDLE_TIMEOUT, from AP 18:9c:5d:70:f5:70, slot 1 ...cleaning up mscb *spamApTask3: Sep 22 13:39:02.574: a4:17:31:25:00:e7 apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 4, reasonCode 4 *spamApTask3: Sep 22 13:39:02.574: a4:17:31:25:00:e7 Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds *spamApTask3: Sep 22 13:39:02.574: a4:17:31:25:00:e7 PMK: Sending cache delete *spamApTask3: Sep 22 13:39:02.574: a4:17:31:25:00:e7 Removing PMK cache entry for station a4:17:31:25:00:e7 *spamApTask3: Sep 22 13:39:02.575: a4:17:31:25:00:e7 1 PMK-remove groupcast messages sent *osapiBsnTimer: Sep 22 13:39:03.492: a4:17:31:25:00:e7 apfMsExpireCallback (apf_ms.c:632) Expiring Mobile! *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 apfMsExpireMobileStation (apf_ms.c:6971) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f5:70 from Associated to Disassociated *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Sent Deauthenticate to mobile on BSSID 18:9c:5d:70:f5:70 slot 1(caller apf_ms.c:7065) *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Resetting MSCB PMK Cache Entry 0 for station a4:17:31:25:00:e7 *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Removing BSSID 18:9c:5d:70:f5:7f from PMKID cache of station a4:17:31:25:00:e7 *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Setting active key cache index 0 ---> 8 *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Deleting the PMK cache when de-authenticating the client. *apfReceiveTask: Sep 22 13:39:03.492: a4:17:31:25:00:e7 Global PMK Cache deletion failed. *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 Accounting NAI-Realm: hidden\sani.tized, from Mscb username : hidden\sani.tized *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 apfMsAssoStateDec *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 apfMsExpireMobileStation (apf_ms.c:7103) Changing state for mobile a4:17:31:25:00:e7 on AP 18:9c:5d:70:f5:70 from Disassociated to Idle *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 10.0.45.119 START (0) Deleted mobile LWAPP rule on AP [18:9c:5d:70:f5:70] *pemReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 10.0.45.119 Removed NPU entry. *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 Username entry deleted for mobile *apfReceiveTask: Sep 22 13:39:03.493: a4:17:31:25:00:e7 Deleting mobile on AP 18:9c:5d:70:f5:70(1)