Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Client not able to stay connected

Hi everyone,

Background: Wireless credit card machines can't stay connected to the 5508 controller 7.0.116  / 1142 ap wireless system.  MAC address of one of the wireless hosts is 00:12:0e:ec:ce:97.  AP servicing them is d4:a0:2a:99:34:60. Hosts are able to connect to the network after a reboot and stay connected for random periods of time but then don't come back unless you manually reload them.  I have 3 in total in the same room services by the same ap. 

I have the output of debug client 00:12:0e:ec:ce:97.  Output showed 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 so I increased the value to 4000ms on the controller but am still having the issue.

Note that the output below is the state the client stays in after receiving the timeout (802.1x 'timeoutEvt') showing subsequent attampts.  The only way to get them back on is a reload of the credit card machine.

Any insight would be appreciated.  Thanks in advance!!

//art

**************************************************************************

*apfMsConnTask_3: Jun 27 08:07:16.539: 00:12:0e:ec:ce:97 Association received from mobile on AP d4:a0:2a:99:34:60

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 START (0) Changing ACL 'Guest_Access' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621)

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Applying site-specific IPv6 override for station 00:12:0e:ec:ce:97 - vapId 4, site 'default-group', interface 'credit card'

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Applying IPv6 Interface Policy for station 00:12:0e:ec:ce:97 - vlan 244, interface id 14, interface 'credit card'

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 STA - rates (8): 130 132 139 12 18 150 24 36 0 0 0 0 0 0 0 0

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Processing RSN IE type 48, length 20 for mobile 00:12:0e:ec:ce:97

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 START (0) Initializing policy

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) DHCP Not required on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4for this client

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 apfMsAssoStateInc

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Idle to Associated

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 Sending Assoc Response to station on BSSID d4:a0:2a:99:34:60 (status 0) ApVapId 4 Slot 0

*apfMsConnTask_3: Jun 27 08:07:16.540: 00:12:0e:ec:ce:97 apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Creating a PKC PMKID Cache entry for station 00:12:0e:ec:ce:97 (RSN 2)

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Adding BSSID d4:a0:2a:99:34:63 to PMKID cache for station 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:16.568: New PMKID: (16)

*dot1xMsgTask: Jun 27 08:07:16.568:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Initiating RSN PSK to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 dot1x - moving mobile 00:12:0e:ec:ce:97 into Force Auth state

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Skipping EAP-Success to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:16.568: Including PMKID in M1  (16)

*dot1xMsgTask: Jun 27 08:07:16.568:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Starting key exchange to mobile 00:12:0e:ec:ce:97, data packets will be dropped

*dot1xMsgTask: Jun 27 08:07:16.568: 00:12:0e:ec:ce:97 Sending EAPOL-Key Message to mobile 00:12:0e:ec:ce:97

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*osapiBsnTimer: Jun 27 08:07:20.670: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:20.670: 00:12:0e:ec:ce:97 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:24.670: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:24.670: 00:12:0e:ec:ce:97 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:28.670: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:28.670: 00:12:0e:ec:ce:97 Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:32.670: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:32.670: 00:12:0e:ec:ce:97 Retransmit 4 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:36.670: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:36.670: 00:12:0e:ec:ce:97 Retransmit failure for EAPOL-Key M1 to mobile 00:12:0e:ec:ce:97, retransmit count 5, mscb deauth count 0

*dot1xMsgTask: Jun 27 08:07:36.670: 00:12:0e:ec:ce:97 Sent Deauthenticate to mobile on BSSID d4:a0:2a:99:34:60 slot 0(caller 1x_ptsm.c:534)

*dot1xMsgTask: Jun 27 08:07:36.670: 00:12:0e:ec:ce:97 Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Association received from mobile on AP d4:a0:2a:99:34:60

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621)

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Applying site-specific IPv6 override for station 00:12:0e:ec:ce:97 - vapId 4, site 'default-group', interface 'credit card'

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Applying IPv6 Interface Policy for station 00:12:0e:ec:ce:97 - vlan 244, interface id 14, interface 'credit card'

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Processing RSN IE type 48, length 20 for mobile 00:12:0e:ec:ce:97

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Initializing policy

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) DHCP Not required on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4for this client

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*apfMsConnTask_3: Jun 27 08:07:39.646: 00:12:0e:ec:ce:97 Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_3: Jun 27 08:07:39.647: 00:12:0e:ec:ce:97 Sending Assoc Response to station on BSSID d4:a0:2a:99:34:60 (status 0) ApVapId 4 Slot 0

*apfMsConnTask_3: Jun 27 08:07:39.647: 00:12:0e:ec:ce:97 apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Creating a PKC PMKID Cache entry for station 00:12:0e:ec:ce:97 (RSN 2)

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Adding BSSID d4:a0:2a:99:34:63 to PMKID cache for station 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:39.674: New PMKID: (16)

*dot1xMsgTask: Jun 27 08:07:39.674:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Initiating RSN PSK to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 dot1x - moving mobile 00:12:0e:ec:ce:97 into Force Auth state

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Skipping EAP-Success to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:07:39.674: Including PMKID in M1  (16)

*dot1xMsgTask: Jun 27 08:07:39.674:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Starting key exchange to mobile 00:12:0e:ec:ce:97, data packets will be dropped

*dot1xMsgTask: Jun 27 08:07:39.674: 00:12:0e:ec:ce:97 Sending EAPOL-Key Message to mobile 00:12:0e:ec:ce:97

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*osapiBsnTimer: Jun 27 08:07:43.870: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:43.870: 00:12:0e:ec:ce:97 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:47.870: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:47.870: 00:12:0e:ec:ce:97 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:51.870: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:51.870: 00:12:0e:ec:ce:97 Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:55.870: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:55.870: 00:12:0e:ec:ce:97 Retransmit 4 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:07:59.870: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:07:59.870: 00:12:0e:ec:ce:97 Retransmit failure for EAPOL-Key M1 to mobile 00:12:0e:ec:ce:97, retransmit count 5, mscb deauth count 1

*dot1xMsgTask: Jun 27 08:07:59.870: 00:12:0e:ec:ce:97 Sent Deauthenticate to mobile on BSSID d4:a0:2a:99:34:60 slot 0(caller 1x_ptsm.c:534)

*dot1xMsgTask: Jun 27 08:07:59.870: 00:12:0e:ec:ce:97 Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Association received from mobile on AP d4:a0:2a:99:34:60

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621)

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Applying site-specific IPv6 override for station 00:12:0e:ec:ce:97 - vapId 4, site 'default-group', interface 'credit card'

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Applying IPv6 Interface Policy for station 00:12:0e:ec:ce:97 - vlan 244, interface id 14, interface 'credit card'

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Processing RSN IE type 48, length 20 for mobile 00:12:0e:ec:ce:97

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Initializing policy

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) DHCP Not required on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4for this client

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 Sending Assoc Response to station on BSSID d4:a0:2a:99:34:60 (status 0) ApVapId 4 Slot 0

*apfMsConnTask_3: Jun 27 08:08:02.850: 00:12:0e:ec:ce:97 apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Creating a PKC PMKID Cache entry for station 00:12:0e:ec:ce:97 (RSN 2)

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Adding BSSID d4:a0:2a:99:34:63 to PMKID cache for station 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:02.878: New PMKID: (16)

*dot1xMsgTask: Jun 27 08:08:02.878:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Initiating RSN PSK to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 dot1x - moving mobile 00:12:0e:ec:ce:97 into Force Auth state

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Skipping EAP-Success to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:02.878: Including PMKID in M1  (16)

*dot1xMsgTask: Jun 27 08:08:02.878:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Starting key exchange to mobile 00:12:0e:ec:ce:97, data packets will be dropped

*dot1xMsgTask: Jun 27 08:08:02.878: 00:12:0e:ec:ce:97 Sending EAPOL-Key Message to mobile 00:12:0e:ec:ce:97

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*osapiBsnTimer: Jun 27 08:08:07.070: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:07.070: 00:12:0e:ec:ce:97 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:11.070: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:11.070: 00:12:0e:ec:ce:97 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:15.070: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:15.070: 00:12:0e:ec:ce:97 Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:19.070: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:19.070: 00:12:0e:ec:ce:97 Retransmit 4 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:23.070: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:23.070: 00:12:0e:ec:ce:97 Retransmit failure for EAPOL-Key M1 to mobile 00:12:0e:ec:ce:97, retransmit count 5, mscb deauth count 2

*dot1xMsgTask: Jun 27 08:08:23.070: 00:12:0e:ec:ce:97 Sent Deauthenticate to mobile on BSSID d4:a0:2a:99:34:60 slot 0(caller 1x_ptsm.c:534)

*dot1xMsgTask: Jun 27 08:08:23.070: 00:12:0e:ec:ce:97 Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds

*apfMsConnTask_3: Jun 27 08:08:26.045: 00:12:0e:ec:ce:97 Association received from mobile on AP d4:a0:2a:99:34:60

*apfMsConnTask_3: Jun 27 08:08:26.045: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Changing ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1621)

*apfMsConnTask_3: Jun 27 08:08:26.045: 00:12:0e:ec:ce:97 Applying site-specific IPv6 override for station 00:12:0e:ec:ce:97 - vapId 4, site 'default-group', interface 'credit card'

*apfMsConnTask_3: Jun 27 08:08:26.045: 00:12:0e:ec:ce:97 Applying IPv6 Interface Policy for station 00:12:0e:ec:ce:97 - vlan 244, interface id 14, interface 'credit card'

*apfMsConnTask_3: Jun 27 08:08:26.045: 00:12:0e:ec:ce:97 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 Processing RSN IE type 48, length 20 for mobile 00:12:0e:ec:ce:97

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Initializing policy

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) DHCP Not required on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4for this client

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 Not Using WMM Compliance code qosCap 00

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:a0:2a:99:34:60 vapId 4 apVapId 4

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 Stopping deletion of Mobile Station: (callerId: 48)

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 Sending Assoc Response to station on BSSID d4:a0:2a:99:34:60 (status 0) ApVapId 4 Slot 0

*apfMsConnTask_3: Jun 27 08:08:26.046: 00:12:0e:ec:ce:97 apfProcessAssocReq (apf_80211.c:5241) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Associated

*dot1xMsgTask: Jun 27 08:08:26.074: 00:12:0e:ec:ce:97 Creating a PKC PMKID Cache entry for station 00:12:0e:ec:ce:97 (RSN 2)

*dot1xMsgTask: Jun 27 08:08:26.074: 00:12:0e:ec:ce:97 Adding BSSID d4:a0:2a:99:34:63 to PMKID cache for station 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:26.074: New PMKID: (16)

*dot1xMsgTask: Jun 27 08:08:26.075:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:08:26.075: 00:12:0e:ec:ce:97 Initiating RSN PSK to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:26.075: 00:12:0e:ec:ce:97 dot1x - moving mobile 00:12:0e:ec:ce:97 into Force Auth state

*dot1xMsgTask: Jun 27 08:08:26.075: 00:12:0e:ec:ce:97 Skipping EAP-Success to mobile 00:12:0e:ec:ce:97

*dot1xMsgTask: Jun 27 08:08:26.075: Including PMKID in M1  (16)

*dot1xMsgTask: Jun 27 08:08:26.075:      [0000] ea 43 7c af b0 18 ad a1 61 7d 0f cf c5 46 bd 63

*dot1xMsgTask: Jun 27 08:08:26.075: 00:12:0e:ec:ce:97 Starting key exchange to mobile 00:12:0e:ec:ce:97, data packets will be dropped

*dot1xMsgTask: Jun 27 08:08:26.075: 00:12:0e:ec:ce:97 Sending EAPOL-Key Message to mobile 00:12:0e:ec:ce:97

   state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00

*osapiBsnTimer: Jun 27 08:08:30.270: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:30.270: 00:12:0e:ec:ce:97 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:34.270: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:34.270: 00:12:0e:ec:ce:97 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:38.270: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:38.270: 00:12:0e:ec:ce:97 Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:42.270: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:42.270: 00:12:0e:ec:ce:97 Retransmit 4 of EAPOL-Key M1 (length 121) for mobile 00:12:0e:ec:ce:97

*osapiBsnTimer: Jun 27 08:08:46.270: 00:12:0e:ec:ce:97 802.1x 'timeoutEvt' Timer expired for station 00:12:0e:ec:ce:97 and for message = M2

*dot1xMsgTask: Jun 27 08:08:46.270: 00:12:0e:ec:ce:97 Retransmit failure for EAPOL-Key M1 to mobile 00:12:0e:ec:ce:97, retransmit count 5, mscb deauth count 3

*dot1xMsgTask: Jun 27 08:08:46.270: 00:12:0e:ec:ce:97 Sent Deauthenticate to mobile on BSSID d4:a0:2a:99:34:60 slot 0(caller 1x_ptsm.c:534)

*dot1xMsgTask: Jun 27 08:08:46.270: 00:12:0e:ec:ce:97 Scheduling deletion of Mobile Station:  (callerId: 57) in 10 seconds

*osapiBsnTimer: Jun 27 08:08:56.270: 00:12:0e:ec:ce:97 apfMsExpireCallback (apf_ms.c:608) Expiring Mobile!

*apfReceiveTask: Jun 27 08:08:56.270: 00:12:0e:ec:ce:97 apfMsExpireMobileStation (apf_ms.c:5009) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Associated to Disassociated

*apfReceiveTask: Jun 27 08:08:56.270: 00:12:0e:ec:ce:97 Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds

*osapiBsnTimer: Jun 27 08:09:06.270: 00:12:0e:ec:ce:97 apfMsExpireCallback (apf_ms.c:608) Expiring Mobile!

*apfReceiveTask: Jun 27 08:09:06.270: 00:12:0e:ec:ce:97 apfMsAssoStateDec

*apfReceiveTask: Jun 27 08:09:06.270: 00:12:0e:ec:ce:97 apfMsExpireMobileStation (apf_ms.c:5132) Changing state for mobile 00:12:0e:ec:ce:97 on AP d4:a0:2a:99:34:60 from Disassociated to Idle

*apfReceiveTask: Jun 27 08:09:06.270: 00:12:0e:ec:ce:97 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [d4:a0:2a:99:34:60]

*apfReceiveTask: Jun 27 08:09:06.270: 00:12:0e:ec:ce:97 Deleting mobile on AP d4:a0:2a:99:34:60(0)

Everyone's tags (1)
3 REPLIES
Cisco Employee

Client not able to stay connected

device in question is wifi certified?

are suggested datarates enabled on wlc for that radio?

try only wpa-tkip or wpa2-aes with radius on WLAN.

it can be due to bad wireless driver if other PCs are fine, update to working good known driver on those devices.

New Member

Client not able to stay connected

Thanks very much for the reply.  I can't verify whether these devices  are wi-fi certified or not.  They are from First Data FD200 units with  the wireless option.

I did change the WLAN to use WPA/TKIP and reconfigured  the devices.  They connected with no problem and I'm running debug to  see if they stay on the network.  Since the failure seems to happen  during the hourly keyexhange, maybe changing the encryption will prove  succesful.  They have been on the network now for 10 hours without  de-auth so maybe I'll know more in the morning.

One  more bit of news is that I have the same type of wireless credit card  machines at another facility.  These never have an issue staying on the  network.  The only difference is the AP's used.  They succesfully stay  on the network when connected to a 1242 using 802.11g and I'm having  problems when they connect to an 1142 using 802.11bn.

Thanks again //art

Client not able to stay connected

Hi,

I've seen this kind of problems many times when someone migrate from an AP model that does not support 802.11n to a new model that supports 802.11n (1140, 1250...etc).

It is always a client issue and fixed by a driver upgrade. However, sometimes no upgrade is available for the clients (End of life for example) so the user have to replace the devices. Most of such devices I've encountered with such problem are scan guns at stores.

Whatever your device is, I think if you get the firmware/driver upgrades that would mitigate the issue.

HTH

Amjad

Rating useful replies is more useful than saying "Thank you"
692
Views
0
Helpful
3
Replies
CreatePlease to create content