Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

what does mean this error *apfMsConnTask_0: No entry available in table, for client?

Hi

I have troubles to connect new user to the SSIDs, we have 2 SSIDs. The problem is only with the new users, because I login to the WLC and I see user connected and working fine.

I put a debug client on the WLC but I don't see any attempt to connect of the client, but I see this message when the problem is present

*apfMsConnTask_0: Feb 18 18:30:33.178: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:33.231: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:33.548: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:33.808: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:38.751: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:39.066: No entry available in table, for client

*apfMsConnTask_0: Feb 18 18:30:39.379: No entry available in table, for client

I have the WLC 2125 with 14 AP's connected

I would like to know what is the meaning of this message

  • Getting Started with Wireless
Everyone's tags (3)
4 ACCEPTED SOLUTIONS

Accepted Solutions
Hall of Fame Super Silver

Re: what does mean this error *apfMsConnTask_0: No entry availab

That is a generic error that basically shows you that the client isn't being out on the WLC.

What code are you running and what AP's do you have? What clients are having issues also? can you post the show WLAN of the affected WLAN.

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
Hall of Fame Super Silver

Re: what does mean this error *apfMsConnTask_0: No entry availab

Well since the AP's are US, you do have the US country code defined in the WLC correct?

You also seem to have radius on both SSIDs? What does your radius server show? You see passed or failed attempts? You also mention that the clients that are connected are fine but not any new ones. I don't understand this.... Clients have to connect initially to the wireless. So what do you mean only new connections don't work?

Session timer can be left at default for WLAN 1, which is 1800 seconds. You have enough DHCP address available on the subnet since the AP's are in h-reap?

Sent from Cisco Technical Support iPhone App

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
Hall of Fame Super Silver

what does mean this error *apfMsConnTask_0: No entry available i

Can you post your show run-config

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
Hall of Fame Super Silver

Re: what does mean this error *apfMsConnTask_0: No entry availab

Here is an overall assesment:)

  • MEXWA01 has a secondary WLC configured (WHQMSWC01), I would remvove this
    • MEXWA04 seems to have 5ghz disabled or is down
    • 146.180.10.1 Radius server is disabled
    • 146.180.10.1 RAdius server port is wrong, should be 1812 not 12
    • If you have two radius servers for Mexico, then you should define both 146.180.10.1 and .2
    • QRTWA01 is on Channel 3, should be using 1,6 or 11

      Thanks,

      Scott

      *****Help out other by using the rating system and marking answered questions as "Answered"*****

      Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
      8 REPLIES
      Hall of Fame Super Silver

      Re: what does mean this error *apfMsConnTask_0: No entry availab

      That is a generic error that basically shows you that the client isn't being out on the WLC.

      What code are you running and what AP's do you have? What clients are having issues also? can you post the show WLAN of the affected WLAN.

      Sent from Cisco Technical Support iPhone App

      Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
      New Member

      what does mean this error *apfMsConnTask_0: No entry available i

      Thanks Scott

      The country code that we are using is US, but the WLC is on Mexico. We have 13 AP's AIR-LAP1142N-A-K9 and one

      AIR-LAP1242AG-A-K9

      The problem is on both SSID, but just when new user is trying to connect, the users that are connected don't have any issue

      here is the information of show WLAN 1 and 2

      (Cisco Controller) >show WLAN 1        

      WLAN Identifier.................................. 1

      Profile Name..................................... Mexico

      Network Name (SSID).............................. Mexico

      Status........................................... Enabled

      MAC Filtering.................................... Disabled

      Broadcast SSID................................... Enabled

      AAA Policy Override.............................. Disabled

      Network Admission Control

        Radius-NAC State............................... Disabled

        SNMP-NAC State................................. Disabled

        Quarantine VLAN................................ 0

      Maximum number of Associated Clients............. 0

      Number of Active Clients......................... 26

      Exclusionlist Timeout............................ 60 seconds

      Session Timeout.................................. 34200 seconds

      CHD per WLAN..................................... Enabled

      Webauth DHCP exclusion........................... Disabled

      Interface........................................ management

      Multicast Interface.............................. Not Configured

      WLAN ACL......................................... unconfigured

      DHCP Server...................................... Default

      DHCP Address Assignment Required................. Disabled

      Static IP client tunneling....................... Disabled

      Quality of Service............................... Silver (best effort)

      Scan Defer Priority.............................. 4,5,6

      Scan Defer Time.................................. 100 milliseconds

      WMM.............................................. Allowed

      WMM UAPSD Compliant Client Support............... Disabled

      Media Stream Multicast-direct.................... Disabled

      CCX - AironetIe Support.......................... Enabled

      CCX - Gratuitous ProbeResponse (GPR)............. Disabled

      CCX - Diagnostics Channel Capability............. Disabled

      Dot11-Phone Mode (7920).......................... Disabled

      Wired Protocol................................... None

      IPv6 Support..................................... Disabled

      Passive Client Feature........................... Disabled

      Peer-to-Peer Blocking Action..................... Disabled

      Radio Policy..................................... All

      DTIM period for 802.11a radio.................... 1

      DTIM period for 802.11b radio.................... 1

      Radius Servers

         Authentication................................ 146.180.10.1 1812

        Authentication................................ 146.180.10.2 1812

         Accounting.................................... Global Servers

         Dynamic Interface............................. Disabled

      Local EAP Authentication......................... Disabled

      Security

         802.11 Authentication:........................ Open System

         Static WEP Keys............................... Disabled

         802.1X........................................ Disabled

         Wi-Fi Protected Access (WPA/WPA2)............. Enabled

            WPA (SSN IE)............................... Disabled

            WPA2 (RSN IE).............................. Enabled

               TKIP Cipher............................. Disabled

               AES Cipher.............................. Enabled

                                                                     Auth Key Management

               802.1x.................................. Enabled

               PSK..................................... Disabled

               CCKM.................................... Disabled

               FT(802.11r)............................. Disabled

               FT-PSK(802.11r)......................... Disabled

      FT Reassociation Timeout......................... 20

      FT Over-The-Air mode............................. Enabled

      FT Over-The-Ds mode.............................. Enabled

      CCKM tsf Tolerance............................... 1000

         CKIP ......................................... Disabled

         Web Based Authentication...................... Disabled

         Web-Passthrough............................... Disabled

         Conditional Web Redirect...................... Disabled

         Splash-Page Web Redirect...................... Disabled

         Auto Anchor................................... Disabled

         H-REAP Local Switching........................ Enabled

         H-REAP Local Authentication................... Disabled

         H-REAP Learn IP Address....................... Enabled

         Client MFP.................................... Optional

         Tkip MIC Countermeasure Hold-down Timer....... 60

      Call Snooping.................................... Disabled

      Roamed Call Re-Anchor Policy..................... Disabled

      SIP CAC Fail Send-486-Busy Policy................ Enabled

      SIP CAC Fail Send Dis-Association Policy......... Disabled

      Band Select...................................... Disabled

      Load Balancing................................... Disabled

      Mobility Anchor List

      WLAN ID     IP Address            Status

      -------     ---------------       ------

      (Cisco Controller) >show WLAN 2

      WLAN Identifier.................................. 2

      Profile Name..................................... Guest

      Network Name (SSID).............................. Guest

      Status........................................... Enabled

      MAC Filtering.................................... Disabled

      Broadcast SSID................................... Enabled

      AAA Policy Override.............................. Disabled

      Network Admission Control

        Radius-NAC State............................... Disabled

        SNMP-NAC State................................. Disabled

        Quarantine VLAN................................ 0

      Maximum number of Associated Clients............. 0

      Number of Active Clients......................... 7

      Exclusionlist Timeout............................ 60 seconds

      Session Timeout.................................. 32400 seconds

      CHD per WLAN..................................... Enabled

      Webauth DHCP exclusion........................... Disabled

      Interface........................................ vlan19

      Multicast Interface.............................. Not Configured

      WLAN ACL......................................... unconfigured

      DHCP Server...................................... Default

      DHCP Address Assignment Required................. Disabled

      Static IP client tunneling....................... Disabled

      Quality of Service............................... Silver (best effort)

      Scan Defer Priority.............................. 4,5,6

      Scan Defer Time.................................. 100 milliseconds

      WMM.............................................. Allowed

      WMM UAPSD Compliant Client Support............... Disabled

      Media Stream Multicast-direct.................... Disabled

      CCX - AironetIe Support.......................... Enabled

      CCX - Gratuitous ProbeResponse (GPR)............. Disabled

      CCX - Diagnostics Channel Capability............. Disabled

      Dot11-Phone Mode (7920).......................... Disabled

      Wired Protocol................................... None

      IPv6 Support..................................... Disabled

      Passive Client Feature........................... Disabled

      Peer-to-Peer Blocking Action..................... Disabled

      Radio Policy..................................... All

      DTIM period for 802.11a radio.................... 1

      DTIM period for 802.11b radio.................... 1

      Radius Servers

         Authentication................................ 10.120.15.1 1812

        Accounting.................................... Global Servers

         Dynamic Interface............................. Disabled

      Local EAP Authentication......................... Disabled

      Security

         802.11 Authentication:........................ Open System

         Static WEP Keys............................... Disabled

         802.1X........................................ Disabled

         Wi-Fi Protected Access (WPA/WPA2)............. Disabled

         CKIP ......................................... Disabled

         Web Based Authentication...................... Enabled

              ACL............................................. Unconfigured

              Web Authentication server precedence:

              1............................................... local

              2............................................... radius

              3............................................... ldap

         Web-Passthrough............................... Disabled

         Conditional Web Redirect...................... Disabled

         Splash-Page Web Redirect...................... Disabled

         Auto Anchor................................... Disabled

         H-REAP Local Switching........................ Disabled

         H-REAP Local Authentication................... Disabled

         H-REAP Learn IP Address....................... Enabled

         Client MFP.................................... Optional but inactive (WPA2 not configured)

         Tkip MIC Countermeasure Hold-down Timer....... 60

      Call Snooping.................................... Disabled

      Roamed Call Re-Anchor Policy..................... Disabled

      SIP CAC Fail Send-486-Busy Policy................ Enabled

      SIP CAC Fail Send Dis-Association Policy......... Disabled

      Band Select...................................... Disabled

      Load Balancing................................... Disabled

      Mobility Anchor List

      WLAN ID     IP Address            Status

      -------     ---------------       ------

      New Member

      I have the same problem. I

      I have the same problem. I have WLC2125-K9 (with 7.0.235.3). The nuber of clients stuck on 256 (as a sum for both WLANs we have). I see no DHCP request until someone leaves WLC, then request is transfered to external DHCP server and the client is able to connect. I see no limits in show run-config. I tryed to set limit to 350 by config wlan max-associated-client but without luck.

      With debug client I see this:

      cisco *apfMsConnTask_0: Mar 31 09:12:04.404: No entry available in table, for client

      In the syslog I see this (not sure if it is related, because I spotted these lines after debugging):

      *apfMsConnTask_0: Mar 31 12:56:53.834: %APF-3-LIST_ERR: apf_ms_list.c:184 No entry available in table, for client

      Hall of Fame Super Silver

      Re: what does mean this error *apfMsConnTask_0: No entry availab

      Well since the AP's are US, you do have the US country code defined in the WLC correct?

      You also seem to have radius on both SSIDs? What does your radius server show? You see passed or failed attempts? You also mention that the clients that are connected are fine but not any new ones. I don't understand this.... Clients have to connect initially to the wireless. So what do you mean only new connections don't work?

      Session timer can be left at default for WLAN 1, which is 1800 seconds. You have enough DHCP address available on the subnet since the AP's are in h-reap?

      Sent from Cisco Technical Support iPhone App

      Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
      New Member

      what does mean this error *apfMsConnTask_0: No entry available i

      Correct Scott, the WLC has the country code US, and my AP's are working on the same country code, since my AP's have the counry code A as well.

      Yes, we have 4 Radius Servers, 2 are for one SSID, and the other 2 are for the other SSID, we don't see many

      AAA Authentication Failure, but is important to say that the 4 Radius server are on US. But we don't have high latency to reach them.

      Let me explain with an example, there are users that arrive early at the company around 8:00 am, then they are able to connect without any issue, but there is a time when the user that arrive more late around 10:00 am, they are suffering problem to login to the SSIDs, but the users that arreived at 8:00 AM, don't have any issue they still are working fine. And if one or several users of the 8:00 am move to another place and disconnect his laptop, and try to reconnect could have troubles.

      I tried to use the debug client to know what happen with the user that cannot login, but I don't see any information comming from the user, but if I ask to disconnect an user that is connected and working fine, I put the debug and reconnect the user, I can see the attempts on the WLC and the user is able to rejoin and works fine. Seem that they WLC keep something on cache for the user that was connected and working fine.

      Hall of Fame Super Silver

      what does mean this error *apfMsConnTask_0: No entry available i

      Can you post your show run-config

      Thanks,

      Scott

      *****Help out other by using the rating system and marking answered questions as "Answered"*****

      Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
      New Member

      Re: what does mean this error *apfMsConnTask_0: No entry availab

      Thanks Scott

      I attached a file on txt

      Hall of Fame Super Silver

      Re: what does mean this error *apfMsConnTask_0: No entry availab

      Here is an overall assesment:)

      • MEXWA01 has a secondary WLC configured (WHQMSWC01), I would remvove this
        • MEXWA04 seems to have 5ghz disabled or is down
        • 146.180.10.1 Radius server is disabled
        • 146.180.10.1 RAdius server port is wrong, should be 1812 not 12
        • If you have two radius servers for Mexico, then you should define both 146.180.10.1 and .2
        • QRTWA01 is on Channel 3, should be using 1,6 or 11

          Thanks,

          Scott

          *****Help out other by using the rating system and marking answered questions as "Answered"*****

          Thanks, Scott *****Help out other by using the rating system and marking answered questions as "Answered"*****
          1025
          Views
          20
          Helpful
          8
          Replies
          This widget could not be displayed.