It looks like your WLC is sending the EAPoL-Key to the client but the client is not ACKing the key in time, you may want to tweak your advanced EAP settings on your controller. You can use the command show config advanced eap to show the timers. You can update your EAPoL-Key timeout with the following command:
"config advanced eap eapol-key-timeout 5" This will increase the timer from 1 to 5 seconds and give your supplicant a bit more time to respond to the EAPoL-Key message, from the debugs it looks like it take about 3 seconds for the supplicant to respond to the inital EAPoL-Key message. --Jesse
Well I wouldn't set your EAPoL-Key timeout to 5000, you are going to run into other issues if you increase your timers that high. Check and make sure you have the latest wireless drivers installed on that client. The EAP authentication looks fine until the client does not respond to the EAPoL-Key sent after the EAP-Success. The rest of the timeout values look good.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...