Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

windows mobile wireless connectivity issues

Hi all,

In our wireless network , windows mobiles 8.0 are not able to connect . The SSID is using WPA2/AES encryption with 802.1x auth. The remaining clients are able to connect to the network and working fine. Even from windows phone 8.1 , I am able to connect to the network. The only difference I am seeing between these two mobiles are supplicant. In WP 8.1 i am able to choose the PEAP/MSCHAPv2 with no server validation options.

In WP 8.0 , it is directly asking for UN/PWD.the WLC is 2504 with 7.2.103.0 code.

The debug is below for 8.0 mobile

 

 

isco Controller) >*apfReceiveTask: Jun 11 12:01:51.076: ec:f3:5b:13:fe:5c Deleting mobile on AP 1c:e6:c7:84:7a:20(0)
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Adding mobile on LWAPP AP 1c:e6:c7:85:25:b0(0)
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Association received from mobile on AP 1c:e6:c7:85:25:b0
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1697)
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1864)
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Applying site-specific Local Bridging override for station ec:f3:5b:13:fe:5c - vapId 3, site 'default-group', interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Applying Local Bridging Interface Policy for station ec:f3:5b:13:fe:5c - vlan 252, interface id 14, interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c STA - rates (8): 130 132 139 12 18 150 24 36 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Processing RSN IE type 48, length 20 for mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Received RSN IE with 0 PMKIDs from mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)

*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3for this client
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Jun 11 12:09:50.218: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3
*apfMsConnTask_5: Jun 11 12:09:50.219: ec:f3:5b:13:fe:5c apfMsAssoStateInc
*apfMsConnTask_5: Jun 11 12:09:50.219: ec:f3:5b:13:fe:5c apfPemAddUser2 (apf_policy.c:268) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Idle to Associated

*apfMsConnTask_5: Jun 11 12:09:50.219: ec:f3:5b:13:fe:5c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Jun 11 12:09:50.219: ec:f3:5b:13:fe:5c Sending Assoc Response to station on BSSID 1c:e6:c7:85:25:b0 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_5: Jun 11 12:09:50.219: ec:f3:5b:13:fe:5c apfProcessAssocReq (apf_80211.c:6290) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Associated

*dot1xMsgTask: Jun 11 12:09:50.223: ec:f3:5b:13:fe:5c Station ec:f3:5b:13:fe:5c setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jun 11 12:09:50.223: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:09:50.223: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 1)
*Dot1x_NW_MsgTask_4: Jun 11 12:09:50.288: ec:f3:5b:13:fe:5c Received EAPOL START from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:09:50.288: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*Dot1x_NW_MsgTask_4: Jun 11 12:09:50.288: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 2)
*osapiBsnTimer: Jun 11 12:10:20.288: ec:f3:5b:13:fe:5c 802.1x 'txWhen' Timer expired for station ec:f3:5b:13:fe:5c and for message = M0
*dot1xMsgTask: Jun 11 12:10:20.288: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:10:20.288: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 3)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.812: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.812: ec:f3:5b:13:fe:5c Received Identity Response (count=3) from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.812: ec:f3:5b:13:fe:5c Reached Max EAP-Identity Request retries (3) for STA ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.813: ec:f3:5b:13:fe:5c Sent Deauthenticate to mobile on BSSID 1c:e6:c7:85:25:b0 slot 0(caller 1x_auth_pae.c:3117)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.813: ec:f3:5b:13:fe:5c Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.813: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Disconnected state
*Dot1x_NW_MsgTask_4: Jun 11 12:10:22.813: ec:f3:5b:13:fe:5c Not sending EAP-Failure for STA ec:f3:5b:13:fe:5c
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Association received from mobile on AP 1c:e6:c7:84:7a:20
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1697)
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1864)
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Applying site-specific Local Bridging override for station ec:f3:5b:13:fe:5c - vapId 3, site 'default-group', interface 'corp_byod'
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Applying Local Bridging Interface Policy for station ec:f3:5b:13:fe:5c - vlan 252, interface id 14, interface 'corp_byod'
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Processing RSN IE type 48, length 20 for mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Received RSN IE with 0 PMKIDs from mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c Setting active key cache index 8 ---> 8
*apfMsConnTask_3: Jun 11 12:10:23.334: ec:f3:5b:13:fe:5c unsetting PmkIdValidatedByAp
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [1c:e6:c7:85:25:b0]
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c Updated location for station old AP 1c:e6:c7:85:25:b0-0, new AP 1c:e6:c7:84:7a:20-0
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 1c:e6:c7:84:7a:20 vapId 3 apVapId 3for this client
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 1c:e6:c7:84:7a:20 vapId 3 apVapId 3
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c apfPemAddUser2 (apf_policy.c:268) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:84:7a:20 from Associated to Associated

*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c Sending Assoc Response to station on BSSID 1c:e6:c7:84:7a:20 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_3: Jun 11 12:10:23.335: ec:f3:5b:13:fe:5c apfProcessAssocReq (apf_80211.c:6290) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:84:7a:20 from Associated to Associated

*dot1xMsgTask: Jun 11 12:10:23.340: ec:f3:5b:13:fe:5c Station ec:f3:5b:13:fe:5c setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jun 11 12:10:23.340: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:10:23.340: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 1)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:23.397: ec:f3:5b:13:fe:5c Received EAPOL START from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:23.397: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*Dot1x_NW_MsgTask_4: Jun 11 12:10:23.397: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 2)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.762: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.763: ec:f3:5b:13:fe:5c Received Identity Response (count=2) from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.763: ec:f3:5b:13:fe:5c EAP State update from Connecting to Authenticating for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.763: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Authenticating state
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.763: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.769: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.769: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=3) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.769: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 3)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.793: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.793: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.793: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.796: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.796: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=4) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.796: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 4)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.817: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.817: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.817: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.820: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.820: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=5) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.820: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 5)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.839: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.839: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.839: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.845: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.845: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.845: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.864: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.864: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.864: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.867: ec:f3:5b:13:fe:5c Processing Access-Reject for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.867: ec:f3:5b:13:fe:5c Removing PMK cache due to EAP-Failure for mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.867: ec:f3:5b:13:fe:5c Sending EAP-Failure to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.868: ec:f3:5b:13:fe:5c Entering Backend Auth Failure state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.868: ec:f3:5b:13:fe:5c Setting quiet timer for 5 seconds for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.868: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Unknown state
*osapiBsnTimer: Jun 11 12:10:37.687: ec:f3:5b:13:fe:5c 802.1x 'quiteWhile' Timer expired for station ec:f3:5b:13:fe:5c and for message = M0
*dot1xMsgTask: Jun 11 12:10:37.688: ec:f3:5b:13:fe:5c quiet timer completed for mobile ec:f3:5b:13:fe:5c
*dot1xMsgTask: Jun 11 12:10:37.688: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:10:37.688: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 8)
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Association received from mobile on AP 1c:e6:c7:85:25:b0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1697)
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1864)
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Applying site-specific Local Bridging override for station ec:f3:5b:13:fe:5c - vapId 3, site 'default-group', interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Applying Local Bridging Interface Policy for station ec:f3:5b:13:fe:5c - vlan 252, interface id 14, interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Processing RSN IE type 48, length 20 for mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Received RSN IE with 0 PMKIDs from mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [1c:e6:c7:84:7a:20]
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Updated location for station old AP 1c:e6:c7:84:7a:20-0, new AP 1c:e6:c7:85:25:b0-0
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3for this client
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3
*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c apfPemAddUser2 (apf_policy.c:268) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Associated

*apfMsConnTask_5: Jun 11 12:10:56.984: ec:f3:5b:13:fe:5c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Jun 11 12:10:56.985: ec:f3:5b:13:fe:5c Sending Assoc Response to station on BSSID 1c:e6:c7:85:25:b0 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_5: Jun 11 12:10:56.985: ec:f3:5b:13:fe:5c apfProcessAssocReq (apf_80211.c:6290) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Associated

*dot1xMsgTask: Jun 11 12:10:56.989: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:10:56.989: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 1)
*Dot1x_NW_MsgTask_4: Jun 11 12:10:57.140: ec:f3:5b:13:fe:5c Received EAPOL START from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:10:57.140: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*Dot1x_NW_MsgTask_4: Jun 11 12:10:57.140: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 2)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.765: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.765: ec:f3:5b:13:fe:5c Received Identity Response (count=2) from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.765: ec:f3:5b:13:fe:5c EAP State update from Connecting to Authenticating for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.765: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Authenticating state
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.765: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.769: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.769: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=3) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.769: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 3)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.795: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.796: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.796: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.806: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.806: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=4) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.806: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 4)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.883: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.883: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.883: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.886: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.886: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=5) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.887: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 5)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.901: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.901: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.901: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.909: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.909: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.909: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.925: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.925: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.925: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.928: ec:f3:5b:13:fe:5c Processing Access-Reject for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.928: ec:f3:5b:13:fe:5c Removing PMK cache due to EAP-Failure for mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.928: ec:f3:5b:13:fe:5c Sending EAP-Failure to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.929: ec:f3:5b:13:fe:5c Entering Backend Auth Failure state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.929: ec:f3:5b:13:fe:5c Setting quiet timer for 5 seconds for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:21.929: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Unknown state
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Association received from mobile on AP 1c:e6:c7:85:25:b0
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1697)
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1864)
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Applying site-specific Local Bridging override for station ec:f3:5b:13:fe:5c - vapId 3, site 'default-group', interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Applying Local Bridging Interface Policy for station ec:f3:5b:13:fe:5c - vlan 252, interface id 14, interface 'corp_byod'
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c processSsidIE  statusCode is 0 and status is 0
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c processSsidIE  ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c suppRates  statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Processing RSN IE type 48, length 20 for mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Received RSN IE with 0 PMKIDs from mobile ec:f3:5b:13:fe:5c
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)

*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)

*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) DHCP Not required on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3for this client
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 1c:e6:c7:85:25:b0 vapId 3 apVapId 3
*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c apfPemAddUser2 (apf_policy.c:268) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Associated

*apfMsConnTask_5: Jun 11 12:11:23.073: ec:f3:5b:13:fe:5c Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Jun 11 12:11:23.074: ec:f3:5b:13:fe:5c Sending Assoc Response to station on BSSID 1c:e6:c7:85:25:b0 (status 0) ApVapId 3 Slot 0
*apfMsConnTask_5: Jun 11 12:11:23.074: ec:f3:5b:13:fe:5c apfProcessAssocReq (apf_80211.c:6290) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Associated

*dot1xMsgTask: Jun 11 12:11:23.077: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*dot1xMsgTask: Jun 11 12:11:23.078: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 1)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:23.134: ec:f3:5b:13:fe:5c Received EAPOL START from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:23.134: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Connecting state
*Dot1x_NW_MsgTask_4: Jun 11 12:11:23.134: ec:f3:5b:13:fe:5c Sending EAP-Request/Identity to mobile ec:f3:5b:13:fe:5c (EAP Id 2)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.120: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.120: ec:f3:5b:13:fe:5c Received Identity Response (count=2) from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.120: ec:f3:5b:13:fe:5c EAP State update from Connecting to Authenticating for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.120: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Authenticating state
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.120: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.123: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.123: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=3) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.123: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 3)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.133: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.133: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.133: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.136: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.136: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=4) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.136: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 4)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.319: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.319: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.319: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.321: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.321: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=5) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.321: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 5)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.338: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.338: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.338: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.347: ec:f3:5b:13:fe:5c Processing Access-Challenge for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.347: ec:f3:5b:13:fe:5c Entering Backend Auth Req state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.347: ec:f3:5b:13:fe:5c Sending EAP Request from AAA to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.361: ec:f3:5b:13:fe:5c Received EAPOL EAPPKT from mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.361: ec:f3:5b:13:fe:5c Received EAP Response from mobile ec:f3:5b:13:fe:5c (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.361: ec:f3:5b:13:fe:5c Entering Backend Auth Response state for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c Processing Access-Reject for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c Removing PMK cache due to EAP-Failure for mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c Sending EAP-Failure to mobile ec:f3:5b:13:fe:5c (EAP Id 6)
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c Entering Backend Auth Failure state (id=6) for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c apfBlacklistMobileStationEntry2 (apf_ms.c:4864) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Associated to Exclusion-list (1)

*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.365: ec:f3:5b:13:fe:5c Scheduling deletion of Mobile Station:  (callerId: 44) in 10 seconds
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c 0.0.0.0 8021X_REQD (3) Change state to START (0) last state 8021X_REQD (3)

*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Reached FAILURE: from line 4442
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c Scheduling deletion of Mobile Station:  (callerId: 9) in 10 seconds
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c Max AAA failure for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c Setting quiet timer for 5 seconds for mobile ec:f3:5b:13:fe:5c
*Dot1x_NW_MsgTask_4: Jun 11 12:11:37.366: ec:f3:5b:13:fe:5c dot1x - moving mobile ec:f3:5b:13:fe:5c into Unknown state
*osapiBsnTimer: Jun 11 12:11:42.287: ec:f3:5b:13:fe:5c 802.1x 'quiteWhile' Timer expired for station ec:f3:5b:13:fe:5c and for message = M0
*osapiBsnTimer: Jun 11 12:11:47.288: ec:f3:5b:13:fe:5c apfMsExpireCallback (apf_ms.c:589) Expiring Mobile!
*apfReceiveTask: Jun 11 12:11:47.289: ec:f3:5b:13:fe:5c Scheduling deletion of Mobile Station:  (callerId: 46) in 60 seconds
*apfReceiveTask: Jun 11 12:11:47.289: ec:f3:5b:13:fe:5c apfMsExpireMobileStation (apf_ms.c:5708) Changing state for mobile ec:f3:5b:13:fe:5c on AP 1c:e6:c7:85:25:b0 from Exclusion-list (1) to Exclusion-list (2)

*apfReceiveTask: Jun 11 12:11:47.289: ec:f3:5b:13:fe:5c pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Jun 11 12:11:47.289: ec:f3:5b:13:fe:5c 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [1c:e6:c7:85:25:b0]

 

 

Kindly give your opinions on this.

 

BR//

Vijay

 

 

 

 

Everyone's tags (1)
9 REPLIES
Gold

Hi,Looks like the

Hi,

Looks like the authentication is failing.

*Dot1x_NW_MsgTask_4: Jun 11 12:10:32.867: ec:f3:5b:13:fe:5c Processing Access-Reject for mobile ec:f3:5b:13:fe:5c

Have you checked the radius server logs?

Regards

Najaf

 

New Member

Hi , We are able connect with

Hi ,

 

We are able connect with the same credentials in windows 8.1 mobile. But in windows 8.0 only we are getting the issue. IS the windows 8.0 mobile supplicant do not support the WPA2/AES with PEAP.....

Gold

Hi Vijay,Windows 8.0 should

Hi Vijay,

Windows 8.0 should be supporting WPA2/AES with PEAP.

This could you be due to the certificate issue? What kind of certificate are you using for PEAP? Is it self signed or CA?

Have you gone through any Microsoft support forums like below?

https://technet.microsoft.com/en-us/library/security/2876146.aspx

Regards

Najaf

New Member

 Hi Najaf , Thanks a lot for

 

Hi Najaf ,

 

Thanks a lot for your reply. We are using MS CHAPv2 with SSC. And we are not choosing the option to validate server certificate in clients of 8.0 windows mobile.

As per the microsoft site , the EAP/PEAP mechanism is newly supportd feature in windows 8.1 OS .

 

http://technet.microsoft.com/library/dn643710.aspx

http://technet.microsoft.com/en-us/library/dn643706.aspx

http://windowsphone.uservoice.com/forums/101801-feature-suggestions/suggestions/2310837-add-support-for-all-wpa2-enterprise-wireless-encry

Is this issue due to this?

 

Regards,

Vijay

Gold

Hi Vijay,

Hi Vijay, Does the link say PEAP was newly added on 8.1 or does it say 8.1 had enhanced support for it? I couldn't find any document which says 8.0 doesn't support PEAP. Which radius server are you using? Does the logs on radius tells u anything? Regards Najaf
New Member

Hi Najaf, I am not sure about

Hi Najaf,

 

I am not sure about the radius server part. But below is the logs for windows 8.0 mobiles . I hope Here client is not able to identify/supply the credentials using MSCHAPv2 ,

 

Authentication Details:
    Connection Request Policy Name:    xxxxxxxxx
    Network Policy Name:        -
    Authentication Provider:    Windows
    Authentication Server:        xxxxxxxxx
    Authentication Type:        PEAP
    EAP Type:            -
    Account Session Identifier:        -
    Logging Results:        Accounting information was written to the local log file.
    Reason Code:            16
    Reason:                Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.
"

 

The below is the log for android/windows 8.1 mobile . Here , I think client is sending using correct authentication protocol mechanism which is MS-CHAPv2

 


Authentication Details:
    Connection Request Policy Name:    xxxxxxx
    Network Policy Name:        xxxxxxx
    Authentication Provider:        Windows
    Authentication Server:        xxxxxxx
    Authentication Type:        PEAP
    EAP Type:            Microsoft: Secured password (EAP-MSCHAP v2)
    Account Session Identifier:        -

Quarantine Information:
    Result:                Full Access
    Extended-Result:            -
    Session Identifier:            -
    Help URL:            -
    System Health Validator Result(s):    -
"

 

 

Gold

Hi Vijay,You don't have

Hi Vijay,

You don't have access to radius server? Logs from radius should have given more information about what is going on.

Logs shows "Authentication failed due to a user credentials mismatch" I understand same credentials are working on different phones but have you tried different username and password on this phone?

It will be difficult to conclude something with out looking at radius logs.

Regards

Najaf 

New Member

 Hi Najaf,We have tried the

 

Hi Najaf,

We have tried the same credentials only .

 

 

 

Level    Date and Time    Source    Event ID    Task Category
Information    5/19/2014 6:58:50 PM    Microsoft-Windows-Security-Auditing    6273    Network Policy Server    "Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.

User:
    Security ID:            NULL SID
    Account Name:            xxxxxx
    Account Domain:          xxxxxxx
    Fully Qualified Account Name:   xxxxxxx

Client Machine:
    Security ID:            NULL SID
    Account Name:            -
    Fully Qualified Account Name:    -
    OS-Version:            -
    Called Station Identifier:    1c-e6-c7-xx-xx-xx:HM_BYOD
    Calling Station Identifier:    4c-7f-62-xx-xx-xx

NAS:
    NAS IPv4 Address:        10.x.x.x
    NAS IPv6 Address:        -
    NAS Identifier:            WLC
    NAS Port-Type:            Wireless - IEEE 802.11
    NAS Port:            1

RADIUS Client:
    Client Friendly Name:        Wireless
    Client IP Address:        10.x.x.x

Authentication Details:
    Connection Request Policy Name:    xxxxxxxxx
    Network Policy Name:        -
    Authentication Provider:    Windows
    Authentication Server:        xxxxxxxxx
    Authentication Type:        PEAP
    EAP Type:            -
    Account Session Identifier:        -
    Logging Results:        Accounting information was written to the local log file.
    Reason Code:            16
    Reason:                Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect.
"

 

Regards,

Vijay

Gold

Hi Vijay,So could you please

Hi Vijay,

So could you please try a different working username and password on this phone and check?

I have not worked on NAPs radius server and hence not getting a clue of what is going on.

Did you had any luck in contacting Windows support team for this?

Regards

Najaf

 

320
Views
0
Helpful
9
Replies
CreatePlease to create content