Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Issue: 7925 phone does not connect to wlan on 3850 controller while wireless PC can.

     

     

    Introduction

    Issue: 7925 phone does not connect to wlan on 3850 controller while wireless PC can. 3850 by default does not set tspec and phone requires tspec to be set.

    For 7925 to connect, Platinum QoS metal is required to be enabled on WLAN as mandatory configuration. (This requirement may change in the future.)

    Debug client output for 7925 phone showing Association Response Code - 201 and getting excluded with Reason code 1 "Association Failure".

    Troubleshooting/Debugging

    NGWC controller - 3850

    code - 3.2 SE

     

    MAC Address AP Name WLAN State Protocol
    --------------------------------------------------------------------------------
    e05f.b9bc.939c APbc16.656c.f1c3 3 Excluded 11a
    
    us7-core-sw01#sho wlan id 3 
    WLAN Profile Name : wlan7925
    ================================================
    Identifier : 3
    Network Name (SSID) : vstandard
    Status : Enabled
    Broadcast SSID : Enabled
    
    Exclusionlist Timeout                          : 60
    
    Interface : 811
    Interface Status : Up
    
    DHCP Server                                    : 172.x.x.x
    
    QoS Service Policy - Input
    Policy Name : unknown
    Policy State : None
    QoS Service Policy - Output
    Policy Name : unknown
    Policy State : None
    QoS Client Service Policy
    Input Policy Name : unknown
    Output Policy Name : unknown
    WMM : Allowed
    
    CCX - AironetIe Support                        : Enabled
    
    Accounting list name : NA_WIRELESS
    802.1x authentication list name : NA_WIRELESS
    
    Security
    802.11 Authentication : Open System
    Static WEP Keys : Disabled
    802.1X : Disabled
    Wi-Fi Protected Access (WPA/WPA2) : Enabled
    WPA (SSN IE) : Disabled
    WPA2 (RSN IE) : Enabled
    TKIP Cipher : Disabled
    AES Cipher : Enabled
    Auth Key Management
    802.1x : Enabled
    PSK : Disabled
    
    us7-core-sw01#sh deb
    
    Nova Platform:
    dot11/state debugging is on 
    pem/events debugging is on 
    client/mac-addr debugging is on 
    dot11/detail debugging is on 
    mac/ filters[string e05f.b9bc.939c] debugging is on 
    dot11/error debugging is on 
    dot11/mobile debugging is on 
    pem/state debugging is on
    
    us7-core-sw01#term mon

     

    7925 debug client output showing the issue.

     

    Debug client output for 7925 phone showing Association Response Code - 201 and getting excluded with Reason code 1 "Association Failure".

     

    Sending Assoc Response to station on BSSID F41F.C202.4050 (status 201) ApVapId 3 Slot 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 22) in 3 seconds
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Association received from mobile on AP F41F.C28A.5110 
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C qos upstream policy is unknown and downstream policy is unknown
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apChanged 1 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN policy on MSCB.
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN ACL policies to client
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C No Interface ACL used for Wireless client in WCM(NGWC)
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying site-specific IPv6 override for station E05F.B9BC.939C - vapId 3, site 'default-group', interface 'COW_WiFi'
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying local bridging Interface Policy for station E05F.B9BC.939C - vlan 811, interface 'COW_WiFi'
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (4): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Sending Assoc Response to station on BSSID F41F.C28A.5110 (status 201) ApVapId 3 Slot 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 22) in 3 seconds
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Association received from mobile on AP 44AD.D9A1.1170 
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C qos upstream policy is unknown and downstream policy is unknown
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apChanged 1 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN policy on MSCB.
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN ACL policies to client
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C No Interface ACL used for Wireless client in WCM(NGWC)
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying site-specific IPv6 override for station E05F.B9BC.939C - vapId 3, site 'default-group', interface 'COW_WiFi'
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying local bridging Interface Policy for station E05F.B9BC.939C - vlan 811, interface 'COW_WiFi'
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (4): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Sending Assoc Response to station on BSSID 44AD.D9A1.1170 (status 201) ApVapId 3 Slot 0
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfBlacklistMobileStationEntry2 (apf_ms.c:6115) Changing state for mobile E05F.B9BC.939C on AP F41F.C202.4050 from Idle to Exclusion-list (1) 
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 44) in 10 seconds
    Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C client is added to the exclusion list, reason 1
    Jan 13 16:23:12: %IOSXE-4-PLATFORM: 1 process wcm: *apfMsConnTask_0: %APF-4-ADD_TO_BLACKLIST_REASON: Client E05F.B9BC.939C () was added to exclusion list. Reason: 802.11 association failure 
    Jan 13 16:23:21: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion 
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfMsExpireCallback (apf_ms.c:660) Expiring Mobile!
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 46) in 60 seconds
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfMsExpireMobileStation (apf_ms.c:7053) Changing state for mobile E05F.B9BC.939C on AP F41F.C202.4050 from Exclusion-list (1) to Exclusion-list (2) 
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ F41F.C202.4050 ]
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Incrementing the Reassociation Count 1 for client (of interface COW_WiFi)
    Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Clearing Dhcp state for station --- 
    Jan 13 16:23:23: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion 
    Jan 13 16:23:25: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion

     

    802.11 Association Status, 802.11 Deauth Reason codes

    802.11 Association Status Codes

    Code    802.11 definition                                                                                Explanation

     

    201
    (0xC9)
    TSPEC request refused due to AP’s policy configuration (e.g., AP is configured to deny all TSPEC requests on this SSID). A TSPEC will not be suggested by the AP for this reason code.
    Not defined in IEEE, defined in CCXv4
    This will happen if a TSPEC comes to a WLAN which has lower priority than the WLAN priority settings. For example a Voice TSPEC coming to a Silver WLAN. Only applies to CCXv4 clients.

     

    Fix

    3850 by default does not set tspec and phone requires tspec to be set. Set QoS metal Platinum for WLAN.

    us7-core-sw01(config)#wlan wlan7925
    
    us7-core-sw01(config-wlan)#service-policy output platinum  =====> Mandatory
    
    us7-core-sw01(config-wlan)#service-policy input platinum 
    us7-core-sw01(config-wlan)#end

     

    Verify the Fix

    us7-core-sw01#show wlan id 3
    WLAN Profile Name : vstandard
    ================================================
    Identifier : 3
    Network Name (SSID) : wlan7925
    Status : Enabled
    Broadcast SSID : Enabled

    Exclusionlist Timeout                          : 60

    .

    .

    .

    QoS Service Policy - Input
    Policy Name : platinum
    Policy State : Validated
    QoS Service Policy - Output
    Policy Name : platinum
    Policy State : Validated
    QoS Client Service Policy
    Input Policy Name : unknown
    Output Policy Name : unknown
    WMM : Allowed

     

    us7-core-sw01#show wireless client summary
    Number of Local Clients : 1


    MAC Address AP Name WLAN State Protocol
    --------------------------------------------------------------------------------
    e05f.b9bc.939c APbc16.656c.f1c3 3 UP 11a

     

    us7-core-sw01#wr
    Building configuration...

    Version history
    Revision #:
    2 of 2
    Last update:
    ‎08-29-2017 04:18 AM
    Updated by:
     
    Labels (1)
    Contributors
    Comments
    Cisco Employee

    For the input service-policy, it should be platinum-up not platinum.

    I get validation failure if trying to use platinum-up for the input service-policy.

    Not sure if it worked in older versions or not, but I am using the latest version (03.03.02SE).

     

    So should be like the following:

    3850(config)#wlan test1
    3850(config-wlan)#service-policy output platinum
    3850(config-wlan)#service-policy input platinum-up
    3850(config-wlan)#end

     

    See the following doc for more info.

    http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116479-configure-qos-00.html#anc8

    New Member

    Hello,

     

    I'm having the same problem already put the Qos policy and still not working, 

    WLC: 5760

    IPphone: 7925

     

    ACFINWAWLCP01a#show wireless exclusionlist
    Manually Excluded Clients


    Dynamically Excluded Clients

    MAC Address       Exclusion Reason                    Time Remaining
    --------------------------------------------------------------------
    4c00.8284.dc90    802.11 association failure                      60

    ########

     

    ACFINWAWLCP01a#show wlan id 3
    WLAN Profile Name     : Namibe
    ================================================
    Identifier                                     : 3
    Network Name (SSID)                            : Namibe
    Status                                         : Enabled
    Broadcast SSID                                 : Disabled
    Maximum number of Associated Clients           : 0
    AAA Policy Override                            : Disabled
    Network Admission Control
      NAC-State                                    : Disabled
    Number of Active Clients                       : 0
    Exclusionlist Timeout                          : 60
    Session Timeout                                : 1800 seconds
    CHD per WLAN                                   : Enabled
    Webauth DHCP exclusion                         : Disabled
    Interface                                      : Managed_Voice_Wifi
    Interface Status                               : Up
    Multicast Interface                            : Unconfigured
    WLAN IPv4 ACL                                  : unconfigured
    WLAN IPv6 ACL                                  : unconfigured
    DHCP Server                                    : Default
    DHCP Address Assignment Required               : Disabled
    DHCP Option 82                                 : Disabled
    DHCP Option 82 Format                          : ap-mac
    DHCP Option 82 Ascii Mode                      : Disabled
    DHCP Option 82 Rid Mode                        : Disabled
    QoS Service Policy - Input
      Policy Name                                  : platinum-up
      Policy State                                 : Validated
    QoS Service Policy - Output
      Policy Name                                  : platinum
      Policy State                                 : Validated
    QoS Client Service Policy
      Input  Policy Name                           : unknown
      Output Policy Name                           : unknown
    WMM                                            : Allowed
    Channel Scan Defer Priority:

     

    ############

    Aug 28 14:11:28.657: *apfMsConnTask_0: 1 wcm:  %APF-4-ADD_TO_BLACKLIST_REASON: Client 4C00.8284.DC90 () was added to exclusion list. Reason: 802.11 associationAug 28 14:08:08.405: 4C00.8284.DC90 STA - rates (4): 1 wcm:  130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0

     

     

     

    Help please

     

    Best regards,

    Alcides