cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
639
Views
5
Helpful
0
Comments
Saravanan Lakshmanan
Cisco Employee
Cisco Employee

 

Introduction

Issue: 7925 phone does not connect to wlan on 3850 controller while wireless PC can.

 

3850 by default does not set tspec and phone requires tspec to be set.

 

For 7925 to connect, Platinum QoS metal is required to be enabled on WLAN as mandatory configuration. (This requirement may change in the future.)

 

Debug client output for 7925 phone showing Association Response Code - 201 and getting excluded with Reason code 1 "Association Failure".

Troubleshooting/Debugging

 

NGWC controller - 3850

code - 3.2 SE

 

MAC Address AP Name WLAN State Protocol
--------------------------------------------------------------------------------
e05f.b9bc.939c APbc16.656c.f1c3 3 Excluded 11a
us7-core-sw01#sho wlan id 3
WLAN Profile Name : vstandard
================================================
Identifier : 3
Network Name (SSID) : vstandard
Status : Enabled
Broadcast SSID : Enabled
Exclusionlist Timeout                          : 60
Interface : 811
Interface Status : Up
DHCP Server                                    : 172.17.64.1
QoS Service Policy - Input
Policy Name : unknown
Policy State : None
QoS Service Policy - Output
Policy Name : unknown
Policy State : None
QoS Client Service Policy
Input Policy Name : unknown
Output Policy Name : unknown
WMM : Allowed

CCX - AironetIe Support                        : Enabled

Accounting list name : GGM_NA_WIRELESS
802.1x authentication list name : GGM_NA_WIRELESS

Security
802.11 Authentication : Open System
Static WEP Keys : Disabled
802.1X : Disabled
Wi-Fi Protected Access (WPA/WPA2) : Enabled
WPA (SSN IE) : Disabled
WPA2 (RSN IE) : Enabled
TKIP Cipher : Disabled
AES Cipher : Enabled
Auth Key Management
802.1x : Enabled
PSK : Disabled

us7-core-sw01#sh deb
Nova Platform:
dot11/state debugging is on
pem/events debugging is on
client/mac-addr debugging is on
dot11/detail debugging is on
mac/ filters[string e05f.b9bc.939c] debugging is on
dot11/error debugging is on
dot11/mobile debugging is on
pem/state debugging is on

us7-core-sw01#term mon

 

7925 debug client output showing the issue.

Debug client output for 7925 phone showing Association Response Code - 201 and getting excluded with Reason code 1 "Association Failure".

 

Sending Assoc Response to station on BSSID F41F.C202.4050 (status 201) ApVapId 3 Slot 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 22) in 3 seconds
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Association received from mobile on AP F41F.C28A.5110 
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C qos upstream policy is unknown and downstream policy is unknown
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apChanged 1 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN policy on MSCB.
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN ACL policies to client
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C No Interface ACL used for Wireless client in WCM(NGWC)
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying site-specific IPv6 override for station E05F.B9BC.939C - vapId 3, site 'default-group', interface 'COW_WiFi_172.17.68.0'
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying local bridging Interface Policy for station E05F.B9BC.939C - vlan 811, interface 'COW_WiFi_172.17.68.0'
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (4): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Sending Assoc Response to station on BSSID F41F.C28A.5110 (status 201) ApVapId 3 Slot 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 22) in 3 seconds
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Association received from mobile on AP 44AD.D9A1.1170 
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C qos upstream policy is unknown and downstream policy is unknown
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apChanged 1 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN policy on MSCB.
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying WLAN ACL policies to client
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C No Interface ACL used for Wireless client in WCM(NGWC)
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying site-specific IPv6 override for station E05F.B9BC.939C - vapId 3, site 'default-group', interface 'COW_WiFi_172.17.68.0'
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Applying local bridging Interface Policy for station E05F.B9BC.939C - vlan 811, interface 'COW_WiFi_172.17.68.0'
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (4): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Sending Assoc Response to station on BSSID 44AD.D9A1.1170 (status 201) ApVapId 3 Slot 0
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfBlacklistMobileStationEntry2 (apf_ms.c:6115) Changing state for mobile E05F.B9BC.939C on AP F41F.C202.4050 from Idle to Exclusion-list (1) 
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 44) in 10 seconds
Jan 13 16:23:12: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C client is added to the exclusion list, reason 1
Jan 13 16:23:12: %IOSXE-4-PLATFORM: 1 process wcm: *apfMsConnTask_0: %APF-4-ADD_TO_BLACKLIST_REASON: Client E05F.B9BC.939C () was added to exclusion list. Reason: 802.11 association failure 
Jan 13 16:23:21: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion 
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfMsExpireCallback (apf_ms.c:660) Expiring Mobile!
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Scheduling deletion of Mobile Station: (callerId: 46) in 60 seconds
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C apfMsExpireMobileStation (apf_ms.c:7053) Changing state for mobile E05F.B9BC.939C on AP F41F.C202.4050 from Exclusion-list (1) to Exclusion-list (2) 
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ F41F.C202.4050 ]
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Incrementing the Reassociation Count 1 for client (of interface COW_WiFi_172.17.68.0)
Jan 13 16:23:22: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Clearing Dhcp state for station --- 
Jan 13 16:23:23: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion 
Jan 13 16:23:25: %IOSXE-7-PLATFORM: 1 process wcm: E05F.B9BC.939C Ignoring assoc request due to mobile in exclusion list or marked for deletion

 

802.11 Association Status, 802.11 Deauth Reason codes

 

As per document: https://supportforums.cisco.com/docs/DOC-33185

 

802.11 Association Status Codes

 

Code   

802.11 definition                                                                               

Explanation

201
(0xC9)

TSPEC request refused due to AP’s policy configuration (e.g., AP is configured to deny all TSPEC requests on this SSID). A TSPEC will not be suggested by the AP for this reason code.
Not defined in IEEE, defined in CCXv4

This will happen if a TSPEC comes to a WLAN which has lower priority than the WLAN priority settings. For example a Voice TSPEC coming to a Silver WLAN. Only applies to CCXv4 clients.

  

Fix

3850 by default does not set tspec and phone requires tspec to be set. Set QoS metal Platinum for WLAN.
us7-core-sw01(config)#wlan vstandard
us7-core-sw01(config-wlan)#service-policy output platinum  =====> Mandatory
us7-core-sw01(config-wlan)#service-policy input platinum 
us7-core-sw01(config-wlan)#end

 

Verify the Fix

 

us7-core-sw01#show wlan id 3 
WLAN Profile Name : vstandard
================================================
Identifier : 3
Network Name (SSID) : vstandard
Status : Enabled
Broadcast SSID : Enabled
Exclusionlist Timeout                          : 60
.
QoS Service Policy - Input
Policy Name : platinum
Policy State : Validated
QoS Service Policy - Output
Policy Name : platinum
Policy State : Validated
QoS Client Service Policy
Input Policy Name : unknown
Output Policy Name : unknown
WMM : Allowed

us7-core-sw01#show wireless client summary
Number of Local Clients : 1

MAC Address AP Name WLAN State Protocol 
--------------------------------------------------------------------------------
e05f.b9bc.939c APbc16.656c.f1c3 3 UP 11a

us7-core-sw01#wr
Building configuration...
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: