Session Capture

(Cisco Controller) >
(Cisco Controller) >debug client A0:63:91:87:4C:90

(Cisco Controller) >*Apf Guest: Nov 10 10:44:22.378: [PA] Wired client head is
NULL, no clients in the list. Number of clients = 0
*Apf Guest: Nov 10 10:45:53.688: [PA] Wired client head is NULL, no clients in the
list. Number of clients = 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Processing assoc-req

station:a0:63:91:87:4c:90 AP:bc:f1:f2:78:9e:e0-01 thread:9d8a320
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Adding mobile on
LWAPP AP bc:f1:f2:78:9e:e0(1)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Association received
from mobile on BSSID bc:f1:f2:78:9e:ef AP GA-AP-3111
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Global 200 Clients
are allowed to AP radio
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Max Client Trap

Threshold: 0 cur: 1
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Rf profile 600

Clients are allowed to AP wlan
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 override for default

ap group, marking intgrp NULL
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Applying Interface
policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Re-applying interface

policy for client
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)

Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller
apf_policy.c:2639)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 apfApplyWlanPolicy:
Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User - 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 In processSsidIE:5969
setting Central switched to TRUE
apVapId = 1 and Split Acl Id = 65535
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Setting the NAS Id to
WLAN specific Id 'Cisco_bf:9b:a6'
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Applying site-
specific Local Bridging override for station a0:63:91:87:4c:90 - vapId 1, site
'default-group', interface ' -wifi-1010'
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Applying Local
Bridging Interface Policy for station a0:63:91:87:4c:90 - vlan 1010, interface id
10, interface ' -wifi-1010'
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 processSsidIE
statusCode is 0 and status is 0
ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 STA - rates (8): 140
18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 suppRates statusCode
is 0 and gotSuppRatesElement is 1
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] RSNIE in Assoc. Req.: (22)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] [0000] 01 00 00 0f ac 04 01 00 00

0f ac 04 01 00 00 0f
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] [0016] ac 01 00 00 00 00
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Received 802.11i

802.1X key management suite, enabling dot1x Authentication
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 RSN Capabilities: 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Marking Mobile as
non-11w Capable
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Received RSN IE with
0 PMKIDs from mobile a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Setting active key
cache index 8 ---> 8
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 unsetting
PmkIdValidatedByAp
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90
apfValidateDot11wGroupMgmtCipher:1716, Received NULL 11w Group Mgmt Cipher Suite
for STA, hence returning

Initializing policy
Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 AUTHCHECK (2)

Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Encryption policy is

set to 0x80000001
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Not Using WMM
Compliance code qosCap 00
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Sending 11w Flag 0
for Client A0:63:91:87:4C:90
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 8021X_REQD
(3) Plumbed mobile LWAPP rule on AP bc:f1:f2:78:9e:e0 vapId 1 apVapId 1 flex-acl-
name:
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 apfPemAddUser2
(apf_policy.c:357) Changing state for mobile a0:63:91:87:4c:90 on AP
bc:f1:f2:78:9e:e0 from Idle to Associated

apfPemAddUser2:session timeout forstation a0:63:91:87:4c:90 - Session Tout 0,
apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Stopping deletion of
Mobile Station: (callerId: 48)
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Func: apfPemAddUser2,
Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Sending assoc-resp

with status 0 station:a0:63:91:87:4c:90 AP:bc:f1:f2:78:9e:e0-01 on apVapId 1
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Sending Assoc
Response to station on BSSID bc:f1:f2:78:9e:ef (status 0) ApVapId 1 Slot 1
*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 apfProcessAssocReq
(apf_80211.c:9840) Changing state for mobile a0:63:91:87:4c:90 on AP
bc:f1:f2:78:9e:e0 from Associated to Associated
*spamApTask2: Nov 10 10:46:21.791: [PA] a0:63:91:87:4c:90 Sent dot1x auth initiate

message for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.791: [PA] a0:63:91:87:4c:90 reauth_sm state
transition 0 ---> 1 for mobile a0:63:91:87:4c:90 at 1x_reauth_sm.c:47
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.791: [PA] a0:63:91:87:4c:90 EAP-PARAM Debug -
eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.791: [PA] a0:63:91:87:4c:90 Disable re-auth,
use PMK lifetime.
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.792: [PA] a0:63:91:87:4c:90 Station
a0:63:91:87:4c:90 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.792: [PA] a0:63:91:87:4c:90 dot1x - moving
mobile a0:63:91:87:4c:90 into Connecting state
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.792: [PA] a0:63:91:87:4c:90 Sending EAP-
Request/Identity to mobile a0:63:91:87:4c:90 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.824: [PA] a0:63:91:87:4c:90 Reset the reauth
counter since EAPOL START has been received!!!
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.824: [PA] a0:63:91:87:4c:90 Received EAPOL
START from mobile a0:63:91:87:4c:90
EAPPKT from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.985: [PA] a0:63:91:87:4c:90 Received Identity
Response (count=1) from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.985: [PA] a0:63:91:87:4c:90 Resetting reauth
count 1 to 0 for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.985: [PA] a0:63:91:87:4c:90 EAP State update
from Connecting to Authenticating for mobile a0:63:91:87:4c:90
mobile a0:63:91:87:4c:90 into Authenticating state
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.985: [PA] a0:63:91:87:4c:90 Entering Backend
Auth Response state for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.989: [PA] a0:63:91:87:4c:90 Processing Access-
Challenge for mobile a0:63:91:87:4c:90
Auth Req state (id=175) for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.989: [PA] a0:63:91:87:4c:90 WARNING: updated
EAP-Identifier 2 ===> 175 for STA a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.989: [PA] a0:63:91:87:4c:90 Sending EAP
Request from AAA to mobile a0:63:91:87:4c:90 (EAP Id 175)
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.989: [PA] a0:63:91:87:4c:90 Allocating EAP Pkt
for retransmission to mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.991: [PA] a0:63:91:87:4c:90 Received EAP
Response from mobile a0:63:91:87:4c:90 (EAP Id 175, EAP Type 3)
*Dot1x_NW_MsgTask_0: Nov 10 10:46:21.992: [PA] a0:63:91:87:4c:90 Reusing allocated
memory for EAP Pkt for retransmission to mobile a0:63:91:87:4c:90

(Cisco Controller) >*osapiBsnTimer: Nov 10 10:46:53.866: [PA] a0:63:91:87:4c:90
802.1x 'timeoutEvt' Timer expired for station a0:63:91:87:4c:90 and for message =
M0
*Dot1x_NW_MsgTask_0: Nov 10 10:46:53.867: [PA] a0:63:91:87:4c:90 Retransmit 1 of
EAP-Request (length 95) for mobile a0:63:91:87:4c:90
*osapiBsnTimer: Nov 10 10:47:24.462: [PA] a0:63:91:87:4c:90 802.1x 'timeoutEvt'
Timer expired for station a0:63:91:87:4c:90 and for message = M0
EAP-Request (length 95) for mobile a0:63:91:87:4c:90

*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Retransmit failure
for EAP-Request to mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Sent
Deauthenticate to mobile on BSSID bc:f1:f2:78:9e:ef slot 1(caller 1x_ptsm.c:598)
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Setting active key
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Deleting the PMK
cache when de-authenticating the client.
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Global PMK Cache
deletion failed.
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Scheduling
deletion of Mobile Station: (callerId: 57) in 10 seconds
*Dot1x_NW_MsgTask_0: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 Freeing EAP
Retransmit Bufer for mobile a0:63:91:87:4c:90
*osapiBsnTimer: Nov 10 10:48:05.047: [PA] a0:63:91:87:4c:90 apfMsExpireCallback
(apf_ms.c:634) Expiring Mobile!
*apfReceiveTask: Nov 10 10:48:05.047: [PA] a0:63:91:87:4c:90
apfMsExpireMobileStation (apf_ms.c:7100) Changing state for mobile
a0:63:91:87:4c:90 on AP bc:f1:f2:78:9e:e0 from Associated to Disassociated
*apfReceiveTask: Nov 10 10:48:05.047: [PA] a0:63:91:87:4c:90 Scheduling deletion of

Mobile Station: (callerId: 45) in 10 seconds
*apfReceiveTask: Nov 10 10:48:15.218: [PA] a0:63:91:87:4c:90 apfMsAssoStateDec
a0:63:91:87:4c:90 on AP bc:f1:f2:78:9e:e0 from Disassociated to Idle

pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Nov 10 10:48:15.218: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)
Deleted mobile LWAPP rule on AP [bc:f1:f2:78:9e:e0]
*apfReceiveTask: Nov 10 10:48:15.218: [PA] a0:63:91:87:4c:90 Deleting mobile on AP
bc:f1:f2:78:9e:e0(1)
LWAPP AP bc:f1:f2:78:9e:e0(1)
Threshold: 0 cur: 1



policy for client

apf_policy.c:2639)
apf_policy.c:2660)
'default-group', interface ' -wifi-1010'
10, interface ' -wifi-1010'
18 152 36 176 72 96 108 0 0 0 0 0 0 0 0

0f ac 04 01 00 00 0f
*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 Processing RSN IE

type 48, length 22 for mobile a0:63:91:87:4c:90
apfValidateDot11iCapabilities:1286 Received RSNIE with Capabilities with STA MFPC:
0, STA MFPR:0, & AP MFPC:0MFPR:0
non-11w Capable
PmkIdValidatedByAp

Initializing policy


for Client A0:63:91:87:4C:90
(3) Plumbed mobile LWAPP rule on AP bc:f1:f2:78:9e:e0 vapId 1 apVapId 1 flex-acl-
name:
*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 apfMsAssoStateInc
bc:f1:f2:78:9e:e0 from Idle to Associated



use PMK lifetime.
Accept for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.137: [PA] a0:63:91:87:4c:90 Resetting web IPv4
acl from 255 to 255

Flex acl from 65535 to 65535
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.137: [PA] a0:63:91:87:4c:90 Username entry

(dphe) created for mobile, length = 253
(dphe) created in mscb for mobile, length = 253
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.137: [PA] a0:63:91:87:4c:90 MPPE_SEND_KEY:
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000000: 74 c5 ec 84 18 3d a0 de

1f 08 cc d2 0e fe ae 86 t....=..........
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000010: fb ec b7 34 97 bb 0c 41
98 61 e8 5b 28 7b 4f 26 ...4...A.a.[({O&
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 MPPE_RECV_KEY:
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000000: 47 b2 e2 16 7d c8 af f9

f8 97 1c d7 79 59 a6 6e G...}.......yY.n
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000010: 08 de 1b 21 fc b8 dc c0
65 4b c5 f8 78 03 ba 57 ...!....eK..x..W
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 interface lookup
failed, removing intf group from mscb
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 override for
default ap group, marking intgrp NULL
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Re-applying
interface policy for client
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 0.0.0.0 8021X_REQD

(3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller
apf_policy.c:2639)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90
apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type, Tunnel User
- 0
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Inserting AAA
Override struct for mobile
MAC: a0:63:91:87:4c:90, source 4

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Applying Interface
policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan
1010

apf_policy.c:2639)
apf_policy.c:2660)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Setting re-auth
timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Creating a PKC
PMKID Cache entry for station a0:63:91:87:4c:90 (RSN 2)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Resetting MSCB PMK
Cache Entry 0 for station a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Adding BSSID
bc:f1:f2:78:9e:ef to PMKID cache at index 0 for station a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] New PMKID: (16)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Disabling re-auth

since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 unsetting
PmkIdValidatedByAp
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Updating AAA
Overrides from local for station
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 0 PMK-update
groupcast messages sent
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 PMK sent to
mobility group
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Freeing AAACB from
Dot1xCB as AAA auth is done for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Found an cache
entry for BSSID bc:f1:f2:78:9e:ef in PMKID cache at index 0 of station
a0:63:91:87:4c:90
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] [0000] 9d 5f 6d 63 1d 72 ba e2

ff a0 21 ee 2a fb 66 a4
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Starting key

exchange to mobile a0:63:91:87:4c:90, data packets will be dropped
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Sending EAPOL-Key
Message to mobile a0:63:91:87:4c:90
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
Auth Success state (id=14) for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Received Auth
Success while in Authenticating state for mobile a0:63:91:87:4c:90
mobile a0:63:91:87:4c:90 into Authenticated state
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] a0:63:91:87:4c:90 Received EAPOL-Key
from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] a0:63:91:87:4c:90 Ignoring invalid
EAPOL version (1) in EAPOL-key message from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] a0:63:91:87:4c:90 Received EAPOL-key
in PTK_START state (message 2) from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] 00000000: 30 16 01 00 00 0f ac 04
01 00 00 0f ac 04 01 00 0...............
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] 00000010: 00 0f ac 01 00 00 00 00
........
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] 00000000: 01 00 00 0f ac 04 01 00
00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] 00000010: ac 01 00 00 00 00
......
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] a0:63:91:87:4c:90 Not Flex client.
Do not distribute PMK Key cache.
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.159: [PA] a0:63:91:87:4c:90 Stopping
retransmission timer for mobile a0:63:91:87:4c:90
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
in PTKINITNEGOTIATING state (message 4) from mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 apfMs1xStateInc
apfMsPeapSimReqCntInc
apfMsPeapSimReqSuccessCntInc
(3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Mobility query,

PEM State: L2AUTHCOMPLETE
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Building Client

Payload:
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Client Ip:

0.0.0.0
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Client Vap

Security: 16384
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Virtual Ip:

1.2.3.4
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 ssid: test-

WiFi
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Building

VlanIpPayload.
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Not Using WMM

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Sending 11w Flag 0
for Client A0:63:91:87:4C:90
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0
L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD

(7) pemAdvanceState2 6499, Adding TMP rule
(7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP bc:f1:f2:78:9e:e0, slot 1, interface = 8, QOS = 2
IPv4 ACL ID = 255, IPv
(7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 64206, IntfId = 10
Local Bridging Vlan = 1010, Local Bridging intf id = 10
(7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken =
64206 AverageRate = 0, BurstRate = 0



(7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID
255)
*apfReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD (7)
mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = <WLC_Anchor_IP>
State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local,
client state=APF_MS_STATE_ASSOCIATED
pemAdvanceState2 6142, Adding TMP rule
Replacing Fast Path rule
IPv4 ACL ID = 255,
Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 64206, IntfId = 10 Local
Bridging Vlan = 1010, Local Bridging intf id = 10
Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken =



Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 Added NPU
entry of type 9, dtlFlags 0x0
*pemReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Sent an XID frame
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP received op
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x503a5da9)
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP (encap type
0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP processing DHCP
DISCOVER (1)
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP op:
BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP xid:
0xa95d3a50 (2841459280), secs: 0, flags: 0
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP chaddr:
a0:63:91:87:4c:90
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP ciaddr:
0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP siaddr:
0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP Opt82 bridge
mode insertion enabled, inserts opt82 if opt82 is enabled vlan=1010, datalen =18,
optlen=64
*DHCP Socket Task: Nov 10 10:48:22.455: [PA] a0:63:91:87:4c:90 DHCP successfully
bridged packet to DS
*IPv6_Msg_Task: Nov 10 10:48:23.301: [PA] a0:63:91:87:4c:90 Link Local address
fe80::5908:e02:db44:5ab4 updated to mscb. Not Advancing pem state.Current state:
mscb in apfMsMmInitial mobility state and client state APF_MS_STATE_AS
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x503a5da9)
OFFER (2)
BOOTREPLY, htype: Ethernet, hlen: 6, hops: 1
0xa95d3a50 (2841459280), secs: 0, flags: 0
a0:63:91:<DHCP_SVR_1>87:4c:90
0.0.0.0, yiaddr: <Wireless_Client_IP>
0.0.0.0, giaddr: <_Client_VLAN_1010_Gateway>
*DHCP Socket Task: Nov 10 10:48:23.459: [PA] a0:63:91:87:4c:90 DHCP server id:
<DHCP_SVR_1> rcvd server id: <DHCP_SVR_1>
bridged packet to STA
BOOTREQUEST (1) (len 322,vlan 1000, port 8, encap 0xec03, xid 0x503a5da9)
REQUEST (3)
0xa95d3a50 (2841459280), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Nov 10 10:48:23.462: [PA] a0:63:91:87:4c:90 DHCP requested ip:
<Wireless_Client_IP>
optlen=78
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x503a5da9)
ACK (5)
0xa95d3a50 (2841459280), secs: 0, flags: 0
a0:63:91:87:4c:90
*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 Static IP client
associated to interface test-wifi-1010 which can support client subnet.
*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 apfMsRunStateInc
*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>
DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7)

RUN (20) Reached PLUMBFASTPATH: from line 7106
RUN (20) Replacing Fast Path rule
type = Airespace AP Client
IPv4 ACL ID = 255, IPv6 ACL ID =
RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0,
AppToken = 64206 AverageRate = 0, BurstRate = 0


*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 Accounting NAI-

Realm: dphe, from Mscb username : dphe
RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL
ID 255)
*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 DHCP success event
for client. Clearing dhcp failure count for interface test-wifi-1010.
*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 DHCP success event
for client. Clearing dhcp failure count for interface test-wifi-1010.
*pemReceiveTask: Nov 10 10:48:23.476: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>
Added NPU entry of type 1, dtlFlags 0x0
*pemReceiveTask: Nov 10 10:48:23.476: [PA] a0:63:91:87:4c:90 Pushing IPv6:
fe80:0000:0000:0000:5908:0e02:db44:5ab4 , intfId:10 and MAC: A0:63:91:87:4C:90 ,
Binding to Data Plane. SUCCESS !!
*pemReceiveTask: Nov 10 10:48:23.476: [PA] a0:63:91:87:4c:90 Sending a gratuitous
ARP for <Wireless_Client_IP>, VLAN Id 1010
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x168f48d5)
INFORM (8)
0xd5488f16 (3578302230), secs: 0, flags: 0
a0:63:91:87:4c:90
<Wireless_Client_IP>, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x168f48d5)
ACK (5)
0xd5488f16 (3578302230), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x168f48d5)
ACK (5)
0xd5488f16 (3578302230), secs: 0, flags: 0
a0:63:91:87:4c:90


BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x1ebdb956)
0x56b9bd1e (1455013150), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x1ebdb956)
ACK (5)
0x56b9bd1e (1455013150), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x1ebdb956)
ACK (5)
0x56b9bd1e (1455013150), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x9dccd567)
INFORM (8)
0x67d5cc9d (1742064797), secs: 3, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9dccd567)
ACK (5)
0x67d5cc9d (1742064797), secs: 3, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9dccd567)
ACK (5)
0x67d5cc9d (1742064797), secs: 3, flags: 0
a0:63:91:87:4c:90

(Cisco Controller) >*DHCP Socket Task: Nov 10 10:55:17.716: [PA] a0:63:91:87:4c:90
DHCP successfully bridged packet to STA

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x8b3568fd)
INFORM (8)
0xfd68358b (4251465099), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x8b3568fd)
ACK (5)
0xfd68358b (4251465099), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x8b3568fd)
ACK (5)
0xfd68358b (4251465099), secs: 0, flags: 0
a0:63:91:87:4c:90



Threshold: 0 cur: 2


policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 1010

policy for client
*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>

RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller
apf_policy.c:2639)
apf_policy.c:2660)
'default-group', interface 'test-wifi-1010'
10, interface 'test-wifi-1010'
18 152 36 176 72 96 108 0 0 0 0 0 0 0 0

0f ac 04 01 00 00 0f

*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 Found an cache entry
for BSSID bc:f1:f2:78:9e:ef in PMKID cache at index 0 of station a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 Removing BSSID
bc:f1:f2:78:9e:ef from PMKID cache of station a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 Resetting MSCB PMK
PmkIdValidatedByAp
*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 apfMsRunStateDec

*apfMsConnTask_1: Nov 10 11:14:13.468: [PA] a0:63:91:87:4c:90 apfMs1xStateDec
RUN (20) Change state to START (0) last state RUN (20)

pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
START (0) Initializing policy
START (0) Change state to AUTHCHECK (2) last state START (0)

AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)

set to 0x80000001
for Client A0:63:91:87:4C:90
Removed NPU entry.


use PMK lifetime.
acl from 255 to 255


KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] 00000000: 8a 4a 67 e7 d0 b7 22 7d

08 95 86 84 ff ff c7 a2 .Jg..."}........
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] 00000010: 21 e8 4b 17 08 0b 82 60
c7 9e 4c b7 c8 69 f2 27 !.K....`..L..i.'
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] 00000000: de 5b 65 7a cd 04 94 eb

94 ae a2 01 f1 a3 ff 8c .[ez............
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] 00000010: f4 17 e5 05 12 cb 7d 41
8e b8 36 eb b1 97 28 f0 ......}A..6...(.


<Wireless_Client_IP> 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===>
'none' (ACL ID 255) --- (caller apf_policy.c:2639)
- 0
MAC: a0:63:91:87:4c:90, source 4


*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] [0000] b6 00 b4 90 e2 01 16 37

de e2 5a f2 9f de db d8

*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] a0:63:91:87:4c:90 PMK: Sending cache
delete
PmkIdValidatedByAp
mobility group
Success to mobile a0:63:91:87:4c:90 (EAP Id 246)
a0:63:91:87:4c:90
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.714: [PA] [0000] b6 00 b4 90 e2 01 16 37

de e2 5a f2 9f de db d8

01 00 00 0f ac 04 01 00 0...............
........
00 0f ac 04 01 00 00 0f ................
......
<Wireless_Client_IP> 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state
8021X_REQD (3)

for Client A0:63:91:87:4C:90
<Wireless_Client_IP> L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP
bc:f1:f2:78:9e:e0 vapId 1 apVapId 1 flex-acl-name:
*Dot1x_NW_MsgTask_0: Nov 10 11:14:13.741: [PA] a0:63:91:87:4c:90 apfMsRunStateInc
<Wireless_Client_IP> L2AUTHCOMPLETE (4) Change state to RUN (20) last state
L2AUTHCOMPLETE (4)
<Wireless_Client_IP> RUN (20) Reached PLUMBFASTPATH: from line 6635
<Wireless_Client_IP> RUN (20) Adding Fast Path rule
IPv4 ACL ID = 255, IPv6 ACL ID = 25
<Wireless_Client_IP> RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0,
TokenID = 64206, IntfId = 10 Local Bridging Vlan = 1010, Local Bridging intf id =
10
<Wireless_Client_IP> RUN (20) Fast Path rule (contd...) AVC Ratelimit: AppID =
0 ,AppAction = 0, AppToken = 64206 AverageRate = 0, BurstRate = 0



<Wireless_Client_IP> RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255,
IPv6 ACL ID 255, L2 ACL ID 255)
BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0x6f1fefbf)
REQUEST (3)
0xbfef1f6f (3220119407), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x6f1fefbf)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x6f1fefbf)
ACK (5)
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x762fc975)
INFORM (8)
0x75c92f76 (1976119158), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x762fc975)
ACK (5)
0x75c92f76 (1976119158), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x762fc975)
ACK (5)
0x75c92f76 (1976119158), secs: 0, flags: 0
a0:63:91:87:4c:90

((Cisco Controller) >*Apf Guest: Nov 10 11:14:51.793: [PA] Wired client head is

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x2c4a7362)
INFORM (8)
0x62734a2c (1651722796), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x2c4a7362)
ACK (5)
0x62734a2c (1651722796), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x2c4a7362)
0x62734a2c (1651722796), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xc8e010c8)
INFORM (8)
0xc810e0c8 (3356549320), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc8e010c8)
ACK (5)
0xc810e0c8 (3356549320), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc8e010c8)
ACK (5)
0xc810e0c8 (3356549320), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x9972430b)
INFORM (8)
0xb437299 (188969625), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9972430b)
ACK (5)
0xb437299 (188969625), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9972430b)
ACK (5)
0xb437299 (188969625), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x574b7875)
INFORM (8)
0x75784b57 (1970817879), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x574b7875)
ACK (5)
0x75784b57 (1970817879), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x574b7875)
ACK (5)
0x75784b57 (1970817879), secs: 0, flags: 0

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xb5454a16)
INFORM (8)
0x164a45b5 (373966261), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb5454a16)
ACK (5)
0x164a45b5 (373966261), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb5454a16)
ACK (5)
0x164a45b5 (373966261), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xb25cd5ab)
INFORM (8)
0xabd55cb2 (2882886834), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb25cd5ab)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb25cd5ab)
ACK (5)
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x97c692d7)
INFORM (8)
0xd792c697 (3616720535), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x97c692d7)
ACK (5)
0xd792c697 (3616720535), secs: 0, flags: 0
a0:63:91:87:4c:90
ACK (5)
0xd792c697 (3616720535), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x366eda4a)
INFORM (8)
0x4ada6e36 (1255829046), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x366eda4a)
ACK (5)
0x4ada6e36 (1255829046), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x366eda4a)
ACK (5)
0x4ada6e36 (1255829046), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xe5c84115)
0x1541c8e5 (356632805), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe5c84115)
ACK (5)
0x1541c8e5 (356632805), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe5c84115)
ACK (5)
0x1541c8e5 (356632805), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xd7e4828b)
INFORM (8)
0x8b82e4d7 (2340611287), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd7e4828b)
ACK (5)
0x8b82e4d7 (2340611287), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd7e4828b)
ACK (5)
0x8b82e4d7 (2340611287), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x5b54f00d)
INFORM (8)
0xdf0545b (233854043), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x5b54f00d)
ACK (5)
0xdf0545b (233854043), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x5b54f00d)
ACK (5)
0xdf0545b (233854043), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x6f7074cb)
INFORM (8)
0xcb74706f (3413405807), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x6f7074cb)
ACK (5)
0xcb74706f (3413405807), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x6f7074cb)
ACK (5)
0xcb74706f (3413405807), secs: 0, flags: 0
a0:63:91:87:4c:90


BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x7a2ff440)
INFORM (8)
0x40f42f7a (1089744762), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x7a2ff440)
ACK (5)
0x40f42f7a (1089744762), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x7a2ff440)
ACK (5)
0x40f42f7a (1089744762), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x85a98798)
INFORM (8)
0x9887a985 (2559027589), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x85a98798)
ACK (5)
0x9887a985 (2559027589), secs: 0, flags: 0
a0:63:91:87:4c:90
ACK (5)
0x9887a985 (2559027589), secs: 0, flags: 0
a0:63:91:87:4c:90


BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x37d73ff8)
INFORM (8)
0xf83fd737 (4164933431), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x37d73ff8)
ACK (5)
0xf83fd737 (4164933431), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x37d73ff8)
ACK (5)
0xf83fd737 (4164933431), secs: 0, flags: 0
a0:63:91:87:4c:90

(Cisco Controller) >*dot1xMsgTask: Nov 10 11:40:35.298: [PA] a0:63:91:87:4c:90 Key
exchange done, data packets from mobile a0:63:91:87:4c:90 should be forwarded
shortly
*dot1xMsgTask: Nov 10 11:40:35.298: [PA] a0:63:91:87:4c:90 Sending EAPOL-Key
state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02
*dot1xMsgTask: Nov 10 11:40:35.298: [PA] a0:63:91:87:4c:90 Allocating EAP Pkt for
retransmission to mobile a0:63:91:87:4c:90
*dot1xMsgTask: Nov 10 11:40:35.298: [PA] a0:63:91:87:4c:90 Updated broadcast key
sent to mobile A0:63:91:87:4C:90
in REKEYNEGOTIATING state (message 6) from mobile a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x3af06956)
INFORM (8)
0x5669f03a (1449783354), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3af06956)
ACK (5)
0x5669f03a (1449783354), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3af06956)
ACK (5)
0x5669f03a (1449783354), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xd07dd102)
INFORM (8)
0x2d17dd0 (47283664), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd07dd102)
ACK (5)
0x2d17dd0 (47283664), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd07dd102)
ACK (5)
0x2d17dd0 (47283664), secs: 0, flags: 0
a0:63:91:87:4c:90


BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x5bbd5126)
INFORM (8)
0x2651bd5b (642891099), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x5bbd5126)
ACK (5)
0x2651bd5b (642891099), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x5bbd5126)
ACK (5)
0x2651bd5b (642891099), secs: 0, flags: 0
a0:63:91:87:4c:90
*apfPmkCacheTimer: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Removing expired PMK
cache entry for station a0:63:91:87:4c:90 AKM was:APF_KEY_MGMT_80211i
*apfPmkCacheTimer: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Removing expired PTK
entry for station a0:63:91:87:4c:90
*apfReceiveTask: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Initiating 802.1x due
to PMK Timeout Event for STA
*apfReceiveTask: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Found an cache entry
*apfReceiveTask: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Removing BSSID
*apfReceiveTask: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Resetting MSCB PMK
*apfReceiveTask: Nov 10 11:45:11.151: [PA] a0:63:91:87:4c:90 Sent 1x reauth
initiate message to multi thread task for mobile a0:63:91:87:4c:90 1
use PMK lifetime.
acl from 255 to 255


KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.388: [PA] 00000000: 1a c9 1c 97 69 6b f5 18

26 62 0f 8c c3 b8 c5 ca ....ik..&b......
*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.388: [PA] 00000010: a4 b0 a3 3f 43 57 d0 86
0f 6d 4e 5a d4 53 0a c2 ...?CW...mNZ.S..
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.388: [PA] 00000000: b8 df ce 20 45 62 31 c6

89 a5 93 3f 99 33 94 42 ....Eb1....?.3.B
*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.388: [PA] 00000010: 41 36 f7 2d 2a 13 d4 77
88 1c 6d 2c ec f5 a4 1c A6.-*..w..m,....


<Wireless_Client_IP> RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none'
(ACL ID 255) --- (caller apf_policy.c:2639)
- 0
MAC: a0:63:91:87:4c:90, source 4



*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.388: [PA] [0000] d3 86 f4 6c b2 55 09 6a

19 df 10 b9 c4 9c e0 40

PmkIdValidatedByAp
mobility group
a0:63:91:87:4c:90
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.389: [PA] [0000] d3 86 f4 6c b2 55 09 6a

19 df 10 b9 c4 9c e0 40

*Dot1x_NW_MsgTask_0: Nov 10 11:45:11.391: [PA] a0:63:91:87:4c:90 EAPOL-key M2 with
invalid secure bit (set) received from mobile a0:63:91:87:4c:90
M2 with invalid MIC from mobile a0:63:91:87:4c:90 version 2
EAPOL-Key M1 (length 121) for mobile a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 11:45:12.449: [PA] a0:63:91:87:4c:90 EAPOL-key M2 with
invalid secure bit (set) received from mobile a0:63:91:87:4c:90
........
00 0f ac 04 01 00 00 0f ................
......
*Dot1x_NW_MsgTask_0: Nov 10 11:45:12.471: [PA] a0:63:91:87:4c:90 STA
[a0:63:91:87:4c:90, <Wireless_Client_IP>] Deleting Fast Path Rule (8021X_AUTH)
*Dot1x_NW_MsgTask_0: Nov 10 11:45:12.471: [PA] a0:63:91:87:4c:90 apfMsRunStateDec
*Dot1x_NW_MsgTask_0: Nov 10 11:45:12.471: [PA] a0:63:91:87:4c:90 apfMs1xStateDec
<Wireless_Client_IP> RUN (20) Change state to 8021X_REQD (3) last state RUN (20)

Removed NPU entry.
8021X_REQD (3)

L2AUTHCOMPLETE (4)
10



BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0x84a7728e)
REQUEST (3)
0x8e72a784 (2389878660), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x84a7728e)
ACK (5)
0x8e72a784 (2389878660), secs: 4, flags: 0
a0:63:91:87:4c:90
ACK (5)
0x8e72a784 (2389878660), secs: 4, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0x84a7728e)
REQUEST (3)
0x8e72a784 (2389878660), secs: 13, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
ACK (5)
0x8e72a784 (2389878660), secs: 13, flags: 0
a0:63:91:87:4c:90
ACK (5)
0x8e72a784 (2389878660), secs: 13, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0xd6a349d3)
REQUEST (3)
0xd349a3d6 (3544818646), secs: 0, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0xd6a349d3)
ACK (5)
0xd349a3d6 (3544818646), secs: 0, flags: 80
a0:63:91:87:4c:90
ACK (5)
0xd349a3d6 (3544818646), secs: 0, flags: 80
a0:63:91:87:4c:90
REQUEST (3)
0xd349a3d6 (3544818646), secs: 4, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
ACK (5)
0xd349a3d6 (3544818646), secs: 4, flags: 80
a0:63:91:87:4c:90
ACK (5)
0xd349a3d6 (3544818646), secs: 4, flags: 80
a0:63:91:87:4c:90
REQUEST (3)
0xd349a3d6 (3544818646), secs: 13, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
ACK (5)
0xd349a3d6 (3544818646), secs: 13, flags: 80
a0:63:91:87:4c:90
ACK (5)
0xd349a3d6 (3544818646), secs: 13, flags: 80
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xcb63fae3)
DISCOVER (1)
0xe3fa63cb (3824837579), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0xcb63fae3)
OFFER (2)
a0:63:91:87:4c:90
DISCOVER (1)
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
OFFER (2)
a0:63:91:87:4c:90
OFFER (2)
a0:63:91:87:4c:90
DISCOVER (1)
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
OFFER (2)
a0:63:91:87:4c:90
OFFER (2)
a0:63:91:87:4c:90
DISCOVER (1)
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
OFFER (2)
a0:63:91:87:4c:90
OFFER (2)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x592fefb5)
DISCOVER (1)
0xb5ef2f59 (3052351321), secs: 0, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x592fefb5)
OFFER (2)
0xb5ef2f59 (3052351321), secs: 0, flags: 80
a0:63:91:87:4c:90
DISCOVER (1)
0xb5ef2f59 (3052351321), secs: 5, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
OFFER (2)
0xb5ef2f59 (3052351321), secs: 5, flags: 80
a0:63:91:87:4c:90
OFFER (2)
0xb5ef2f59 (3052351321), secs: 5, flags: 80
a0:63:91:87:4c:90
DISCOVER (1)
0xb5ef2f59 (3052351321), secs: 13, flags: 80
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
OFFER (2)
0xb5ef2f59 (3052351321), secs: 13, flags: 80
a0:63:91:87:4c:90
OFFER (2)
0xb5ef2f59 (3052351321), secs: 13, flags: 80
a0:63:91:87:4c:90

Threshold: 0 cur: 1



policy for client

apf_policy.c:2639)
apf_policy.c:2660)

0f ac 04 01 00 00 0f

non-11w Capable
PmkIdValidatedByAp

RUN (20) Change state to START (0) last state RUN (20)



set to 0x80000001
Removed NPU entry.
for Client A0:63:91:87:4C:90
8021X_REQD (3) Plumbed mobile LWAPP rule on AP bc:f1:f2:78:9e:e0 vapId 1 apVapId 1
flex-acl-name:



use PMK lifetime.
acl from 255 to 255


KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] 00000000: 09 01 25 a8 8a 25 be f3

86 73 be af fc 08 9d c0 ..%..%...s......
*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] 00000010: 6d 24 06 6d 19 87 64 2e
68 9d 7e 90 5c d5 6b d9 m$.m..d.h.~.\.k.
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] 00000000: a2 a7 af 97 a7 52 23 a3

09 9a b3 79 7b 2a a3 6c .....R#....y{*.l
*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] 00000010: 39 d4 dc 8c 55 55 0e 80
65 08 1c 7f ba ef cb 17 9...UU..e.......


- 0
MAC: a0:63:91:87:4c:90, source 4



*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] [0000] c9 36 5b 30 59 53 58 e5

cc 2e 56 38 54 02 aa db

delete
PmkIdValidatedByAp
mobility group
a0:63:91:87:4c:90
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 11:47:51.089: [PA] [0000] c9 36 5b 30 59 53 58 e5

cc 2e 56 38 54 02 aa db

01 00 00 0f ac 04 01 00 0...............
........
00 0f ac 04 01 00 00 0f ................
......
8021X_REQD (3)

for Client A0:63:91:87:4C:90
L2AUTHCOMPLETE (4)

10



BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x479965f1)
DISCOVER (1)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x479965f1)
OFFER (2)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
OFFER (2)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 322,vlan 1000, port 8, encap 0xec03, xid 0x479965f1)
REQUEST (3)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=78
ACK (5)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
ACK (5)
0xf1659947 (4049967431), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x378d3af5)
INFORM (8)
0xf53a8d37 (4114255159), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x378d3af5)
ACK (5)
0xf53a8d37 (4114255159), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x378d3af5)
ACK (5)
0xf53a8d37 (4114255159), secs: 0, flags: 0
a0:63:91:87:4c:90

Threshold: 0 cur: 1



policy for client

apf_policy.c:2639)
apf_policy.c:2660)
18 152 36 176 72 96 108 0 0 0 0 0 0 0 0

0f ac 04 01 00 00 0f

non-11w Capable
PmkIdValidatedByAp



set to 0x80000001
for Client A0:63:91:87:4C:90
Removed NPU entry.



use PMK lifetime.
acl from 255 to 255


KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] 00000000: c9 d1 52 0e b3 1f 5a f4

65 3d ad 4c 9c d9 39 e4 ..R...Z.e=.L..9.
*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] 00000010: ba cc 57 46 ce fb 90 e0
bc a1 08 2e 07 8f f3 b8 ..WF............
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] 00000000: 6c eb 43 4e 2d f5 04 8a

a5 cd 9b 91 fa 0a b9 c9 l.CN-...........
*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] 00000010: 02 ab 58 b0 89 55 59 a2
ad e2 6c 60 1f a1 59 a2 ..X..UY...l`..Y.


- 0
MAC: a0:63:91:87:4c:90, source 4



*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] [0000] 0b 53 24 f3 da f4 91 55

78 7b a9 55 4e 13 0f 7a

delete
PmkIdValidatedByAp
mobility group
a0:63:91:87:4c:90
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 11:48:13.244: [PA] [0000] 0b 53 24 f3 da f4 91 55

78 7b a9 55 4e 13 0f 7a

01 00 00 0f ac 04 01 00 0...............
........
00 0f ac 04 01 00 00 0f ................
......
8021X_REQD (3)

for Client A0:63:91:87:4C:90
L2AUTHCOMPLETE (4)

10



BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0xae3c249d)
REQUEST (3)
0x9d243cae (2636397742), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0xae3c249d)
ACK (5)
0x9d243cae (2636397742), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0xae3c249d)
ACK (5)
0x9d243cae (2636397742), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xe4286db0)
INFORM (8)
0xb06d28e4 (2959943908), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe4286db0)
ACK (5)
0xb06d28e4 (2959943908), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe4286db0)
ACK (5)
0xb06d28e4 (2959943908), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x3f92a088)
INFORM (8)
0x88a0923f (2292224575), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3f92a088)
ACK (5)
0x88a0923f (2292224575), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3f92a088)
ACK (5)
0x88a0923f (2292224575), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x83104388)
INFORM (8)
0x88431083 (2286096515), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x83104388)
ACK (5)
0x88431083 (2286096515), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x83104388)
ACK (5)
0x88431083 (2286096515), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x12fe1c4b)
INFORM (8)
0x4b1cfe12 (1260191250), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x12fe1c4b)
ACK (5)
0x4b1cfe12 (1260191250), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x12fe1c4b)
ACK (5)
0x4b1cfe12 (1260191250), secs: 0, flags: 0
a0:63:91:87:4c:90



BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xd11dbf13)
INFORM (8)
0x13bf1dd1 (331292113), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd11dbf13)
ACK (5)
0x13bf1dd1 (331292113), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xd11dbf13)
ACK (5)
0x13bf1dd1 (331292113), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xf202d3e)
INFORM (8)
0x3e2d200f (1043144719), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xf202d3e)
ACK (5)
0x3e2d200f (1043144719), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xf202d3e)
ACK (5)
0x3e2d200f (1043144719), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x84edd77f)
INFORM (8)
0x7fd7ed84 (2144857476), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x84edd77f)
ACK (5)
0x7fd7ed84 (2144857476), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x84edd77f)
ACK (5)
0x7fd7ed84 (2144857476), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xac2cc858)
INFORM (8)
0x58c82cac (1489513644), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xac2cc858)
ACK (5)
0x58c82cac (1489513644), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xac2cc858)
ACK (5)
0x58c82cac (1489513644), secs: 0, flags: 0
a0:63:91:87:4c:90
DHCP received op BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid
0xc1123dde)
INFORM (8)
0xde3d12c1 (3728544449), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc1123dde)
ACK (5)
0xde3d12c1 (3728544449), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc1123dde)
ACK (5)
0xde3d12c1 (3728544449), secs: 0, flags: 0

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xe90eac2)
0xc2ea900e (3270152206), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe90eac2)
ACK (5)
0xc2ea900e (3270152206), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xe90eac2)
ACK (5)
0xc2ea900e (3270152206), secs: 0, flags: 0
a0:63:91:87:4c:90

DHCP received op BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid
0x3ab39295)
INFORM (8)
0x9592b33a (2509419322), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3ab39295)
ACK (5)
0x9592b33a (2509419322), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3ab39295)
ACK (5)
0x9592b33a (2509419322), secs: 0, flags: 0
a0:63:91:87:4c:90

*emWeb: Nov 10 12:07:25.026: [PA] a0:63:91:87:4c:90 apfMsDeleteByMscb Scheduling

mobile for deletion with deleteReason 6, reasonCode 252
*emWeb: Nov 10 12:07:25.026: [PA] a0:63:91:87:4c:90 Scheduling deletion of Mobile

Station: (callerId: 30) in 1 seconds
*emWeb: Nov 10 12:07:25.026: [PA] a0:63:91:87:4c:90 PMK: Sending cache delete
*emWeb: Nov 10 12:07:25.026: [PA] a0:63:91:87:4c:90 Removing PMK cache entry for
station a0:63:91:87:4c:90
*emWeb: Nov 10 12:07:25.026: [PA] a0:63:91:87:4c:90 0 PMK-remove groupcast messages
sent
a0:63:91:87:4c:90 on AP bc:f1:f2:78:9e:e0 from Associated to Disassociated
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Sent Deauthenticate to

mobile on BSSID bc:f1:f2:78:9e:ef slot 1(caller apf_ms.c:7196)
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Resetting MSCB PMK
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Setting active key
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Deleting the PMK cache
when de-authenticating the client.
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Global PMK Cache
deletion failed.
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Accounting NAI-Realm:
dphe, from Mscb username : dphe
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 apfMsAssoStateDec
a0:63:91:87:4c:90 on AP bc:f1:f2:78:9e:e0 from Disassociated to Idle

pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>
START (0) Deleted mobile LWAPP rule on AP [bc:f1:f2:78:9e:e0]
Removed NPU entry.
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Username entry deleted
for mobile
*apfReceiveTask: Nov 10 12:07:26.015: [PA] a0:63:91:87:4c:90 Deleting mobile on AP
bc:f1:f2:78:9e:e0(1)
station:a0:63:91:87:4c:90 AP:bc:f1:f2:79:6f:20-01 thread:9d8a320
LWAPP AP bc:f1:f2:79:6f:20(1)
from mobile on BSSID bc:f1:f2:79:6f:2f AP GA-AP-3113

Threshold: 0 cur: 0



apf_policy.c:2639)
apf_policy.c:2660)
18 152 36 176 72 96 108 0 0 0 0 0 0 0 0

0f ac 04 01 00 00 0f
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] [0016] ac 01 00 00 01 00 6f 89 b6

20 21 fc 4e cc ee 22

non-11w Capable
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] Received PMKID: (16)
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] [0000] 6f 89 b6 20 21 fc 4e cc ee

22 7f ed e6 f0 4e 4d
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 Searching for PMKID

in MSCB PMKID cache for mobile a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 No valid PMKID found
in the MSCB PMKID cache for mobile a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] CCKM: Find PMK in cache: BSSID = (6)
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] [0000] bc f1 f2 79 6f 20
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] CCKM: Find PMK in cache: realAA = (6)
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] [0000] bc f1 f2 79 6f 2f
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] CCKM: Find PMK in cache: PMKID = (16)
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] [0000] 6f 89 b6 20 21 fc 4e cc ee

22 7f ed e6 f0 4e 4d
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 Unable to compute a

valid PMKID from MSCB PMK cache for mobile a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 Searching for PMK in
global PMK cache for mobile a0:63:91:87:4c:90
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 Unable to compute a
valid PMKID from global PMK cache for mobile a0:63:91:87:4c:90
PmkIdValidatedByAp

Initializing policy


set to 0x80000001
for Client A0:63:91:87:4C:90
(3) Plumbed mobile LWAPP rule on AP bc:f1:f2:79:6f:20 vapId 1 apVapId 1 flex-acl-
name:
*apfMsConnTask_1: Nov 10 12:07:26.059: [PA] a0:63:91:87:4c:90 apfMsAssoStateInc
bc:f1:f2:79:6f:20 from Idle to Associated

with status 0 station:a0:63:91:87:4c:90 AP:bc:f1:f2:79:6f:20-01 on apVapId 1
Response to station on BSSID bc:f1:f2:79:6f:2f (status 0) ApVapId 1 Slot 1
bc:f1:f2:79:6f:20 from Associated to Associated

use PMK lifetime.
acl from 255 to 255


(dphe) created for mobile, length = 253
(dphe) created in mscb for mobile, length = 253
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] 00000000: a1 05 0d 70 66 15 43 5d

ae 85 83 71 3d 43 7e 22 ...pf.C]...q=C~"
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] 00000010: 68 c6 5d 7e 5f f3 7f 28
2a c6 32 32 5e 5e 67 7e h.]~_..(*.22^^g~
KeyLen: 32, Key:
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] 00000000: 11 5b fe f7 20 f0 95 df

2e 73 85 8e 57 e2 75 b0 .[.......s..W.u.
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] 00000010: 34 71 93 52 85 5b a7 b9
38 9c 3e 4a 99 9a a1 d2 4q.R.[..8.>J....
1010


apf_policy.c:2639)
apf_policy.c:2660)
- 0
MAC: a0:63:91:87:4c:90, source 4

1010

apf_policy.c:2639)
apf_policy.c:2660)
bc:f1:f2:79:6f:2f to PMKID cache at index 0 for station a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] [0000] 1e 13 f3 2c 99 b7 c3 8d

70 20 9f ca 52 db f6 ec

PmkIdValidatedByAp
mobility group
entry for BSSID bc:f1:f2:79:6f:2f in PMKID cache at index 0 of station
a0:63:91:87:4c:90
entry for BSSID bc:f1:f2:79:6f:2f in PMKID cache at index 0 of station
a0:63:91:87:4c:90
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.245: [PA] [0000] 1e 13 f3 2c 99 b7 c3 8d

70 20 9f ca 52 db f6 ec

01 00 00 0f ac 04 01 00 0&..............
6f 89 b6 20 21 fc 4e cc ........o...!.N.
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.249: [PA] 00000020: ee 22 7f ed e6 f0 4e 4d
."....NM
00 0f ac 04 01 00 00 0f ................
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.249: [PA] 00000010: ac 01 00 00 01 00 6f 89
b6 20 21 fc 4e cc ee 22 ......o...!.N.."
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.249: [PA] 00000020: 7f ed e6 f0 4e 4d
....NM
(3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Mobility query,

PEM State: L2AUTHCOMPLETE
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Building Mobile

Announce :
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Building Client

Payload:
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Client Ip:
0.0.0.0
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Client Vlan

Ip: <_WLC_VLAN_1010_Interface>, Vlan mask : <vlan_netmask>
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Client Vap

Security: 16384
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Virtual Ip:

1.2.3.4
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 ssid: test-

WiFi
*Dot1x_NW_MsgTask_0: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Building

VlanIpPayload.

for Client A0:63:91:87:4C:90
L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP bc:f1:f2:79:6f:20 vapId 1
apVapId 1 flex-acl-name:
L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)

(7) pemAdvanceState2 6499, Adding TMP rule
(7) Adding Fast Path rule
on AP bc:f1:f2:79:6f:20, slot 1, interface = 8, QOS = 2
IPv4 ACL ID = 255, IPv
(7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 64206, IntfId = 10
Local Bridging Vlan = 1010, Local Bridging intf id = 10



(7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID
255)
mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = <WLC_Anchor_IP>
State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local,
client state=APF_MS_STATE_ASSOCIATED
pemAdvanceState2 6142, Adding TMP rule
Replacing Fast Path rule
IPv4 ACL ID = 255,
Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 64206, IntfId = 10 Local
Bridging Vlan = 1010, Local Bridging intf id = 10



Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Nov 10 12:07:27.250: [PA] a0:63:91:87:4c:90 Sent an XID frame
*apfOrphanSocketTask: Nov 10 12:07:27.256: [PA] a0:63:91:87:4c:90 Orphan Packet
from DS - IP <Wireless_Client_IP>
*apfOrphanSocketTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90 Static IP client
associated to interface test-wifi-1010 which can support client subnet.
*apfOrphanSocketTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90 apfMsRunStateInc
*apfOrphanSocketTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90
<Wireless_Client_IP> DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD
(7)

<Wireless_Client_IP> RUN (20) Replacing Fast Path rule
IPv4 ACL ID = 255, IPv6 ACL ID =
10

*apfOrphanSocketTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90 Accounting NAI-

Realm: dphe, from Mscb username : dphe
*apfOrphanSocketTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90 Assigning Address
<Wireless_Client_IP> to mobile
*pemReceiveTask: Nov 10 12:07:27.257: [PA] a0:63:91:87:4c:90 Sending a gratuitous
ARP for <Wireless_Client_IP>, VLAN Id 1010
BOOTREQUEST (1) (len 316,vlan 1000, port 8, encap 0xec03, xid 0x8bb616c1)
REQUEST (3)
0xc116b68b (3239491211), secs: 4, flags: 0
a0:63:91:87:4c:90
0.0.0.0, yiaddr: 0.0.0.0
0.0.0.0, giaddr: 0.0.0.0
optlen=72
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x8bb616c1)
ACK (5)
0xc116b68b (3239491211), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 309,vlan 1010, port 8, encap 0xec00, xid 0x8bb616c1)
ACK (5)
0xc116b68b (3239491211), secs: 4, flags: 0
a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x13826a2c)
INFORM (8)
0x2c6a8213 (745177619), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x13826a2c)
ACK (5)
0x2c6a8213 (745177619), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x13826a2c)
ACK (5)
0x2c6a8213 (745177619), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x18b2ba86)
INFORM (8)
0x86bab218 (2260382232), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x18b2ba86)
ACK (5)
0x86bab218 (2260382232), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x18b2ba86)
ACK (5)
0x86bab218 (2260382232), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xdfff763e)
INFORM (8)
0x3e76ffdf (1047986143), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xdfff763e)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xdfff763e)
ACK (5)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x81bd83e9)
INFORM (8)
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x81bd83e9)
ACK (5)
0xe983bd81 (3917725057), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x81bd83e9)
ACK (5)
0xe983bd81 (3917725057), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xeb0dbd7a)
INFORM (8)
0x7abd0deb (2059210219), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xeb0dbd7a)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xeb0dbd7a)
ACK (5)
a0:63:91:87:4c:90
*dot1xMsgTask: Nov 10 12:14:27.889: [PA] a0:63:91:87:4c:90 Key exchange done, data

packets from mobile a0:63:91:87:4c:90 should be forwarded shortly
*dot1xMsgTask: Nov 10 12:14:27.889: [PA] a0:63:91:87:4c:90 Sending EAPOL-Key
state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02
*dot1xMsgTask: Nov 10 12:14:27.889: [PA] a0:63:91:87:4c:90 Allocating EAP Pkt for
retransmission to mobile a0:63:91:87:4c:90
*dot1xMsgTask: Nov 10 12:14:27.889: [PA] a0:63:91:87:4c:90 Updated broadcast key
sent to mobile A0:63:91:87:4C:90
in REKEYNEGOTIATING state (message 6) from mobile a0:63:91:87:4c:90
BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x3787a985)
INFORM (8)
0x85a98737 (2242479927), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
ACK (5)
0x85a98737 (2242479927), secs: 0, flags: 0
a0:63:91:87:4c:90
ACK (5)
0x85a98737 (2242479927), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x6efca80a)
INFORM (8)
0xaa8fc6e (178846830), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x6efca80a)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x6efca80a)
ACK (5)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xc4b5ae80)
INFORM (8)
0x80aeb5c4 (2158933444), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc4b5ae80)
ACK (5)
0x80aeb5c4 (2158933444), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xc4b5ae80)
ACK (5)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xcc868626)
INFORM (8)
0x268686cc (646350540), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xcc868626)
ACK (5)
0x268686cc (646350540), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xcc868626)
ACK (5)
0x268686cc (646350540), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x9c05d415)
INFORM (8)
0x15d4059c (366216604), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
ACK (5)
0x15d4059c (366216604), secs: 0, flags: 0
a0:63:91:87:4c:90
ACK (5)
0x15d4059c (366216604), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x3974a45d)
INFORM (8)
0x5da47439 (1571058745), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3974a45d)
ACK (5)
0x5da47439 (1571058745), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3974a45d)
ACK (5)
0x5da47439 (1571058745), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x7e59306c)
INFORM (8)
0x6c30597e (1815107966), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x7e59306c)
ACK (5)
0x6c30597e (1815107966), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x7e59306c)
ACK (5)
0x6c30597e (1815107966), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x9f296b0c)
INFORM (8)
0xc6b299f (208349599), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9f296b0c)
ACK (5)
0xc6b299f (208349599), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x9f296b0c)
ACK (5)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x1ed2abba)
INFORM (8)
0xbaabd21e (3131822622), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x1ed2abba)
ACK (5)
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x1ed2abba)
ACK (5)
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xf63d67a0)
INFORM (8)
0xa0673df6 (2691120630), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xf63d67a0)
ACK (5)
0xa0673df6 (2691120630), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xf63d67a0)
ACK (5)
0xa0673df6 (2691120630), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x3dce2e08)
INFORM (8)
0x82ece3d (137285181), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3dce2e08)
ACK (5)
0x82ece3d (137285181), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x3dce2e08)
ACK (5)
0x82ece3d (137285181), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x53a5a61d)
INFORM (8)
0x1da6a553 (497460563), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x53a5a61d)
ACK (5)
0x1da6a553 (497460563), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x53a5a61d)
ACK (5)
0x1da6a553 (497460563), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xb8674359)
INFORM (8)
0x594367b8 (1497589688), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb8674359)
ACK (5)
0x594367b8 (1497589688), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb8674359)
ACK (5)
0x594367b8 (1497589688), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0xb178744e)
INFORM (8)
0x4e7478b1 (1316255921), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb178744e)
ACK (5)
0x4e7478b1 (1316255921), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0xb178744e)
ACK (5)
0x4e7478b1 (1316255921), secs: 0, flags: 0
a0:63:91:87:4c:90

BOOTREQUEST (1) (len 308,vlan 1000, port 8, encap 0xec03, xid 0x2ac623b3)
INFORM (8)
0xb323c62a (3005466154), secs: 0, flags: 0
a0:63:91:87:4c:90
0.0.0.0, giaddr: 0.0.0.0
optlen=64
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x2ac623b3)
ACK (5)
0xb323c62a (3005466154), secs: 0, flags: 0
a0:63:91:87:4c:90
BOOTREPLY (2) (len 308,vlan 1010, port 8, encap 0xec00, xid 0x2ac623b3)
ACK (5)
0xb323c62a (3005466154), secs: 0, flags: 0

Session Capture

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Session Capture

Uploaded by

Copyright:

Available Formats

(Cisco Controller) >

(Cisco Controller) >debug client A0:63:91:87:4C:90

(Cisco Controller) >

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Processing assoc-req

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Max Client Trap

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Rf profile 600

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 override for default

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Re-applying interface

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] [0000] 01 00 00 0f ac 04 01 00 00

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] [0016] ac 01 00 00 00 00

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Received 802.11i

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 0.0.0.0 AUTHCHECK (2)

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Encryption policy is

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90

*apfMsConnTask_1: Nov 10 10:46:21.773: [PA] a0:63:91:87:4c:90 Sending assoc-resp

*spamApTask2: Nov 10 10:46:21.791: [PA] a0:63:91:87:4c:90 Sent dot1x auth initiate

(Cisco Controller) >

*osapiBsnTimer: Nov 10 10:47:54.879: [PA] a0:63:91:87:4c:90 802.1x 'timeoutEvt'

*apfReceiveTask: Nov 10 10:48:05.047: [PA] a0:63:91:87:4c:90 Scheduling deletion of

*apfReceiveTask: Nov 10 10:48:15.218: [PA] a0:63:91:87:4c:90

*apfMsConnTask_1: Nov 10 10:48:21.913: [PA] a0:63:91:87:4c:90 Rf profile 600

*apfMsConnTask_1: Nov 10 10:48:21.913: [PA] a0:63:91:87:4c:90 override for default

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 Re-applying interface

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] [0000] 01 00 00 0f ac 04 01 00 00

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] [0016] ac 01 00 00 00 00

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 Processing RSN IE

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 0.0.0.0 START (0)

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 0.0.0.0 AUTHCHECK (2)

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 Not Using WMM

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90

*apfMsConnTask_1: Nov 10 10:48:21.914: [PA] a0:63:91:87:4c:90 Sending assoc-resp

*spamApTask2: Nov 10 10:48:21.931: [PA] a0:63:91:87:4c:90 Sent dot1x auth initiate

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.137: [PA] a0:63:91:87:4c:90 Resetting web IPv4

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.137: [PA] a0:63:91:87:4c:90 Username entry

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000000: 74 c5 ec 84 18 3d a0 de

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] 00000000: 47 b2 e2 16 7d c8 af f9

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 0.0.0.0 8021X_REQD

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 interface lookup

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Re-applying

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Disabling re-auth

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] [0000] 9d 5f 6d 63 1d 72 ba e2

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.138: [PA] a0:63:91:87:4c:90 Starting key

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Mobility query,

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Building Client

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Client Ip:

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Client Vap

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Virtual Ip:

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 ssid: test-

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Building

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 Not Using WMM

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD

*Dot1x_NW_MsgTask_0: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD

*apfReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD (7)

*apfReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD (7)

*apfReceiveTask: Nov 10 10:48:22.160: [PA] a0:63:91:87:4c:90 0.0.0.0 DHCP_REQD (7)

*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>

*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>

*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 <Wireless_Client_IP>

*DHCP Socket Task: Nov 10 10:48:23.475: [PA] a0:63:91:87:4c:90 Accounting NAI-