5508 WLC to Server2008 NPS Radius

I have setup the WLC to authenticate to a MS Server2008 NPS for a WPA2/AES SSID. The connection is successful, but client authentication fails for wrong EAP-type. I believe this indicates a Windows7 client issue. Can anyone tell me the required client setup to satisfy the MS NPS?

NPS properties attached

Similar Messages

  • Cisco 5508-WLC using MS NPS as RADIUS Server for EAP-TLS

    Has anyone experienced a problem getting a Cisco WLC to work with MS NPS server? We've done it before albeit with differnt code versions.
    I have a Cisco 5508 WLC running 7.0.116.0 code hosting a WLAN configured for WPA2 with 802.1x for authentication.  I have two Windows NPS servers configured as the RADIUS servers for EAP-TLS authentication. Via debug info on the WLC I can see the 802.1x handshake take place with the wireless client and the WLC as well as a successful transmission of an Authentication Packet from the WLC to one of the RADIUS servers. However on the WLC I see repeated RADIUS server x.x.x.x:1812 deactivated in global list and on the NPS server I'm seeing event log errors indicating "The Network Policy Server discarded the request for a user"  along with the pertinent auth request info that I would expect the NPS server to receive from the WLC.
    Based on the WLC debug info I'm never actually getting to the EAP-TLS certificate authentication part. It seems the NPS servers don't like the format of the initial RADIUS authentication request coming from the WLC and so don't respond whcih in turn casues to WLC to switch to the other NPS server which produces the same issue.
    Any ideas of what might be the issue or misconfiguration?

    Jim,
    I wanted to know if you can setup wireshark on both of the boxes and see if your are hitting the following bug:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCti91044
    It looks as if the WLC is retransmitting the client traffic from one radius session with primary over to the secondary in which the radius state attribute that was assigned from the primary server is probably hitting the secondary server. Therefore if the state attribute isnt assigned from the secondary server it will discard the packet.
    May need to open a TAC case to see if this issue is on the 550x controllers also.
    Thanks,
    Tarik

  • Cisco WLC 5508 - NPS Radius

    Cisco WLC 5508
    Software Version: 7.4.100.0
    Windows Server 2008R2
    I've got everything setup on the Windows Server 2008 side of things (certificates, radius clients, etc)
    I added the radius server on the WLC, and configured a new WLAN to use it.
    Both are on the same subnet.
    When trying to conect to the WLAN it kept failing.  I installed wireshark on the server to monitor the radius traffic, and to my surprise there was no radius traffic showing up on the server.  The radius statistics on the WLC are at 0 as well, so it's like the WLC isn't even attempting Radius.
    I reverified that the server was enabled on both the security tab and the WLAN itself on the WLC.  Rebooted the controller and the server, all to no avail.  I used a radius test client, and can successfully send radius commands to the server using that utility.
    Frustrated, I just kept trying to reconnect on my wireless device, and after about the 15th try, finally I saw radius activity on wireshark.  It rejected my access, but at least I saw activity.  It also registerd radius statistcs on the WLC as well.
    So now if I keep trying to connect repeatedly, about every dozen or so times the WLC actually will send a radius request to the server.
    What in the world is going on here?

    I do have local management users on the controller.
    Some hours later I added the option of authenticating management users, for the NPS server. Then logged inn to the management GUI using NPS radius, worked just fine.
    However, these commands have been useful to me several times, to make sure unsuccessful requests appear in the Windows Event log:
    auditpol /get /subcategory:"Network Policy Server"
    If it shows ‘No auditing’ or just "Success", you can run this command to enable it:
    auditpol /set /subcategory:"Network Policy Server" /success:enable /failure:enable
    So now I know that the NPS radius server works, for management access. I will go to the customer's site some other day to test it for 802.1x authentication. If not, I'll do some debugging to decide wihich to blame - the WLC or NPS.

  • 5508 wlc with 1140 APs and NPS cant connect

    Hi.. let me go off with the equipment setup that I have first..
    I have 3 sites each site has  2x 5508 WLC and a few 1140 AP's per site.
    I also have 3 NPS running on those 3 sites..
    I have NPS and dhcp running on the same server...
    I have a seperate CA root Authority server.
    3 seperate DC ... one per site..
    I followed everything accoriding to  this guide
    http://araihan.wordpress.com/2010/04/30/complete-guide-to-build-a-cisco-wireless-infrastructure-using-cisco-wlc-5500-cisco-1142-ap-and-microsoft-radius-server/
    and also the guide that is on the CISCO site
    http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080bfb19a.shtml
    I did a debug on the wlc for the wireless client that I was using to try and connect.. I get the following   I hope someone can help me figure out whats wrong.
    =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.09.18 13:50:17 =~=~=~=~=~=~=~=~=~=~=~=
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.000: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.000: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Aborting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 4)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:40.004: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.098: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.101: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.150: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.150: 00:14:a5:4b:cf:ef Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Received Identity Response (count=2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef EAP State update from Connecting to Authenticating for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticating state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.172: 00:14:a5:4b:cf:ef Processing Access-Reject for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Removing PMK cache due to EAP-Failure for mobile 00:14:a5:4b:cf:ef (EAP Id -1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Sending EAP-Failure to mobile 00:14:a5:4b:cf:ef (EAP Id -1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Entering Backend Auth Failure state (id=-1) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Setting quiet timer for 5 seconds for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Unknown state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.211: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *osapiBsnTimer: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef 802.1x 'quiteWhile' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef quiet timer completed for mobile 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *apfMsConnTask_7: Sep 18 13:52:55.606: Stats update: Non Zero value
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Received Identity Response (count=3) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:59.231: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.348: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.351: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:54:01.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:54:01.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:01.280: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.414: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.417: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *apfMsConnTask_7: Sep 18 13:54:26.151: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:55:03.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:55:03.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.427: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.428: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.428: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *apfMsConnTask_7: Sep 18 13:55:56.698: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:56:05.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:56:05.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:43:62
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:48:70]
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Updated location for station old AP 24:01:c7:ed:48:70-0, new AP 24:01:c7:ed:43:60-0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:43:60 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:43:60 from Associated to Associated
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_4: Sep 18 13:56:07.383: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:43:62 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_4: Sep 18 13:56:07.383: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:43:60 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:43:60]
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Updated location for station old AP 24:01:c7:ed:43:60-0, new AP 24:01:c7:ed:48:70-0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:56:11.018: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:56:11.018: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:11.020: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:11.020: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:19.696: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:19.696: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.751: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.751: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.752: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:57:19.676: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:57:19.676: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:57:19.679: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5803) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Disassociated
    *apfReceiveTask: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
    *osapiBsnTimer: Sep 18 13:57:39.676: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef apfMsAssoStateDec
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5935) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Disassociated to Idle
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:48:70]
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef Deleting mobile on AP 24:01:c7:ed:48:70(0)
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Adding mobile on LWAPP AP 24:01:c7:ed:48:70(0)
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Association received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Initializing policy
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfMsAssoStateInc
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Idle to Associated
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *apfMsConnTask_7: Sep 18 13:58:57.792: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:59:04.876: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:59:04.876: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *osapiBsnTimer: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5803) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Disassociated
    *apfReceiveTask: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
    *osapiBsnTimer: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsAssoStateDec
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5935) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Disassociated to Idle
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfReceiveTask: Sep 18 13:

    hello everyone.. thanks for the reply... I changed a few things around..  instead of having 3 NPS server.. I disabled 2 of them and only using 1 for now.. I am trying to keep everything simple and geting working first..  after doing this.. looks like the message from event view is success   I got 2 events int he log..   1. Network policy server granded access to a user.   2.Network Policy server granted full acess to a user because of the host met the defined health policy.
    both sucess...
    I am not getting a DHCP address... for some reason ... here is the log... from the debug.. hopefully someone can help me figure this out..  Thanks again for helping and posting your comments.
    =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.09.19 09:47:17 =~=~=~=~=~=~=~=~=~=~=~=
    *apfMsConnTask_7: Sep 19 09:48:07.590: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:49:38.135: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.516: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.525: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Association received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Removing BSSID 24:01:c7:ed:48:72 from PMKID cache of station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Resetting MSCB PMK Cache Entry 0 for station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Setting active key cache index 0 ---> 8
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfMsRunStateDec
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfMs1xStateDec
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Change state to START (0) last state RUN (20)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Initializing policy
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *pemReceiveTask: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 Removed NPU entry.
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef Disable re-auth, use PMK lifetime.
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.551: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.552: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.552: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Received Identity Response (count=2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef EAP State update from Connecting to Authenticating for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticating state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=3) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 3, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=4) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 4)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 4, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=7) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef WARNING: updated EAP-Identifier 4 ===> 7 for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 7)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 7, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=8) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 8)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 8, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=9) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 9)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 9, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=10) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 10)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 10, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=11) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 11)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 11, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=13) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef WARNING: updated EAP-Identifier 11 ===> 13 for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 13)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 13, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Processing Access-Accept for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Resetting web IPv4 acl from 255 to 255
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Resetting web IPv4 Flex acl from 65535 to 65535
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Inserting AAA Override struct for mobile
        MAC: 00:14:a5:4b:cf:ef, source 4
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Setting re-auth timeout to 1800 seconds, got from WLAN config.
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Creating a PKC PMKID Cache entry for station 00:14:a5:4b:cf:ef (RSN 2)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Resetting MSCB PMK Cache Entry 0 for station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 0
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Adding BSSID 24:01:c7:ed:48:72 to PMKID cache at index 0 for station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: New PMKID: (16)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623:      [0000] 0e 97 09 a5 6c f9 2a 28 58 03 74 d2 8c 51 b7 ba
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Disabling re-auth since PMK lifetime can take care of same.
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef PMK sent to mobility group
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Sending EAP-Success to mobile 00:14:a5:4b:cf:ef (EAP Id 13)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: Including PMKID in M1  (16)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623:      [0000] 0e 97 09 a5 6c f9 2a 28 58 03 74 d2 8c 51 b7 ba
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Starting key exchange to mobile 00:14:a5:4b:cf:ef, data packets will be dropped
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Sending EAPOL-Key Message to mobile 00:14:a5:4b:cf:ef
       state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Entering Backend Auth Success state (id=13) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Received Auth Success while in Authenticating state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.624: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticated state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Received EAPOL-Key from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Received EAPOL-key in PTK_START state (message 2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef PMK: Sending cache add
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.648: 00:14:a5:4b:cf:ef Stopping retransmission timer for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.648: 00:14:a5:4b:cf:ef Sending EAPOL-Key Message to mobile 00:14:a5:4b:cf:ef
       state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Received EAPOL-Key from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Stopping retransmission timer for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef apfMs1xStateInc
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef apfMsRunStateInc
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Reached PLUMBFASTPATH: from line 6075
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Adding Fast Path rule
      type = Airespace AP Client
      on AP 24:01:c7:ed:48:70, slot 0, interface = 13, QOS = 0
      IPv4 ACL ID = 255, IPv6 ACL ID = 255,
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206  Local Bridging Vlan = 232, Local Bridging intf id = 13
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
    *pemReceiveTask: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef 0.0.0.0 Added NPU entry of type 1, dtlFlags 0x0
    *pemReceiveTask: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef Pushing IPv6: fe80:0000:0000:0000: 290f:8f76:9221:b33d , and MAC: 00:14:A5:4B:CF:EF , Binding to Data Plane. SUCCESS !!
    *DHCP Socket Task: Sep 19 09:50:21.740: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 0, flags: 0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 0, flags: 0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:21.742: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef Orphan Packet from STA - IP 169.254.179.61
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef In apfRegisterIpAddrOnMscb_debug: regType=2  Invalid src IP address, 169.254.179.61 is part of reserved ip address range (caller apf_broff.c:229)
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef IPv4 Addr: 169:254:179:61
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0  VLAN: 0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 1280, flags: 0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 1280, flags: 0
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 3072, flags: 0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 3072, flags: 0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 6912, flags: 0
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 6912, flags: 0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef Failed to get response for 3 dhcp attempts from client.Total DHCP failed count for the interface aginternet : 2
    *apfMsConnTask_7: Sep 19 09:51:08.682: Stats update: Non Zero value
    *DHCP Socket Task: Sep 19 09:51:20.248: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 0, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 0, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:20.250: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:24.351: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 1024, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 1024, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:24.353: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 2816, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 2816, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 6656, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 6656, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *apfMsConnTask_7: Sep 19 09:52:39.228: Stats update: Non Zero value

  • Two WLC to the same NPS Radius (win 2008)

    Hi everyone :
    I have a WLC 2504 running with one SSID (authentication 802.1X to NPS radius win 2008 Server) , I have another branch with another WLC 2504.
    Can I have configure the same SSID with the same NPS radiud win 2008 server in this another WLC 2504?? and How could I do it?
    Regards,
    Claudio L.

    Hi Scoott,
    Thank you so much for your response.
    I have used this guide to configure this deployment :
    http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080bfb19a.shtml
    In win 2008 server , I just only add the WLC like a new Radius Client ?
    I mean ,
    Frienly Name : WLC2
    Address IP : 192.168.1.X
    Vendor : Radius Standard
    Share secret : xxxx
    And That´s all, right ?

  • AD 2008 NPS Radius WLC

    hello,
    Does anyone know where I might find a document spacific to 2008 / NPS / WLC intergration?
    thanks very much for your time,
    greg
    Message was edited by: GREGORY WHYNOTT

    There are some good NPS server installation guides on the net - follow all of the recommended best practices from Microsoft for security and maintenance. When you have a sound base system and the other required components to start this test procedure with a sound NPS server. Here is where the integration occurs between NPS and WLC;
    Set the Auth and Acct ports
    Set your NPS Server access ports by right-clicking the globe symbol of the NPS Server
    Select properties, go to the properties tab and enter 1812 for auth and 1813 for accounting.
    Next, Configure the RADIUS Client Settings  Remember that to NPS the WLC is a RADIUS Client (along with other NAS devices like APs, WLCs, etc.)
    Configure the RADIUS Client Settings
    Expand the options below the NPS Server globe icon
    Add the WLC 5500 in the NPS server as a Radius Client
    1. Right-click RADIUS the Client and Select New RADIUS Client
    2. Enter Friendly Name and IP address of the Cisco WLC
    3. Select RADIUS STANDARD as the RADIUS Vendor
    4. Click the Manual radio button to enter the RADIUS key manually
    5. Enter a strong RADIUS key (make sure you put it in your key pass keeper you will need to add the same shared key to the controller)
    6. Check the Enable Client box
    7. At the time of this writing the controller does not support the Message authenticator setting leave unchecked in advanced tab.
    8. Click OK to close the new RADIUS Client configuration.
    Configure a Connection Policy (This policy determines which network access server to send requests to)
    9. Right Click the Network policy and Select New
    10. Enter a Policy Name (e.g. Connection to Wireless)
    11. Select Unspecified for the Type opf Network Access Server
    12. Add a Condition – pick NAS port type Wireless - 802.11 Click OK.
    13. Add another Condition - choose the group from the AD Domain to grant access (e.g. Domain/Wireless Users) Click OK.
    14. Optional - Add another Condition - a Condition – Add Client IPV4 Address (this is the Controller's IP address) Click OK.
    15. Click Next
    16. Authenticate requests on this server.
    17. Click Next
    18. Do not override security here.
    19. Click Next.
    20. We won't be applying attributes here.
    21. Click Next.
    22. Finish.
    Configure a Network Policy (This determines access)
    23. Right Click on Network Policies and choose New.
    Enter a Policy Name (e.g. Wireless ) 
    24. Select a Windows group Domain/Wireless Users to be allowed access
    25. Click Next.
    25. Select Grant Access - Access is granted if Client attempts match the conditions of this policy.  Click Next.
    26. Configure Authentication Methods
    27. Click Add..Microsoft Protected EAP a methods box will be presented
    28. You can also check v2 below if your organization security policy allows.
    29. You can double-click Microsoft Protected EAP (PEAP) and pick the order - move secure password up.
    30. In the same dialog window select the certificate used by NPS to identify itself to the client (your Windows 7 wireless client)
    Note: Microsoft has lots of documentation about this so look there for group policy guidance and how to get it in your client's trusted root.
    31. Click Next
    32. You can add constraints such as time, etc. here.  Click Next
    33. On the the Configure Settings dialog choose Encryption, Strongest Encryption. Click Next.
    34. This tab is the IP settings tab and that depends on your network.  For now, choose Server settings determine IP. Click Next.
    Add any further Constraints and Conditions after you get your tests working.
    The WLC
    There is a setup wizard on WLC..it will ask you to set up the RADIUS server.
    To configure a RADIUS server now, enter yes and then enter the IP address, communication port, and
    enter no. (Type yes, NPS IP: subnet: Gateway:
    If already set up..
    Configure Security and AAA Server in WLC 5500
    1. Browse to the IP address of WLC.
    2. Click Login and use your username and password credentials.
    3. Choose Security > AAA > RADIUS > Authentication and then click on New to launch RADIUS server configuration page.
    4. Choose the Server Index (the priority order of the RADIUS server). The controller tries Index 1 first, etc.
    5. Enter RADIUS Server IP Address.
    6. Shared Secret Format for now set to ASCII.
    7. Enter the Shared Secret and Confirm the Shared Secret (Be sure to use the exact Shared Secret you used in NPS).
    8. Click on Wireless. In the left hand pan click Authentication. You will see the IP address and port number 1812 of Radius Server.  You need to match the RADIUS Authentication port with the port you are using in NPS.  (Remember, you set that first on NPS above)
    9. Click Accounting. Click New on right hand top corner. You will be presented with a window to add a server, use the same Shared Secret and Port 1813.
    10. Apply changes.
    11. To add another RADIUS server Choose SECURITY > AAA > RADIUS > Authentication and then click New to navigate to this page.
    12. Click on the WLANs Tab >Click on a WLAN>Click on General Tab>Check Enable on Status and Check Enabled on broadcast SSID
    13. Click on the Security Tab>Click Layer2 Tab>Select WPA+WPA2 from Layer2 security drop-down list>Check WPA policy and the same page, enable AES and in Auth Key Mgmt, select 802.1x. Now click the Apply button.
    14. Click on AAA Servers>Select Authentication and Accounting server NPS. 
    15. Ensure that Enable is checked for both Authentication and Accounting radio button. Click Apply.
    Remember to think about the RADIUS process and your policies as you troubleshoot;
    Likely gotchas;
    The shared secrets are mismatched
    The NPS Server certificate is not in the wireless client's trusted root (laptop)
    You are evaluating user dial-in properties and don't mean to.
    Your policies don't grant access or don't match.
    Use the logs and the Microsoft Reason Codes.
    Review appropriate Cisco WLC documentation http://www.cisco.com/en/US/partner/tech/tk722/tk809/technologies_configuration_example09186a0080782507.shtml
    Finally, remember that this is a baseline test server to prove your wireless system works.  Before deploying you will want to look at other conditions and constraints for limiting access and authentication by building your security in layers. And you will want to test the system and run security audits.  Run the Best Practice Analyzer from Microsoft and consider adding Smart Cards or tokens to your installation.  http://technet.microsoft.com/en-us/library/ee922674(WS.10).aspx
    Good luck.

  • Clients unable to connect and get DHCP - LAP1142N AP and 5508 WLC

    Hi,
    I have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
    I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.
    Now for the issue: The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.
    Attached is a running config from one of the APs
    I've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. However, I wanted to post this to see if there is any further assistance I can get on this. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
    Thanks for any help.

    Alright, so I finally figured out the issue with this. I had a Mobility Anchor set on the guest WLAN and once I removed that all started working again.
    What is Mobility Anchor?
    A. Mobility Anchor, also referred to as Guest tunneling or Auto Anchor Mobility, is a feature where all the client traffic that belongs to a WLAN (Specially Guest WLAN) is tunneled to a predefined WLC or set of controllers that are configured as Anchor for that specific WLAN. This feature helps to restrict clients to a specific subnet and have more control over the user traffic. Refer to the Configuring Auto-Anchor Mobility section of Cisco Wireless LAN Controller Configuration Guide, Release 7.0 for more information on this feature.

  • WLC with ISE as radius and also external web server

    Hi friends,
    I am biulding a wireless network with 5508 WLC and trying to use ISE as radius server and also to redirect the web-login to it.
    I was trying to understand that to achieve the external web-login, do i need to use the raduius-nac option under advanced on the guest wireless where i am trying this out. and if not, where do i actually use it?
    So far what i have understood that i do need to have preauth ACL on the Layer 3 security, but the issue is there is no hit reaching the ISE.
    any suggestions would be higly appreciated guys!
    Regards,
    Mohit

    Hi mohit,
    Please make sure the below steps for guest auth thru ISE,
    1)Add the WLC in your ISE as netork devices.
    2)In Guest SSID you need to choose the pre authentication acl.That acl should allow the below traffic
        a. any to ISE
        b.ISE to any
        c.any to dns server
        d.dns to any
    3)The external redirect url will be 
    https://ip address:8443/guestportal/Login.action
    4)AAA server for that SSId would be your ISE ip with port number 1812.
    5)In advanced tab please choose the AAA override. No need of radius nac.
    6)Create appropriate authorization profile in ISE for guest.Example is below ,

  • Microsoft 2008 NPS Radius + wireless controller.

    Hi,
    We have implemented new Microsoft 2008 NPS Radius for authentification wireless controller.
    i am seeing RADIUS server x.x.x.x:1812 failed to respond to request (ID 119) for client ............. in controller. But there no logs hitting to the NPS server either failed or success or other related.
    Layer 3 comminucation is fine between controller & server.
    As per the debug logs,controller forwarding request NPS server "Successful transmission of Authentication Packet tp ......NPS proxy ".
    But there is no further key exchange or successful authentication logs, any idea on this?
    Thanks
    Shrinivas.K

    Download NTRadPing and test to see if your radius is working. You can put a sniffer on and see if you see packets coming out of the wlc and radius. You can always remove the aaa from the wlc and add it back on and also remove and add back on the wlc as a aaa client on the radius server.
    Thanks,
    Scott Fella
    Sent from my iPhone

  • Can't put two 5508 WLCs in the same RF group

    Hi experts,
    I have two 5508 WLCs and I want them to be backup to each other. I put in the same "RF Group Name" and even the same "Default Mobility Domain Name" however under Wireless -> 802.11b/g/n -> RRM -> RF Grouping each controller still only have themselves as the only memter to the group.
    Two controllers are having management IPs on the same subnet 192.168.161.x/24. AP-manager interfaces are in the same network as well. They can ping each other fine. The following screen shots show the current relavent config on the controller:
    I do have two controllers in the same mobility group and they are both showing up...
    Does anyone know why they can't add each other to the RF group? All other settings are pretty much default...
    Thanks!

    Hi,
    is there a chance that one of the 2 WLC doesn't contain any access point ? Or that the APs from one WLC are not physically close to the APs of the second WLC ?
    The point of RF grouping is to exchange RF information, to make RRM decisions together and to know what ap is a rogue and which is not. RF group information travels over the air from AP to AP.
    So if a wlc has no ap of if its APs are not close to those of the other WLC there is both no point in grouping with the other WLC in rf group and also no technical way of doing so.
    Regards,
    Nicolas
    ===
    Don't forget to rate answers that you find useful

  • Can't get 1532i to associate to 5508 WLC running 7.6.130.0

    Greetings,
    I've got 20 or so APs on a 5508 WLC.  Most of the APs are 1242, one is 3602.  I'm now trying to get a 1532i to associate to the 5508 and it's not happening.  This is the first 1532 on this controller.
    Also, I got this 1532 AP from a sister site and they had it configured as Autonomous in wgb mode, so I had to do the Autonomous to Unified Conversion.  This conversion appeared to go successfully.  But now the AP won't associate to my controller. 
    Thanks
    Following is what happens from the AP's console :
    AP78da.6e59.e58a#reload
    Proceed with reload? [confirm]
    Writing out the event log to flash:/event.log ...
    Write of event.log done
    *Oct 28 20:27:37.151: %SYS-5-RELOAD: Reload requested by Cisco on console. Reload Reason: Reload.
    *Oct 28 20:27:37.155: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
                                                                        *Oct 28 20:27:39.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
    *Oct 28 20:27:40.039: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    System Bootstrap, Version U-Boot 1.1.4-gf5ee82b1-dirty Corfu , RELEASE SOFTWARE
    Build Date: Oct 17 2013 - 18:08:55
    corfu - Scorpion 1.0
    DRAM:  256 MB
    Now running in RAM - U-Boot at: 8ffbc000
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x14
    flash size 1MB, sector count = 256
    Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
    Ath Nand ID[8ffee17c]: 2c:f1:80:95:02
    ONFI MICRON      MT29F1G08ABADAWP
    Micron NAND 128MiB 3,3V 8-bit [128MB]
    size = 128MB
    Hit any key to stop autoboot:  0
    boot_method is set to IOS_BOOT, boot IOS bootloader in NOR flash
    Loading .text @ 0x84000000 (207840 bytes)
    Loading .rodata @ 0x84032be0 (39008 bytes)
    Loading .data @ 0x8403c440 (3264 bytes)
    Loading .data.rel.local @ 0x8403d100 (1084 bytes)
    Loading .data.rel @ 0x8403d53c (124 bytes)
    Loading .data.rel.ro @ 0x8403d5b8 (960 bytes)
    Clearing .bss @ 0x8403d980 (161116 bytes)
    Clearing .scommon @ 0x84064edc (56 bytes)
    ## Starting application at 0x84000000 ...
    IOS Secondary Bootloader - Starting system.HW Test Status(0)
    Ath Nand ID: 95:80:f1:2c:00
    Using driver version 1 for media type 2
    Valid buffers 146
    total146  146
    success found all blocks
    start end 65 85
    found in range
    high low end 2728 2089 85
    Xmodem file system is available.
    mifs[0]: 15 files, 5 directories
    mifs[0]: Total bytes     :  131334144
    mifs[0]: Bytes used      :    7966720
    mifs[0]: Bytes available :  123367424
    mifs[0]: mifs fsck took 0 seconds.
    Base Ethernet MAC address: 78:da:6e:59:e5:8a
    Setup MAC....
    Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
    Ethernet speed is 100 Mb - FULL duplex
    Scorpion  ----> F1 PHY *
    : cfg1 0xf cfg2 0x7115
    Loading "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6"...##########################################################################################################################################################################################################################################################################################################################################################################
    File "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6" uncompressed and installed, entry point: 0x60080000
    executing...
    Stop MAC.
    Starting IOS...
    cp0 timer begin value is set as 1000
    prid= 19750
    Starts main.
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 11:03 by prod_rel_team
    Initializing flashfs...
    Ath Nand ID: 95:80:F1:2C:00
    Using driver version 1 for media type 2
    Valid buffers 146
    total146  146
    success found all blocks
    start end 65 85
    found in range
    high low end 2728 2089 85
    mifs[4]: 15 files, 5 directories
    mifs[4]: Total bytes     : 131334144
    mifs[4]: Bytes used      : 7966720
    mifs[4]: Bytes available : 123367424
    mifs[4]: mifs fsck took 2 seconds.
    mifs[4]: Initialization complete.
    ...done Initializing flashfs.
    :pci_init_board:521 *** Warning *** : PCIe1 WLAN Module not found !!!
    pci_rc2_init_board:570 PCIE Controller Init Bus Master Enable
    :pci_rc2_init_board:593 PCIe2 WLAN Module Found !!!
    soap_pci_subsys_init:706 Bus Master/Mem Enable on pci_write side
    soap_pci_subsys_init(713): PCI vendor ID: 0x168C ret:0
    soap_pci_subsys_init(715): PCI device ID: 0x33 ret:0
    Scorpion  ----> F1 PHY *
    Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
    Disabling 802.3az feature on port 0
    sgmii cal value = 0xE
    Disabling 802.3az feature on port 1.
    SGMII setup done, status is 0x2
    Radio0  present 9550 9000 0 0 0 0
    Rate table has 282 entries (12 legacy/96 11n/174 11ac)
    Radio1  present 9590 9000 0 0 B2000000 1
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP1532I-A-K9 (MIPS74k) processor (revision 27) with 204800K/57344K bytes of memory.
    Processor board ID FTX1813201L
    MIPS74k CPU at 700MHz, revision number 0x0000
    Last reset from power-on
    LWAPP image version 7.6.100.0
    2 Gigabit Ethernet interfaces
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 78:DA:6E:59:E5:8A
    Part Number                          : 74-11942-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC180951ZR
    Top Assembly Part Number             : 000-00000-00
    Top Assembly Serial Number           : FTX1813201L
    Top Revision Number                  : 23
    Product/Model Number                 : AIR-CAP1532I-A-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:09.895: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (11)mips74k_config_radio_pci(302): PCI CMD write: 0x356
    *Mar  1 00:00:14.391: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to upEnterprise mode: 0x44000000
    *Mar  1 00:00:14.895: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (2)
    *Mar  1 00:00:14.971: ath_load_ctl_pwr_tbl() dot11radio 2G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO2.bin version# 3.0
    *Mar  1 00:00:15.419: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (2)
    *Mar  1 00:00:15.419: ath_load_ctl_pwr_tbl() dot11radio 5G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO5.bin version# 3.4
    *Mar  1 00:00:15.699: CDP_PD: Power Source: 4-pair Power Injector
    *Mar  1 00:00:15.723: AP Mesh platform identified (backhaul config:0x2, access:0xF)
    *Mar  1 00:00:15.735: Starting Ethernet promiscuous mode
    *Mar  1 00:00:15.735: Skipping Ethernet bridge initializaion
    *Mar  1 00:00:16.431: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
    *Mar  1 00:00:18.363: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 11:03 by prod_rel_team
    *Mar  1 00:00:18.363: %SNMP-5-COLDSTART: SNMP agent on host AP78da.6e59.e58a is undergoing a cold start
    *Mar  1 00:00:18.399: %MESH-6-BVI_CREATED: Mesh BVI1 interface created
    *Mar  1 00:00:18.399: ath_ACIF_set_distance: Retrieved existing timeout value: 25us for distance: 0km
    *Mar  1 00:00:18.399: ath_ACIF_set_distance: Setting new timeout value: 45us for distance: 3km
    *Mar  1 00:00:18.399: %CDP_PD-4-POWER_OK: Full power - HIGH_POWER inline power source
    *Mar  1 00:00:18.619: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:18.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:20.399: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:37.015: Logging LWAPP message to 255.255.255.255.
    *Mar  1 00:00:37.027: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:00:38.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:38.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:00:39.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:39.067: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:40.023: %MESH-6-ADJACENCY_STATE_MACHINE_STARTED: Mesh adjacency state machine started
    *Mar  1 00:00:40.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:13.531:  Mesh setting the ethernet port 0 state to 2
    *Mar  1 00:01:13.531: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:15.531: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:01:16.531: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:01:18.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:18.651: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:19.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:19.671: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:20.671: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:28.643: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:28.759: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.132.120.85, mask 255.255.255.0, hostname AP78da.6e59.e58a
    *Mar  1 00:01:28.759: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:33.791: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Mar  1 00:01:33.855: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    Translating "CISCO-CAPWAP-CONTROLLER.americas.mittalco.com"...domain server (10.132.250.250) [OK]
    *Mar  1 00:01:33.867: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:34.855: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:01:34.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:34.915: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:35.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:44.855: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 28 20:29:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:29:44.495: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:29:44.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
    *Oct 28 20:29:49.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:30:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
    *Oct 28 20:30:44.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Oct 28 20:30:44.095: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Oct 28 20:30:44.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Oct 28 20:30:45.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Oct 28 20:30:45.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Oct 28 20:30:46.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Oct 28 20:30:54.095: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 28 20:30:52.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:30:52.499: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:30:52.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:30:52.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
    *Oct 28 20:30:57.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5

    You have to add the MAC address of the 1530 to the WLC mac filter list before the AP will join. Here is a link that explains it. 
    http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1530/quick/guide/ap1532qsg.html#pgfId-45801
    Scott

  • AIR-CAP3702I booting up in mesh mode and not joining our 5508 WLC

    I have a batch of 30+ AIR-CAP3702I-A-K9 APs that I need to setup but none of them are joining to the 5508 WLC and when I connect a console cable and view the output from the AP it shows that it is trying to initiate in mesh mode. I have read other forums that are showing that I need to put in the APs MAC address to a filter list on the WLC for it to show up and then I will be able to change it from mesh mode to local mode. The only issue I'm having with that solution is not knowing how it will affect my current production environment off of that 5508 WLC. I have 69 active production APs with clients working off them and there are no MAC filters currently in place on the WLC. By adding a MAC filter entry for the new APs would the WLC create an implicit deny for all other clients that don't have their MAC addresses entered?? If so is there another work around? Can the mode be changed via the CLI on the AP itself to make it local instead of mesh? 

    sh capwap client rcb
    AdminState                  :  ADMIN_ENABLED
    SwVer                       :  7.6.1.118
    NumFilledSlots              :  2
    Name                        :  AP88f0.4290.7184
    Location                    :  default location
    MwarName                    :  xxxxx
    MwarApMgrIp                 :  x.x.x.x !<it has the correct name and IP of the WLC>
    MwarHwVer                   :  0.0.0.0
    ApMode                      :  Bridge
    ApSubMode                   :  Not Configured
    OperationState              :  JOIN
    CAPWAP Path MTU             :  576
    LinkAuditing                :  disabled
    ApRole                      :  MeshAP
    ApBackhaul                  :  802.11a
    ApBackhaulChannel           :  0
    ApBackhaulSlot              :  2
    ApBackhaul11gEnabled        :  0
    ApBackhaulTxRate            :  24000
    Ethernet Bridging State     :  0
    Public Safety State         :  disabled
    AP Rogue Detection Mode     :  Enabled
    AP Tcp Mss Adjust           :  Disabled
    AP IPv6 TCP MSS Adjust      :  Disabled
    Predownload Status          :  None
    Auto Immune Status          :  Disabled
    RA Guard Status             :  Disabled
    Efficient Upgrade State     :  Disabled
    Efficient Upgrade Role      :  None
    TFTP Server                 :  Disabled
    Antenna Band Mode           :  Unknown
    802.11bg(0) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 0
      Current Channel           : 11
      Current Bandwidth         : 20
    802.11a(1) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 1
      Current Channel           : 165
      Current Bandwidth         : 20
    It is showing the following error on our WLC in the log file:
    Tue Jul 15 14:01:26 2014
    AAA Authentication Failure for UserName:88f042907184 User Type: WLAN USER
    And here are some of the errors it's showing on the AP after bootup:
    *Jul 15 17:47:30.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:31.003: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.031: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:31.039: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.047: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:32.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:33.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:35.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:35.471: %DTLS-5-ALERT: Received WARNING : Close notify alert from x.x.x.x
    *Jul 15 17:47:35.475: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:35.483: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:36.475: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:36.503: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:37.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Jul 15 17:48:15.007: %MESH-6-LINK_UPDOWN: Mesh station 88f0.4290.7184 link Down
    *Jul 15 17:48:17.007: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Jul 15 17:48:22.507: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: Invalid event 31 & state 4 combination
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 31, state 4

  • How can I add the new AP license to HA 5508 WLC?

    Hi,
    My customer has two 5508 WLC in HA mode and these devices have 250 AP license. Customer bought 50 AP and 50 AP license. But I could not add the license to WLC! When I check the Management>Software Activation> tab there are only two options under the tab these are "Licenses" "License Usage". There is no "Command" option in there. Also I tried add on CLI but this error log appeared " !!!! Blocked: Changing License configurations on Secondary unit is blocked !!!! " 
    I think this is possible when disable the HA but is there anybody know this how can I add the new 50 AP license to HA WLC without disable the HA?
    Thanks,
    Burhan

    Hi,
    Thank you for your reply. 
    Yes I know the controllers synchronize with the enabled license and the 250 AP license bundled with two device there is no problem.
    I want to add new 50 AP license in addition 250 AP license. Because customer has 300 AP's.
    As I said, When I check the Management>Software Activation> tab there are only two options under the tab these are "Licenses" "License Usage". There is no "Command" option in there.
    Thanks,

  • Can we use a 5508 WLC in Hong Kong and join 3602 APs in Vietnam to it? Any regulatory contraints?

    Hi friends,
    I am looking for some wisdom here!
    Just wondering if I can use a 5508 WLC in Hong Kong and join 3602 APs in Vietnam to it?
    Any regulatory contsraints / guidelines that would prohibit from doing so?
    - Regards,
    Tarun.

    You have two differnt regulations... here is a link:
    http://www.cisco.com/en/US/prod/collateral/wireless/ps5679/ps5861/product_data_sheet0900aecd80537b6a_ps10981_Products_Data_Sheet.html
    You need to make sure you are not breaking any rules and it is best to have an AP that is specific to that country.  Also if you add multiple country codes on a WLC, the AP's will only be able to use the most common channels and TX power setting allowed on both.  Here is a link explaining that.
    http://nostringsattachedshow.com/2012/02/02/multiple-country-codes-with-the-cisco-wlc/
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • 5508 WLC - 7.0.98.218 - Local users password reset

    We are required to change passwords every so often at my job. I am trying to change the password  for one of the local user accounts on a  5508 WLC running 7.0.98.218 -  How can I accomplish this task? The option  I get is to remove the users. Any help would be much appriciated.
    Thanks,
    marramix01

    Hi,
    I think ur speaking about LOCAL NET USERs list on the WLC..
    I am able to change that on my WLC..
    its .. WLC GUI >> SECURITY >> LOCAL NET USERS >> Client on the local user >> Edit it >> Apply.
    Clisk on the name which is under USERNAME and u wil be able to edit it!!
    Lemme know if this helps and please dont forget to rate the usefull posts!!
    Regards
    Surendra

Maybe you are looking for

  • Where can i get an apps to install photoshop 5.5 on windows 8

    anyone know where to get this apps thanks

  • Bridge cache problem! HELP!!

    Every time  I open Bridge I get an error message "Bridge encountered a problem and is unable to read Cache. Please try purging central cache to solve solution."  I have gone to the Edit tab, preference option and purged cache, but no luck. Message st

  • Help Menu Implementatiohn

    Hi All, please help me how to implement Help menu in a project Rgrds, Narayan

  • Imported Music is missing from library

    I've recently started having problems seeing imported music in my iTunes library. I put a CD into my computer, and the CD is visible within iTunes in the devices Tab, as normal. I import the CD, and can watch the tracks as they are added to my comput

  • Firing Stored Procedure Into Database At Runtime

    HI All, I need a help !. I have created a stored procedure that creates a dynamic SP at runtime depending upon certain values stored in my database. Now I want that as soon as the dynamic SP is written in a flat file on the database server it should