5508 wlc update problem

hi,
one of our customers wants to update the firmware of a 5508 wlc, but always gets the following error message:
Error Message   %UPDATE-3-INV_FILE_SIGN: Error! Invalid image signature!. Image may be corrupt.
but the same image works fine on another 5508.
any ideas? the update was downloaded via a smartnet for the wlc, on which the update works fine. does the customer has to download another image for the second controller, or should the image work on both wlc?
thanks for any help!

just saw that this is the spanish community for wireless questions.
opened another thread for this question in the english area.
lo siento.

Similar Messages

  • AP unable to download the image from 5508 WLC

    Hi,
    I have a 5508 WLC connected to 2950 Switch and the LAP 1262 connected to the same default VLAN. My AP's are able to join the controller since they are in the same broadcast domain but They are NOT able to download the image from WLC. When I am looking at the wireless TAB of WLC.. it says... Downloading Image.
    Can anyone pls. suggest what all needs to be done to make UP the APs. Also, Following is the error i am seeing at the AP.
    *Apr 27 11:48:40.640: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.1.99:5246
    *Apr 27 11:48:40.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:48:40.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:48:40.694: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 27 11:48:40.700: capwap_image_proc: problem extracting tar file
    *Apr 27 11:48:40.700: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    *Apr 27 11:48:51.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:48:51.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Apr 27 11:48:51.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:48:51.569: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99
    *Apr 27 11:48:51.569: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 27 11:48:56.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99perform archive download capwap:/ap3g1 tar file
    *Apr 27 11:48:56.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Apr 27 11:48:56.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 27 11:48:56.589: Loading file /ap3g1...
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 27 11:49:44.640: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.1.99:5246
    *Apr 27 11:49:44.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:49:44.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:49:44.694: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 27 11:49:44.700: capwap_image_proc: problem extracting tar file
    *Apr 27 11:49:44.700: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    *Apr 27 11:49:54.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:49:54.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Apr 27 11:49:54.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:49:54.572: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99
    *Apr 27 11:49:54.572: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 27 11:49:59.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99perform archive download capwap:/ap3g1 tar file
    *Apr 27 11:49:59.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Apr 27 11:49:59.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 27 11:49:59.589: Loading file /ap3g1...
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 27 11:50:47.644: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.1.99:5246
    *Apr 27 11:50:47.644: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:50:47.644: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:50:47.697: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 27 11:50:47.697: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    *Apr 27 11:50:47.703: capwap_image_proc: problem extracting tar file
    *Apr 27 11:50:57.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:50:57.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Apr 27 11:50:57.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:50:57.569: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99
    *Apr 27 11:50:57.569: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 27 11:51:02.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99perform archive download capwap:/ap3g1 tar file
    *Apr 27 11:51:02.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Apr 27 11:51:02.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 27 11:51:02.589: Loading file /ap3g1...
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 27 11:51:50.640: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.1.99:5246
    *Apr 27 11:51:50.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:51:50.640: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 27 11:51:50.694: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 27 11:51:50.700: capwap_image_proc: problem extracting tar file
    *Apr 27 11:51:50.700: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    *Apr 27 11:52:00.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:52:00.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Apr 27 11:52:00.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.99 peer_port: 5246
    *Apr 27 11:52:00.569: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99
    *Apr 27 11:52:00.569: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 27 11:52:05.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.99perform archive download capwap:/ap3g1 tar file
    *Apr 27 11:52:05.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Apr 27 11:52:05.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 27 11:52:05.589: Loading file /ap3g1...
    logging facility kern

    hi amjad,i am working on the same controller and i upload the image to another AP and cponvert it to LAP. bot this is not registering on controller and behaves like first as first ap is registered and working fine. 2nd ap console output is given below
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 29 10:16:29.644: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192
    .168.1.59:5246
    *Apr 29 10:16:29.644: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:16:29.647: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:16:29.707: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 29 10:16:29.713: capwap_image_proc: problem extracting tar file
    *Apr 29 10:16:29.713: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
    not established.
    *Apr 29 10:16:40.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 192.168.1.59 peer_port: 5246
    *Apr 29 10:16:40.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Apr 29 10:16:40.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
    peer_ip: 192.168.1.59 peer_port: 5246
    *Apr 29 10:16:40.569: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.59
    *Apr 29 10:16:40.569: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 29 10:16:45.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.59pe
    rform archive download capwap:/ap3g1 tar file
    *Apr 29 10:16:45.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Do
    wnloading image from Controller.
    *Apr 29 10:16:45.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 29 10:16:45.589: Loading file /ap3g1...
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 29 10:17:33.647: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192
    .168.1.59:5246
    *Apr 29 10:17:33.647: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:17:33.650: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:17:33.710: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 29 10:17:33.716: capwap_image_proc: problem extracting tar file
    *Apr 29 10:17:33.716: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
    not established.
    *Apr 29 10:17:43.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 192.168.1.59 peer_port: 5246
    *Apr 29 10:17:43.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Apr 29 10:17:43.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
    peer_ip: 192.168.1.59 peer_port: 5246
    *Apr 29 10:17:43.569: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.59
    *Apr 29 10:17:43.569: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    examining image...
    *Apr 29 10:17:48.571: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.59pe
    rform archive download capwap:/ap3g1 tar file
    *Apr 29 10:17:48.583: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Do
    wnloading image from Controller.
    *Apr 29 10:17:48.589: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Apr 29 10:17:48.589: Loading file /ap3g1...
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    %Error opening flash:/update/info (No such file or directory)
    ERROR: Image is not a valid IOS image archive.
    archive download: takes 48 seconds
    *Apr 29 10:18:36.647: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192
    .168.1.59:5246
    *Apr 29 10:18:36.650: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:18:36.650: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Apr 29 10:18:36.710: %CAPWAP-3-ERRORLOG: capwap ifs:  read error or timeout
    *Apr 29 10:18:36.716: capwap_image_proc: problem extracting tar file
    *Apr 29 10:18:36.716: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
    not established.
    *Apr 29 10:18:46.000: %CAPWAP-5-DTLSRE
    pls help

  • Cisco APs not updating after WLC-update

    Hello everyone,
    I need to update my 5508 WLCs to a newer software, to support new AP-models.
    Started with AIR-CT5500-K9-1-7-0-0-FUS.aes and AIR-CT5500-K9-7-0-240-0.aes, everything worked fine. Pre-Downloaded the newer Image to the APs, restarted the WLCs and everything was ok.
    Now I tried to update to 7.6.100.0 as well as 7.4.121.0. Both Versions should support my APs, but it doesn't work at all.
    Any ideas are highly appreciated.
    If you need further output, just let me know.
    Regards,
    Manuel
    These are some informations about the environment, AP-info and logging after "upgrade" to 7.4.121.0, controller-information after downgrading again...
    AP#  sh ver
    Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(23c)JA7, RELEASE SOFTWARE (fc1)
    ROM: Bootstrap program is C1240 boot loader BOOTLDR: C1240 Boot Loader (C1240-BOOT-M) Version 12.4(13d)JA, RELEASE SOFTWARE (fc2)
    AP uptime is 1 minute System returned to ROM by power-on System image file is "flash:/c1240-k9w8-mx.124-23c.JA7/c1240-k9w8-mx.124-23c.JA7"
    cisco AIR-LAP1242AG-E-K9  (PowerPCElvis) processor (revision A0) with 27638K/5120K bytes of memory.
    Processor board ID FCZ1545812F
    PowerPCElvis CPU at 262Mhz, revision number 0x0950
    Last reset from power-on LWAPP image version 7.0.240.0
    1 FastEthernet interface
    2 802.11 Radio(s)
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 70:CA:9B:07:86:B8
    Part Number                          : 73-10256-07
    PCA Assembly Number                  : 800-26918-06
    PCA Revision Number                  : A0
    PCB Serial Number                    : FOC15402NP4
    Top Assembly Part Number            : 800-29152-03
    Top Assembly Serial Number          : FCZ1545812F
    Top Revision Number                  : A0
    Product/Model Number                : AIR-LAP1242AG-E-K9
    Configuration register is 0xF
    AP#dir
    Directory of flash:/
    2  -rwx      89311  Jan 18 2014 20:41:00 +00:00  event.log
    3  drwx          64  Jan 18 2014 20:43:21 +00:00  update
    5  drwx        256  Jan 18 2014 20:40:55 +00:00  c1240-k9w8-mx.124-23c.JA7
    4  -rwx        6168  Nov 2 2011 23:32:18 +00:00  private-multiple-fs
    7  -rwx        395  Mar 1 2002 00:00:05 +00:00  env_vars
    15740928 bytes total (8772096 bytes free)
    AP#dir
    Directory of flash:/c1240-k9w8-mx.124-23c.JA7/
    9  -rwx      131328  Jan 18 2014 20:39:46 +00:00  7101.img
    10  -rwx        292  Jan 18 2014 20:39:46 +00:00  info
    11  -rwx    4642714  Jan 18 2014 20:40:55 +00:00  c1240-k9w8-mx.124-23c.JA7
    15  -rwx      131328  Jan 18 2014 20:40:56 +00:00  6701.img
    #sh logging --> see attached file
    CONTROLLER (unfortunately after downgrading it again):
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.0.240.0
    Bootloader Version............................... 1.0.16
    Field Recovery Image Version..................... 7.0.112.21
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    IP Address....................................... WLC-IP
    Last Reset....................................... Software reset
    System Up Time................................... 0 days 0 hrs 26 mins 3 secs
    System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna Current Boot
    License Level....................... base
    Current Boot License Type........................ Permanent
    Next Boot License Level.......................... base
    Next Boot License Type........................... Permanent
    Configured Country............................... DE  - Germany
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 2
    Number of Active Clients......................... 5
    Burned-in MAC Address............................ 1C:DF:0F:C6:D8:80
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Absent
    Maximum number of APs supported.................. 150
    (Cisco Controller) >show boot
    Primary Boot Image............................... 7.4.121.0
    Backup Boot Image................................ 7.0.240.0 (default) (active)
    (Cisco Controller) >show ap bundle primary
    Primary AP Image        Size
    ap1g2                  9576
    ap3g1                  6684
    ap3g2                  11208
    ap801                  5192
    ap802                  5232
    c1100                  3096
    c1130                  4972
    c1140                  4992
    c1200                  3364
    c1240                  4812
    c1250                  5512
    c1310                  3136
    c1520                  6412
    c3201                  4324
    c602i                  3716
    (Cisco Controller) >show ap bundle secondary
    Secondary AP Image      Size
    ap3g1                  6684
    ap801                  5192
    ap802                  5232
    c1100                  3096
    c1130                  4972
    c1140                  4992
    c1200                  3364
    c1240                  4812
    c1250                  5512
    c1310                  3136
    c1520                  6412
    c3201                  4324
    c602i                  3716
    Nachricht geändert durch Manuel Sporleder

    Hi Scott,
    I am not trying to pre-download it anymore, since this doesn't work at all.
    If I just restart the controller, the APs are downloading the image telling me "everything is fine", are rebooted and that stated with the old image again.
    This is what you can see in the attached log-file:
    *Mar  1 00:00:05.873: soap_prepare_new_image_crash: mini ios flash:/c1240-rcvk9w8-mx/c1240-rcvk9w8-mx
    *Mar  1 00:00:06.242: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
    *Mar  1 00:00:07.662: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
    *Mar  1 00:00:09.054: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
    *Mar  1 00:00:09.152: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 1024 messages)
    *Mar  1 00:00:09.181:  status of voice_diag_test from WLC is false
    *Mar  1 00:00:11.381: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:11.440: %SYS-5-RESTART: System restarted
    *Mar  1 00:00:11.441: %SNMP-5-COLDSTART: SNMP agent on host AP is undergoing a cold start
    *Nov  2 23:31:59.107: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Nov  2 23:31:59.108: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Nov  2 23:31:59.929: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Nov  2 23:32:00.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Nov  2 23:32:00.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Nov  2 23:32:18.102: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Nov  2 23:32:18.163: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state
    *Nov  2 23:32:18.345: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Nov  2 23:32:18.759:  status of voice_diag_test from WLC is false
    *Nov  2 23:32:18.847: Logging LWAPP message to 255.255.255.255.
    *Nov  2 23:32:33.181: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Nov  2 23:32:33.247: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Nov  2 23:32:34.212: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Nov  2 23:32:34.213: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 started - CLI initiated
    *Jan 20 20:32:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: WLC-1-IP peer_port: 5246
    *Jan 20 20:32:44.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Jan 20 20:32:45.479: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: WLC-1-IP peer_port: 5246
    *Jan 20 20:32:45.480: %CAPWAP-5-SENDJOIN: sending Join Request to WLC-1-IP
    *Jan 20 20:32:45.481: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Jan 20 20:32:45.483: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Jan 20 20:32:45.483: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Jan 20 20:32:45.483: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Jan 20 20:32:45.484: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from WLC-1-IPperform archive download capwap:/c1240 tar file
    *Jan 20 20:32:45.494: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Jan 20 20:32:45.499: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
    *Jan 20 20:33:58.755: %DTLS-3-BAD_RECORD: Erroneous record received from WLC-1-IP: Duplicate (replayed) record
    *Jan 20 20:33:59.315: image upgrade successfully, system is now reloading
    This happens again and again and again...
    Regards, Manuel

  • How can I add the new AP license to HA 5508 WLC?

    Hi,
    My customer has two 5508 WLC in HA mode and these devices have 250 AP license. Customer bought 50 AP and 50 AP license. But I could not add the license to WLC! When I check the Management>Software Activation> tab there are only two options under the tab these are "Licenses" "License Usage". There is no "Command" option in there. Also I tried add on CLI but this error log appeared " !!!! Blocked: Changing License configurations on Secondary unit is blocked !!!! " 
    I think this is possible when disable the HA but is there anybody know this how can I add the new 50 AP license to HA WLC without disable the HA?
    Thanks,
    Burhan

    Hi,
    Thank you for your reply. 
    Yes I know the controllers synchronize with the enabled license and the 250 AP license bundled with two device there is no problem.
    I want to add new 50 AP license in addition 250 AP license. Because customer has 300 AP's.
    As I said, When I check the Management>Software Activation> tab there are only two options under the tab these are "Licenses" "License Usage". There is no "Command" option in there.
    Thanks,

  • Cisco 5508-WLC using MS NPS as RADIUS Server for EAP-TLS

    Has anyone experienced a problem getting a Cisco WLC to work with MS NPS server? We've done it before albeit with differnt code versions.
    I have a Cisco 5508 WLC running 7.0.116.0 code hosting a WLAN configured for WPA2 with 802.1x for authentication.  I have two Windows NPS servers configured as the RADIUS servers for EAP-TLS authentication. Via debug info on the WLC I can see the 802.1x handshake take place with the wireless client and the WLC as well as a successful transmission of an Authentication Packet from the WLC to one of the RADIUS servers. However on the WLC I see repeated RADIUS server x.x.x.x:1812 deactivated in global list and on the NPS server I'm seeing event log errors indicating "The Network Policy Server discarded the request for a user"  along with the pertinent auth request info that I would expect the NPS server to receive from the WLC.
    Based on the WLC debug info I'm never actually getting to the EAP-TLS certificate authentication part. It seems the NPS servers don't like the format of the initial RADIUS authentication request coming from the WLC and so don't respond whcih in turn casues to WLC to switch to the other NPS server which produces the same issue.
    Any ideas of what might be the issue or misconfiguration?

    Jim,
    I wanted to know if you can setup wireshark on both of the boxes and see if your are hitting the following bug:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCti91044
    It looks as if the WLC is retransmitting the client traffic from one radius session with primary over to the secondary in which the radius state attribute that was assigned from the primary server is probably hitting the secondary server. Therefore if the state attribute isnt assigned from the secondary server it will discard the packet.
    May need to open a TAC case to see if this issue is on the 550x controllers also.
    Thanks,
    Tarik

  • 5508 wlc with 1140 APs and NPS cant connect

    Hi.. let me go off with the equipment setup that I have first..
    I have 3 sites each site has  2x 5508 WLC and a few 1140 AP's per site.
    I also have 3 NPS running on those 3 sites..
    I have NPS and dhcp running on the same server...
    I have a seperate CA root Authority server.
    3 seperate DC ... one per site..
    I followed everything accoriding to  this guide
    http://araihan.wordpress.com/2010/04/30/complete-guide-to-build-a-cisco-wireless-infrastructure-using-cisco-wlc-5500-cisco-1142-ap-and-microsoft-radius-server/
    and also the guide that is on the CISCO site
    http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080bfb19a.shtml
    I did a debug on the wlc for the wireless client that I was using to try and connect.. I get the following   I hope someone can help me figure out whats wrong.
    =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.09.18 13:50:17 =~=~=~=~=~=~=~=~=~=~=~=
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.000: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.000: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Aborting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 4)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.001: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:40.003: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:40.004: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.098: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.101: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:52:42.102: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:52:42.103: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:52:42.108: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.133: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.150: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.150: 00:14:a5:4b:cf:ef Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Received Identity Response (count=2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef EAP State update from Connecting to Authenticating for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticating state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.165: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.172: 00:14:a5:4b:cf:ef Processing Access-Reject for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Removing PMK cache due to EAP-Failure for mobile 00:14:a5:4b:cf:ef (EAP Id -1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Sending EAP-Failure to mobile 00:14:a5:4b:cf:ef (EAP Id -1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Entering Backend Auth Failure state (id=-1) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef Setting quiet timer for 5 seconds for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.173: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Unknown state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:42.211: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *osapiBsnTimer: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef 802.1x 'quiteWhile' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef quiet timer completed for mobile 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:52:47.076: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *apfMsConnTask_7: Sep 18 13:52:55.606: Stats update: Non Zero value
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Received Identity Response (count=3) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.228: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *Dot1x_NW_MsgTask_7: Sep 18 13:52:59.231: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:52:59.231: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.348: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.351: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:53:01.351: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:53:01.352: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:53:01.353: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:53:01.356: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:53:01.401: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:53:31.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:54:01.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:54:01.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:54:01.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:01.280: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.414: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.417: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:54:03.418: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:54:03.419: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:54:03.421: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:54:03.465: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *apfMsConnTask_7: Sep 18 13:54:26.151: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:54:33.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:55:03.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:55:03.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:55:03.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:55:05.371: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:55:05.372: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:55:05.374: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:55:05.376: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.427: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.428: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:55:05.428: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:55:35.276: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *apfMsConnTask_7: Sep 18 13:55:56.698: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:56:05.276: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:56:05.276: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:56:05.279: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:43:62
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_4: Sep 18 13:56:07.381: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:48:70]
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Updated location for station old AP 24:01:c7:ed:48:70-0, new AP 24:01:c7:ed:43:60-0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:43:60 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:43:60 from Associated to Associated
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_4: Sep 18 13:56:07.382: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_4: Sep 18 13:56:07.383: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:43:62 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_4: Sep 18 13:56:07.383: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:43:60 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:07.385: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:07.439: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:11.016: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:43:60]
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Updated location for station old AP 24:01:c7:ed:43:60-0, new AP 24:01:c7:ed:48:70-0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:56:11.017: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:56:11.018: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:56:11.018: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:11.020: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:11.020: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Reassociation received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 18 13:56:19.692: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:56:19.693: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Initializing policy
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:56:19.694: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:56:19.696: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:19.696: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.751: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.751: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:56:19.752: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:56:49.676: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *osapiBsnTimer: Sep 18 13:57:19.676: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:57:19.676: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:57:19.679: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:57:19.679: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5803) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Disassociated
    *apfReceiveTask: Sep 18 13:57:29.676: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
    *osapiBsnTimer: Sep 18 13:57:39.676: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef apfMsAssoStateDec
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5935) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Disassociated to Idle
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [24:01:c7:ed:48:70]
    *apfReceiveTask: Sep 18 13:57:39.677: 00:14:a5:4b:cf:ef Deleting mobile on AP 24:01:c7:ed:48:70(0)
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Adding mobile on LWAPP AP 24:01:c7:ed:48:70(0)
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Association received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 18 13:58:04.863: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 0 0 0 0 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 18 13:58:04.864: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Initializing policy
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfMsAssoStateInc
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Idle to Associated
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 18 13:58:04.865: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:58:04.868: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 18 13:58:04.897: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *osapiBsnTimer: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 18 13:58:34.876: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *apfMsConnTask_7: Sep 18 13:58:57.792: Stats update: Non Zero value
    *osapiBsnTimer: Sep 18 13:59:04.876: 00:14:a5:4b:cf:ef 802.1x 'txWhen' Timer expired for station 00:14:a5:4b:cf:ef and for message = M0
    *dot1xMsgTask: Sep 18 13:59:04.876: 00:14:a5:4b:cf:ef Reached Max EAP-Identity Request retries (3) for STA 00:14:a5:4b:cf:ef
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Sent Deauthenticate to mobile on BSSID 24:01:c7:ed:48:70 slot 0(caller 1x_auth_pae.c:3241)
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 6) in 10 seconds
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Disconnected state
    *dot1xMsgTask: Sep 18 13:59:04.879: 00:14:a5:4b:cf:ef Not sending EAP-Failure for STA 00:14:a5:4b:cf:ef
    *osapiBsnTimer: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5803) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Disassociated
    *apfReceiveTask: Sep 18 13:59:14.876: 00:14:a5:4b:cf:ef Scheduling deletion of Mobile Station:  (callerId: 45) in 10 seconds
    *osapiBsnTimer: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsExpireCallback (apf_ms.c:614) Expiring Mobile!
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsAssoStateDec
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef apfMsExpireMobileStation (apf_ms.c:5935) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Disassociated to Idle
    *apfReceiveTask: Sep 18 13:59:24.876: 00:14:a5:4b:cf:ef pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfReceiveTask: Sep 18 13:

    hello everyone.. thanks for the reply... I changed a few things around..  instead of having 3 NPS server.. I disabled 2 of them and only using 1 for now.. I am trying to keep everything simple and geting working first..  after doing this.. looks like the message from event view is success   I got 2 events int he log..   1. Network policy server granded access to a user.   2.Network Policy server granted full acess to a user because of the host met the defined health policy.
    both sucess...
    I am not getting a DHCP address... for some reason ... here is the log... from the debug.. hopefully someone can help me figure this out..  Thanks again for helping and posting your comments.
    =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.09.19 09:47:17 =~=~=~=~=~=~=~=~=~=~=~=
    *apfMsConnTask_7: Sep 19 09:48:07.590: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:49:38.135: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.516: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.525: Stats update: Non Zero value
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Association received from mobile on BSSID 24:01:c7:ed:48:72
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Global 200 Clients are allowed to AP radio
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Max Client Trap Threshold: 0  cur: 1
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef In processSsidIE:4202 setting Central switched to TRUE
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef In processSsidIE:4205 apVapId = 3 and Split Acl Id = 65535
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying site-specific Local Bridging override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Local Bridging Interface Policy for station 00:14:a5:4b:cf:ef - vlan 232, interface id 13, interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *apfMsConnTask_7: Sep 19 09:50:14.526: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef STA - rates (8): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef STA - rates (12): 130 132 139 150 36 48 72 108 12 18 24 96 0 0 0 0
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Processing RSN IE type 48, length 20 for mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Received RSN IE with 0 PMKIDs from mobile 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Removing BSSID 24:01:c7:ed:48:72 from PMKID cache of station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Resetting MSCB PMK Cache Entry 0 for station 00:14:a5:4b:cf:ef
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Setting active key cache index 0 ---> 8
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfMsRunStateDec
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfMs1xStateDec
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Change state to START (0) last state RUN (20)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Initializing policy
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *pemReceiveTask: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 Removed NPU entry.
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *apfMsConnTask_7: Sep 19 09:50:14.527: 00:14:a5:4b:cf:ef apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef apfPemAddUser2:session timeout forstation 00:14:a5:4b:cf:ef - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef Sending Assoc Response to station on BSSID 24:01:c7:ed:48:72 (status 0) ApVapId 3 Slot 0
    *apfMsConnTask_7: Sep 19 09:50:14.528: 00:14:a5:4b:cf:ef apfProcessAssocReq (apf_80211.c:7391) Changing state for mobile 00:14:a5:4b:cf:ef on AP 24:01:c7:ed:48:70 from Associated to Associated
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef Disable re-auth, use PMK lifetime.
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *dot1xMsgTask: Sep 19 09:50:14.531: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 1)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.551: 00:14:a5:4b:cf:ef Received EAPOL START from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.552: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Connecting state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:14.552: 00:14:a5:4b:cf:ef Sending EAP-Request/Identity to mobile 00:14:a5:4b:cf:ef (EAP Id 2)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Received Identity Response (count=2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef EAP State update from Connecting to Authenticating for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticating state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.443: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=3) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.473: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 3)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 3, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.491: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=4) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.493: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 4)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 4, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.505: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=7) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef WARNING: updated EAP-Identifier 4 ===> 7 for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.509: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 7)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 7, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.522: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=8) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.524: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 8)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 8, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.536: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=9) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.538: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 9)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 9, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.552: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=10) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.554: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 10)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 10, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.568: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=11) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.581: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 11)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 11, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.599: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Processing Access-Challenge for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Entering Backend Auth Req state (id=13) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef WARNING: updated EAP-Identifier 11 ===> 13 for STA 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.602: 00:14:a5:4b:cf:ef Sending EAP Request from AAA to mobile 00:14:a5:4b:cf:ef (EAP Id 13)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Received EAPOL EAPPKT from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Received EAP Response from mobile 00:14:a5:4b:cf:ef (EAP Id 13, EAP Type 25)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.615: 00:14:a5:4b:cf:ef Entering Backend Auth Response state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Processing Access-Accept for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Resetting web IPv4 acl from 255 to 255
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Resetting web IPv4 Flex acl from 65535 to 65535
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying site-specific override for station 00:14:a5:4b:cf:ef - vapId 3, site 'CoreSites', interface 'aginternet'
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 232
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Re-applying interface policy for client
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Inserting AAA Override struct for mobile
        MAC: 00:14:a5:4b:cf:ef, source 4
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Setting re-auth timeout to 1800 seconds, got from WLAN config.
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.619: 00:14:a5:4b:cf:ef Station 00:14:a5:4b:cf:ef setting dot1x reauth timeout = 1800
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Creating a PKC PMKID Cache entry for station 00:14:a5:4b:cf:ef (RSN 2)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Resetting MSCB PMK Cache Entry 0 for station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 8
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Setting active key cache index 8 ---> 0
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: 00:14:a5:4b:cf:ef Adding BSSID 24:01:c7:ed:48:72 to PMKID cache at index 0 for station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.622: New PMKID: (16)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623:      [0000] 0e 97 09 a5 6c f9 2a 28 58 03 74 d2 8c 51 b7 ba
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Disabling re-auth since PMK lifetime can take care of same.
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef unsetting PmkIdValidatedByAp
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef PMK sent to mobility group
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Sending EAP-Success to mobile 00:14:a5:4b:cf:ef (EAP Id 13)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Found an cache entry for BSSID 24:01:c7:ed:48:72 in PMKID cache at index 0 of station 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: Including PMKID in M1  (16)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623:      [0000] 0e 97 09 a5 6c f9 2a 28 58 03 74 d2 8c 51 b7 ba
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Starting key exchange to mobile 00:14:a5:4b:cf:ef, data packets will be dropped
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Sending EAPOL-Key Message to mobile 00:14:a5:4b:cf:ef
       state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Entering Backend Auth Success state (id=13) for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.623: 00:14:a5:4b:cf:ef Received Auth Success while in Authenticating state for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.624: 00:14:a5:4b:cf:ef dot1x - moving mobile 00:14:a5:4b:cf:ef into Authenticated state
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Received EAPOL-Key from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef Received EAPOL-key in PTK_START state (message 2) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.647: 00:14:a5:4b:cf:ef PMK: Sending cache add
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.648: 00:14:a5:4b:cf:ef Stopping retransmission timer for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.648: 00:14:a5:4b:cf:ef Sending EAPOL-Key Message to mobile 00:14:a5:4b:cf:ef
       state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Received EAPOL-Key from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.653: 00:14:a5:4b:cf:ef Stopping retransmission timer for mobile 00:14:a5:4b:cf:ef
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef apfMs1xStateInc
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef Not Using WMM Compliance code qosCap 00
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 24:01:c7:ed:48:70 vapId 3 apVapId 3 flex-acl-name:
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef apfMsRunStateInc
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.654: 00:14:a5:4b:cf:ef 0.0.0.0 L2AUTHCOMPLETE (4) Change state to RUN (20) last state L2AUTHCOMPLETE (4)
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Reached PLUMBFASTPATH: from line 6075
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Adding Fast Path rule
      type = Airespace AP Client
      on AP 24:01:c7:ed:48:70, slot 0, interface = 13, QOS = 0
      IPv4 ACL ID = 255, IPv6 ACL ID = 255,
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.656: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206  Local Bridging Vlan = 232, Local Bridging intf id = 13
    *Dot1x_NW_MsgTask_7: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef 0.0.0.0 RUN (20) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
    *pemReceiveTask: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef 0.0.0.0 Added NPU entry of type 1, dtlFlags 0x0
    *pemReceiveTask: Sep 19 09:50:21.658: 00:14:a5:4b:cf:ef Pushing IPv6: fe80:0000:0000:0000: 290f:8f76:9221:b33d , and MAC: 00:14:A5:4B:CF:EF , Binding to Data Plane. SUCCESS !!
    *DHCP Socket Task: Sep 19 09:50:21.740: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 0, flags: 0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 0, flags: 0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:21.741: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:21.742: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef Orphan Packet from STA - IP 169.254.179.61
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef In apfRegisterIpAddrOnMscb_debug: regType=2  Invalid src IP address, 169.254.179.61 is part of reserved ip address range (caller apf_broff.c:229)
    *apfOrphanSocketTask: Sep 19 09:50:22.740: 00:14:a5:4b:cf:ef IPv4 Addr: 169:254:179:61
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 0.0.0.0  VLAN: 0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 1280, flags: 0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:26.303: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 1280, flags: 0
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:26.304: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:34.146: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 3072, flags: 0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 3072, flags: 0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:34.147: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 6912, flags: 0
    *DHCP Socket Task: Sep 19 09:50:49.037: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   xid: 0x57b5e60d (1471538701), secs: 6912, flags: 0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:50:49.038: 00:14:a5:4b:cf:ef Failed to get response for 3 dhcp attempts from client.Total DHCP failed count for the interface aginternet : 2
    *apfMsConnTask_7: Sep 19 09:51:08.682: Stats update: Non Zero value
    *DHCP Socket Task: Sep 19 09:51:20.248: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 0, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 0, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:20.249: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:20.250: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:24.351: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 1024, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 1024, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:24.352: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:24.353: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 2816, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:32.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 2816, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:32.042: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP received op BOOTREQUEST (1) (len 308,vlan 230, port 13, encap 0xec03)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 1 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selected relay 1 - 172.17.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 1
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 6656, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *DHCP Socket Task: Sep 19 09:51:47.040: 00:14:a5:4b:cf:ef DHCP selecting relay 2 - control block settings:
                dhcpServer: 0.0.0.0, dhcpNetmask: 0.0.0.0,
                dhcpGateway: 0.0.0.0, dhcpRelay: 172.17.232.8  VLAN: 232
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP selected relay 2 - 172.16.16.50 (local address 172.17.232.8, gateway 172.17.232.1, VLAN 232, port 13)
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP transmitting DHCP DISCOVER (1)
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 2
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   xid: 0xd07dc597 (3497903511), secs: 6656, flags: 8000
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   chaddr: 00:14:a5:4b:cf:ef
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP   siaddr: 0.0.0.0,  giaddr: 172.17.232.8
    *DHCP Socket Task: Sep 19 09:51:47.041: 00:14:a5:4b:cf:ef DHCP sending REQUEST to 172.17.232.1 (len 350, port 13, vlan 232)
    *apfMsConnTask_7: Sep 19 09:52:39.228: Stats update: Non Zero value

  • 5508 WLC Upgrade steps

    Single 5508 WLC with 8 x 1142 APs.
    5508 is running FUS 1.3, software version 7.0.116.0, field recovery image 6.0.182.0.
    I need to bring the software version up to at least 7.2.115 to support 2 new 2602 AP i need to install.
    Question is; do I install FUS 1.9 then update my controller to 7.6.120 or do I need to do any intermediate steps?
    This is my first time upgrading a WLC so I'm fresh and this is a production WLC.
    Cheers

    Hi Fisher.
    Normally It doesn't matter as long as you get it done but make sure that you reboot the WLC before doing the next. 
    Here is the procedure for FUS upgrade:
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html
    WLC Software upgrade Procedure:
    http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68835-wlc-upgrade.html
    Regards
    Dont forget to rate helpful posts

  • 5508 WLC HA pair and layer 3 roaming

    Hey,
    We have a pair of 5508 WLC's configured in HA (primary/standby). We have a single SSID that we're broadcasting across each floor of our head office. The AP's are in flexconnect mode so users pickup an IP address from the DHCP range for that building level and that's all working well. 
    The problem I have is that users cannot roam between floors without losing access to the network. They roam to the AP's on the different floors, and maintain wireless connection throughout the building, but they cannot connect to anything on the network when outside of the floor that contains an IP range that matches the client's IP. I was told by a number of technical consultants that this sort of layer 3 roaming should work in this configuration. When users go to a different floor, they retain their original IP and the traffic is tunneled (EOIP) back to the controller to maintain network connectivity, however this does not appear to be happening. 
    Firstly I'm wondering if this is possible with a HA pair configured in active/standby. All of the documentation around layer 3 roaming seems to involve at least 2 controllers, the foreign and the anchor. In this case as they're a HA pair their is technically only a single controller. 
    If it is possible to do layer 3 roaming on a single controller (intra-controller), if anyone can provide some guidance on things I should be checking or looking out for that would be appreciated. 
    Thanks. 

    Still though, I had a number of technical consultants from a very large system integrator design this setup and despite my asking a number of times how this roaming could work I was simply told it would.
    ROFL!
    We contracted a consulting company/implementors to do a wireless job (back in 2011) for a particular project (politics dictate I keep stay away from it).  They had one "wireless expert".  
    Then one day, I got a call from the "wireless expert" and the phone conversation went like this, "It's me.  I am doing another wireless project for another agency.  But I would like to know how do you convert an autonomous AP to controller-based IOS".   <FACEPALM>
    Long story short:  They won't know.  Not all of them know.  Their main concern is YOUR MONEY in their hands.  That's all.  But I can tell you this:  I am the end user.  I configure stuff.  Roaming works if you get the basics correct.  Roaming works if you know what you want and you get it done right.   Scott Fella and Steve Rodriguez, two regular in this forum, (and works for CDW) and they are good.  There's another "mad Texan" by the name of George Stefanick is another one.    An Aussie by the name of Rasika is also around.  
    The most basic item is roaming is how you space your APs.  Unless you've got wireless antennas coming out of your ears, you need to organize a wireless site survey.  And when you want to do the a "good" wireless site survey, you "future proof" your requirements.  Right now,  my wireless site survey is aimed at "wireless VoIP" requirement. 

  • SSL certificate on 5508 WLC

    I am in the process of using OpenSSL to generate a device certificate for my 5508 WLC.
    However, I had a question about DNS. The controller is on a guest network and is used for outside companies. I don't control their laptops/devices, and the controller is handing out a public DNS (8.8.8.8) for them to use. They simply log in and connect to the Internet.
    I assume this is going to create a problem with the device certificate. Won't clients get a warning if they cannot resolve the name of the controller against the certificate? Aside from installing my own DNS server into that network, is there any way around this?

    What I have done is create a certificate using your public domain and then adding an alias DNS record on your external DNS or public DNS server.  Tie it to one of your public IP address and then use that public IP address for your VIP.  That is a work around I have used.
    Please rate helpful post and Cisco Support Community will donate to Kiva
    Scotty

  • Can't put two 5508 WLCs in the same RF group

    Hi experts,
    I have two 5508 WLCs and I want them to be backup to each other. I put in the same "RF Group Name" and even the same "Default Mobility Domain Name" however under Wireless -> 802.11b/g/n -> RRM -> RF Grouping each controller still only have themselves as the only memter to the group.
    Two controllers are having management IPs on the same subnet 192.168.161.x/24. AP-manager interfaces are in the same network as well. They can ping each other fine. The following screen shots show the current relavent config on the controller:
    I do have two controllers in the same mobility group and they are both showing up...
    Does anyone know why they can't add each other to the RF group? All other settings are pretty much default...
    Thanks!

    Hi,
    is there a chance that one of the 2 WLC doesn't contain any access point ? Or that the APs from one WLC are not physically close to the APs of the second WLC ?
    The point of RF grouping is to exchange RF information, to make RRM decisions together and to know what ap is a rogue and which is not. RF group information travels over the air from AP to AP.
    So if a wlc has no ap of if its APs are not close to those of the other WLC there is both no point in grouping with the other WLC in rf group and also no technical way of doing so.
    Regards,
    Nicolas
    ===
    Don't forget to rate answers that you find useful

  • Can't get 1532i to associate to 5508 WLC running 7.6.130.0

    Greetings,
    I've got 20 or so APs on a 5508 WLC.  Most of the APs are 1242, one is 3602.  I'm now trying to get a 1532i to associate to the 5508 and it's not happening.  This is the first 1532 on this controller.
    Also, I got this 1532 AP from a sister site and they had it configured as Autonomous in wgb mode, so I had to do the Autonomous to Unified Conversion.  This conversion appeared to go successfully.  But now the AP won't associate to my controller. 
    Thanks
    Following is what happens from the AP's console :
    AP78da.6e59.e58a#reload
    Proceed with reload? [confirm]
    Writing out the event log to flash:/event.log ...
    Write of event.log done
    *Oct 28 20:27:37.151: %SYS-5-RELOAD: Reload requested by Cisco on console. Reload Reason: Reload.
    *Oct 28 20:27:37.155: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
                                                                        *Oct 28 20:27:39.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
    *Oct 28 20:27:40.039: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    System Bootstrap, Version U-Boot 1.1.4-gf5ee82b1-dirty Corfu , RELEASE SOFTWARE
    Build Date: Oct 17 2013 - 18:08:55
    corfu - Scorpion 1.0
    DRAM:  256 MB
    Now running in RAM - U-Boot at: 8ffbc000
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x14
    flash size 1MB, sector count = 256
    Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
    Ath Nand ID[8ffee17c]: 2c:f1:80:95:02
    ONFI MICRON      MT29F1G08ABADAWP
    Micron NAND 128MiB 3,3V 8-bit [128MB]
    size = 128MB
    Hit any key to stop autoboot:  0
    boot_method is set to IOS_BOOT, boot IOS bootloader in NOR flash
    Loading .text @ 0x84000000 (207840 bytes)
    Loading .rodata @ 0x84032be0 (39008 bytes)
    Loading .data @ 0x8403c440 (3264 bytes)
    Loading .data.rel.local @ 0x8403d100 (1084 bytes)
    Loading .data.rel @ 0x8403d53c (124 bytes)
    Loading .data.rel.ro @ 0x8403d5b8 (960 bytes)
    Clearing .bss @ 0x8403d980 (161116 bytes)
    Clearing .scommon @ 0x84064edc (56 bytes)
    ## Starting application at 0x84000000 ...
    IOS Secondary Bootloader - Starting system.HW Test Status(0)
    Ath Nand ID: 95:80:f1:2c:00
    Using driver version 1 for media type 2
    Valid buffers 146
    total146  146
    success found all blocks
    start end 65 85
    found in range
    high low end 2728 2089 85
    Xmodem file system is available.
    mifs[0]: 15 files, 5 directories
    mifs[0]: Total bytes     :  131334144
    mifs[0]: Bytes used      :    7966720
    mifs[0]: Bytes available :  123367424
    mifs[0]: mifs fsck took 0 seconds.
    Base Ethernet MAC address: 78:da:6e:59:e5:8a
    Setup MAC....
    Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
    Ethernet speed is 100 Mb - FULL duplex
    Scorpion  ----> F1 PHY *
    : cfg1 0xf cfg2 0x7115
    Loading "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6"...##########################################################################################################################################################################################################################################################################################################################################################################
    File "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6" uncompressed and installed, entry point: 0x60080000
    executing...
    Stop MAC.
    Starting IOS...
    cp0 timer begin value is set as 1000
    prid= 19750
    Starts main.
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 11:03 by prod_rel_team
    Initializing flashfs...
    Ath Nand ID: 95:80:F1:2C:00
    Using driver version 1 for media type 2
    Valid buffers 146
    total146  146
    success found all blocks
    start end 65 85
    found in range
    high low end 2728 2089 85
    mifs[4]: 15 files, 5 directories
    mifs[4]: Total bytes     : 131334144
    mifs[4]: Bytes used      : 7966720
    mifs[4]: Bytes available : 123367424
    mifs[4]: mifs fsck took 2 seconds.
    mifs[4]: Initialization complete.
    ...done Initializing flashfs.
    :pci_init_board:521 *** Warning *** : PCIe1 WLAN Module not found !!!
    pci_rc2_init_board:570 PCIE Controller Init Bus Master Enable
    :pci_rc2_init_board:593 PCIe2 WLAN Module Found !!!
    soap_pci_subsys_init:706 Bus Master/Mem Enable on pci_write side
    soap_pci_subsys_init(713): PCI vendor ID: 0x168C ret:0
    soap_pci_subsys_init(715): PCI device ID: 0x33 ret:0
    Scorpion  ----> F1 PHY *
    Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
    Disabling 802.3az feature on port 0
    sgmii cal value = 0xE
    Disabling 802.3az feature on port 1.
    SGMII setup done, status is 0x2
    Radio0  present 9550 9000 0 0 0 0
    Rate table has 282 entries (12 legacy/96 11n/174 11ac)
    Radio1  present 9590 9000 0 0 B2000000 1
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP1532I-A-K9 (MIPS74k) processor (revision 27) with 204800K/57344K bytes of memory.
    Processor board ID FTX1813201L
    MIPS74k CPU at 700MHz, revision number 0x0000
    Last reset from power-on
    LWAPP image version 7.6.100.0
    2 Gigabit Ethernet interfaces
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 78:DA:6E:59:E5:8A
    Part Number                          : 74-11942-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC180951ZR
    Top Assembly Part Number             : 000-00000-00
    Top Assembly Serial Number           : FTX1813201L
    Top Revision Number                  : 23
    Product/Model Number                 : AIR-CAP1532I-A-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:09.895: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (11)mips74k_config_radio_pci(302): PCI CMD write: 0x356
    *Mar  1 00:00:14.391: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to upEnterprise mode: 0x44000000
    *Mar  1 00:00:14.895: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (2)
    *Mar  1 00:00:14.971: ath_load_ctl_pwr_tbl() dot11radio 2G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO2.bin version# 3.0
    *Mar  1 00:00:15.419: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (2)
    *Mar  1 00:00:15.419: ath_load_ctl_pwr_tbl() dot11radio 5G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO5.bin version# 3.4
    *Mar  1 00:00:15.699: CDP_PD: Power Source: 4-pair Power Injector
    *Mar  1 00:00:15.723: AP Mesh platform identified (backhaul config:0x2, access:0xF)
    *Mar  1 00:00:15.735: Starting Ethernet promiscuous mode
    *Mar  1 00:00:15.735: Skipping Ethernet bridge initializaion
    *Mar  1 00:00:16.431: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
    *Mar  1 00:00:18.363: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 11:03 by prod_rel_team
    *Mar  1 00:00:18.363: %SNMP-5-COLDSTART: SNMP agent on host AP78da.6e59.e58a is undergoing a cold start
    *Mar  1 00:00:18.399: %MESH-6-BVI_CREATED: Mesh BVI1 interface created
    *Mar  1 00:00:18.399: ath_ACIF_set_distance: Retrieved existing timeout value: 25us for distance: 0km
    *Mar  1 00:00:18.399: ath_ACIF_set_distance: Setting new timeout value: 45us for distance: 3km
    *Mar  1 00:00:18.399: %CDP_PD-4-POWER_OK: Full power - HIGH_POWER inline power source
    *Mar  1 00:00:18.619: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:18.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:20.399: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:37.015: Logging LWAPP message to 255.255.255.255.
    *Mar  1 00:00:37.027: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:00:38.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:38.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:00:39.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:39.067: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:40.023: %MESH-6-ADJACENCY_STATE_MACHINE_STARTED: Mesh adjacency state machine started
    *Mar  1 00:00:40.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:13.531:  Mesh setting the ethernet port 0 state to 2
    *Mar  1 00:01:13.531: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:15.531: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:01:16.531: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:01:18.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:18.651: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:19.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:19.671: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:20.671: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:28.643: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:28.759: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.132.120.85, mask 255.255.255.0, hostname AP78da.6e59.e58a
    *Mar  1 00:01:28.759: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:01:33.791: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Mar  1 00:01:33.855: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    Translating "CISCO-CAPWAP-CONTROLLER.americas.mittalco.com"...domain server (10.132.250.250) [OK]
    *Mar  1 00:01:33.867: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:34.855: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:01:34.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:01:34.915: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:35.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:44.855: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 28 20:29:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:29:44.495: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:29:44.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
    *Oct 28 20:29:49.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:30:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
    *Oct 28 20:30:44.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Oct 28 20:30:44.095: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Oct 28 20:30:44.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Oct 28 20:30:45.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Oct 28 20:30:45.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Oct 28 20:30:46.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Oct 28 20:30:54.095: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 28 20:30:52.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:30:52.499: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
    *Oct 28 20:30:52.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
    *Oct 28 20:30:52.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
    *Oct 28 20:30:57.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5

    You have to add the MAC address of the 1530 to the WLC mac filter list before the AP will join. Here is a link that explains it. 
    http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1530/quick/guide/ap1532qsg.html#pgfId-45801
    Scott

  • Clients unable to connect and get DHCP - LAP1142N AP and 5508 WLC

    Hi,
    I have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
    I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.
    Now for the issue: The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.
    Attached is a running config from one of the APs
    I've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. However, I wanted to post this to see if there is any further assistance I can get on this. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
    Thanks for any help.

    Alright, so I finally figured out the issue with this. I had a Mobility Anchor set on the guest WLAN and once I removed that all started working again.
    What is Mobility Anchor?
    A. Mobility Anchor, also referred to as Guest tunneling or Auto Anchor Mobility, is a feature where all the client traffic that belongs to a WLAN (Specially Guest WLAN) is tunneled to a predefined WLC or set of controllers that are configured as Anchor for that specific WLAN. This feature helps to restrict clients to a specific subnet and have more control over the user traffic. Refer to the Configuring Auto-Anchor Mobility section of Cisco Wireless LAN Controller Configuration Guide, Release 7.0 for more information on this feature.

  • Update problem - VBDATA table

    Dear All,
    We have update problems in our Quality systems, and also in every R/3 system that we create from a Production system copy.
    Sometime the UPD and UP2 work processes hung without apparent reason.
    In the SM50 I can see one or more of my update processes running for a lot of time (many hours) on the table VBDATA without perform any action.
    In the tcode SM12 I donu2019t see any kind of lock, and I donu2019t understand why only sometime this problem happens.
    Of course, from the SM13 I can see that during this problem the system is not able to perform any kind of update.
    As I told in the beginning of the message, I have the same problem in other two R/3 systems, both created with a system copy from the production system.
    The Production and the Developer systems seem not affected by this problem.
    Have you got any idea about the reason of the problem?
    Even if the Production systems is not directly affected, all the IT department is not able to work on the Quality system (or any other Test system), and the only workaround is to kill the UPD (or UP2) WPs affected.
    Thanks in advance,
    Federico Biavati
    My R/3 System is a 4.7 on SLES9 and Oracle 10.2.0.2

    Hello Siva,
    This is what I did:
    > Check how many entries do you have in VBDATA currently.
    More than 1.000 in every SAP systems that Iu2019m creating from Production
    > You might want to run the reorganize updates program to clear the old updates
    > that are pending/in error
    Good point!!
    After the reorganization (ST14 u2013 Reorganize update requests) the table VBDATA is empty.
    Iu2019ll check and Iu2019ll let you know if the problem is definitively solved.
    Thanks for you help,
    Federico

  • AIR-CAP3702I booting up in mesh mode and not joining our 5508 WLC

    I have a batch of 30+ AIR-CAP3702I-A-K9 APs that I need to setup but none of them are joining to the 5508 WLC and when I connect a console cable and view the output from the AP it shows that it is trying to initiate in mesh mode. I have read other forums that are showing that I need to put in the APs MAC address to a filter list on the WLC for it to show up and then I will be able to change it from mesh mode to local mode. The only issue I'm having with that solution is not knowing how it will affect my current production environment off of that 5508 WLC. I have 69 active production APs with clients working off them and there are no MAC filters currently in place on the WLC. By adding a MAC filter entry for the new APs would the WLC create an implicit deny for all other clients that don't have their MAC addresses entered?? If so is there another work around? Can the mode be changed via the CLI on the AP itself to make it local instead of mesh? 

    sh capwap client rcb
    AdminState                  :  ADMIN_ENABLED
    SwVer                       :  7.6.1.118
    NumFilledSlots              :  2
    Name                        :  AP88f0.4290.7184
    Location                    :  default location
    MwarName                    :  xxxxx
    MwarApMgrIp                 :  x.x.x.x !<it has the correct name and IP of the WLC>
    MwarHwVer                   :  0.0.0.0
    ApMode                      :  Bridge
    ApSubMode                   :  Not Configured
    OperationState              :  JOIN
    CAPWAP Path MTU             :  576
    LinkAuditing                :  disabled
    ApRole                      :  MeshAP
    ApBackhaul                  :  802.11a
    ApBackhaulChannel           :  0
    ApBackhaulSlot              :  2
    ApBackhaul11gEnabled        :  0
    ApBackhaulTxRate            :  24000
    Ethernet Bridging State     :  0
    Public Safety State         :  disabled
    AP Rogue Detection Mode     :  Enabled
    AP Tcp Mss Adjust           :  Disabled
    AP IPv6 TCP MSS Adjust      :  Disabled
    Predownload Status          :  None
    Auto Immune Status          :  Disabled
    RA Guard Status             :  Disabled
    Efficient Upgrade State     :  Disabled
    Efficient Upgrade Role      :  None
    TFTP Server                 :  Disabled
    Antenna Band Mode           :  Unknown
    802.11bg(0) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 0
      Current Channel           : 11
      Current Bandwidth         : 20
    802.11a(1) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 1
      Current Channel           : 165
      Current Bandwidth         : 20
    It is showing the following error on our WLC in the log file:
    Tue Jul 15 14:01:26 2014
    AAA Authentication Failure for UserName:88f042907184 User Type: WLAN USER
    And here are some of the errors it's showing on the AP after bootup:
    *Jul 15 17:47:30.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:31.003: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.031: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:31.039: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.047: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:32.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:33.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:35.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:35.471: %DTLS-5-ALERT: Received WARNING : Close notify alert from x.x.x.x
    *Jul 15 17:47:35.475: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:35.483: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:36.475: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:36.503: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:37.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Jul 15 17:48:15.007: %MESH-6-LINK_UPDOWN: Mesh station 88f0.4290.7184 link Down
    *Jul 15 17:48:17.007: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Jul 15 17:48:22.507: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: Invalid event 31 & state 4 combination
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 31, state 4

  • Chart x scale update problem

    LabVIEW  8.5.1
    Sweep Chart Problem
    The x scale values do not update until after the 2nd sweep.  The red line cursor gets to the end of the sweep and starts the next, but the scale numbers do not update until the next sweep starts.
    It appears to be a problem with the chart, since it happens with any vi with a sweep chart.  I've used versions 6 through 7 for years and never seen this.  I've only recently moved to a new job with a new machine and version 8.5.1., so I'm not sure what to try.
    I've included a simple example.
    Thanks much,
    JSC321
    Attachments:
    Chart Sweep Scale Update Problem.vi ‏32 KB

    You have a typical race condition!
    There is no data dependency between the property node and the while loop, so in your case the loop starts executing first and the property node starts slightly later, immediately erasing the first point. Execution order is not defined.
    All you need to do is add a data dependency, e.g. as with the error cluster in the image. This forces the property node to complete before the loop is allowed to start.
    (Execution order is enforced even if the wire value is not even used inside the loop )
    Try it!
    Message Edited by altenbach on 12-23-2008 11:08 PM
    LabVIEW Champion . Do more with less code and in less time .
    Attachments:
    HistoryRace.png ‏10 KB

Maybe you are looking for

  • Unable to order book printing

    Hello, I am living in Spain and I'm having trouble buying a book using iphoto 11. When I click to (buy book), this is the message that appears: "An error occurred while contacting the Apple Online Store. Please try again." I have two days trying to p

  • I get a runtime error R6034

    I get a runtime error R6034 when double clicking on the icon of iTunes

  • Can't see iPad from PC iTunes

    Actually, when I'm in iTunes on my Windows 7 PC and I USB attach to my iPad, the iPad device appears on the PC screen.  But, when I close that display, I can't figure out how to reopen it.  In older versions of iTunes when I had an iPod attached, it

  • Down Payment Receivable control account?

    Hi All, I was hoping someone could help clarify account determination for me. Currently I have assigned a 'Down payments received clearing account' as a liability account. Is this correct? Then If I click the accounts recevable "..." I am presented w

  • How to route the sounds?

    I want to route a few instuments inputs into one bus then use an insert effect and send it into the main output. any ideas?