802.1x authentication fails
Setup: two 5500 (v6.0.188.0, mix of 1131 and 1141 AP`s
Laptops running fine for random number of weeks suddenly can´t connect to the wireless network. The output from Client troubleshoot shows:
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Controller association request message received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Association request received from a client has an invalid RSN IE.(One reason could be mismatch in WPA2 algorithm).
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received reassociation request from client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
The wlan to which client is connecting requires 802 1x authentication.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Client moved to associated state successfully.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAP Response from the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAPOL start message from client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received EAP Response from the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
EAP response from client to AP received.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Radius packet received. Access-Challenge received from RADIUS server 10.1.1.81, receiveId = 10
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Received Access-Challenge from the RADIUS server for the client.
05/07/2010 07:03:14 CEST
INFO
10.1.1.101
Sending EAP request to client from radius server.
05/07/2010 07:03:44 CEST
ERROR
10.1.1.101
Retransmitting EAP-ID request to client,retransmission timer expired.
05/07/2010 07:04:14 CEST
ERROR
10.1.1.101
Retransmitting EAP-ID request to client,retransmission timer expired.
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
Authentication failed for client as EAP ID request from AP reached maxmium retransmissions.
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
De-authentication sent to client. slot 0 (claller 1x_ptsm.c:467)
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
05/07/2010 07:04:44 CEST
ERROR
10.1.1.101
EAPOL-key is invalid, scheduling client for deletion.
We are using PEAP-MS-CHAP v2 . The IAS certificate is valid to 2014. We have about 300 laptops, but now and then some of them fails to authenticate. Yesterday I noticed that if I had one of the failing computers connected with wire, after some minutes it suddenly authenticated wireless!
Similar Messages
-
Since we upgraded our WCS system to V6.0.196.0 we are receiving a lot of the following error messages and I haven't figured out why.
Client 'c0:cb:38:3f:a1:0d (anonymous, 0.0.0.0)' which was associated with interface '802.11a/n' of AP 'ACAA01-00.P04-G2C2.1' is excluded. The reason code is '4(802.1X Authentication failed 3 times.)'. - Controller Name: 205-dg20-bb3-4/2Check you ACS (Radius) logs under failures. You will see why its failing. Sounds like a AD account went bad
or someone is entering the wrong logon ... But check your radius log it will point you in the right direction. -
Clients cannot connect: "Reason:802.1x Authentication failed 3 times. Reas"
As of 1:30 yesterday, no clients can authenticate to my LWAPP Access points. I'm getting this message in the trap logs on my 4404:
Client Excluded: MACAddress:00:90:4b:86:23:94 Base Radio MAC :00:17:df:7f:c8:60 Slot: 0 Reason:802.1x Authentication failed 3 times. ReasonCode: 3
And my (MS IAS) RADIUS server has an entry:
Authentication-Type = EAP
EAP-Type = <undetermined>
Reason-Code = 66
Reason = The user attempted to use an authentication method that is not enabled on the matching remote access policy.
The previous successful entries all refer to PEAP. We restored our WCS server from tape yesterday, but why would that affect the authentication on the 4404? Does anyone have any idea what's going wrong?There is a command line syntax which will also allow you to export and import an IAS config to other IAS servers. Then you will be sure they are identical...
http://support.microsoft.com/kb/883619 -
802.1X Authentication failed without 802.1X authentication enabled
Hi,
we are using 2 WISMs, with version 4.2.207 and a WCS to control them.
It seemed to work fine for about 2 weeks, and now we detected the following problem in some users. They were connected to the wireless without problems, and then they lost the connection. For authentication we use WPA2, we also use mac-filter.
When they lost the connection we can see the following error:
Message:
Client 'mac address' which was associated with AP 'mac address', interface '1' is excluded. The reason code is '4(802.1X Authentication failed 3 times.)'.
Message:
Client 'mac' which was associated with AP 'mac', interface '0' is excluded. The reason code is '4(802.1X Authentication failed 3 times.)'.
I also attach an output of the troubleshoot mac address...
Can some help me with this?
Thank you.
Best regards,Hi Kirbus,
we open a TAC and we were advised for now to do the following changes:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
1. please make sure to disable Aironet extensions (if present) , on the WLAN advanced configuration
2. disable management frame protection (MFP) signature generation (if present) , MFP also on the WLAN advanced configuration
3. on the WLC general configuration , can you please disable aggressive load balancing
4. on the security tab on the WLC , please wireless protection policies > disable client exclusion policies
5. on the AP network configuration please disable short preamble the original standard was long preambles
6. Wireless -> disable auto-RRM channel & power assignment & try "on demand"
7. apply these modification on the WLC CLI
Config advanced eap identity-request-timeout 20
Config advanced eap identity-request-retries 10
Config advanced eap request-timeout 20
Config advanced eap request-retries 10
Save config, and see if you still face the problem.
We are still monitoring the solution, but until now we didn't face the problem again.
Let me now how it goes for you.
Thank you.
Best regards, -
i have a juniper device linux operating system on that we have radius server configured and i am trying to integrate my WLC with that radius
i have added WLC as a host there in radius
on wlc i have configured authentication like radius ip shared secret key and done
its working i can ping radius server
also in wlc i configured on Wlan aaa allow override check box and also hited the WPA2 802.1x layer2 security and radius server option brought on top.
i also configured my windows wireless adaptor as PEAP MSCHAP v2
i am trying to connect this ssid and its asking for my AD accounts but when i enter that its not authenticating users and giving this logs.
(WiSM-slot24-1) >debug aaa events enable
(WiSM-slot24-1) >
(WiSM-slot24-1) >
(WiSM-slot24-1) >*apfMsConnTask_0: Dec 31 15:12:03.043: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Dec 31 15:12:03.043: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Dec 31 15:12:03.043: 00:13:e8:3e:26:bf apfMsAssoStateInc
*dot1xMsgTask: Dec 31 15:12:03.044: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Dec 31 15:12:03.044: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:03.097: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:03.097: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.596: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.596: 00:13:e8:3e:26:bf Received Identity Response (count=2) from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.596: 00:13:e8:3e:26:bf Audit Session ID added to the mscb: 0a8740e10000002e4efefc1c
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.596: Creating audit session ID (dot1x_aaa_eapresp_supp) and Radius Request
*aaaQueueReader: Dec 31 15:12:12.597: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0
*aaaQueueReader: Dec 31 15:12:12.597: 00:13:e8:3e:26:bf Successful transmission of Authentication Packet (id 202) to 10.34.11.2:1812, proxy state 00:13:e8:3e:26:bf-00:00
*radiusTransportThread: Dec 31 15:12:12.598: ****Enter processIncomingMessages: response code=11
*radiusTransportThread: Dec 31 15:12:12.598: ****Enter processRadiusResponse: response code=11
*radiusTransportThread: Dec 31 15:12:12.598: 00:13:e8:3e:26:bf Access-Challenge received from RADIUS server 10.34.11.2 for mobile 00:13:e8:3e:26:bf receiveId = 3
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.598: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.598: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.600: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.600: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 3, EAP Type 3)
*aaaQueueReader: Dec 31 15:12:12.600: apfVapRadiusInfoGet: WLAN(1) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0
*aaaQueueReader: Dec 31 15:12:12.600: 00:13:e8:3e:26:bf Successful transmission of Authentication Packet (id 203) to 10.34.11.2:1812, proxy state 00:13:e8:3e:26:bf-00:00
*radiusTransportThread: Dec 31 15:12:12.601: ****Enter processIncomingMessages: response code=3
*radiusTransportThread: Dec 31 15:12:12.601: ****Enter processRadiusResponse: response code=3
*radiusTransportThread: Dec 31 15:12:12.601: 00:13:e8:3e:26:bf Access-Reject received from RADIUS server 10.34.11.2 for mobile 00:13:e8:3e:26:bf receiveId = 3
*radiusTransportThread: Dec 31 15:12:12.601: 00:13:e8:3e:26:bf [Error] Client requested no retries for mobile 00:13:E8:3E:26:BF
*radiusTransportThread: Dec 31 15:12:12.601: 00:13:e8:3e:26:bf Returning AAA Error 'Authentication Failed' (-4) for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.601: 00:13:e8:3e:26:bf Processing Access-Reject for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.602: 00:13:e8:3e:26:bf Removing PMK cache due to EAP-Failure for mobile 00:13:e8:3e:26:bf (EAP Id 3)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.602: 00:13:e8:3e:26:bf Sending EAP-Failure to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:12.602: 00:13:e8:3e:26:bf Setting quiet timer for 5 seconds for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Dec 31 15:12:15.319: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Dec 31 15:12:15.319: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Dec 31 15:12:15.320: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Dec 31 15:12:15.389: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Dec 31 15:12:15.389: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
any idea to solve this problem?
or any one knows that how to configur a radius server on juniper linux operating system?
many thanks in advanceYou should post on the Juniper forums regarding your policy configuration. You should stick with using a radius than just doing ldap through the wlc. Here is a link for webauth using ldap, but should get you close. Again... you should look at getting your juniper radius configuration fixed first.
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a03e09.shtml -
802.1x - Authentication failed
Hello!
There is a network layout: custom laptop, switch Cisco (model - Cisco WS-C3750-48PS-S, firmware version - 122-58.SE2) and Freeradius server.
The user is authenticated by MAC-address (switch sends MAC-address of the server as username and password).
On my computer, there is "Authentication failed".
Port mirroring was made and the traffic was checked by Wireshark.
It can be seen that the server responds Accept-message (screenshot attached), which transmits the number of vlan.
With the command "sh vlan" can be seen that the switch port assigned the desired vlan to port.
Port is mirrored towards the user. There are three Start messages from the user (screenshot attached), but the message Request-Identity from the switch are absent (no screenshot).
Therefore, the user does not receive a message from a switch that authentication passed, and does not work with the network (not sending a DHCP-query).
If you disable 802.1x on a PC, the PC works with a network.
The network was tested on 2 different switches with different firmware (). PCs are with Windows 7 and Windows 8.
Fa 1/0/18 - to PC.
Fa 1/0/47 - to Freeradius-server
What could be the problem?
Thanks in advance.
p.s. I attach config-file.No problem! Yes, you are correct, a switchport can be configured to support both mab and dot1x authentications. I am still trying to understanding the following:
1. When does authentication fail and when does it work. Please provide more details
2. Can you post screenshots of the supplicant(Windows) configurations
3. Please post the output of this command during both the failed and successful authentications:
how authentication session interface_name_number detail
4. I would also add the following commands to your access port:
dot1x pae authenticator
authentication event fail action next-method
authentication violation restrict
Thank you for rating helpful posts! -
FT akm with 802.1x authentication failed at eapol key 2(invalid MIC)
My testing controller s/w version is 7.0.250.0, and testing clients were iphone5, iphone6 and macbook pro13, all debug inform showed failed because of invalid MIC, is this a bug or other reason ?
WLAN configuration:
(Cisco Controller) >show wlan 100
WLAN Identifier.................................. 100
Profile Name..................................... test-qh
Network Name (SSID).............................. test-qh
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 10
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
--More-- or (q)uit
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Disabled
Accounting.................................... Global Servers
--More-- or (q)uit
Dynamic Interface............................. Disabled
Local EAP Authentication......................... Enabled (Profile 'test')
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Disabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Disabled
CCKM.................................... Disabled
FT(802.11r)............................. Enabled
FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Disabled
CCKM tsf Tolerance............................... 1000
CKIP ......................................... Disabled
--More-- or (q)uit
IP Security................................... Disabled
IP Security Passthru.......................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
H-REAP Local Switching........................ Disabled
H-REAP Local Authentication................... Disabled
H-REAP Learn IP Address....................... Enabled
Client MFP.................................... Optional
Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Mobility Anchor List
WLAN ID IP Address Status
debug info:
Cisco Controller) >*apfMsConnTask_0: Apr 27 21:46:09.971: Processing assoc-req station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Marking this mobile as TGr capable.
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Processing RSN IE type 48, length 20 for mobile 68:96:7b:cd:89:1b
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b apfMsAssoStateInc
*apfMsConnTask_0: Apr 27 21:46:09.971: Sending assoc-resp station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:09.971: Adding MDIE, ID is:0x4e57
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Including FT Mobility Domain IE (length 5) in Initial assoc Resp to mobile
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Sending R0KH-ID as:192.168.20.244
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Sending R1KH-ID as 00:24:14:7e:74:c0
*apfMsConnTask_0: Apr 27 21:46:09.971: 68:96:7b:cd:89:1b Including FT IE (length 98) in Initial Assoc Resp to mobile
*spamReceiveTask: Apr 27 21:46:09.973: 68:96:7b:cd:89:1b Sent 1x initiate message to multi thread task for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:09.974: 68:96:7b:cd:89:1b Station 68:96:7b:cd:89:1b setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Apr 27 21:46:09.974: 68:96:7b:cd:89:1b Sending EAP-Request/Identity to mobile 68:96:7b:cd:89:1b (EAP Id 1)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.037: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.037: 68:96:7b:cd:89:1b Received Identity Response (count=1) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.117: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.117: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 2)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.133: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.133: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 2, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.135: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.135: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 3)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.139: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.139: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.140: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.140: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 4)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.200: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.201: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.309: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.309: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 5)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.312: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.313: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.314: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.314: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 6)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.321: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.321: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.322: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.322: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 7)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.325: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.325: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 7, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.326: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.326: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 8)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.329: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.329: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 8, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.331: 68:96:7b:cd:89:1b Processing Access-Accept for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.331: 68:96:7b:cd:89:1b Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b Station 68:96:7b:cd:89:1b setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b Creating a PKC PMKID Cache entry for station 68:96:7b:cd:89:1b (RSN 2)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b Adding BSSID 00:27:0d:2e:d0:5e to PMKID cache for station 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: New PMKID: (16)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: [0000] 80 a9 e3 16 d9 c8 28 9a 37 11 bd 56 ca 01 d5 ce
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b Disabling re-auth since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b Created PMK Cache Entry for TGr AKM:802.1x 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.332: 68:96:7b:cd:89:1b R0KH-ID:192.168.20.244 R1KH-ID:00:24:14:7e:74:c0 MSK Len:48
pmkValidTime:1772
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: 68:96:7b:cd:89:1b PMK sent to mobility group
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: 68:96:7b:cd:89:1b Sending EAP-Success to mobile 68:96:7b:cd:89:1b (EAP Id 8)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: [0000] 80 a9 e3 16 d9 c8 28 9a 37 11 bd 56 ca 01 d5 ce
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: 68:96:7b:cd:89:1b Starting key exchange to mobile 68:96:7b:cd:89:1b, data packets will be dropped
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: 68:96:7b:cd:89:1b Sending EAPOL-Key Message to mobile 68:96:7b:cd:89:1b
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.333: 68:96:7b:cd:89:1b Received Auth Success while in Authenticating state for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.336: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.336: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.337: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:10.560: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:10.562: 68:96:7b:cd:89:1b Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.565: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.565: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:10.566: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:10.960: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:10.960: 68:96:7b:cd:89:1b Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.048: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.048: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.048: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:11.360: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:11.360: 68:96:7b:cd:89:1b Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.364: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.364: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.364: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:11.760: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:11.760: 68:96:7b:cd:89:1b Retransmit 4 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.763: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.764: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:11.764: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:12.160: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:12.161: 68:96:7b:cd:89:1b Retransmit failure for EAPOL-Key M1 to mobile 68:96:7b:cd:89:1b, retransmit count 5, mscb deauth count 0
*dot1xMsgTask: Apr 27 21:46:12.162: 68:96:7b:cd:89:1b Removing PMK cache entry for station 68:96:7b:cd:89:1b
*apfMsConnTask_0: Apr 27 21:46:12.185: Processing assoc-req station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Marking this mobile as TGr capable.
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Processing RSN IE type 48, length 20 for mobile 68:96:7b:cd:89:1b
*apfMsConnTask_0: Apr 27 21:46:12.185: Sending assoc-resp station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:12.185: Adding MDIE, ID is:0x4e57
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Including FT Mobility Domain IE (length 5) in Initial assoc Resp to mobile
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Sending R0KH-ID as:192.168.20.244
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Sending R1KH-ID as 00:24:14:7e:74:c0
*apfMsConnTask_0: Apr 27 21:46:12.185: 68:96:7b:cd:89:1b Including FT IE (length 98) in Initial Assoc Resp to mobile
*spamReceiveTask: Apr 27 21:46:12.187: 68:96:7b:cd:89:1b Sent 1x initiate message to multi thread task for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.188: 68:96:7b:cd:89:1b Station 68:96:7b:cd:89:1b setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.188: 68:96:7b:cd:89:1b Sending EAP-Request/Identity to mobile 68:96:7b:cd:89:1b (EAP Id 1)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.191: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.191: 68:96:7b:cd:89:1b Received Identity Response (count=1) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.271: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.271: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 2)
*apfMsConnTask_0: Apr 27 21:46:12.563: Processing assoc-req station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Marking this mobile as TGr capable.
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Processing RSN IE type 48, length 20 for mobile 68:96:7b:cd:89:1b
*apfMsConnTask_0: Apr 27 21:46:12.563: Sending assoc-resp station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:12.563: Adding MDIE, ID is:0x4e57
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Including FT Mobility Domain IE (length 5) in Initial assoc Resp to mobile
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Sending R0KH-ID as:192.168.20.244
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Sending R1KH-ID as 00:24:14:7e:74:c0
*apfMsConnTask_0: Apr 27 21:46:12.563: 68:96:7b:cd:89:1b Including FT IE (length 98) in Initial Assoc Resp to mobile
*spamReceiveTask: Apr 27 21:46:12.565: 68:96:7b:cd:89:1b Sent 1x initiate message to multi thread task for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.566: 68:96:7b:cd:89:1b Sending EAP-Request/Identity to mobile 68:96:7b:cd:89:1b (EAP Id 1)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.571: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.571: 68:96:7b:cd:89:1b Received Identity Response (count=1) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.572: 68:96:7b:cd:89:1b Processing Access-Reject for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.573: 68:96:7b:cd:89:1b Removing PMK cache due to EAP-Failure for mobile 68:96:7b:cd:89:1b (EAP Id -1)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.573: 68:96:7b:cd:89:1b Sending EAP-Failure to mobile 68:96:7b:cd:89:1b (EAP Id -1)
(Cisco Controller) >*Dot1x_NW_MsgTask_0: Apr 27 21:46:12.573: 68:96:7b:cd:89:1b Setting quiet timer for 5 seconds for mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:17.560: 68:96:7b:cd:89:1b 802.1x 'quiteWhile' Timer expired for station 68:96:7b:cd:89:1b and for message = M0
*dot1xMsgTask: Apr 27 21:46:17.561: 68:96:7b:cd:89:1b quiet timer completed for mobile 68:96:7b:cd:89:1b
*dot1xMsgTask: Apr 27 21:46:17.561: 68:96:7b:cd:89:1b Sending EAP-Request/Identity to mobile 68:96:7b:cd:89:1b (EAP Id 1)
(Cisco Controller) >*apfMsConnTask_0: Apr 27 21:46:19.793: Processing assoc-req station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Marking this mobile as TGr capable.
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Processing RSN IE type 48, length 20 for mobile 68:96:7b:cd:89:1b
*apfMsConnTask_0: Apr 27 21:46:19.793: Sending assoc-resp station:68:96:7b:cd:89:1b AP:00:27:0d:2e:d0:50-01 thread:333140024
*apfMsConnTask_0: Apr 27 21:46:19.793: Adding MDIE, ID is:0x4e57
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Including FT Mobility Domain IE (length 5) in Initial assoc Resp to mobile
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Sending R0KH-ID as:192.168.20.244
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Sending R1KH-ID as 00:24:14:7e:74:c0
*apfMsConnTask_0: Apr 27 21:46:19.793: 68:96:7b:cd:89:1b Including FT IE (length 98) in Initial Assoc Resp to mobile
*spamReceiveTask: Apr 27 21:46:19.796: 68:96:7b:cd:89:1b Sent 1x initiate message to multi thread task for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.798: 68:96:7b:cd:89:1b Sending EAP-Request/Identity to mobile 68:96:7b:cd:89:1b (EAP Id 1)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.825: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.826: 68:96:7b:cd:89:1b Received Identity Response (count=1) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.905: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.905: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 2)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.918: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.918: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 2, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.920: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.920: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 3)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.923: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.924: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.924: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
d*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.925: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 4)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.964: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:19.964: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.073: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
e*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.073: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 5)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.076: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.076: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 5, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.077: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.077: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 6)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.083: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.083: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 6, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.084: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.084: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 7)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.087: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.087: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 7, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.088: 68:96:7b:cd:89:1b Processing Access-Challenge for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.088: 68:96:7b:cd:89:1b Sending EAP Request from AAA to mobile 68:96:7b:cd:89:1b (EAP Id 8)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.090: 68:96:7b:cd:89:1b Received EAPOL EAPPKT from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.090: 68:96:7b:cd:89:1b Received EAP Response from mobile 68:96:7b:cd:89:1b (EAP Id 8, EAP Type 25)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.091: 68:96:7b:cd:89:1b Processing Access-Accept for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.091: 68:96:7b:cd:89:1b Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.091: 68:96:7b:cd:89:1b Station 68:96:7b:cd:89:1b setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.091: 68:96:7b:cd:89:1b Creating a PKC PMKID Cache entry for station 68:96:7b:cd:89:1b (RSN 2)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.091: 68:96:7b:cd:89:1b Adding BSSID 00:27:0d:2e:d0:5e to PMKID cache for station 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: New PMKID: (16)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: [0000] 16 3d 85 48 73 81 21 c9 dc 14 19 2e 40 65 7c 74
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: 68:96:7b:cd:89:1b Disabling re-auth since PMK lifetime can take care of same.
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: 68:96:7b:cd:89:1b Created PMK Cache Entry for TGr AKM:802.1x 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: 68:96:7b:cd:89:1b R0KH-ID:192.168.20.244 R1KH-ID:00:24:14:7e:74:c0 MSK Len:48
pmkValidTime:1813
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: 68:96:7b:cd:89:1b PMK sent to mobility group
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.092: 68:96:7b:cd:89:1b Sending EAP-Success to mobile 68:96:7b:cd:89:1b (EAP Id 8)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.093: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.093: [0000] 16 3d 85 48 73 81 21 c9 dc 14 19 2e 40 65 7c 74
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.093: 68:96:7b:cd:89:1b Starting key exchange to mobile 68:96:7b:cd:89:1b, data packets will be dropped
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.093: 68:96:7b:cd:89:1b Sending EAPOL-Key Message to mobile 68:96:7b:cd:89:1b
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.093: 68:96:7b:cd:89:1b Received Auth Success while in Authenticating state for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.096: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.096: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.096: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:20.360: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:20.361: 68:96:7b:cd:89:1b Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.364: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.364: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.364: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
bug *osapiBsnTimer: Apr 27 21:46:20.760: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:20.760: 68:96:7b:cd:89:1b Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.763: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.764: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:20.764: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
*osapiBsnTimer: Apr 27 21:46:21.160: 68:96:7b:cd:89:1b 802.1x 'timeoutEvt' Timer expired for station 68:96:7b:cd:89:1b and for message = M2
*dot1xMsgTask: Apr 27 21:46:21.160: 68:96:7b:cd:89:1b Retransmit 3 of EAPOL-Key M1 (length 121) for mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:21.164: 68:96:7b:cd:89:1b Received EAPOL-Key from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:21.164: 68:96:7b:cd:89:1b Received EAPOL-key in PTK_START state (message 2) from mobile 68:96:7b:cd:89:1b
*Dot1x_NW_MsgTask_0: Apr 27 21:46:21.164: 68:96:7b:cd:89:1b Received EAPOL-key M2 with invalid MIC from mobile 68:96:7b:cd:89:1b
=============================
qh
thanks in advance!Can anyone help me?
-
Windows 7 – 802.1x Authentication fails after wakeup from Sleep/Hibernation
In our environment we randomly have issues with 802.1x authentications after Sleep or Hibernation of our client-systems.
Clients have Windows 7 as OS and are up-to-date regarding regular updates/patches. Drivers (at least
network and chipset) on affected machines have also been updated.
802.1x authentication method is PEAP (EAP-MSCHAPv2) and systems are validated
against Active Directory by RADIUS.
Analyzing the logs of our RADIUS-Server you can see that the client trys to authenticate
via MAC instead of its DNS-Name/FQDN (desired method). So the request fails and the client is assigned to a different VLAN without access to the company’s resources. Following steps like DHCP work correctly.
We have enabled the tracing of RAS-components on some of our clients by executing the following command-line: netsh ras set tracing
* enabled
Analyzing the client’s log-file “C:\Windows\tracing\svchost_RASCHAP.LOG” it looks like that the
component is simply not up at that point in time, because there are absolutely no entries making it impossible to search for a specific error/error-code. Side-fact: unplugging the network-cable and plugging it in again forces the client to
authenticate again – successfully and with entries in the given log.
There has been an article KB980295 describing my issue but that does not apply to Windows 7. Hotfix KB2736878 cannot be applied (0x80240017
- install is not needed because no updates are applicable).
Does anyone have an idea how you could force the component to initialize earlier (if it is possible at all)?
Any other advice is highly appreciated as well!
Thanks a lotHi Deason,
sorry for my very very late reply on this.
Even if I could not solve the problem yet, I can tell about some progress.
As both KB-Files (980295 and 2481614) sadly did not help with this at all and even setting the blockperiod to 1 (I saw that 0 doesn't seem to be supported here: https://technet.microsoft.com/en-us/library/hh831813.aspx) didn't make any difference I
have been working on how to reproduce the issue. So I wrote a tiny script disabling and enabling the client's network-port on and on (I have removed outputs and logging to keep it short):
$doAllTheTime = $true
$i = 0
$DomainName = (Get-WmiObject -Class Win32_ComputerSystem).domain
$NWAdapter = Get-WmiObject -Class Win32_NetworkAdapter | ? {$_.name -like "*gigabit*"}
while ($doAllTheTime -eq $true)
$i++
$NWAdapter.disable() | out-null; Start-Sleep -Seconds 10
$NWAdapter.enable() | out-null; Start-Sleep -Seconds 10
$ping = $null
$ping = test-connection $DomainName -count 1
if ($ping -eq $null)
"Error with connection"; return
So I kept it running and after a dozens of loops the issue reoccurred. I could see that it is the dot3svc-Service that does not response anymore by the RASCHAP-log given above. Restarting the service manually triggered a re-authentication that was then successful.
So I added the restart-service-cmdlet to my script in case that the error was detected and configured a Scheduled Task triggered by the event that a network-cable has been plugged in (has to be provided by the driver). Script and Scheduled Task
have then been deployed to our clients.
Even if this is no solution it definitely helps with a high rate of incidents -
but not entirely... so I am still looking for further steps to
solve this. Any ideas are highly appreciated.
Thank you very much for your support!!! Uhle -
802.1X Authentication fails when connecting to WPA Enterprise using Leopard
I'm trying to connect to an office WiFi network with my MacBook Pro which has 10.5.1 installed.
There are instructions on how to connect using Tiger which are very simple:
1. Enter network name
2. Wireless Security: WPA Enterprise
3. Enter domain credentials for username and password fields
4. 802.1X Configuration: Automatic
There are at least two people here using Tiger that can connect using these instructions.
I've tried the same thing with Leopard and keep getting an error dialog stating "802.1X Authentication has failed."
I've also tried fiddling with the 802.1X tab under "Advanced" (I know the protocol is PEAP), but no matter what I get the same error.Turns out I was not authorized to use the WiFi. IT got me setup and everything works now.
-
Cisco 2960 802.1x authentication fail
Physical switch version:
C2960 Boot Loader (C2960-HBOOT-M) Version 15.0(2r)EZ1, RELEASE SOFTWARE (fc1)
System image file is "flash:/c2960-lanbasek9-mz.150-2.SE5/c2960-lanbasek9-mz.150-2.SE5.bin"
The goal of this lab is only authenticated by the MAC address of the laptop.
Currently,I have a trouble as following and don't know what is this root cause .
Please give me a guide point.
Thanks so much
*Mar 2 20:45:03.908: %AUTHMGR-5-START: Starting 'mab' for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:04.218: %MAB-5-FAIL: Authentication failed for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:04.218: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:04.218: %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:04.218: %AUTHMGR-7-NOMOREMETHODS: Exhausted all authentication methods for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:04.218: %AUTHMGR-5-FAIL: Authorization failed or unapplied for client (3c97.0e04.7075) on Interface Fa0/1 AuditSessionID C0A8DCA9000000AE099A3F70
*Mar 2 20:45:05.720: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
*Mar 2 20:45:06.726: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to upI have a few questions:
1. What type of Radius server do you have?
2. Can you post a screen shot of your Radius AAA policies
3. Do you have the mac address entered in your Radius server
4. Provide the output from the following commands:
- show aaa servers
- show authentication session interface interface_name_number
Thank you for rating helpful posts! -
802.1x authentication fail with MS IAS
dear friends,
i want to configre .1x authentication for my wireless user and trying to integrat our controllers with MS WINDOWS Server 2008 to configure as a Radius server
i followed this documentation here is the link
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080921f67.shtml
even i configured my windows wireless adaptor in order to user .1x authentication
but i am seeing this following error in my wlc debugging
(WiSM-slot24-1) >debug dot1x events enable
(WiSM-slot24-1) >
(WiSM-slot24-1) >
(WiSM-slot24-1) >*dot1xMsgTask: Jan 04 12:09:10.053: ac:72:89:0b:3b:87 Not sending EAP-Failure for STA ac:72:89:0b:3b:87
*apfReceiveTask: Jan 04 12:09:30.052: ac:72:89:0b:3b:87 apfMsAssoStateDec
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf apfMsAssoStateInc
*dot1xMsgTask: Jan 04 12:09:31.285: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:09:31.285: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:31.404: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:31.404: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.701: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.701: 00:13:e8:3e:26:bf Received Identity Response (count=2) from mobile 00:13:e8:3e:26:bf
*aaaQueueReader: Jan 04 12:09:36.702: 00000000: 01 e4 00 e9 30 a9 b6 e0 62 1e 49 73 f7 9a 54 95 ....0...b.Is..T.
*aaaQueueReader: Jan 04 12:09:36.702: 00000010: 70 58 ee 89 01 06 73 61 72 69 1f 13 30 30 2d 31 pX....sari..00-1
*aaaQueueReader: Jan 04 12:09:36.702: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.702: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.702: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.702: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.702: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.702: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.702: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.703: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.703: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.703: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.703: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 0b 02 02 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.703: 000000d0: 00 09 01 73 61 72 69 50 12 2d f7 03 b8 07 e9 d5 ...sariP.-......
*aaaQueueReader: Jan 04 12:09:36.703: 000000e0: 37 22 60 09 73 03 e9 42 e1 7"`.s..B.
*radiusTransportThread: Jan 04 12:09:36.707: 00000000: 0b e4 00 5a 54 f5 61 c6 26 e9 42 1d 1a e7 ed b9 ...ZT.a.&.B.....
*radiusTransportThread: Jan 04 12:09:36.707: 00000010: cd 74 26 4a 1b 06 00 00 00 1e 4f 08 01 03 00 06 .t&J......O.....
*radiusTransportThread: Jan 04 12:09:36.707: 00000020: 19 20 18 26 67 0f 07 b7 00 00 01 37 00 01 17 00 ...&g......7....
*radiusTransportThread: Jan 04 12:09:36.707: 00000030: fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 b8 bb ............e9..
*radiusTransportThread: Jan 04 12:09:36.707: 00000040: 00 00 00 04 06 5d ff 0f 50 12 8d 71 a1 9d 16 1b .....]..P..q....
*radiusTransportThread: Jan 04 12:09:36.707: 00000050: 29 3a 3c 2d 55 04 16 df 68 3b ):<-U...h;
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.707: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.707: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.788: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.788: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 3, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.788: 00000000: 01 e5 01 7c ad c6 f6 0c cf 17 49 d8 2e 04 29 91 ...|......I...).
*aaaQueueReader: Jan 04 12:09:36.789: 00000010: c2 55 01 9a 01 06 73 61 72 69 1f 13 30 30 2d 31 .U....sari..00-1
*aaaQueueReader: Jan 04 12:09:36.789: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.789: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.789: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.789: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.789: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.789: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.789: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.789: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*radiusTransportThread: Jan 04 12:09:36.790: 00000000: 0b e5 05 6e 9d c6 53 a6 21 48 42 c4 6e 4e 5d 3e ...n..S.!HB.nN]>
*radiusTransportThread: Jan 04 12:09:36.790: 00000010: 87 9c f1 63 1b 06 00 00 00 1e 4f ff 01 04 05 10 ...c......O.....
*radiusTransportThread: Jan 04 12:09:36.790: 00000020: 19 c0 00 00 06 b8 16 03 01 06 b3 02 00 00 4d 03 ..............M.
*radiusTransportThread: Jan 04 12:09:36.790: 00000030: 01 4f 04 17 d8 eb 5f 5f 87 af 5b 96 9a 51 70 53 .O....__..[..QpS
*radiusTransportThread: Jan 04 12:09:36.790: 00000040: a9 96 a2 ba 4b 8a b4 2e f9 5a 58 04 8a 09 72 8f ....K....ZX...r.
*radiusTransportThread: Jan 04 12:09:36.790: 00000050: 03 20 a6 09 00 00 49 92 57 a1 45 2b 88 1a f7 ae ......I.W.E+....
*radiusTransportThread: Jan 04 12:09:36.790: 00000060: 9e 1a 43 74 f8 e4 7d 9a 98 43 f7 87 dc 92 e8 d4 ..Ct..}..C......
*radiusTransportThread: Jan 04 12:09:36.791: 00000070: 1e 08 00 2f 00 00 05 ff 01 00 01 00 0b 00 03 cf .../............
*radiusTransportThread: Jan 04 12:09:36.791: 00000080: 00 03 cc 00 03 c9 30 82 03 c5 30 82 02 ad a0 03 ......0...0.....
*radiusTransportThread: Jan 04 12:09:36.791: 00000090: 02 01 02 02 10 71 01 39 24 e8 f9 31 9c 41 ed 84 .....q.9$..1.A..
*radiusTransportThread: Jan 04 12:09:36.791: 000000a0: ce b9 3a 02 51 30 0d 06 09 2a 86 48 86 f7 0d 01 ..:.Q0...*.H....
*radiusTransportThread: Jan 04 12:09:36.791: 000000b0: 01 05 05 00 30 69 31 12 30 10 06 0a 09 92 26 89 ....0i1.0.....&.
*radiusTransportThread: Jan 04 12:09:36.791: 000000c0: 93 f2 2c 64 01 19 16 02 73 61 31 13 30 11 06 0a ..,d....sa1.0...
*radiusTransportThread: Jan 04 12:09:36.791: 000000d0: 09 92 26 89 93 f2 2c 64 01 19 16 03 65 64 75 31 ..&...,d....edu1
*radiusTransportThread: Jan 04 12:09:36.791: 000000e0: 1a 30 18 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 .0.....&...,d...
*radiusTransportThread: Jan 04 12:09:36.791: 000000f0: 0a 6b 6b 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 .kkuhdomain1"0..
*radiusTransportThread: Jan 04 12:09:36.791: 00000100: 03 55 04 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e .U....kkuhdomain
*radiusTransportThread: Jan 04 12:09:36.791: 00000110: 2d 57 49 4e 2d 54 45 52 4d 4f ff 53 52 56 2d 43 -WIN-TERMO.SRV-C
*radiusTransportThread: Jan 04 12:09:36.791: 00000120: 41 30 1e 17 0d 31 32 30 31 30 34 30 36 32 37 35 A0...12010406275
*radiusTransportThread: Jan 04 12:09:36.791: 00000130: 37 5a 17 0d 31 37 30 31 30 34 30 36 33 37 35 34 7Z..170104063754
*radiusTransportThread: Jan 04 12:09:36.791: 00000140: 5a 30 69 31 12 30 10 06 0a 09 92 26 89 93 f2 2c Z0i1.0.....&...,
*radiusTransportThread: Jan 04 12:09:36.791: 00000150: 64 01 19 16 02 73 61 31 13 30 11 06 0a 09 92 26 d....sa1.0.....&
*radiusTransportThread: Jan 04 12:09:36.791: 00000160: 89 93 f2 2c 64 01 19 16 03 65 64 75 31 1a 30 18 ...,d....edu1.0.
*radiusTransportThread: Jan 04 12:09:36.791: 00000170: 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 0a 6b 6b ....&...,d....kk
*radiusTransportThread: Jan 04 12:09:36.791: 00000180: 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 03 55 04 uhdomain1"0...U.
*radiusTransportThread: Jan 04 12:09:36.791: 00000190: 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e 2d 57 49 ...kkuhdomain-WI
*radiusTransportThread: Jan 04 12:09:36.791: 000001a0: 4e 2d 54 45 52 4d 53 52 56 2d 43 41 30 82 01 22 N-TERMSRV-CA0.."
*radiusTransportThread: Jan 04 12:09:36.791: 000001b0: 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 0...*.H.........
*radiusTransportThread: Jan 04 12:09:36.791: 000001c0: 82 01 0f 00 30 82 01 0a 02 82 01 01 00 bb 45 f5 ....0.........E.
*radiusTransportThread: Jan 04 12:09:36.791: 000001d0: 19 c2 7b 0a 5d a5 a2 fb da c6 60 9e e5 60 44 62 ..{.].....`..`Db
*radiusTransportThread: Jan 04 12:09:36.791: 000001e0: ef 53 23 a2 80 4d 86 3e 6f 60 83 80 c5 99 20 d4 .S#..M.>o`......
*radiusTransportThread: Jan 04 12:09:36.791: 000001f0: 52 dc 4f c5 5d 0b 6b c4 b9 af 8b 52 b0 49 bd 2f R.O.].k....R.I./
*radiusTransportThread: Jan 04 12:09:36.791: 00000200: 6d 2f b0 fc b1 ba 6e 91 eb 49 c6 59 4f d1 af 07 m/....n..I.YO...
*radiusTransportThread: Jan 04 12:09:36.791: 00000210: 3c d2 eb a6 69 5b fc 2c 4f ff 92 55 15 5c 53 dd <...i[.,O..U.\S.
*radiusTransportThread: Jan 04 12:09:36.791: 00000220: d7 a9 90 86 25 d4 0f 91 20 70 e0 47 46 2a 92 a4 ....%....p.GF*..
*radiusTransportThread: Jan 04 12:09:36.791: 00000230: 3c e2 9a d8 a7 27 f7 3f d5 6a 1b ee 99 dc 47 00 <....'.?.j....G.
*radiusTransportThread: Jan 04 12:09:36.791: 00000240: 0d d7 49 b2 93 db 74 75 63 6e 83 77 69 20 35 08 ..I...tucn.wi.5.
*radiusTransportThread: Jan 04 12:09:36.791: 00000250: 34 c6 a6 f2 7d 02 19 c5 b3 34 cd 16 ec af fd f9 4...}....4......
*radiusTransportThread: Jan 04 12:09:36.791: 00000260: eb d5 aa 67 35 1d 2b 2a 5d 32 ca 43 aa 3b 88 67 ...g5.+*]2.C.;.g
*radiusTransportThread: Jan 04 12:09:36.791: 00000270: 91 be 16 e7 99 ef c1 0d 47 79 6c 3b 4a 5c c8 9d ........Gyl;J\..
*radiusTransportThread: Jan 04 12:09:36.791: 00000280: de bb 26 c6 5e f0 45 42 d2 4b 73 93 8e 3b f1 18 ..&.^.EB.Ks..;..
*radiusTransportThread: Jan 04 12:09:36.791: 00000290: ae cb 46 56 ab 89 24 21 ba c1 e7 ea d1 db 44 1c ..FV..$!......D.
*radiusTransportThread: Jan 04 12:09:36.791: 000002a0: 36 7f 4c 28 33 ba 5c aa be d0 ab 2e 9f 50 83 27 6.L(3.\......P.'
*radiusTransportThread: Jan 04 12:09:36.791: 000002b0: 52 c5 66 f7 73 df 22 ef bf 5c b8 6f 9d 22 91 6f R.f.s."..\.o.".o
*radiusTransportThread: Jan 04 12:09:36.791: 000002c0: 35 af 91 2b 86 6f b7 3a 8d c7 c2 bd 69 af 8f 02 5..+.o.:....i...
*radiusTransportThread: Jan 04 12:09:36.791: 000002d0: 03 01 00 01 a3 69 30 67 30 13 06 09 2b 06 01 04 .....i0g0...+...
*radiusTransportThread: Jan 04 12:09:36.791: 000002e0: 01 82 37 14 02 04 06 1e 04 00 43 00 41 30 0e 06 ..7.......C.A0..
*radiusTransportThread: Jan 04 12:09:36.791: 000002f0: 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 0f 06 .U...........0..
*radiusTransportThread: Jan 04 12:09:36.791: 00000300: 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 1d .U.......0....0.
*radiusTransportThread: Jan 04 12:09:36.791: 00000310: 06 03 55 1d 0e 04 16 4f ff 04 14 a9 8e ff a4 a8 ..U....O........
*radiusTransportThread: Jan 04 12:09:36.791: 00000320: d9 ae 15 0d d1 61 1e 4a e6 0b 08 b9 29 ae be 30 .....a.J....)..0
*radiusTransportThread: Jan 04 12:09:36.791: 00000330: 10 06 09 2b 06 01 04 01 82 37 15 01 04 03 02 01 ...+.....7......
*radiusTransportThread: Jan 04 12:09:36.791: 00000340: 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 .0...*.H........
*radiusTransportThread: Jan 04 12:09:36.791: 00000350: 03 82 01 01 00 39 08 3c 7b 40 d9 5e 86 13 dd 69 .....9.<{@.^...i
*radiusTransportThread: Jan 04 12:09:36.791: 00000360: 72 f6 31 0d 04 f2 01 53 f7 3b 6a 15 9d 0b 44 88 r.1....S.;j...D.
*radiusTransportThread: Jan 04 12:09:36.791: 00000370: da e1 0e 47 74 fe a8 68 6c 06 92 95 e3 8c 77 a7 ...Gt..hl.....w.
*radiusTransportThread: Jan 04 12:09:36.791: 00000380: e2 1d 56 17 44 31 40 db d5 aa bf 7a 5e bc 86 d3 [email protected]^...
*radiusTransportThread: Jan 04 12:09:36.791: 00000390: 61 5f 5d 51 c0 51 56 58 13 5a 96 be 45 54 ab 9c a_]Q.QVX.Z..ET..
*radiusTransportThread: Jan 04 12:09:36.791: 000003a0: 12 ef 4a fe 5b db 69 ef fb 25 e8 a9 57 6f 9a 65 ..J.[.i..%..Wo.e
*radiusTransportThread: Jan 04 12:09:36.791: 000003b0: 41 ef d4 88 28 91 cb ac 35 a2 aa b2 49 fb 9b 58 A...(...5...I..X
*radiusTransportThread: Jan 04 12:09:36.791: 000003c0: cf 72 16 f8 da 46 b0 06 9a 7f 59 79 27 d4 73 a2 .r...F....Yy'.s.
*radiusTransportThread: Jan 04 12:09:36.791: 000003d0: a7 81 52 45 d4 2e c0 87 6b cf 82 a8 67 17 46 3a ..RE....k...g.F:
*radiusTransportThread: Jan 04 12:09:36.791: 000003e0: 6e 52 06 7a 3c e7 7d a5 5a ef d7 05 68 4e 6c 29 nR.z<.}.Z...hNl)
*radiusTransportThread: Jan 04 12:09:36.791: 000003f0: 6d ea 29 59 8f 46 1b 1a 50 c4 45 c7 38 39 b1 bf m.)Y.F..P.E.89..
*radiusTransportThread: Jan 04 12:09:36.791: 00000400: 6b 32 85 e5 89 df 68 13 fa ee ff 1c c4 77 73 e8 k2....h......ws.
*radiusTransportThread: Jan 04 12:09:36.791: 00000410: 52 b6 e8 24 9a 6b 4f ff 6f b2 d1 04 6c 8d 68 eb R..$.kO.o...l.h.
*radiusTransportThread: Jan 04 12:09:36.791: 00000420: 8a e2 f4 5e 4e 59 91 fb 67 08 ef 84 56 83 82 03 ...^NY..g...V...
*radiusTransportThread: Jan 04 12:09:36.791: 00000430: 92 4e fc ce 8d 80 74 76 3f 30 6b 4f 03 a8 6b 91 .N....tv?0kO..k.
*radiusTransportThread: Jan 04 12:09:36.791: 00000440: 89 0f d6 66 41 4d 4a be 3f c5 a8 22 4f 18 cd f8 ...fAMJ.?.."O...
*radiusTransportThread: Jan 04 12:09:36.791: 00000450: e7 b3 c6 1c 24 cf 06 0d 00 02 87 03 01 02 40 02 ....$.........@.
*radiusTransportThread: Jan 04 12:09:36.791: 00000460: 81 00 61 30 5f 31 0b 30 09 06 03 55 04 06 13 02 ..a0_1.0...U....
*radiusTransportThread: Jan 04 12:09:36.791: 00000470: 55 53 31 17 30 15 06 03 55 04 0a 13 0e 56 65 72 US1.0...U....Ver
*radiusTransportThread: Jan 04 12:09:36.791: 00000480: 69 53 69 67 6e 2c 20 49 6e 63 2e 31 37 30 35 06 iSign,.Inc.1705.
*radiusTransportThread: Jan 04 12:09:36.791: 00000490: 03 55 04 0b 13 2e 43 6c 61 73 73 20 33 20 50 75 .U....Class.3.Pu
*radiusTransportThread: Jan 04 12:09:36.791: 000004a0: 62 6c 69 63 20 50 72 69 6d 61 72 79 20 43 65 72 blic.Primary.Cer
*radiusTransportThread: Jan 04 12:09:36.791: 000004b0: 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f tification.Autho
*radiusTransportThread: Jan 04 12:09:36.791: 000004c0: 72 69 74 79 00 77 30 75 31 0b 30 09 06 03 55 04 rity.w0u1.0...U.
*radiusTransportThread: Jan 04 12:09:36.791: 000004d0: 06 13 02 55 53 31 18 30 16 06 03 55 04 0a 13 0f ...US1.0...U....
*radiusTransportThread: Jan 04 12:09:36.791: 000004e0: 47 54 45 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 GTE.Corporation1
*radiusTransportThread: Jan 04 12:09:36.791: 000004f0: 27 30 25 06 03 55 04 0b 13 1e 47 54 45 20 43 79 '0%..U....GTE.Cy
*radiusTransportThread: Jan 04 12:09:36.791: 00000500: 62 65 72 54 72 75 73 74 20 53 6f 6c 75 74 69 6f berTrust.Solutio
*radiusTransportThread: Jan 04 12:09:36.791: 00000510: 6e 73 2c 20 49 4f 21 6e 63 2e 31 23 30 21 06 03 ns,.IO!nc.1#0!..
*radiusTransportThread: Jan 04 12:09:36.791: 00000520: 55 04 03 13 1a 47 54 45 20 43 79 62 65 72 54 72 U....GTE.CyberTr
*radiusTransportThread: Jan 04 12:09:36.791: 00000530: 75 73 74 20 47 6c 18 26 67 0f 07 b7 00 00 01 37 ust.Gl.&g......7
*radiusTransportThread: Jan 04 12:09:36.791: 00000540: 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 ................
*radiusTransportThread: Jan 04 12:09:36.791: 00000550: 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 9d 01 e9.......]..P...
*radiusTransportThread: Jan 04 12:09:36.791: 00000560: 7b 9f 89 97 05 84 42 b9 61 15 7c 41 3a 35 {.....B.a.|A:5
*aaaQueueReader: Jan 04 12:09:36.792: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.792: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.792: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 78 02 03 ..A.....Q.89Ox..
*aaaQueueReader: Jan 04 12:09:36.792: 000000d0: 00 76 19 80 00 00 00 6c 16 03 01 00 67 01 00 00 .v.....l....g...
*aaaQueueReader: Jan 04 12:09:36.792: 000000e0: 63 03 01 4f 04 17 84 fb 31 55 17 31 40 05 0e 94 c..O....1U.1@...
*aaaQueueReader: Jan 04 12:09:36.792: 000000f0: 9d e5 43 48 92 8d a7 35 3d 93 10 1e d9 46 62 ec ..CH...5=....Fb.
*aaaQueueReader: Jan 04 12:09:36.792: 00000100: 3b 8f f0 00 00 18 00 2f 00 35 00 05 00 0a c0 13 ;....../.5......
*aaaQueueReader: Jan 04 12:09:36.792: 00000110: c0 14 c0 09 c0 0a 00 32 00 38 00 13 00 04 01 00 .......2.8......
*aaaQueueReader: Jan 04 12:09:36.792: 00000120: 00 22 ff 01 00 01 00 00 00 00 09 00 07 00 00 04 ."..............
*aaaQueueReader: Jan 04 12:09:36.792: 00000130: 73 61 72 69 00 0a 00 06 00 04 00 17 00 18 00 0b sari............
*aaaQueueReader: Jan 04 12:09:36.792: 00000140: 00 02 01 00 18 26 67 0f 07 b7 00 00 01 37 00 01 .....&g......7..
*aaaQueueReader: Jan 04 12:09:36.792: 00000150: 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 ..............e9
*aaaQueueReader: Jan 04 12:09:36.792: 00000160: b8 bb 00 00 00 04 06 5d ff 0f 50 12 a4 3a 54 43 .......]..P..:TC
*aaaQueueReader: Jan 04 12:09:36.792: 00000170: ec 6a d8 bb 85 87 3a 3e 18 fa 95 a7 .j....:>....
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.792: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.792: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 4)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.869: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.869: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 4, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.870: 00000000: 01 e6 01 0c 14 56 2b 3c 1d ea 57 15 57 a7 c1 ea .....V+<..W.W...
*aaaQueueReader: Jan 04 12:09:36.870: 00000010: 0d 39 14 73 01 06 73 61 72 69 1f 13 30 30 2d 31 .9.s..sari..00-1
*aaaQueueReader: Jan 04 12:09:36.870: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.870: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.870: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.870: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.870: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.870: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.870: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.870: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.870: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.870: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.870: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 08 02 04 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.870: 000000d0: 00 06 19 00 18 26 67 0f 07 b7 00 00 01 37 00 01 .....&g......7..
*aaaQueueReader: Jan 04 12:09:36.870: 000000e0: 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 ..............e9
*aaaQueueReader: Jan 04 12:09:36.870: 000000f0: b8 bb 00 00 00 04 06 5d ff 0f 50 12 93 7d 4c 98 .......]..P..}L.
*aaaQueueReader: Jan 04 12:09:36.870: 00000100: 20 f0 54 97 f4 23 27 a6 e2 5e 71 eb ..T..#'..^q.
*radiusTransportThread: Jan 04 12:09:36.871: 00000000: 0b e6 02 0e 45 af 62 b9 01 83 21 3a af c1 ca 08 ....E.b...!:....
*radiusTransportThread: Jan 04 12:09:36.871: 00000010: ca b5 cf bc 1b 06 00 00 00 1e 4f ff 01 05 01 b8 ..........O.....
*radiusTransportThread: Jan 04 12:09:36.871: 00000020: 19 00 6f 62 61 6c 20 52 6f 6f 74 00 44 30 42 31 ..obal.Root.D0B1
*radiusTransportThread: Jan 04 12:09:36.871: 00000030: 0b 30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 .0...U....US1.0.
*radiusTransportThread: Jan 04 12:09:36.871: 00000040: 06 03 55 04 0a 13 0d 47 65 6f 54 72 75 73 74 20 ..U....GeoTrust.
*radiusTransportThread: Jan 04 12:09:36.871: 00000050: 49 6e 63 2e 31 1b 30 19 06 03 55 04 03 13 12 47 Inc.1.0...U....G
*radiusTransportThread: Jan 04 12:09:36.871: 00000060: 65 6f 54 72 75 73 74 20 47 6c 6f 62 61 6c 20 43 eoTrust.Global.C
*radiusTransportThread: Jan 04 12:09:36.871: 00000070: 41 00 6b 30 69 31 12 30 10 06 0a 09 92 26 89 93 A.k0i1.0.....&..
*radiusTransportThread: Jan 04 12:09:36.871: 00000080: f2 2c 64 01 19 16 02 73 61 31 13 30 11 06 0a 09 .,d....sa1.0....
*radiusTransportThread: Jan 04 12:09:36.871: 00000090: 92 26 89 93 f2 2c 64 01 19 16 03 65 64 75 31 1a .&...,d....edu1.
*radiusTransportThread: Jan 04 12:09:36.871: 000000a0: 30 18 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 0a 0.....&...,d....
*radiusTransportThread: Jan 04 12:09:36.871: 000000b0: 6b 6b 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 03 kkuhdomain1"0...
*radiusTransportThread: Jan 04 12:09:36.871: 000000c0: 55 04 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e 2d U....kkuhdomain-
*radiusTransportThread: Jan 04 12:09:36.871: 000000d0: 57 49 4e 2d 54 45 52 4d 53 52 56 2d 43 41 00 72 WIN-TERMSRV-CA.r
*radiusTransportThread: Jan 04 12:09:36.871: 000000e0: 30 70 31 2b 30 29 06 03 55 04 0b 13 22 43 6f 70 0p1+0)..U..."Cop
*radiusTransportThread: Jan 04 12:09:36.871: 000000f0: 79 72 69 67 68 74 20 28 63 29 20 31 39 39 37 20 yright.(c).1997.
*radiusTransportThread: Jan 04 12:09:36.871: 00000100: 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 31 Microsoft.Corp.1
*radiusTransportThread: Jan 04 12:09:36.871: 00000110: 1e 30 1c 06 03 55 04 0b 13 4f bd 15 4d 69 63 72 .0...U...O..Micr
*radiusTransportThread: Jan 04 12:09:36.871: 00000120: 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f osoft.Corporatio
*radiusTransportThread: Jan 04 12:09:36.871: 00000130: 6e 31 21 30 1f 06 03 55 04 03 13 18 4d 69 63 72 n1!0...U....Micr
*radiusTransportThread: Jan 04 12:09:36.871: 00000140: 6f 73 6f 66 74 20 52 6f 6f 74 20 41 75 74 68 6f osoft.Root.Autho
*radiusTransportThread: Jan 04 12:09:36.871: 00000150: 72 69 74 79 00 61 30 5f 31 13 30 11 06 0a 09 92 rity.a0_1.0.....
*radiusTransportThread: Jan 04 12:09:36.871: 00000160: 26 89 93 f2 2c 64 01 19 16 03 63 6f 6d 31 19 30 &...,d....com1.0
*radiusTransportThread: Jan 04 12:09:36.871: 00000170: 17 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 09 6d .....&...,d....m
*radiusTransportThread: Jan 04 12:09:36.871: 00000180: 69 63 72 6f 73 6f 66 74 31 2d 30 2b 06 03 55 04 icrosoft1-0+..U.
*radiusTransportThread: Jan 04 12:09:36.871: 00000190: 03 13 24 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f ..$Microsoft.Roo
*radiusTransportThread: Jan 04 12:09:36.871: 000001a0: 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 t.Certificate.Au
*radiusTransportThread: Jan 04 12:09:36.871: 000001b0: 74 68 6f 72 69 74 79 00 19 30 17 31 15 30 13 06 thority..0.1.0..
*radiusTransportThread: Jan 04 12:09:36.871: 000001c0: 03 55 04 03 13 0c 4e 54 20 41 55 54 48 4f 52 49 .U....NT.AUTHORI
*radiusTransportThread: Jan 04 12:09:36.871: 000001d0: 54 59 0e 00 00 00 18 26 67 0f 07 b7 00 00 01 37 TY.....&g......7
*radiusTransportThread: Jan 04 12:09:36.871: 000001e0: 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 ................
*radiusTransportThread: Jan 04 12:09:36.871: 000001f0: 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 4d 9e e9.......]..P.M.
*radiusTransportThread: Jan 04 12:09:36.871: 00000200: 94 8f a2 25 73 e9 80 73 09 28 da 7b 4a 60 ...%s..s.(.{J`
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.871: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.871: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.897: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.897: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 5, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.898: 00000000: 01 e7 02 5f 1f 1b 97 19 fb 9e 03 38 c6 02 6f b9 ..._.......8..o.
*aaaQueueReader: Jan 04 12:09:36.898: 00000010: bb e2 f8 6d 01 06 73 61 72 69 1f 13 30 30 2d 31 ...m..sari..00-1
*aaaQueueReader: Jan 04 12:09:36.898: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.898: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.898: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.898: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.898: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.898: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.898: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.898: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.898: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.898: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.898: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f ff 02 05 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.898: 000000d0: 01 57 19 80 00 00 01 4d 16 03 01 01 0d 0b 00 00 .W.....M........
*aaaQueueReader: Jan 04 12:09:36.898: 000000e0: 03 00 00 00 10 00 01 02 01 00 1b 13 f3 e9 e0 f7 ................
*aaaQueueReader: Jan 04 12:09:36.898: 000000f0: 92 a3 1d 2e ba 35 dc 0c 5c 01 6a 2c d3 02 88 5b .....5..\.j,...[
*aaaQueueReader: Jan 04 12:09:36.898: 00000100: a0 c5 52 81 2e 47 58 75 ef e2 00 d9 54 87 e7 41 ..R..GXu....T..A
*aaaQueueReader: Jan 04 12:09:36.898: 00000110: 6b bb 81 15 ee 2b 22 a8 ef f6 22 5a f6 78 58 92 k....+"..."Z.xX.
*aaaQueueReader: Jan 04 12:09:36.898: 00000120: 84 9a c1 b3 a3 12 9f 56 66 dc 9e 63 0a 46 92 5d .......Vf..c.F.]
*aaaQueueReader: Jan 04 12:09:36.898: 00000130: 6b 41 d9 28 08 b0 a2 ee 34 9c 1e ea f6 7e ff f0 kA.(....4....~..
*aaaQueueReader: Jan 04 12:09:36.898: 00000140: 6c 90 0d 1f 64 a5 1b 8c 5e fc 79 a5 86 07 f0 0b l...d...^.y.....
*aaaQueueReader: Jan 04 12:09:36.898: 00000150: 7a c1 3b c9 d1 12 49 5c 7f e4 2d 6e 4e 56 31 70 z.;...I\..-nNV1p
*aaaQueueReader: Jan 04 12:09:36.898: 00000160: 7f e9 7e 6b c5 cf e9 c7 72 a8 15 f2 8a 8a 71 35 ..~k....r.....q5
*aaaQueueReader: Jan 04 12:09:36.898: 00000170: 8b 45 72 88 c6 41 9f 0a 5e a3 17 00 99 b4 6f 0d .Er..A..^.....o.
*aaaQueueReader: Jan 04 12:09:36.898: 00000180: 81 29 a2 b1 5b 89 7e f0 a1 63 18 b2 d9 59 78 9b .)..[.~..c...Yx.
*aaaQueueReader: Jan 04 12:09:36.898: 00000190: ab f3 db 57 23 e2 2a 20 d5 69 27 37 4c 3b f0 35 ...W#.*..i'7L;.5
*aaaQueueReader: Jan 04 12:09:36.898: 000001a0: c4 18 33 5f 51 d4 b1 22 13 8f 03 dd 04 b9 d6 c5 ..3_Q.."........
*aaaQueueReader: Jan 04 12:09:36.898: 000001b0: 78 79 f4 58 b9 aa 69 67 96 15 d1 6d 06 e8 81 89 xy.X..ig...m....
*aaaQueueReader: Jan 04 12:09:36.898: 000001c0: 67 32 4f 0f 63 f3 a6 50 af 2c e3 4f 5c e6 b4 59 g2O.c..P.,.O\..Y
*aaaQueueReader: Jan 04 12:09:36.898: 000001d0: dc 1b 6c bb 8d f3 af 1a c8 08 80 0a 45 ea 78 94 ..l.........E.x.
*aaaQueueReader: Jan 04 12:09:36.898: 000001e0: 87 5b f5 37 7a 09 8b 23 f4 71 3a c1 14 03 01 00 .[.7z..#.q:.....
*aaaQueueReader: Jan 04 12:09:36.898: 000001f0: 01 01 16 03 01 00 30 b2 1d 3f 3e 72 59 74 46 34 ......0..?>rYtF4
*aaaQueueReader: Jan 04 12:09:36.898: 00000200: b5 6d cc 8a f9 3f cb f4 fb 1f bc 2a b5 34 4b ab .m...?.....*.4K.
*aaaQueueReader: Jan 04 12:09:36.898: 00000210: d3 1e 92 43 5f 2e 57 0b 00 65 c8 b7 c7 ce 15 27 ...C_.W..e.....'
*aaaQueueReader: Jan 04 12:09:36.898: 00000220: a1 ff e2 7d cf 96 50 18 26 67 0f 07 b7 00 00 01 ...}..P.&g......
*aaaQueueReader: Jan 04 12:09:36.898: 00000230: 37 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 7...............
*aaaQueueReader: Jan 04 12:09:36.898: 00000240: d2 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 d8 .e9.......]..P..
*aaaQueueReader: Jan 04 12:09:36.898: 00000250: 75 a5 ae b7 8e da a1 13 33 37 8f 99 c3 bb 6c u.......37....l
*radiusTransportThread: Jan 04 12:09:36.899: 00000000: 03 e7 00 2c 30 98 52 d2 93 66 07 11 0f f8 28 ae ...,0.R..f....(.
*radiusTransportThread: Jan 04 12:09:36.899: 00000010: 4c dc a5 1d 4f 06 04 05 00 04 50 12 1c a2 45 6e L...O.....P...En
*radiusTransportThread: Jan 04 12:09:36.899: 00000020: 67 d1 4a 6b 25 e9 93 c0 a8 7c c6 ce g.Jk%....|..
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Processing Access-Reject for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Removing PMK cache due to EAP-Failure for mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Sending EAP-Failure to mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.900: 00:13:e8:3e:26:bf Setting quiet timer for 5 seconds for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:39.773: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:39.773: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:09:39.774: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:39.884: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:39.884: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*apfReceiveTask: Jan 04 12:09:40.252: fc:e5:57:01:a0:39 apfMsAssoStateDec
*apfReceiveTask: Jan 04 12:09:40.253: fc:e5:57:01:a0:39 apfMs1xStateDec
*osapiBsnTimer: Jan 04 12:10:09.852: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:10:09.853: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:10:39.852: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:10:39.853: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:10:39.853: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:10:40.164: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:10:40.164: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:10:40.167: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:10:40.167: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:10:40.215: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:10:40.215: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:11:10.055: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:11:10.055: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:11:40.055: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:11:40.056: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:11:40.056: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:11:40.356: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:11:40.356: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:11:40.359: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:11:40.359: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:11:40.411: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:11:40.411: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:12:10.255: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:12:10.256: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:12:40.255: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:12:40.256: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:12:40.256: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:12:40.596: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:12:40.596: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:12:40.598: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:12:40.599: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:12:40.657: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:12:40.657: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:13:10.655: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:13:10.656: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 Processing RSN IE type 48, length 22 for mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 Received RSN IE with 0 PMKIDs from mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 apfMsAssoStateInc
*dot1xMsgTask: Jan 04 12:13:25.135: ac:72:89:0b:3b:87 Station ac:72:89:0b:3b:87 setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:13:25.135: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:25.204: ac:72:89:0b:3b:87 Received EAPOL START from mobile ac:72:89:0b:3b:87
*Dot1x_NW_MsgTask_0: Jan 04 12:13:25.205: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 2)
*apfMsConnTask_0: Jan 04 12:13:36.779: ac:72:89:0b:3b:87 Processing RSN IE type 48, length 22 for mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:36.779: ac:72:89:0b:3b:87 Received RSN IE with 0 PMKIDs from mobile ac:72:89:0b:3b:87
*dot1xMsgTask: Jan 04 12:13:36.781: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:36.835: ac:72:89:0b:3b:87 Received EAPOL START from mobile ac:72:89:0b:3b:87
*Dot1x_NW_MsgTask_0: Jan 04 12:13:36.835: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 2)
*osapiBsnTimer: Jan 04 12:13:40.655: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:13:40.655: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:13:40.656: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:13:40.998: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:13:40.998: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:13:41.000: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:13:41.000: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:41.069: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
any one has idea where i am wrong in configuration
thanks in advanceHere is another link you can reference.
http://araihan.wordpress.com/2010/04/30/complete-guide-to-build-a-cisco-wireless-infrastructure-using-cisco-wlc-5500-cisco-1142-ap-and-microsoft-radius-server/
Sent from Cisco Technical Support iPhone App -
802.1x authentication fail when trying to implement 802.11N
Hello, I'm trying to deploy 802.11N along with 802.1X and IAS.
Controller comunciates with Radius server (IAS) and this lives in a ESX host along with the Domain controller. Somehow users are not able to authenticate.
WLC: AIR-CT550 - IP 10.152.36.5
IAS: 10.204.34.35
Domain controller: 10.204.35.149
Testing client MAC: 24:77:03:dc:c6:10
Check these logs:
*Jan 29 19:11:45.816: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:45.842: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:45.844: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:50.691: 24:77:03:dc:c6:10 apfMsExpireCallback (apf_ms.c:418) Expiring Mobile!
*Jan 29 19:11:50.692: 24:77:03:dc:c6:10 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [0c:27:24:4e:62:10]
*Jan 29 19:11:50.692: 24:77:03:dc:c6:10 Deleting mobile on AP 0c:27:24:4e:62:10(0)
*Jan 29 19:11:51.727: 24:77:03:dc:c6:10 Adding mobile on LWAPP AP 50:17:ff:df:08:70(1)
*Jan 29 19:11:51.727: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
*Jan 29 19:11:51.727: 24:77:03:dc:c6:10 apfProcessProbeReq (apf_80211.c:4722) Changing state for mobile 24:77:03:dc:c6:10 on AP 50:17:ff:df:08:70 from Idle to Probe
*Jan 29 19:11:51.729: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.742: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.743: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.758: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.758: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.773: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.774: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.943: 24:77:03:dc:c6:10 Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Association received from mobile on AP 50:17:ff:de:45:90
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Applying site-specific IPv6 override for station 24:77:03:dc:c6:10 - vapId 3, site 'default-group', interface 'enterprise wireless 3rd floor'
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Applying IPv6 Interface Policy for station 24:77:03:dc:c6:10 - vlan 603, interface id 11, interface 'enterprise wireless 3rd floor'
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Processing RSN IE type 48, length 22 for mobile 24:77:03:dc:c6:10
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Received RSN IE with 0 PMKIDs from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [50:17:ff:df:08:70]
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Updated location for station old AP 50:17:ff:df:08:70-1, new AP 50:17:ff:de:45:90-1
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 0.0.0.0 START (0) Initializing policy
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 50:17:ff:de:45:90 vapId 3 apVapId 3
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 apfPemAddUser2 (apf_policy.c:213) Changing state for mobile 24:77:03:dc:c6:10 on AP 50:17:ff:de:45:90 from Probe to Associated
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Stopping deletion of Mobile Station: (callerId: 48)
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 Sending Assoc Response to station on BSSID 50:17:ff:de:45:90 (status 0) Vap Id 3 Slot 1
*Jan 29 19:11:51.945: 24:77:03:dc:c6:10 apfProcessAssocReq (apf_80211.c:4389) Changing state for mobile 24:77:03:dc:c6:10 on AP 50:17:ff:de:45:90 from Associated to Associated
*Jan 29 19:11:51.947: 24:77:03:dc:c6:10 Station 24:77:03:dc:c6:10 setting dot1x reauth timeout = 0
*Jan 29 19:11:51.947: 24:77:03:dc:c6:10 Stopping reauth timeout for 24:77:03:dc:c6:10
*Jan 29 19:11:51.947: 24:77:03:dc:c6:10 dot1x - moving mobile 24:77:03:dc:c6:10 into Connecting state
*Jan 29 19:11:51.947: 24:77:03:dc:c6:10 Sending EAP-Request/Identity to mobile 24:77:03:dc:c6:10 (EAP Id 1)
*Jan 29 19:11:51.974: 24:77:03:dc:c6:10 Received EAPOL START from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:51.974: 24:77:03:dc:c6:10 dot1x - moving mobile 24:77:03:dc:c6:10 into Connecting state
*Jan 29 19:11:51.974: 24:77:03:dc:c6:10 Sending EAP-Request/Identity to mobile 24:77:03:dc:c6:10 (EAP Id 2)
*Jan 29 19:11:52.006: 24:77:03:dc:c6:10 Received EAPOL EAPPKT from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.006: 24:77:03:dc:c6:10 Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 Received EAPOL EAPPKT from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 Username entry (NA\a-Gregg.Davis) created for mobile
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 Received Identity Response (count=2) from mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 EAP State update from Connecting to Authenticating for mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 dot1x - moving mobile 24:77:03:dc:c6:10 into Authenticating state
*Jan 29 19:11:52.030: 24:77:03:dc:c6:10 Entering Backend Auth Response state for mobile 24:77:03:dc:c6:10
*Jan 29 19:11:52.031: apfVapRadiusInfoGet: WLAN(3) dynamic int attributes srcAddr:0x0, gw:0x0, mask:0x0, vlan:0, dpPort:0, srcPort:0
*Jan 29 19:11:52.031: 24:77:03:dc:c6:10 Successful transmission of Authentication Packet (id 62) to 10.204.34.35:1812, proxy state 24:77:03:dc:c6:10-00:00
*Jan 29 19:11:52.051: ****Enter processIncomingMessages: response code=11
*Jan 29 19:11:52.051: Received a RADIUS message from unknown server 10.204.35.149 port 1812
*Jan 29 19:11:54.032: 24:77:03:dc:c6:10 Successful transmission of Authentication Packet (id 62) to 10.204.34.35:1812, proxy state 24:77:03:dc:c6:10-00:00
*Jan 29 19:11:54.049: ****Enter processIncomingMessages: response code=11
*Jan 29 19:11:54.049: Received a RADIUS message from unknown server 10.204.35.149 port 1812
*Jan 29 19:11:56.032: 24:77:03:dc:c6:10 Successful transmission of Authentication Packet (id 62) to 10.204.34.35:1812, proxy state 24:77:03:dc:c6:10-00:00
*Jan 29 19:11:56.048: ****Enter processIncomingMessages: response code=11
*Jan 29 19:11:56.048: Received a RADIUS message from unknown server 10.204.35.149 port 1812
Any idea of what could be the problem?
Thanks.Hi Francisco,
*Jan 29 19:11:52.031: 24:77:03:dc:c6:10 Successful transmission of Authentication Packet (id 62) to 10.204.34.35:1812, proxy state 24:77:03:dc:c6:10-00:00
*Jan 29 19:11:52.051: ****Enter processIncomingMessages: response code=11*Jan 29 19:11:52.051: Received a RADIUS message from unknown server 10.204.35.149 port 1812
*Jan 29 19:11:54.032: 24:77:03:dc:c6:10 Successful transmission of Authentication Packet (id 62) to 10.204.34.35:1812, proxy state 24:77:03:dc:c6:10-00:00
*Jan 29 19:11:54.049: ****Enter processIncomingMessages: response code=11*Jan 29 19:11:54.049: Received a RADIUS message from unknown server 10.204.35.149 port 1812
These message indicate there is some issue with RADIUS communication. Looks like WLC send RADIUS packets to IAS, but it does not get any response. Instead it getting RADIUS response from DC.
Pls check this communication
HTH
Rasika
**** Pls rate all useful resposnes ***** -
My 802.1X Authentication fails repeatedly, and for no apparent reason.
I'm a student at university, and my campus uses WPA2 Enterprise wireless in which we have to enter our central user name and password. I work for the campus tech help desk, and I've tried every possible password and have configured the wireless countless times, and I'm starting to think it's a more serious problem. Thing is, I've connected for at least a year now, and just in the past few weeks it started to refuse. First, here's the unhelpful error message I receive:
"802.1X is unable to authenticate. It is possible that the configuration you have provided is invalid. If you are unsure about what configuration to connect with, check with your network administrator.
( Error: 1 on port en1 )"
And just in case, here's the directions for setting up wireless on campus, which worked perfectly for me before: http://www.uc.edu/ucit/access/wpa2instructionsv2.html
I've done all I can think of at this point. I keep editing the wireless in and out of the "preferred networks," I even went into my system library and removed all of it manually and tried again, but no luck. Google searching yields nothing useful. Please, if anyone could give me some advice, I'd appreciate it.In the off chance that anyone from the UC campus also comes here and looks at this problem.
There is currently an authentication problem with the campus WPA2 network related to Central login. If you have recently updated your password (as it forces you to do about every 3 months) then the new password is not being verified for use with the wireless network. This wouldn't be that big of a problem, but it also kicks out the user's old password... leaving the user unable to connect. -
802.1X Authentication Failed with WPA 1/2
Hi
i have a wlc 2106 , when a user want to connnect to the wireless , it will show the log as below . the user can not connect to the wireless network .
After disable and re-enable the wifi nic or connect to another AP(not cisco ) and retry to connect this ssid , the user can connect the wireless successfully ,you can get the log in detail from the attachment .Who can tell me what happen at this ? By the way , most of the nic are intel .
Mon Jun 7 09:09:05 2010: 00:13:e8:08:de:9b 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [00:1f:6d:b8:18:c0]
Mon Jun 7 09:09:05 2010: 00:13:e8:08:de:9b Deleting mobile on AP 00:1f:6d:b8:18:c0(0)
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Adding mobile on LWAPP AP 00:1f:6d:b8:18:c0(0)
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b apfProcessProbeReq (apf_80211.c:4120) Changing state for mobile 00:13:e8:08:de:9b on AP 00:1f:6d:b8:18:c0 from Idle to Probe
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:13 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:18 2010: 00:13:e8:08:de:9b apfMsExpireCallback (apf_ms.c:433) Expiring Mobile!
Mon Jun 7 09:09:18 2010: 00:13:e8:08:de:9b 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [00:1f:6d:b8:18:c0]
Mon Jun 7 09:09:18 2010: 00:13:e8:08:de:9b Deleting mobile on AP 00:1f:6d:b8:18:c0(0)
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b Adding mobile on LWAPP AP 00:26:99:91:44:00(0)
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b apfProcessProbeReq (apf_80211.c:4120) Changing state for mobile 00:13:e8:08:de:9b on AP 00:26:99:91:44:00 from Idle to Probe
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:20 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:21 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:21 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:21 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:21 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:25 2010: 00:13:e8:08:de:9b apfMsExpireCallback (apf_ms.c:433) Expiring Mobile!
Mon Jun 7 09:09:25 2010: 00:13:e8:08:de:9b 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [00:26:99:91:44:00]
Mon Jun 7 09:09:25 2010: 00:13:e8:08:de:9b Deleting mobile on AP 00:26:99:91:44:00(0)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Adding mobile on LWAPP AP 00:26:99:91:44:00(0)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b apfProcessProbeReq (apf_80211.c:4120) Changing state for mobile 00:13:e8:08:de:9b on AP 00:26:99:91:44:00 from Idle to Probe
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 24) in 5 seconds
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Reassociation received from mobile on AP 00:26:99:91:44:00
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Processing WPA IE type 221, length 24 for mobile 00:13:e8:08:de:9b
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b 0.0.0.0 START (0) Initializing policy
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:26:99:91:44:00
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b apfPemAddUser2 (apf_policy.c:212) Changing state for mobile 00:13:e8:08:de:9b on AP 00:26:99:91:44:00 from Probe to Associated
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Stopping deletion of Mobile Station: (callerId: 48)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Sending Assoc Response to station on BSSID 00:26:99:91:44:00 (status 0)
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b apfProcessAssocReq (apf_80211.c:3885) Changing state for mobile 00:13:e8:08:de:9b on AP 00:26:99:91:44:00 from Associated to Associated
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Station 00:13:e8:08:de:9b setting dot1x reauth timeout = 1800
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:38 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 1)
Mon Jun 7 09:09:39 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:39 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:39 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 2)
Mon Jun 7 09:09:40 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:40 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:40 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 3)
Mon Jun 7 09:09:41 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:41 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:41 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 4)
Mon Jun 7 09:09:42 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:42 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:42 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 5)
Mon Jun 7 09:09:43 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:43 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:43 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 6)
Mon Jun 7 09:09:44 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:44 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:44 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 7)
Mon Jun 7 09:09:45 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:45 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:45 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 8)
Mon Jun 7 09:09:46 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:46 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:46 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 9)
Mon Jun 7 09:09:47 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:47 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:47 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 10)
Mon Jun 7 09:09:48 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:48 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:48 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 11)
Mon Jun 7 09:09:49 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:49 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:49 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 12)
Mon Jun 7 09:09:50 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:50 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:50 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 13)
Mon Jun 7 09:09:51 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:51 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:51 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 14)
Mon Jun 7 09:09:52 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:52 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:52 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 15)
Mon Jun 7 09:09:53 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:53 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:53 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 16)
Mon Jun 7 09:09:54 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:54 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:54 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 17)
Mon Jun 7 09:09:55 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:55 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:55 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 18)
Mon Jun 7 09:09:56 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:56 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:56 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 19)
Mon Jun 7 09:09:57 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:57 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:57 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 20)
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b 802.1x 'txWhen' Timer expired for station 00:13:e8:08:de:9b
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Connecting state
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Sending EAP-Request/Identity to mobile 00:13:e8:08:de:9b (EAP Id 21)
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Reached Max EAP-Identity Request retries (21) for STA 00:13:e8:08:de:9b
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Sent Deauthenticate to mobile on BSSID 00:26:99:91:44:00 slot 0(caller 1x_auth_pae.c:2539)
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Scheduling deletion of Mobile Station: (callerId: 6) in 10 seconds
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b dot1x - moving mobile 00:13:e8:08:de:9b into Disconnected state
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Not sending EAP-Failure for STA 00:13:e8:08:de:9b
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Association received from mobile on AP 00:1f:6d:b8:18:c0
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b STA - rates (8): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Processing WPA IE type 221, length 24 for mobile 00:13:e8:08:de:9b
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b 0.0.0.0 8021X_REQD (3) Deleted mobile LWAPP rule on AP [00:26:99:91:44:00]
Mon Jun 7 09:09:58 2010: 00:13:e8:08:de:9b Updated location for station old AP 00:00:00:00:00:00-0, new AP 00:1f:6d:b8:18:c0-0Thx for you reply ,
i have reconfig the WLC, and it looks good so far .below is my configuration
config wps client-exclusion all disable
Config advanced eap identity-request-timeout 20
Config advanced eap identity-request-retries 10
Config advanced eap request-timeout 20
Config advanced eap request-retries 10
config 802.11b disable network
config 802.11b preamble long
config 802.11b enable network
config wlan disable 1
config wlan mfp infrast protection disable
config wlan enable 1
config wlan disable 2
config wlan mfp infrast protection disable
config wlan enable 2 -
802.1x authentication on PSK key mgmt?
Hello,
I'm setting up a new 5508 WLC (the first wlc I have ever setup) and I have my WLAN setup with our existing WPA/TKIP ssid for transitioning our clients from our existing autonomous system to the wlc. I have selected PSK as the key mgmt and I can get the client's to connect for a few minutes but I keep seeing these errors:
Fri Aug 21 08:50:05 2009 Client Excluded: MACAddress:00:21:00:f9:dd:50 Base Radio MAC :00:23:eb:27:e3:b0 Slot: 1 User Name: unknown Ip Address: unknown Reason:802.1x Authentication failed 3 times. ReasonCode: 4
I don't have nor do I want 802.1x enabled. Is there something I need to disable either on the client or the controller?
Thanks.
Dan.Hey,
I have same problem with Cisco 2100 Series WLC on software version 7.0.98.0.
I get a lot of error messages in Log Monitor which look like these:
0
Thu Dec 9 09:00:28 2010
Client Excluded: MACAddress:(..................) Base Radio MAC :(..................) Slot: 0 User Name: unknown Ip Address: (..................) Reason:802.1x Authentication failed 3 times. ReasonCode: 4
1
Thu Dec 9 08:57:09 2010
Interference Profile Failed for Base Radio MAC: (..................) and slotNo: 0
2
Thu Dec 9 08:53:43 2010
Client Excluded: MACAddress:(..................) Base Radio MAC :(..................) Slot: 0 User Name: unknown Ip Address: (..................) Reason:802.1x Authentication failed 3 times. ReasonCode: 4
3
Thu Dec 9 07:57:15 2010
Client Excluded: MACAddress:(..................) Base Radio MAC :(..................) Slot: 0 User Name: unknown Ip Address: (..................) Reason:802.1x Authentication failed 3 times. ReasonCode: 4
4
Thu Dec 9 07:54:10 2010
Client Excluded: MACAddress:(..................) Base Radio MAC :(..................) Slot: 0 User Name: unknown Ip Address: (..................) Reason:802.1x Authentication failed 3 times. ReasonCode: 4
5
Thu Dec 9 07:50:42 2010
Client Excluded: MACAddress:(..................) Base Radio MAC :(..................) Slot: 0 User Name: unknown Ip Address: (..................) Reason:802.1x Authentication failed 3 times. ReasonCode: 4
I'm not using 802.X authentication, it's just WPA/TKIP ...not even WPA2/AES. Each client gets disconnected few times per day. Auth fails like you see above, but for the most time connection just works. Not as good as I'd want it to, but it works, somehow.
I have also set up two WLANS for other devices like printers etc - it works just fine. I mean - no errors, no disconnects, it works perfectly, but why the hell is WPA not working?!
Second bigger problem is that every computer connected via WIFI is loosing one ping packet every minute. I have WLC -> 7 x AP -> End devices.
Everything till AP's is connected via ethernet, then it's wifi connection. When I'm pinging WLC or AP's from lan connected PC it works fine, but when I'm pinging wifi connected end devices (6 pc's) - each one is loosing one packet in exact, same time - every minute.
When I'm doing the same but from second side - wifi connected pc pinging AP's, WLC, lan pc - I loose one ping packet to each device including AP, WLC, other end devices.
It's definately fault in WLC configuration because I loose these packetes on AP's <-> WIFI devices. Any idea, any clue? I'm not sure which setting is responsible for that.
Thanks in advance for any hints, suggestions.
Regards,
Łukasz
Maybe you are looking for
-
I downloaded CS2 on my mac and can't open it
I downloaded CS2 on my mac and can't open it, i get "it can't be opened because its from an unidentified developer"
-
Problems with java j2re using mozilla
Hi, i'm using j2re1.4.2_05 plugin for mozilla in linux (Fedora Core 2). My internet access goes throught a router (SMC Networks ISDN Barricade SMC7301TA). It's settings can be edited throught a web browser LAN connection. And here the problems begin.
-
When I try to rename a temp file with renameto() method, it is not renaming. Either it didn't throw any error exceptions. The original file (not the temp file) has the write permission also. Anybody knows what may be the problem ? Any sample codes ?
-
Can I delete desktop files or will I lose them?
I have downloaded various files which end up on my desktop. For example, my update for mountain lion, the downloads for Skype, and also have what looks like hard drives as Mac WD which is my external drive and what looks like a drive which may be my
-
Made a big mistake - reorganized with Windows Explorer
Even though I knew better, I suffered for a momentary loss of memory and reorganized most of my images in Windows Explorer. I have been tracking down lost files for a couple of days now. Is there any wholesale way of recovering from this screwup?