Apple devices not receiving IP address

Hello everyone,
I searched for a resolution to my problem but couldn't find one so hopefully I can get some help here.
We have a 2504 controller (Code 7.0.220.0) deployed with 7 LAPs.  We have a few SSIDs, both with WPA/WPA2 configured.  There is an external DHCP server that all clients get their IP address from.  Laptops can connect to these SSIDs with no problem.
Lately tho, no APPLE devices (iphone 4, 4s, 5, ipads, etc) can get an IP address.  They are all stuck in the DHCP_REQD state.  I ran some debugs and I see that an APPLE device keeps getting a DHCPOFFER with an IP address but the APPLE device never accepts.  Has anyone ever had this issue ?
Here is the debug of the client getting DHCP offers but never accepting:
*DHCP Socket Task: Oct 01 10:26:48.083: 3c:d0:f8:99:1b:fe DHCP setting server from OFFER (server 192.168.34.253, yiaddr 192.168.34.151)
*DHCP Socket Task: Oct 01 10:26:49.111: 3c:d0:f8:99:1b:fe DHCP received op BOOTREQUEST (1) (len 308,vlan 934, port 2, encap 0xec00)
*DHCP Socket Task: Oct 01 10:26:49.111: 3c:d0:f8:99:1b:fe DHCP dropping looped REQUEST from DS (encap type 0xec00)
*DHCP Socket Task: Oct 01 10:26:49.111: 3c:d0:f8:99:1b:fe DHCP received op BOOTREPLY (2) (len 257,vlan 934, port 2, encap 0xec00)
*DHCP Socket Task: Oct 01 10:26:49.112: 3c:d0:f8:99:1b:fe DHCP received op BOOTREPLY (2) (len 257,vlan 932, port 1, encap 0xec03)
*DHCP Socket Task: Oct 01 10:26:59.273: 3c:d0:f8:99:1b:fe DHCP received op BOOTREQUEST (1) (len 308,vlan 934, port 2, encap 0xec00)
*DHCP Socket Task: Oct 01 10:26:59.273: 3c:d0:f8:99:1b:fe DHCP dropping looped REQUEST from DS (encap type 0xec00)
*DHCP Socket Task: Oct 01 10:26:59.370: 3c:d0:f8:99:1b:fe DHCP received op BOOTREPLY (2) (len 298,vlan 932, port 1, encap 0xec03)
*DHCP Socket Task: Oct 01 10:26:59.370: 3c:d0:f8:99:1b:fe DHCP setting server from OFFER (server 192.168.34.253, yiaddr 192.168.34.153)
*DHCP Socket Task: Oct 01 10:27:00.377: 3c:d0:f8:99:1b:fe DHCP received op BOOTREQUEST (1) (len 308,vlan 934, port 2, encap 0xec00)
*DHCP Socket Task: Oct 01 10:27:00.377: 3c:d0:f8:99:1b:fe DHCP dropping looped REQUEST from DS (encap type 0xec00)
*DHCP Socket Task: Oct 01 10:27:00.377: 3c:d0:f8:99:1b:fe DHCP received op BOOTREPLY (2) (len 257,vlan 934, port 2, encap 0xec00)
I saw in another thread that disable WPA/TKIP can work, however this isn't an association issue because they association just fine, they just can get an IP address.
Any help would be great.  Thanks!

Hey all,
Thanks again everyone for the help.  Turns out after a lot of packet captures and pointless calls with TAC, I found the issue was a bug with the ASA firewall. 
https://tools.cisco.com/bugsearch/bug/CSCuh79288
The DHCP lease time to Apple devices was 0 seconds (might be due to the fact that Apple devices request Options 119 and 252).  The fix was configure "dhcprelay timeout 60" on the firewall.  
Makes no sense I know but it fixed it.

Similar Messages

  • Apple devices, not releasing IP addresses

    Hi,
    We have a Cisco 4400 controller and a mix of 1010 and 1131 access points.
    We have been running out of IP's on our DHCP server because the apple devices are not releasing there IP's.
    If you have experienced the same problem, could you let me know how you solved the issue please?
    Kind regards,
    Jamie

    We've run into a similar issue and we tried lowering the dhcp lease time to 1 hour and this has provided some relief so far.
    Sent from Cisco Technical Support iPad App

  • Cisco 877w - Apple devices not able to see wired apple TV

    Hello All,
    Can anyone point me to a doc or forum discussion on how to setup the wireless interface to forward multicast packets?  Basically I cant get the ipads etc.. to see the AppleTV to control it.  I connected an AP and it works fine so its got to be something with the way the router handles the packets from teh integrated wireless interface.  I've been searching the forum for about 1hr and haven't founf anything other than a breif mention of broadcast forwarding and multicast setup.
    Has anyone got anything more complrehensive I can read?
    Thanks
    David

    Hello David,
    Thank you for contacting the Sales Acceleration Center (SAC) regarding your recent inquiry, Case Number
    Case Description:
    Cisco 877w - Apple devices not able to see wired apple TV
    Case Solution:
    The Bonjour service uses multicast to advertise your Home Sharing enabled device to the local network. In my case the Cisco 877W I was using had a Layer 3 enabled BVI (Bridged Virtual Interface) to which the Wireless Dot11Radio interface was not fowarding multicast packets properly.
    First of all, obtain the Multicast groups your wireless adapter is configured for (on Windows open a command prompt and run the below command):
    The result will give you an output as per below, we are interested in the multicast address directly after the 224.0.0.252 address 239.255.255.250:
    Then we need to enable multicast routing on the router, connect to your router and enter config terminal mode:
    Next we will configure IGMP v3 and add the relevant Wireless interface on your router to the correct multicast address group:
    Next perform the same config your BVI interface:
    Once complete save your changes and confirm both interfaces have been added to the multicast groups using the command sh ip igmp group:
    You now need to reload your router and restart iTunes and then attempt to connect to Home Sharing from your Apple TV.
    Other commands that I used to troubleshoot with were:
    debug ip mpacket - Multicast Packet Debugging
    debug ip mroute - Debug Multicast Routing
    sh ip mroute - Show IP Multicast Routes
    By default the Cisco implementation of a Dot11Radio interface and a BVI interface don't appear to forward multicast packets between each other. Seems odd to me as they're both in the same L2 bridging group..anyway.
    I am going to close the case for this specific inquiry on my side. If you need moere information Please feel free to reach out to me or any member of the SAC team if we can be of any further assistance or if you have any other related questions in the future. We strive to provide you with excellent service. We value your input and look forward to serving you moving forward.

  • HT200109 Why do all my other Apple devices not care if the movie I rented from iTunes if it was downloaded directly to that device or not, but the stupid Apple TV won't allow you to play rented movies unless you rented it directly from the Apple TV?

    Why do all my other Apple devices not care if the movie I rented from iTunes if it was downloaded directly to that device or not, but the stupid Apple TV won't allow you to play rented movies unless you rented it directly from the Apple TV?
    Great, so now I have to airplay it by linking my computer to my Apple TV and then the movie has to buffer! So, all that time I spent downloading the HD video has to technically "download" again by buffering. The more I use Apple TV, the more I feel like this item was not created by Apple. I don't even use it for what I originally purchased it for. If I would have known that anytime I wanted to sync a movie from my computer to Apple TV by using airplay that it would have to buffer the movie, I would have never ever ever ever ever purchased this waste of time device. So the video has to technically play all the way through one time first so Apple TV can "remember" the movie to play it back in real time afterwards.
    Am I missing something here? Am I doing something wrong that can be fixing my problem? I should have known that the Apple TV had so many things backwards when simple things like when you are using the remote and you reach the bottom of your list, in order to cycle back to the top of your list you have then press the directional buton back the other way rather than most modern day devices that will automatically cycle you back to the top or to the other side when you reached the bottom or end but keep on pressing the button. That **** annoys me when I am doing a search for a movie and have to type the name in manually and have to cycle back and forth to the letters. It makes me feel like I am using a rotary phone or something!

    I was told by someone to try and purchase something directly from my Apple TV and that will help authorize my Apple TV.  So I picked something that was free and it downloaded.
    Then I went back to the Movie that would not work and it played just fine. 
    So it seemed to work.  I will have to try it on other movies and TV shows later.

  • Client not receive ip address - dhcp_reqd

    Hi,
    In my environment there's a  5508 (firmware 7.4.110.0) and ap 1600 with a ias radius server. All wlan are in flex-connect local switching, one client try to connect on a wlan but not receive ip address. After enabled debug aaa all i took the log corresponding :
    Cisco Controller) >*emWeb: Feb 11 16:52:36.047: Created WARP Capabilities IE (length 12) for WLAN LAB
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Adding mobile on LWAPP AP 00:3a:9a:77:55:a0(0)
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Association received from mobile on BSSID 00:3a:9a:77:55:06
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Rf profile 200 Clients are allowed to AP radio
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Max Client Trap Threshold: 50  cur: 3
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Rf profile 200 Clients are allowed to AP wlan
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Re-applying interface policy for client
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 In processSsidIE:4264 setting Central switched to FALSE
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying site-specific Local Bridging override for station 18:3d:a2:25:01:a4 - vapId 103, site 'Test', interface 'management'
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying Local Bridging Interface Policy for station 18:3d:a2:25:01:a4 - vlan 0, interface id 0, interface 'management'
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying site-specific override for station 18:3d:a2:25:01:a4 - vapId 103, site 'Test', interface 'management'
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Re-applying interface policy for client
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 processSsidIE  statusCode is 0 and status is 0
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 processSsidIE  ssid_done_flag is 0 finish_flag is 0
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 suppRates  statusCode is 0 and gotSuppRatesElement is 1
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 extSuppRates  statusCode is 0 and gotExtSuppRatesElement is 1
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Processing WPA IE type 221, length 24 for mobile 18:3d:a2:25:01:a4
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 8
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 unsetting PmkIdValidatedByAp
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Initializing policy
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
    *apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) DHCP required on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1for this client
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1 flex-acl-name:
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfMsAssoStateInc
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 18:3d:a2:25:01:a4 on AP 00:3a:9a:77:55:a0 from Idle to Associated
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfPemAddUser2:session timeout forstation 18:3d:a2:25:01:a4 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is  0
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Stopping deletion of Mobile Station: (callerId: 48)
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Sending Assoc Response to station on BSSID 00:3a:9a:77:55:a0 (status 0) ApVapId 1 Slot 0
    *apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfProcessAssocReq (apf_80211.c:7399) Changing state for mobile 18:3d:a2:25:01:a4 on AP 00:3a:9a:77:55:a0 from Associated to Associated
    *apfMsConnTask_2: Feb 11 16:54:22.506: 18:3d:a2:25:01:a4 Updating AID for REAP AP Client 00:3a:9a:77:55:a0 - AID ===> 4
    *dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 Station 18:3d:a2:25:01:a4 setting dot1x reauth timeout = 1800
    *dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Connecting state
    *dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 Sending EAP-Request/Identity to mobile 18:3d:a2:25:01:a4 (EAP Id 1)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 Received EAPOL START from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Connecting state
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 Sending EAP-Request/Identity to mobile 18:3d:a2:25:01:a4 (EAP Id 2)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.541: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.541: 18:3d:a2:25:01:a4 Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Received Identity Response (count=2) from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 EAP State update from Connecting to Authenticating for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Authenticating state
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=3) for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 3)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 3, EAP Type 25)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=4) for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 4)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 4, EAP Type 25)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=7) for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 WARNING: updated EAP-Identifier 4 ===> 7 for STA 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 7)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 7, EAP Type 25)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Processing Access-Accept for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Resetting web IPv4 acl from 255 to 255
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Resetting web IPv4 Flex acl from 65535 to 65535
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting re-auth timeout to 1800 seconds, got from WLAN config.
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Station 18:3d:a2:25:01:a4 setting dot1x reauth timeout = 1800
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Username entry (pippo) created for mobile, length = 253
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Username entry (pippo) created in mscb for mobile, length = 253
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Creating a PKC PMKID Cache entry for station 18:3d:a2:25:01:a4 (RSN 0)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 8
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 0
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Sending EAP-Success to mobile 18:3d:a2:25:01:a4 (EAP Id 7)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Freeing AAACB from Dot1xCB as AAA auth is done for  mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Starting key exchange to mobile 18:3d:a2:25:01:a4, data packets will be dropped
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                        state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Entering Backend Auth Success state (id=7) for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Received Auth Success while in Authenticating state for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Authenticated state
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Received EAPOL-key in PTK_START state (message 2) from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                        state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 apfMs1xStateInc
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1for this client
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1 flex-acl-name:
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 5952, Adding TMP rule
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
      type = Airespace AP - Learn IP address
      on AP 00:3a:9a:77:55:a0, slot 0, interface = 13, QOS = 0
      IPv4 ACL ID = 255, IP
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206  Local Bridging Vlan = 0, Local Bridging intf id = 0
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 Key exchange done, data packets from mobile 18:3d:a2:25:01:a4 should be forwarded shortly
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                        state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02
    *pemReceiveTask: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
    *spamApTask3: Feb 11 16:54:22.707: 18:3d:a2:25:01:a4 Sent EAPOL-Key M5 for mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.768: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.768: 18:3d:a2:25:01:a4 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile 18:3d:a2:25:01:a4
    *Dot1x_NW_MsgTask_4: Feb 11 16:54:22.769: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
    *apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
    *apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 5576, Adding TMP rule
    *apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
      type = Airespace AP - Learn IP address
      on AP 00:3a:9a:77:55:a0, slot 0, interface = 13, QOS = 0
      IPv4 ACL ID = 255,
    *apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206  Local Bridging Vlan = 0, Local Bridging intf id = 0
    *apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
    *pemReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
    (Cisco Controller) >*emWeb: Feb 11 16:54:46.127: 18:3d:a2:25:01:a4 Central Switch = FALSE
    *emWeb: Feb 11 16:54:46.128: 18:3d:a2:25:01:a4 Central Switch = FALSE
    (Cisco Controller) >
    (Cisco Controller) >
    (Cisco Controller) >
    (Cisco Controller) >*emWeb: Feb 11 16:55:36.461: 18:3d:a2:25:01:a4 Central Switch = FALSE
    *emWeb: Feb 11 16:55:36.463: 18:3d:a2:25:01:a4 Central Switch = FALSE
    From log i know that 802.1x passed, while dhcp don't send ip address. It seems that the local vlan id is 0 while in reality is 3... WHY ? i don't understand.
    Someone can help me to find the problem? i think the problem is on the network, the dhcp ( the corporate router) is directly connected to the ap.

    Are you setting your FlexConnect native vlan and the wlan to vlan mapping?  You also need to make sure you have the ip helpers setup and that dhcp is working.  I would configure a switch port to a vlan that the wireless users is suppose to be on locally at that site and connect a laptop to that port and make sure that the laptop gets an address.
    Thanks,
    Scott
    *****Help out other by using the rating system and marking answered questions as "Answered"*****

  • Apple account not receiving any Email

    HI sir / madams
    my apple account not receiving any email / help/advice thanks

    Hello angurkawsar, 
    Thanks for participating in the Apple Support Communities. 
    It seems like you can't receive email on your iPhone. If you're using the Mail app, this article has some troubleshooting steps that may help:
    Get help with Mail on iPhone, iPad, and iPod touch - Apple Support
    Best Regards,
    Jeremy  

  • Flexconnect Local Switching Hosts Do Not Receive IP Addresses

    Hello,
    My WLC software version is 7.4.110.0. I have a branch office in my lab. The AP in my branch is configured as flexconnect with native VLAN of 700. The SSID that I have in the branch office is configured to do local switching. The show wlan is added below.
    My tunneled SSID still working and I can still receive IP addresses from it. My issue is last week I have the Flexconnect working with no problem, then this morning I can connect to the SSID, but I'm not receiving IP addresses for my test wireless clients.
    Thanks
    [code]
    WLAN Identifier.................................. 2
    Profile Name..................................... ACS Guest
    Network Name (SSID).............................. RMTGuest
    Status........................................... Enabled
    MAC Filtering.................................... Disabled
    Broadcast SSID................................... Enabled
    AAA Policy Override.............................. Disabled
    Network Admission Control
      Client Profiling Status ....................... Disabled
       DHCP ......................................... Disabled
       HTTP ......................................... Disabled
      Radius-NAC State............................... Disabled
      SNMP-NAC State................................. Disabled
      Quarantine VLAN................................ 0
    Maximum number of Associated Clients............. 0
    Maximum number of Clients per AP Radio........... 200
    Number of Active Clients......................... 0
    Exclusionlist Timeout............................ 60 seconds
    Session Timeout.................................. 1800 seconds
    User Idle Timeout................................ 300 seconds
    --More-- or (q)uit
    User Idle Threshold.............................. 0 Bytes
    NAS-identifier................................... RK2WLC5508-01
    CHD per WLAN..................................... Enabled
    Webauth DHCP exclusion........................... Disabled
    Interface........................................ management
    Multicast Interface.............................. Not Configured
    WLAN IPv4 ACL.................................... unconfigured
    WLAN IPv6 ACL.................................... unconfigured
    mDNS Status...................................... Disabled
    mDNS Profile Name................................ unconfigured
    DHCP Server...................................... 172.28.27.130
    DHCP Address Assignment Required................. Disabled
    Static IP client tunneling....................... Disabled
    PMIPv6 Mobility Type............................. none
    Quality of Service............................... Silver
    Per-SSID Rate Limits............................. Upstream          Downstream
    Average Data Rate................................   0                      0
    Average Realtime Data Rate.......................   0                      0
    Burst Data Rate..................................   0                      0
    Burst Realtime Data Rate.........................   0                      0
    Per-Client Rate Limits........................... Upstream          Downstream
    Average Data Rate................................   0                      0
    Average Realtime Data Rate.......................   0                      0
    --More-- or (q)uit
    Burst Data Rate..................................   0                      0
    Burst Realtime Data Rate.........................   0                      0
    Scan Defer Priority.............................. 4,5,6
    Scan Defer Time.................................. 100 milliseconds
    WMM.............................................. Allowed
    WMM UAPSD Compliant Client Support............... Disabled
    Media Stream Multicast-direct.................... Disabled
    CCX - AironetIe Support.......................... Enabled
    CCX - Gratuitous ProbeResponse (GPR)............. Disabled
    CCX - Diagnostics Channel Capability............. Disabled
    Dot11-Phone Mode (7920).......................... Disabled
    Wired Protocol................................... None
    Passive Client Feature........................... Disabled
    Peer-to-Peer Blocking Action..................... Disabled
    Radio Policy..................................... All
    DTIM period for 802.11a radio.................... 1
    DTIM period for 802.11b radio.................... 1
    Radius Servers
       Authentication................................ Disabled
       Accounting.................................... Disabled
       Dynamic Interface............................. Disabled
       Dynamic Interface Priority.................... wlan
    Local EAP Authentication......................... Disabled
    --More-- or (q)uit
    Security
       802.11 Authentication:........................ Open System
       FT Support.................................... Disabled
       Static WEP Keys............................... Disabled
       802.1X........................................ Disabled
       Wi-Fi Protected Access (WPA/WPA2)............. Enabled
          WPA (SSN IE)............................... Disabled
          WPA2 (RSN IE).............................. Enabled
             TKIP Cipher............................. Disabled
             AES Cipher.............................. Enabled
                                                                   Auth Key Management
             802.1x.................................. Disabled
             PSK..................................... Enabled
             CCKM.................................... Disabled
             FT-1X(802.11r).......................... Disabled
             FT-PSK(802.11r)......................... Disabled
             PMF-1X(802.11w)......................... Disabled
             PMF-PSK(802.11w)........................ Disabled
          FT Reassociation Timeout................... 20
          FT Over-The-DS mode........................ Enabled
          GTK Randomization.......................... Disabled
          SKC Cache Support.......................... Disabled
    --More-- or (q)uit
          CCKM TSF Tolerance......................... 1000
       WAPI.......................................... Disabled
       Wi-Fi Direct policy configured................ Disabled
       EAP-Passthrough............................... Disabled
       CKIP ......................................... Disabled
       Web Based Authentication...................... Disabled
       Web-Passthrough............................... Disabled
       Conditional Web Redirect...................... Disabled
       Splash-Page Web Redirect...................... Disabled
       Auto Anchor................................... Disabled
       FlexConnect Local Switching................... Enabled
       flexconnect Central Dhcp Flag................. Disabled
       flexconnect nat-pat Flag...................... Disabled
       flexconnect Dns Override Flag................. Disabled
       FlexConnect Vlan based Central Switching ..... Disabled
       FlexConnect Local Authentication.............. Disabled
       FlexConnect Learn IP Address.................. Enabled
       Client MFP.................................... Optional
       PMF........................................... Disabled
       PMF Association Comeback Time................. 1
       PMF SA Query RetryTimeout..................... 200
       Tkip MIC Countermeasure Hold-down Timer....... 60
    AVC Visibilty.................................... Disabled
    --More-- or (q)uit
    AVC Profile Name................................. None
    Flow Monitor Name................................ None
    Call Snooping.................................... Disabled
    Roamed Call Re-Anchor Policy..................... Disabled
    SIP CAC Fail Send-486-Busy Policy................ Enabled
    SIP CAC Fail Send Dis-Association Policy......... Disabled
    KTS based CAC Policy............................. Disabled
    Assisted Roaming Prediction Optimization......... Disabled
    802.11k Neighbor List............................ Disabled
    802.11k Neighbor List Dual Band.................. Disabled
    Band Select...................................... Disabled
    Load Balancing................................... Disabled
    Multicast Buffer................................. Disabled
    Mobility Anchor List
    WLAN ID     IP Address            Status
    802.11u........................................ Disabled
    MSAP Services.................................. Disabled
    [/code]

    is the VLAN still mapped on the AP, and allowed across the trunk?
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • Software won't connect to device/not receiving email

    When trying to sync pc & BB, receive the message that the desktop software will not communicate with the device. I have uninstalled the software and re-installed and still no same message.
    Also not receiving new emails on the BB.
    Any ideas...
    Thanks.
    BB 9300

    Hello Atticusnoble,
    Have a look at the following article that covers Identifying and troubleshooting issues with the BlackBerry Desktop Software detecting a USB connected BlackBerry smartphone: http://btsc.webapps.blackberry.com/btsc/KB00125.
    To address you email issue, If you are using BIS service try udating your service book as shown here: http://btsc.webapps.blackberry.com/btsc/KB15402.
    If you device is activated to a BlackBerry Enterprise Server please contact your BES admin to help resolve your email issue.
    I hope this helps!
    -HB
    Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
    Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

  • Send push notification success but device not receive?

    I've a app enable Apple push service, it work fine,
    But yesterday service have a problem.
    I send push message to device but not received.
    Sometime have one, two device receive and then not received.
    ( device ios 8.0.2 received push, other ios version not reveive )
    I check socket open to push to Server Apple: Success, not fail or error.
    Today service work OK, when i send push , all device received it.
    So . What's happen with Server Apple ?

    this problem with anyone?

  • 1080p for Apple Devices not working in Compressor

    Was happy to see the new settings for the ATV3 in Compressor, but it doesn't work.  I keep getting a qucktime error -108 about a third of the way into processing.  Plenty of memory is showing in Activity Monitor.
    I've tried both a short and long movie, with quickcluster turned on and off, both fail.
    I've tried all the suggested fixes I can find.  Reinstalling Compressor, Stop/Starting/Resetting sharing, deleting preferences.
    The same movies work fine with the previous Apple TV/Device settings.
    Share from FCPx to ATV3 works, but it extremely slow for the longer movies, and I want to use Compressor and the quickcluster.
    Is anyone else having this problem.

    Some people (including me) have reported flakey changes in sharing after updating. (My issues, however, were broader than just Apple Device presets.)
    If I understand your description correctly, sharing is working – just not for one preset – so it's questionable whether it's even Qmaster-related.
    You've already tried the fixes I would have suggested – except you might also try Digital Rebellion's Compressor Repair.
    Finally, take a look at this thread and see whether David's method works for you.
    Good luck.
    Russ

  • Fotostream - PC sync to Apple Device not working !

    Hello,
    i configured my FotoStream as it was written in the FAQ of apple.com.
    The problem is, that Picutres or Videos i add to the folder on my Windows Computer were not synced to my apple device ( i Phone, close future also iPad*late november *).
    I did all i read in forums. Deinstall all, reconfigure, use default path, set Fotostream back via icloud.com. Nothing works. It is for me an Important feature so tell me what can i do, that the Pciture in the PC Dekstop Folder get synced. The way from iPhone to PC works perfect.
    i read that iOS 6 is the problem. Is that true ? Under 5 it should work ?! If it is like that, when do will be a fix released.
    Thank you very much.
    Regards
    MM

    Now ideas in the whole APPLE Support Communities ?! Come on ... -_-'

  • Email to verify apple id not received

    I need to verify my apple id but I have not received the email to do so...help!

    I need to verify my apple id but I have not received the email ived tried it many many times why cant i recieve any mail

  • Apple Mail not receiving mail?

    Hi there. I'm using Apple Mail 6.2 on Mountain Lion. I haven't had any issues with it when I installed ML when it came out but now I'm not receiving mail. I can still send mail out though. Is anyone else experiencing this? And is there something I can do to fix it? Thanks in advance!

    Try a post in the forum that handles that OS and Mail issues.
    The 10.8 Mail forum.
    DALE

  • Why are all my Apple devices not connecting to the web?

    I have an Airport express and has been working fine up until recently. Now none of my Apple devices are connecting to the web. They all find the network no problem and all connect however they will not connect to the internet. The strange thing is that our Windows laptop works fine but absolutly nothing from Apple, this includes a 2011 MacBook pro, iphone 3gs, ipod touch, Apple tv and 2x 2nd gen ipads. I have reset the airport and  set up a new network, it worked for one day and is back to how it was. Any advice would be great

    I seem to be having a similair issue. I have an AirPort Extreme and my iMac connects fine but now my Kindle and Netflix are unable to connect to the Internet? They see my network but just can't connect to the internet?
    I used to have my cable modem connected to a Vonage phone router, which then connected to my Airport. Everything worked fine then. I recently canceled my Vonage service and removed the phone router. Now my cable modem is connected directly to my Airport. Did removing the phone router casue my problem? Do I need to re-set something to get my kindle and Netflix to work again?

  • IPod Touch Not Receiving DNS Address

    For the past week or so, my iPod Touch has not been receiving a DNS address from the wireless router in my workplace. The router is a Netgear RangeMax WPN824, currently using WPA-PSK encryption. The iPod indicates that it successfully connects to the router, but it does not have any internet connectivity in Safari, Mail, or any other internet-required apps, and when I check on the wireless connection, it does not have a DNS address assigned.
    I have no trouble connecting to the wireless network using my laptop, and the IP configuration on my laptop indicates that the laptop gets a DNS address of 10.0.0.1. I've tried manually entering that address, as well as an OpenDNS address, into the wireless settings on the iPod, with no success.
    My iPod Touch is running the 2.0.2 firmware, but one of my friends who uses the 1.1.x firmware is also unable to get any connectivity. Any suggestions, anyone?

    Same here! All the other computers (MacBook, Gateway Vista desktop, husband's Toshiba XP laptop and my old Mac notebooks) on my wi-fi network are connecting just fine (using a Time Capsule as my router), but my iPod Touch either can't see my network or if it does, rejects my password (even though I enter it exactly the same way as on my other machines that do connect successfully). I went to Settings and there is no DHCP address or DNS server info; and numerous resets of the Touch's network settings were no help. I haven't called AppleCare (they're never open when I have the time) and am afraid they will tell me to update the TimeCapsule's firmware or AirPort Utility--which I did last week and promptly killed my network till I reverted to the previous versions.
    I have all these fun killer apps but can't get online except with a computer. (Last resort is to see if I can get on to a wi-fi hotspot). I just paid ten bucks and killed 3 hours to break my iPod Touch. Is this an attempt by Apple to get us to buy yet another device or even an iPhone (which I DON'T want because my phone service is expensive enough as it is).

Maybe you are looking for

  • How to transfer the tables from one file group to another file group in SQL 2008.?

    Hello all, I have few issues regarding the transfer of the tables from one file group to another file group  in SQL 2008 and also How can we  backup and restore the particular database based on file group level. Let’s say I have a tables stored withi

  • Airport has a self-assigning IP address...

    Hi. I'm using a high-speed modem provided by my ISP which is connected to a Belkin wireless router. I was connecting perfectly fine with the Airport card in my home up until yesterday when I try to connect, I get an error message "there was an error

  • Validation Of  selection screen in Module pool

    Hi Guru, I am giving Plant as input at selection screen. Below that I am creating one table control at selection screen. I have to do validation of the Plant at the selection screen. I am doing that IN PAI module. But when i give wrong plant at selec

  • Apache 2.0.53 with proxy plug-in adds characters to static files

    When delivering a javascript (.js) file that is packaged within the WAR deployed on the WebLogic 8.1, it will deliver correctly when going directly to the AppServer port. However, when requesting this same file trhough the Apache web server and proxy

  • Windows Server 2008 x64 on T61P?

    Hi Everyone, Just got my T61P with Vista x64 pre-installed - love my Thinkpad!   However, like just about everyone on the planet I'm disappointed with Vista and would like to install Windows Server 2008 x64 Standard (no hyper-v) just like on my offic