Clients Disconnecting

We aeem to have an issue where certain clients (looks only like win7) keep disconnecting from the WIFI. We have APs running in FlexConnect mode and registered to a remote controller. XP clients seem to be ok.
Anyone come across this, or know where to even start troubleshooting?

Also in the logs getting the following when clients are disconnected. I don't think it will be security related as it works on other sites which all use the same remote controller / SSIDs. Any ideas?
%DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client
%DOT1X-3-INVALID_REPLAY_CTR: 1x

Similar Messages

Client disconnection notification for NIO server

A server accepts connections from clients and registers accepted channels for reading:
while (true)
    if (selector.select()>0)
        Iterator<SelectionKey> iterator = selector.selectedKeys().iterator();
        while(iterator.hasNext())
            SelectionKey opKey = iterator.next();
            iterator.remove();
            if (opKey.isAcceptable())
                clientSocketChannel = serverSocketChannel.accept();
                clientSocketChannel.configureBlocking(false);
                clientSocketChannel.register(selector, SelectionKey.OP_READ);
. . .One of the server's clients disconnects from it by means of socketChannel.close() while the servert is locked with selector.select() (that is the server have nothing to read from its clients and nobody is connecting to it).Will the server be unlocked when the client performs socketChannel.close()? If so, what notification/exception will the server receive?

One of the server's clients disconnects from it by means of socketChannel.close() while the servert is locked with selector.select()The select() will immediately return; the corresponding channel will be readable; and the read() will return -1.

Mobile based clients disconnecting frequently

Hi folks,
I have an 1142 running 15.2.2JB. I noticed numerous messages of clients disconnecting with the following message:
%DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.885b.622c Reason: Previous authentication no longer valid
The MAC addresses involved are all associated to various mobile devices...iPad, iPhone, Windows 8 Mobile and Android (MAC above is an Android phone). This doesn't appear to impact PC's and laptops (both Windows an Apple).
The devices reconnect immediately and this doesn't appear to cause any problems with anything other than Android devices which register the disconnect immediately and therefore bin anything they're currently doing (for some reason the Windows 8 Mobile and Apple devices seem to be able to cope with the disconnect and reconnect and don't ditch anything network connections)
Config on the AP is:
dot11 ssid Frozen
   authentication open
   authentication key-management wpa version 2
   wpa-psk ascii 7 05261F303645480C260816190E1F3B3D242A2C362724060B2900005D5C4B12
dot11 ssid FrozenSlow
   authentication open
   authentication key-management wpa version 2
   wpa-psk ascii 7 1124003A001B0D093B272A2F2D200A351C09120613504C546C570F081D0518
interface Dot11Radio0
no ip address
encryption mode ciphers aes-ccm
ssid FrozenSlow
antenna gain 0
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel 2462
station-role root
no dot11 extension aironet
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio1
no ip address
encryption mode ciphers aes-ccm
ssid Frozen
antenna gain 0
no dfs band block
speed 6.0 9.0 basic-12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel width 40-above
channel dfs
station-role root
no dot11 extension aironet
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
When I debug dot11 aaa I see the following:
211137: Oct 21 16:26:58.910: dot11_dot1x_gtk_update_on_disassociate: Recieved gtk update notice due to disconnect for 847a.885b.622c on vlan 0
211138: Oct 21 17:26:58 BST: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.885b.622c Reason: Previous authentication no longer valid Could not find station pointer for client 847a.885b.622c. Using vlan number from aaa_client
211139: Oct 21 16:27:02.640: dot11_dot1x_send_ssn_eapol_key: wpav2 msg 1 pak_size 121
211140: Oct 21 16:27:02.640: dot11_dot1x_send_ssn_eapol_key: eapol->length 117
211141: Oct 21 16:27:02.640: dot11_dot1x_build_ptk_handshake: building PTK msg 1 for 847a.885b.622c
211142: Oct 21 16:27:02.640: dot11_dot1x_build_ptk_handshake: ptk key len 16
211143: Oct 21 16:27:02.640: dot11_dot1x_build_ptk_handshake: ptk key data len 22
211144: Oct 21 16:27:02.640: dot11_dot1x_build_ptk_handshake: wpav2 pmkid[DOT1X]: 4252DC05F4159E0B7BAB4A3C56116E4F
211145: Oct 21 16:27:02.689: dot11_dot1x_verify_ptk_handshake: verifying PTK msg 2 from 847a.885b.622c
211146: Oct 21 16:27:02.689: dot11_dot1x_verify_eapol_header: Warning: Invalid key len (exp=0x10, act=0x0)
211147: Oct 21 16:27:02.689: dot11_dot1x_ssn_generate_ptk: wpa-v2 PSK: use ssid psk as pmk
211148: Oct 21 16:27:02.689: dot11_dot1x_ssn_generate_ptk: dot11_dot1x_ssn_generate_ptk(): wpa-v2 clnt 847a.885b.622c does not have cached pmk rec: aaa_client->ms_mppe_receive_key:0x0
211149: Oct 21 16:27:02.689: dot11_dot1x_verify_ptk_handshake: Handshake passedCould not find station pointer for client 847a.885b.622c. Using vlan number from aaa_client
211150: Oct 21 16:27:02.690: dot11_dot1x_send_ssn_eapol_key:
211151: Oct 21 16:27:02.690: wpav2 msg3 data_len before padding 46
211152: Oct 21 16:27:02.690: dot11_dot1x_send_ssn_eapol_key:
211153: Oct 21 16:27:02.690: wpav2 msg3 padding 2 data_len after padding 56, eapol pak_size 155
211154: Oct 21 16:27:02.690: dot11_dot1x_send_ssn_eapol_key: wpav2 msg 3 pak_size 155
211155: Oct 21 16:27:02.690: dot11_dot1x_send_ssn_eapol_key: eapol->length 151
211156: Oct 21 16:27:02.690: dot11_dot1x_build_ptk_handshake: building PTK msg 3 for 847a.885b.622c
211157: Oct 21 16:27:02.690: dot11_dot1x_build_ptk_handshake: ptk key len 16
211158: Oct 21 16:27:02.690: dot11_dot1x_build_ptk_handshake: wpav2_ptk msg 3 rsnie len 22 and 20
211159: Oct 21 16:27:02.690: dot11_dot1x_build_ptk_handshake mcst_key_len 16 index 1 vlan 0
211160: Oct 21 16:27:02.690: gnonce: 01 DA 02 04 01 D2 FA 40 03 39 B1 50 00 1C 5A 2C 03 39 B1 50 00 00 00 00 00 00 00 00 01 D2 FA 40
211161: Oct 21 16:27:02.691: gtk(pt): 1B 9E E3 5F B6 82 A7 A7 3F 1E 94 56 BD ED B1 8C
211162: Oct 21 16:27:02.692:
211163: Oct 21 16:27:02.692: gtk(pt) len 16: 1B 9E E3 5F B6 82 A7 A7 3F 1E 94 56 BD ED B1 8C
211164: Oct 21 16:27:02.692:
211165: Oct 21 16:27:02.693: dot11_dot1x_build_ptk_handshake:
211166: Oct 21 16:27:02.693: build wpav2 ptk msg 3, pad data from 46 by 2
211167: Oct 21 16:27:02.693: dump temp_key_data(pt) len 48: 30 14 01 00 00 0F AC 04 01 00 00 0F AC 04 01 00 00 0F AC 02 3C 00 DD 16 00 0F AC 01 01 00 1B 9E E3 5F B6 82 A7 A7 3F 1E 94 56 BD ED B1 8C DD 00
211168: Oct 21 16:27:02.694:
211169: Oct 21 16:27:02.694: dump eapol_encrypt_key: B7 06 7B 67 33 D2 41 86 8D 52 9C 0A 0C 8F D9 3A
211170: Oct 21 16:27:02.695:
211171: Oct 21 16:27:02.695: key_data from len 48 to 56 (ct): 34 DA 2E 1C 7A 59 30 19 BA 1E 2B B8 A8 3B 67 48 93 80 F1 39 0A 1C CB D4 D5 51 5B 50 0D 32 7D FA FC A1 12 5C D9 19 3A 8D F4 87 44 97 5B F8 BE AE 21 01 1D C2 EF 90 FC E4
211172: Oct 21 16:27:02.696:
211173: Oct 21 16:27:02.696: dot11_dot1x_build_ptk_handshake:
211174: Oct 21 16:27:02.697: aes key wrap key_data from len 48 to 56 gtk(ct):
211175: Oct 21 16:27:02.697: dump decrypted key data: 30 14 01 00 00 0F AC 04 01 00 00 0F AC 04 01 00 00 0F AC 02 3C 00 DD 16 00 0F AC 01 01 00 1B 9E E3 5F B6 82 A7 A7 3F 1E 94 56 BD ED B1 8C DD 00
211176: Oct 21 16:27:02.698:
211177: Oct 21 16:27:02.698: dot11_dot1x_build_ptk_handshake:
211178: Oct 21 16:27:02.698: wpav2 msg 3 key data len 56
211179: Oct 21 16:27:02.703: mic_key: 68 B6 19 DB EF CA 12 B1 DC B0 6C FD 7D 8B AD FF
211180: Oct 21 16:27:02.704: hmac_sha1 mic for eapol pak len 155: E3 B5 76 CC 90 FB EA 8F E6 8F 20 16 9E CC 5F 8F
211181: Oct 21 16:27:02.704: dot11_dot1x_build_ptk_handshake:
211182: Oct 21 16:27:02.704: msg 3 hmac_sha1 mic for eapol_key len 155
211183: Oct 21 16:27:02.710: dot11_dot1x_verify_ptk_handshake: verifying PTK msg 4 from 847a.885b.622c
211184: Oct 21 16:27:02.710: dot11_dot1x_verify_eapol_header: Warning: Invalid key len (exp=0x10, act=0x0)
211185: Oct 21 16:27:02.710: dot11_dot1x_verify_ptk_handshake: Handshake passed
211186: Oct 21 17:27:02 BST: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   847a.885b.622c Associated KEY_MGMT[WPAv2 PSK]
Does anyone have any ideas why I'm seeing the message "Could not find station pointer" or any other idea's why this is happening? A search of the web throws up many threads exhibiting the same symptoms but none seem to have a fix and the fixes there are (disable aironet extensions, extend the WPA handshake and disable guest mode) haven't worked so far.
Many thanks,

from that debug, the cleint was in a run state, then there was an EAPOL Start message.
As Blake had asked, what type of device is it? specifically what is the WNIC and driver versions?
Wireless drivers do not get updated with the standard windows update.
Steve

Exception:The client disconnected.

Hi,
I faced this exception frequently in my application at client site. Please suggest how i can resolve the issue?
An exception occurred. Exception:The client disconnected. StackTrace: at System.Web.UI.ViewStateException.ThrowError(Exception inner, String persistedState, String errorPageMessage, Boolean
macValidationError)    at System.Web.UI.HiddenFieldPageStatePersister.Load()    at System.Web.UI.Page.LoadPageStateFromPersistenceMedium()    at System.Web.UI.Page.LoadAllState()    at System.Web.UI.Page.ProcessRequestMain(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) An exception occurred. Exception:Invalid viewstate.
An exception occurred. Exception:Invalid length for a Base-64 char array or string. StackTrace: at System.Convert.FromBase64_Decode(Char* startInputPtr, Int32 inputLength, Byte* startDestPtr,
Int32 destLength)    at System.Convert.FromBase64CharPtr(Char* inputPtr, Int32 inputLength)    at System.Convert.FromBase64String(String s)    at System.Web.UI.ObjectStateFormatter.Deserialize(String inputString,
Purpose purpose)    at System.Web.UI.ObjectStateFormatter.System.Web.UI.IStateFormatter2.Deserialize(String serializedState, Purpose purpose)    at System.Web.UI.Util.DeserializeWithAssert(IStateFormatter2 formatter, String serializedState,
Purpose purpose)    at System.Web.UI.HiddenFieldPageStatePersister.Load()

Hi,
[quote]An exception occurred. Exception:Invalid length for a Base-64 char array or string.[/quote]
According to the error messages, it seems that the viewstate has become "large". You can try fixing by chunking the viewstate into multiple fields using maxPageStateFieldLength in the web.config:
<pages enableSessionState="true" enableViewState="true" enableViewStateMac="true" validateRequest
For more information, please refer to the document:
https://kb.sitecore.net/articles/051243
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to find client disconnected when client lost net connection?

Hi,
Can anyone help how can I find on fms server that client disconnected if if client disconnected due to power cut off. I client manually close the application then onDisconnect on server is called but if due to power cut off it does not called.
Thanks

See if this article is any kind of help : http://www.flashcomguru.com/forum/forum_posts.asp?TID=2848

Client Disconnected From Database

I'm running lookout 5.0 on one computer and logging its citadel to another machine. There is more than one lookout process on the PC that is actually running lookout itself. Different processes are logging to different designated database folders on the other computer. When you can actually get lookout to show the history info (i.e hypertrend data and such) on the computer it all works great. However if you ever restart the computer requiring to shutdown lookout, then the next time it boots up it is nearly impossible to get lookout to display the trend info again. You always get the "client disconnected from database" alarm. All the network paths and folder locations are correct. I am lost on this one.

Did you get this error every time you reboot Lookout or sometimes ?
If you get it sometimes:
Simply delete the /database/ Folder in Lookout directory
when you restart Lookout it will creat a new one.
From experience when you get this message the database is realy damage
i dont know why this happens.

Asking about how server can handle client disconnection

Dear sir/madam,
i'm doing my final year project and it is about a java client/server big2 game.But now i have a difficulties in dealing with the server side.
That is about how to take action on the serverside if the client suddenly disconnected.
I have read many java client/server programming scripts.But all of them doesn't mention this problem.The scrpits only assume the client side never disconnect suddenly.
I hope if you can give me some suggestions on this problem.

For my mud written in java, I used TCP/IP for the connections. When a client connects, he gets his own thread. Those threads are held in a vector in a manager class. each tick of the server does a quick run thru the vector and if the current thread/socket its on is null or !isAlive() its remove from the vector(which in turn removes it from getting any more game updates. This removal can be caused by two things. The clients disconnects by accident(kills his game, locks up has an internet connection hiccup, etc.) or he uses the games "quit" method. The quit method calls a method that does any player saving of data, etc then closes the socket, and sets it to null. thus the manager sees this and removes him frm the vecotr list on the next server tick. Seems to work great form a mud and worked really well in a multiplayer applet game I had up for a while.

MessageQ keep-alive. Info about client disconnect

Hi,
I'm using BEA MEssageQ to recieve messages from clients. But i need information if client is disconnected. Is there any keep-alive mechanism which tell me if client disconnected. Or maybe there is a message to check if client is connected?

Hi,
I asked one of the developers and got this response:
Actually OMQ has no pre-defined keep alive mechanism. OMQ is always accept the requests from clients passively, it cannot check the connectivity of client automatically.
OMQ can provide information about the status of the queue that the client attaches. If you can accept the hypothesis that client is connected if the its primary queue is attached, then one possible solution for your request may be: create an application which registers to receive availability (attached/detached) messages of the target queue from local Avail Server process. If the queue is available/attached, it means the corresponding client is connected. And if the queue is unavailable/detached, it means the corresponding client is disconnected.
Regards,
Todd Little
Oracle Tuxedo Chief Architect

WAP371 client disconnects

I have a similar issue as others have had with the WAP371 and clients disconnecting randomly. most of the discussion didn't have any real content, just said to open a case, which I have not done yet as im still researching this but I wanted to see if anyone has advice on my issue. I have both the 2.4 and 5ghz radios on, connection is good and all works fine. after 1 or 2 days, they just stop passing data. my clients show a connection but I cant do anything with it. I CAN access the AP from them but I have to reboot the AP in order to get network access back. It isn't like clockwork, but it does happen at least every 2 days or so. a reboot fixes it. sometimes, say 1 in 4, I lose complete connection to the ap and it will not rejoin. it DOES show up in the connection list, the ssid that is. the event logs are of little help, not indicating anything wrong. I thought originally channel interference, but ive ruled that out since. also worth noting, this replaced an apple airport extreme ap with the same basic settings. that ap worked fine for close to a year. same client connections, cabling, etc. it has to be something on the ap. tried an older 1.0 and newer 1.1 code. same results. any ideas? thanks!

im using WPA2 AES encryption. there are quite a few BSSIDs in my area, my ap sees around 10, but ive scanned and seen way more. the signal strength is pretty low on them and there are only 2 on my 2.4 channel and they are medium in strength and there are 0 on the 5ghz channel. I do not have band steer on, I believe I had 50ms for beacon interval but I uped it to 1sec. (didn't see broadcast refresh rate). its also worth noting I have a netatmo weather sensor that constantly connects and disconnects (to save power im guessing) below is a quick snippet from the log:
office-ap.ch.com Mar 13 09:28:21 host
apd[2256]: station: 00:24:e4:18:60:b0 deauthenticated
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:28:21 office-ap. Mar 13 09:28:21 host
apd[2256]: STA 00:24:e4:18:60:b0 deauthed from BSSID 1c:de:
a7:65:e7:c8 reason 4: Disassociated due to inactivity
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:27:31 office-ap. Mar 13 09:27:31 host
apd[2256]: STA 00:24:e4:18:60:b0 associated with BSSID 1c:d
e:a7:65:e7:c8
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:27:31 office-ap. Mar 13 09:27:31 host
apd[2256]: Assoc request from 00:24:e4:18:60:b0 BSSID 1c:de
:a7:65:e7:c8 SSID
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:27:21 office-ap. Mar 13 09:27:21 host
apd[2256]: station: 00:24:e4:18:60:b0 deauthenticated
host = office-ap. source = udp:514 sourcetype = syslog
13 09:27:21 office-ap. Mar 13 09:27:21 host
apd[2256]: STA 00:24:e4:18:60:b0 deauthed from BSSID 1c:de:
a7:65:e7:c8 reason 4: Disassociated due to inactivity
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:26:32 office-ap. Mar 13 09:26:32 host
apd[2256]: STA 00:24:e4:18:60:b0 associated with BSSID 1c:d
e:a7:65:e7:c8
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:26:32 office-ap. Mar 13 09:26:32 host
apd[2256]: Assoc request from 00:24:e4:18:60:b0 BSSID 1c:de
:a7:65:e7:c8 SSID
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:26:24 office-ap. Mar 13 09:26:24 host
apd[2256]: STA 14:10:9f:ed:6c:c6 associated with BSSID 1c:d
e:a7:65:e7:c0
host = office-ap. source = udp:514 sourcetype = syslog
Mar 13 09:26:24 office-ap. Mar 13 09:26:24 host
apd[2256]: Assoc request from 14:10:9f:ed:6c:c6 BSSID 1c:de
:a7:65:e7:c0 SSID
host = office-ap. source = udp:514 sourcetype = syslog

Detect Client Disconnect When using RTMP

Hello,
I hava a Java Server and Clients using RTMP. I've read somewhere that I can detect instantly client disconnection when using RTMP. However I cannot find an example code (in Java) that demonstrates this functionality? Can you help me please?

I am not sure how your client looks, however the lient connect using NetConnection under the hood which spits NetStatusEvents's and you can listen to them ...
C

Detect client disconnection

Hi.
My Java Web Service works with ComPorts so I need to close it in a right way when a client disconnects.
Is there a way to detect in the Web Service when a client disconnects.
Thank�s you all!!

So, i want to be able to find out if the client is disconnected without waiting to send or receive data.Use a read timeout.
how can i change the value of SO_KEEPALIVEYou can't. It is two hours by default and requires privilege to change it, and changing it is system-wide. So you don't want to do that.
Use a read timeout. Socket.setSoTimeout().

Detecting client disconnects

What's the best way to detect a client loss of connection? I've heard
you can register for weblogic.accounting.disconnect events or used the
workspace destroyMonitor method. Which is preferred? The events method
concerns me because I don't believe it will be supported in the future
once JMS takes a foothold. Is this a valid concern? Are there any new
ways to do this?
thanks,
Edwin

I would suggest you try catching java.net.SocketException (Connection reset
          by peer: socket write error) in you doGet/doPost method. This is not a sure
          way though ...
          --- Igor Zavialov
          "Dylan Taffe" <[email protected]> wrote in message
          news:3a5393d6$[email protected]..
          > Does anyone know of a way to detect client disconnects with servlets?
          Does
          > the contextEventListener or any other event listener get called when a
          > clients kills its connection with the weblogic server?
          >
          >

Wireless Client Disconnects

Greetings,
I have (two) of the latest Intel 802.11n/ac PCI desktop client adapters each connected to a set of external dual antennas. Both are running Win 8.1, basically they are identical and both are less than 20ft from the ceiling mounted AP. One client seems to work fine but the other will disconnect at random times at least once a day. Once that client is disconnected it can’t see any of our SSIDs for 5 to 20 mins. But it can see other Wi Fi signals / hotspots, etc.
Average RSSI is -61, SNR is 31
We've been running the following stable configuration for the past number of months:
- One 5508WLC - 7.5.102.0
- APs-3602I all running 802.11n (not .ac) in FlexConnect local switching mode
- Prime Infrastructure 1.3
- ISE 1.1.3
We've reinstalled Windows and updated the adapter drivers...no change. It seems obvious to me that it's a client issue but how can I log and prove it?
ISE doesn't show any authentications problems. I've read through other "client disconnect" posts here and made the few WLC setting changes recommended. I’ve turned on debugging on the WLC for the MAC of that client. The WLC msglog never logs anything against the client MAC. What other AP or WLC logs or debugging can I look at?
Thanks
Michael

Create an OPEN SSID and get the client to join.
Provide additional details:
1. debug client ;
2. sh client detail ;
3. What is the make and model of the wireless NIC of the client? What is the firmware version number?

ARD client disconnected from ARD under leopard after using curtain

I have just noticed a problem that occurs when I put a client under curtain mode under leopard....the client disconnects from the ARD console and remains in the locked state until I go over and manually restart the system...anyone else having this issue

Sorry, I hadn't noticed that someone replied...Geez you would think they would get this stuff corrected...Do you know if there is going to be an improved ARD in the future. I manage a lab and apple tools are better and more reliable but still have a long way to go....
Glen

VPN Client disconnection from command line

Hi,
I want to connect to IPsec VPN on ISA500 by VPN Client (v 5.0.07.0440, the last version, I think), using command line parameters.
I can connect with the command:
"%programfiles%\Cisco Systems\VPN Client\ipsecdialer.exe" -c -user myUser -pwd myPassword "MyConnectionEntry"
but i don't know the command to disconnect from command lines.
If I do
"%programfiles%\Cisco Systems\VPN Client\ipsecdialer.exe" -?
I obtain the list of parameters
vpngui [-c | -sc [sd] [-user <username>] [-pwd <password> ! -eraseuserpwd]] <connection entry>
but I don't unterstand what I have to do... I try every combination using -sd parameter (I think means for silent disconnect), but in every case I can only to show VPN interface without disconnect anything...
Can anyone help me?
Thanks

Prasath,
This appears to be a data flow issue. You need to look in the dataflow log file. Your information indicates the project name is SAMPLES.xml, and the data flow ID is D20091213_014350765. Look at the data flow log file in
C:\dqxi\11_7\repository\configuration_rules\runtme_metadata\project_SAMPLES\D20091213_014350765
Alternatively, you can temporarily replace the transactional reader and writter transforms with their corresonding batch transforms, and run the job from the Project Architect. Any errors will be displayed in the Running window.
Paul

Clients disconnect because of Capabilites change

Hi all,
recently we migrated AIR-LAP1131AG APs from a 4402 WLC running 4.1.185.0 release to a 5508 running 7.6.130.0. After we did that some clients constantly disconnected and reconnected. I strongly assume it has something to do with the additional features that were introduced between the releases.
During debugging I saw that after the client entered the RUN state that it got disconnected with the following error:
*spamApTask0: Mar 31 01:57:27.649: xx:xx:xx:xx:xx:xx Association Failed on REAP AP BSSID yy:yy:yy:yy:yy:yy (slot 0), status 1 0 Capabilities changed
Here is the whole debug output (X is the client, Y is the AP, Z are other APs for the group key)
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Adding mobile on LWAPP AP yy:yy:yy:yy:yy:yy(0)
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Association received from mobile on BSSID yy:yy:yy:yy:yy:yy
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Global 200 Clients are allowed to AP radio
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Max Client Trap Threshold: 0 cur: 0
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx override for default ap group, marking intgrp NULL
*apfMsConnTask_3: Mar 31 01:57:17.623: xx:xx:xx:xx:xx:xx Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Re-applying interface policy for client
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2219)
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2240)
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx In processSsidIE:4850 setting Central switched to FALSE
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Applying site-specific Local Bridging override for station xx:xx:xx:xx:xx:xx - vapId 5, site 'default-group', interface 'irglbxv'
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Applying Local Bridging Interface Policy for station xx:xx:xx:xx:xx:xx - vlan 14, interface id 14, interface 'irglbxv'
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx STA - rates (4): 2 4 11 22 0 0 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx STA - rates (12): 2 4 11 22 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Processing RSN IE type 48, length 20 for mobile xx:xx:xx:xx:xx:xx
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Updating AID for REAP AP Client yy:yy:yy:yy:yy:yy - AID ===> 1
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Encryption policy is set to 0x80000001
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Central switch is FALSE
*apfMsConnTask_3: Mar 31 01:57:17.624: xx:xx:xx:xx:xx:xx Sending Local Switch flag = 1
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx 0.0.0.0 8021X_REQD (3) DHCP required on AP yy:yy:yy:yy:yy:yy vapId 5 apVapId 5for this client
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx Not Using WMM Compliance code qosCap 00
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP yy:yy:yy:yy:yy:yy vapId 5 apVapId 5 flex-acl-name:
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx apfMsAssoStateInc
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx apfPemAddUser2 (apf_policy.c:333) Changing state for mobile xx:xx:xx:xx:xx:xx on AP yy:yy:yy:yy:yy:yy from Idle to Associated
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx apfPemAddUser2:session timeout forstation xx:xx:xx:xx:xx:xx - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx Sending Assoc Response to station on BSSID zz:zz:zz:zz:zz:zz (status 0) ApVapId 5 Slot 0
*apfMsConnTask_3: Mar 31 01:57:17.625: xx:xx:xx:xx:xx:xx apfProcessAssocReq (apf_80211.c:8294) Changing state for mobile xx:xx:xx:xx:xx:xx on AP yy:yy:yy:yy:yy:yy from Associated to Associated
*spamApTask0: Mar 31 01:57:17.708: xx:xx:xx:xx:xx:xx Sent 1x initiate message to multi thread task for mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.708: xx:xx:xx:xx:xx:xx Creating a PKC PMKID Cache entry for station xx:xx:xx:xx:xx:xx (RSN 2)
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Resetting MSCB PMK Cache Entry 0 for station xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Adding BSSID yy:yy:yy:yy:yy:yy to PMKID cache at index 0 for station xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: New PMKID: (16)
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: [0000] 95 e5 c8 10 ba cc 57 e5 1d 4c ab ae c3 eb 0c f5
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Initiating RSN PSK to mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx EAP-PARAM Debug - eap-params for Wlan-Id :5 is disabled - applying Global eap timers and retries
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx dot1x - moving mobile xx:xx:xx:xx:xx:xx into Force Auth state
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Skipping EAP-Success to mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx EAPOL Header:
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: 00000000: 02 03 00 5f ..._
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Found an cache entry for BSSID yy:yy:yy:yy:yy:yy in PMKID cache at index 0 of station xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Found an cache entry for BSSID yy:yy:yy:yy:yy:yy in PMKID cache at index 0 of station xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: Including PMKID in M1 (16)
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: [0000] 95 e5 c8 10 ba cc 57 e5 1d 4c ab ae c3 eb 0c f5
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Starting key exchange to mobile xx:xx:xx:xx:xx:xx, data packets will be dropped
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Sending EAPOL-Key Message to mobile zz:zz:zz:zz:zz:zz
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Sending EAPOL-Key Message to mobile zz:zz:zz:zz:zz:zz
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx Allocating EAP Pkt for retransmission to mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.709: xx:xx:xx:xx:xx:xx mscb->apfMsLwappLradNhMac = 00:00:0c:07:ac:01 mscb->apfMsLradSlotId = 0 mscb->apfMsLradJumbo = 0 mscb->apfMsintIfNum = 1
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.710: xx:xx:xx:xx:xx:xx mscb->apfMsBssid = yy:yy:yy:yy:yy:yy mscb->apfMsAddress = xx:xx:xx:xx:xx:xx mscb->apfMsApVapId = 5
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.710: xx:xx:xx:xx:xx:xx dot1xcb->snapOrg = 00 00 00 dot1xcb->eapolWepBit = 0 mscb->apfMsLwappLradVlanId = 0 mscb->apfMsLwappMwarInet.ipv4.addr = 171969037
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.710: xx:xx:xx:xx:xx:xx mscb->apfMsLwappMwarPort = 5246 mscb->apfMsLwappLradInet.ipv4.addr = 173667675 mscb->apfMsLwappLradPort = 23341
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Received EAPOL-key in PTK_START state (message 2) from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Stopping retransmission timer for mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx EAPOL Header:
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: 00000000: 02 03 00 5f ..._
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Sending EAPOL-Key Message to mobile zz:zz:zz:zz:zz:zz
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Sending EAPOL-Key Message to mobile zz:zz:zz:zz:zz:zz
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx Reusing allocated memory for EAP Pkt for retransmission to mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx mscb->apfMsLwappLradNhMac = 00:00:0c:07:ac:01 mscb->apfMsLradSlotId = 0 mscb->apfMsLradJumbo = 0 mscb->apfMsintIfNum = 1
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.792: xx:xx:xx:xx:xx:xx mscb->apfMsBssid = yy:yy:yy:yy:yy:yy mscb->apfMsAddress = xx:xx:xx:xx:xx:xx mscb->apfMsApVapId = 5
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.793: xx:xx:xx:xx:xx:xx dot1xcb->snapOrg = 00 00 00 dot1xcb->eapolWepBit = 0 mscb->apfMsLwappLradVlanId = 0 mscb->apfMsLwappMwarInet.ipv4.addr = 171969037
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.793: xx:xx:xx:xx:xx:xx mscb->apfMsLwappMwarPort = 5246 mscb->apfMsLwappLradInet.ipv4.addr = 173667675 mscb->apfMsLwappLradPort = 23341
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx Received EAPOL-Key from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx Stopping retransmission timer for mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx Freeing EAP Retransmit Bufer for mobile xx:xx:xx:xx:xx:xx
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx apfMs1xStateInc
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.897: xx:xx:xx:xx:xx:xx 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx Central switch is FALSE
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx Sending the Central Auth Info
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx Central Auth Info Allocated PMKLen = 32
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx PMK: pmkActiveIndex = 0
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx msAssocTypeFlagsMsb = 0 msAssocTypeFlagsLsb = 2
apfMsEntryType = 0 apfMsEapType = 0
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx Sending Local Switch flag = 0
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP yy:yy:yy:yy:yy:yy vapId 5 apVapId 5for this client
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP yy:yy:yy:yy:yy:yy vapId 5 apVapId 5 flex-acl-name:
*spamApTask0: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx spamEncodeCentralAuthInoMsPayload: msAssocTypeFlagsMsb = 0 msAssocTypeFlagsLsb = 2
apfMsEntryType = 0 pmkLen = 32
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6178, Adding TMP rule
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP yy:yy:yy:yy:yy:yy, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridging Vlan = 14, Local Bridging intf id = 14
*Dot1x_NW_MsgTask_7: Mar 31 01:57:17.898: xx:xx:xx:xx:xx:xx 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Mar 31 01:57:17.900: xx:xx:xx:xx:xx:xx 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*apfOrphanSocketTask: Mar 31 01:57:18.904: xx:xx:xx:xx:xx:xx Orphan Packet from STA - IP 10.89.246.63
*apfOrphanSocketTask: Mar 31 01:57:18.904: xx:xx:xx:xx:xx:xx apfMsRunStateInc
*apfOrphanSocketTask: Mar 31 01:57:18.904: xx:xx:xx:xx:xx:xx 10.89.246.63 DHCP_REQD (7) Change state to RUN (20) last state DHCP_REQD (7)
*apfOrphanSocketTask: Mar 31 01:57:18.904: xx:xx:xx:xx:xx:xx Assigning Address 10.89.246.63 to mobile
*pemReceiveTask: Mar 31 01:57:18.905: xx:xx:xx:xx:xx:xx 10.89.246.63 Removed NPU entry.
*dot1xMsgTask: Mar 31 01:57:19.863: GTK Rotation Kicked in for AP: zz:zz:zz:zz:zz:zz SlotId = 0 - (0x3ff07bf8)
*dot1xMsgTask: Mar 31 01:57:19.863: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 1
*dot1xMsgTask: Mar 31 01:57:19.863: GTK rotation for zz:zz:zz:zz:zz:zz
*dot1xMsgTask: Mar 31 01:57:19.863: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:19.863: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 2
*dot1xMsgTask: Mar 31 01:57:19.863: GTK rotation for zz:zz:zz:zz:zz:zz
*dot1xMsgTask: Mar 31 01:57:19.864: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:19.864: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 3
*dot1xMsgTask: Mar 31 01:57:19.864: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:19.864: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 4
*dot1xMsgTask: Mar 31 01:57:19.864: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:19.864: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 5
*dot1xMsgTask: Mar 31 01:57:19.865: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*mmMaListen: Mar 31 01:57:20.863: xx:xx:xx:xx:xx:xx 10.89.246.63 RUN (20) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*mmMaListen: Mar 31 01:57:20.863: xx:xx:xx:xx:xx:xx 10.89.246.63 RUN (20) Reached PLUMBFASTPATH: from line 5850
*dot1xMsgTask: Mar 31 01:57:21.263: GTK Rotation Kicked in for AP: zz:zz:zz:zz:zz:zz SlotId = 0 - (0x3ff07bf8)
*dot1xMsgTask: Mar 31 01:57:21.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 1
*dot1xMsgTask: Mar 31 01:57:21.263: GTK rotation for zz:zz:zz:zz:zz:zz
*dot1xMsgTask: Mar 31 01:57:21.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:21.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 2
*dot1xMsgTask: Mar 31 01:57:21.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:21.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 3
*dot1xMsgTask: Mar 31 01:57:21.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:21.264: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 4
*dot1xMsgTask: Mar 31 01:57:21.264: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:21.264: Generated a new group key for AP zz:zz:zz:zz:zz:zz(0) - vap 5
*dot1xMsgTask: Mar 31 01:57:21.264: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*spamApTask0: Mar 31 01:57:27.649: xx:xx:xx:xx:xx:xx Association Failed on REAP AP BSSID yy:yy:yy:yy:yy:yy (slot 0), status 1 0 Capabilities changed
*spamApTask0: Mar 31 01:57:27.649: xx:xx:xx:xx:xx:xx apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 8, reasonCode 1
*spamApTask0: Mar 31 01:57:27.649: xx:xx:xx:xx:xx:xx Scheduling deletion of Mobile Station: (callerId: 30) in 1 seconds
*osapiBsnTimer: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx apfMsExpireCallback (apf_ms.c:626) Expiring Mobile!
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx apfMsExpireMobileStation (apf_ms.c:6655) Changing state for mobile xx:xx:xx:xx:xx:xx on AP yy:yy:yy:yy:yy:yy from Associated to Disassociated
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Sent Deauthenticate to mobile on BSSID yy:yy:yy:yy:yy:yy slot 0(caller apf_ms.c:6749)
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Found an cache entry for BSSID yy:yy:yy:yy:yy:yy in PMKID cache at index 0 of station xx:xx:xx:xx:xx:xx
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Removing BSSID yy:yy:yy:yy:yy:yy from PMKID cache of station xx:xx:xx:xx:xx:xx
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Resetting MSCB PMK Cache Entry 0 for station xx:xx:xx:xx:xx:xx
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Setting active key cache index 0 ---> 8
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Deleting the PMK cache when de-authenticating the client.
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx Global PMK Cache deletion failed.
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx apfMsAssoStateDec
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx apfMsExpireMobileStation (apf_ms.c:6787) Changing state for mobile xx:xx:xx:xx:xx:xx on AP yy:yy:yy:yy:yy:yy from Disassociated to Idle
*apfReceiveTask: Mar 31 01:57:28.463: xx:xx:xx:xx:xx:xx pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfReceiveTask: Mar 31 01:57:28.464: xx:xx:xx:xx:xx:xx 10.89.246.63 START (0) Deleted mobile LWAPP rule on AP [yy:yy:yy:yy:yy:yy]
*apfReceiveTask: Mar 31 01:57:28.464: xx:xx:xx:xx:xx:xx Deleting mobile on AP yy:yy:yy:yy:yy:yy(0)
*dot1xMsgTask: Mar 31 01:57:30.263: GTK Rotation Kicked in for AP: zz:zz:zz:zz:zz:zz SlotId = 1 - (0x3ff07bf8)
*dot1xMsgTask: Mar 31 01:57:30.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(1) - vap 1
*dot1xMsgTask: Mar 31 01:57:30.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:30.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(1) - vap 2
*dot1xMsgTask: Mar 31 01:57:30.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:30.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(1) - vap 3
*dot1xMsgTask: Mar 31 01:57:30.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:30.263: Generated a new group key for AP zz:zz:zz:zz:zz:zz(1) - vap 4
*dot1xMsgTask: Mar 31 01:57:30.263: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
*dot1xMsgTask: Mar 31 01:57:30.264: Generated a new group key for AP zz:zz:zz:zz:zz:zz(1) - vap 5
*dot1xMsgTask: Mar 31 01:57:30.264: Sending of M5 for zz:zz:zz:zz:zz:zz is Skipped, rc = 1
Here is the configuration of the SSID on the 4402 and 5508 for comparison.
4402
WLAN Identifier.................................. 2
Profile Name..................................... xxxxx
Network Name (SSID).............................. xxxxx
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. Infinity
Interface........................................ xxxxxx
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Quality of Service............................... Silver (best effort)
WMM.............................................. Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Radio Policy..................................... All
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Enabled
TKIP Cipher............................. Enabled
AES Cipher.............................. Disabled
WPA2 (RSN IE).............................. Disabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Enabled
CCKM.................................... Disabled
CKIP ......................................... Disabled
IP Security................................... Disabled
IP Security Passthru.......................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Auto Anchor................................... Disabled
Cranite Passthru.............................. Disabled
Fortress Passthru............................. Disabled
H-REAP Local Switching........................ Disabled
Infrastructure MFP protection................. Enabled (Global Infrastructure MFP Disabled)
Client MFP.................................... Optional but inactive (WPA2 not configured)
Tkip MIC Countermeasure Hold-down Timer....... 60
Mobility Anchor List
WLAN ID IP Address Status
5508
WLAN Identifier.................................. 5
Profile Name..................................... xxxxx
Network Name (SSID).............................. xxxxx
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status
Radius Profiling ............................ Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Local Profiling ............................. Disabled
DHCP ....................................... Disabled
HTTP ....................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 3
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 86400 seconds
User Idle Timeout................................ Disabled
Sleep Client..................................... disable
Sleep Client Timeout............................. 12 hours
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... xxxxxxxx
CHD per WLAN..................................... Disabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ xxxxxxxx
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
WLAN Layer2 ACL.................................. unconfigured
mDNS Status...................................... Disabled
mDNS Profile Name................................ unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
PMIPv6 Mobility Type............................. none
PMIPv6 MAG Profile........................... Unconfigured
PMIPv6 Default Realm......................... Unconfigured
PMIPv6 NAI Type.............................. Hexadecimal
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Disabled
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Disabled
Accounting.................................... Disabled
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Enabled
TKIP Cipher............................. Enabled
AES Cipher.............................. Disabled
WPA2 (RSN IE).............................. Disabled
Auth Key Management
802.1x.................................. Disabled
PSK..................................... Enabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Disabled
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
WAPI.......................................... Disabled
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Enabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
flexconnect PPPoE pass-through................ Disabled
flexconnect local-switching IP-source-guar.... Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Optional but inactive (WPA2 not configured)
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
Tkip MIC Countermeasure Hold-down Timer....... 60
Eap-params.................................... Disabled
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Split Tunnel (Printers).......................... Disabled
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Does anybody have an idea where else I could look at?
Regards,
Patrick

I thought the same that those devices simply are too old. However I would like to know what causes this capabilities change. We want to get rid of the old H/W, but at the moment it looks as if we would need to revert back to the 4402 in order to get those things working again.
I have not enough information, but those devices are some kind of handhelds. Their MAC OUI belongs to Newport Electronics.
Regards,
Patrick

Clients Disconnecting

Similar Messages

Maybe you are looking for