Wireless clients don't receive IP addresses (DHCP)

Hello,
I have a 3502i ap and a WLC 5508, software version 8.0.100.0, currently under configuration. After following configuration guides and trying to get clients to function on the wireless network, I came to a roadblock with the client being recognized by the controller but not receiving an IP address. I get a "Acquiring network address" whenever I try to connect on the client laptop and it doesn't move from there. The WLC does recognize the client's MAC address, but the IP reads 0.0.0.0.
On the WLAN, I don't have Layer 2 or Layer 3 security turned on. I have clients for the Interface/Interfaces Group(G). I do not have the DHCP Override radio button turned on because it's to my understanding it is for internal DHCP, which is disabled. As for the Controller, the interface named "clients" is on a seperate vlan than the management and APs. The primary and secondary DHCP servers on this interface are the client vlan's IP and the helper address on the vlan (the helper address points to a GUI accessible Infoblox, which has a scope of available IPs). DHCP proxy is disabled and so is option 82. I have no form of IPv6 turned on that I could check for. I'm not sure if it's hurting, but the same DHCP parameters are set for the management interface; it's just the interface itself is set for a different subnet.
I tried to search through this forum for the answer, but it seems each situation is unique and with different variables involved. Or at least I'm interpeting them differently.

David,
In the above response to Steven Rodriguez, I posted the >show interface results. Pasted below here are the debug results:
*DHCP Socket Task: Dec 15 14:32:59.747: 00:0e:35:0a:0c:35 DHCP successfully bridged packet to DS
*emWeb: Dec 16 13:56:51.818: Configuring IPv6 ACL for WLAN:2, aclName passed is NULL
*apfMsConnTask_7: Dec 16 13:57:04.257: 00:0e:35:0a:0c:35 Processing assoc-req station:00:0e:35:0a:0c:35 AP:70:10:5c:b0:b3:20-00 thread:150e50c0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Adding mobile on LWAPP AP 70:10:5c:b0:b3:20(0)
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Association received from mobile on BSSID 70:10:5c:b0:b3:21 AP 1622_1st
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Global 200 Clients are allowed to AP radio
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Max Client Trap Threshold: 0 cur: 0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Re-applying interface policy for client
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385)
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406)
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 In processSsidIE:5680 setting Central switched to TRUE
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 In processSsidIE:5683 apVapId = 2 and Split Acl Id = 65535
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Applying site-specific Local Bridging override for station 00:0e:35:0a:0c:35 - vapId 2, site 'default-group', interface 'clients'
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 Applying Local Bridging Interface Policy for station 00:0e:35:0a:0c:35 - vlan 13, interface id 12, interface 'clients'
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 STA - rates (8): 130 132 139 12 18 150 24 36 0 0 0 0 0 0 0 0
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Dec 16 13:57:04.258: 00:0e:35:0a:0c:35 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 0.0.0.0 AUTHCHECK (2) Change state to L2AUTHCOMPLETE (4) last state AUTHCHECK (2)
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Sending 11w Flag 0 for Client 00:0E:35:0A:0C:35
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 70:10:5c:b0:b3:20 vapId 2 apVapId 2 flex-acl-name:
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 apfMsAssoStateInc
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 apfMsOpenStateInc
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:0e:35:0a:0c:35 on AP 70:10:5c:b0:b3:20 from Idle to Associated
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 apfPemAddUser2:session timeout forstation 00:0e:35:0a:0c:35 - Session Tout 1800, apfMsTimeOut '1800' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Func: apfPemAddUser2, Ms Timeout = 1800, Session Timeout = 1800
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Sending assoc-resp with status 0 station:00:0e:35:0a:0c:35 AP:70:10:5c:b0:b3:20-00 on apVapId 2
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Sending Assoc Response to station on BSSID 70:10:5c:b0:b3:21 (status 0) ApVapId 2 Slot 0
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:0e:35:0a:0c:35 on AP 70:10:5c:b0:b3:20 from Associated to Associated
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Mobility query, PEM State: DHCP_REQD
*apfMsConnTask_7: Dec 16 13:57:04.259: 00:0e:35:0a:0c:35 Building Mobile Announce :
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35   Building Client Payload:
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35     Client Ip: 0.0.0.0
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35     Client Vlan Ip: 10.10.3.254 Vlan mask : 255.255.255.0
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35     Client Vap Security: 0
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35     Virtual Ip: 1.1.1.1
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35     ssid: Diddly
*apfMsConnTask_7: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35   Building VlanIpPayload.
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) mobility role update request from Unassociated to Local
Peer = 0.0.0.0, Old Anchor = 0.0.0.0, New Anchor = 10.10.6.128
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 6102, Adding TMP rule
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 70:10:5c:b0:b3:20, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 13, Local Bridging intf id = 12
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfReceiveTask: Dec 16 13:57:04.260: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*pemReceiveTask: Dec 16 13:57:04.261: 00:0e:35:0a:0c:35 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Dec 16 13:57:04.261: 00:0e:35:0a:0c:35 Sent an XID frame
*apfMsConnTask_7: Dec 16 13:57:04.264: 00:0e:35:0a:0c:35 Processing assoc-req station:00:0e:35:0a:0c:35 AP:70:10:5c:b0:b3:20-00 thread:150e50c0
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Processing assoc-req station:00:0e:35:0a:0c:35 AP:70:10:5c:b0:b3:20-00 thread:150e50c0
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Association received from mobile on BSSID 70:10:5c:b0:b3:21 AP 1622_1st
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Global 200 Clients are allowed to AP radio
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Max Client Trap Threshold: 0 cur: 1
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Rf profile 600 Clients are allowed to AP wlan
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 override for default ap group, marking intgrp NULL
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Applying Interface policy on Mobile, role Local. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 13
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Re-applying interface policy for client
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2385)
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2406)
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 apfApplyWlanPolicy: Apply WLAN Policy over PMIPv6 Client Mobility Type
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 In processSsidIE:5680 setting Central switched to TRUE
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 In processSsidIE:5683 apVapId = 2 and Split Acl Id = 65535
*apfMsConnTask_7: Dec 16 13:57:04.318: 00:0e:35:0a:0c:35 Applying site-specific Local Bridging override for station 00:0e:35:0a:0c:35 - vapId 2, site 'default-group', interface 'clients'
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 Applying Local Bridging Interface Policy for station 00:0e:35:0a:0c:35 - vlan 13, interface id 12, interface 'clients'
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 apfMs1xStateDec
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Change state to START (0) last state DHCP_REQD (7)
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 pemApfAddMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0.
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 AUTHCHECK (2) Change state to L2AUTHCOMPLETE (4) last state AUTHCHECK (2)
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 Sending 11w Flag 0 for Client 00:0E:35:0A:0C:35
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 70:10:5c:b0:b3:20 vapId 2 apVapId 2 flex-acl-name:
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) pemApfAddMobileStation2 3735, Adding TMP rule
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 70:10:5c:b0:b3:20, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255, IPv
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 13, Local Bridging intf id = 12
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.319: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) pemApfAddMobileStation2 3923, Adding TMP rule
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 70:10:5c:b0:b3:20, slot 0, interface = 1, QOS = 0
IPv4 ACL ID = 255,
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206, IntfId = 12 Local Bridging Vlan = 13, Local Bridging intf id = 12
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) AVC Ratelimit: AppID = 0 ,AppAction = 0, AppToken = 15206 AverageRate = 0, BurstRate = 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255, L2 ACL ID 255)
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 apfPemAddUser2 (apf_policy.c:352) Changing state for mobile 00:0e:35:0a:0c:35 on AP 70:10:5c:b0:b3:20 from Associated to Associated
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 apfPemAddUser2:session timeout forstation 00:0e:35:0a:0c:35 - Session Tout 1800, apfMsTimeOut '1800' and sessionTimerRunning flag is 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 Func: apfPemAddUser2, Ms Timeout = 1800, Session Timeout = 1800
*pemReceiveTask: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 0.0.0.0 Removed NPU entry.
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 Sending assoc-resp with status 0 station:00:0e:35:0a:0c:35 AP:70:10:5c:b0:b3:20-00 on apVapId 2
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 Sending Assoc Response to station on BSSID 70:10:5c:b0:b3:21 (status 0) ApVapId 2 Slot 0
*apfMsConnTask_7: Dec 16 13:57:04.320: 00:0e:35:0a:0c:35 apfProcessAssocReq (apf_80211.c:9452) Changing state for mobile 00:0e:35:0a:0c:35 on AP 70:10:5c:b0:b3:20 from Associated to Associated
*pemReceiveTask: Dec 16 13:57:04.321: 00:0e:35:0a:0c:35 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*pemReceiveTask: Dec 16 13:57:04.321: 00:0e:35:0a:0c:35 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP received op BOOTREQUEST (1) (len 312,vlan 16, port 1, encap 0xec03)
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   xid: 0xd8947c74 (3633609844), secs: 0, flags: 0
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   chaddr: 00:0e:35:0a:0c:35
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP   requested ip: 169.254.99.106
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=13, datalen =18, optlen=68
*DHCP Socket Task: Dec 16 13:57:07.372: 00:0e:35:0a:0c:35 DHCP successfully bridged packet to DS
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP received op BOOTREQUEST (1) (len 312,vlan 16, port 1, encap 0xec03)
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   xid: 0xd8947c74 (3633609844), secs: 1024, flags: 0
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   chaddr: 00:0e:35:0a:0c:35
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP   requested ip: 169.254.99.106
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=13, datalen =18, optlen=68
*DHCP Socket Task: Dec 16 13:57:11.375: 00:0e:35:0a:0c:35 DHCP successfully bridged packet to DS
*DHCP Socket Task: Dec 16 13:57:20.378: 00:0e:35:0a:0c:35 DHCP received op BOOTREQUEST (1) (len 312,vlan 16, port 1, encap 0xec03)
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   xid: 0xd8947c74 (3633609844), secs: 3328, flags: 0
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   chaddr: 00:0e:35:0a:0c:35
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP   requested ip: 169.254.99.106
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=13, datalen =18, optlen=68
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 DHCP successfully bridged packet to DS
*DHCP Socket Task: Dec 16 13:57:20.379: 00:0e:35:0a:0c:35 Interface Group was NULL.Number of DHCP Discovery 3 from client
*DHCP Socket Task: Dec 16 13:57:36.382: 00:0e:35:0a:0c:35 DHCP received op BOOTREQUEST (1) (len 312,vlan 16, port 1, encap 0xec03)
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   xid: 0xd8947c74 (3633609844), secs: 7424, flags: 0
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   chaddr: 00:0e:35:0a:0c:35
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP   requested ip: 169.254.99.106
*DHCP Socket Task: Dec 16 13:57:36.383: 00:0e:35:0a:0c:35 DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=13, datalen =18, optlen=68

Similar Messages

After Enabling trunking and two VLANs on switchports - clients don't receive IP Addresses

Hello all and thanks for your help and expertise. Here's my scenario:
I have approximately 35 Ruckus APs in a building which has multiple VLANs. The switches are Cisco 3560G. I want to segment the wireless traffic onto a dedicated wireless VLAN (218). I created two scopes in DHCP to service the APs and wireless clients. The APs should get their IP addresses on VLAN 1 (VLAN 1 scope in dhcp.) The clients should get their IP addresses on VLAN 218 (VLAN 218 scope in dhcp). I utilized the following commands to accomplish this goal, unsuccessfully.
Example: on port gi0/5
1 - switchport trunk encapsulation dot1q
2 - switchport mode trunk
3 - switchport mode access
4 - switchport trunk allowed vlan 1,218
Problems: 1) The APs are not getting an IP address on the default or native VLAN 1 unless I configure an IP Helper. Please note we have another building where a consultant set this configuration up (and it works) but I don't see an IP helper set when I check the config for VLAN 1.
2) The wireless clients do not get an IP address on VLAN 218, even if I set an IP helper address. In the other building - there is an IP helper set on VLAN 218 so I'm not sure what I missing or if something else is configured.
I would greatly, greatly appreciate if someone could tell me what I'm missing here. Is there something else I have to do to ensure clients on vlan 1 and 218 are able to obtain dhcp addresses in the config of the switch? Do I have to further configure vlan 1 or 218? I'm enabling the correct encapsulation, trunking the ports, and setting the vlans. What am I missing here relative to APs and clients getting dhcp addresses. Anyway your help is much apprecaited.

You need vlan 218 on all switches and allowed on all trunks that need to pass traffic for that vlan.
You don't have to add it explicitly to STP as it should be run anyway but if you manually set STP priorities for other vlans you should probably do if for this vlan as well.
Shouldn't stop it working though.
If you manually assign a vlan 218 IP to a client can it ping the SVI IP ie. it's default gateway and if so can it ping devices in other vlans ?
Jon

How does the ask-to-buy notification determine which organizer's device to send it to? I keep receiving notifications on my ipad but not my iphone. my ipad does not have a data plan so if i'm not on wireless, i don't receive any notifications.

How does the Family Share ask-to-buy notification determine which organizer's device to send it to? I keep receiving notifications on my iPad, but not on my iPhone. My iPad does not have a data plan so if I'm not on wireless, I don't receive any notifications.

Did you ever receive a solution for this issue?

Linux client don't receive messages

I got this strange problem. I'm using weblogic 8.1 sp5 as a J2EE server for an application that use JMS. I also have a java client who send messages to a queue and receive messages throw a topic. When a run the client in a windows machine the messages are sended and received, but when I use a Linux machine (redhat 3) the client don't receive the messages published into the topic.
I've tried into several machines, with redhat 3 and fedora. The only way to make it work is to run the client into the same machine where the server is.
Please help!
Thanks

I finally solve the problem!
The linux client has a default entry in the hosts file matching the 127.0.0.1 IP the the machine name. For some reason, the jms topic listener didnt' keep the connection with the server and start listening to himself. Therefore, the messages wasn't processed by the topic listener.
Removing this entry and creating a new one matching the real IP with the host name solve the problem.

Wireless Client List keeps getting strange addresses

I am having some issues with the wireless client list in my Linksys E3000 wireless router. I want to use the wireless client list and enter the MAC addresses of the devices that I want to have access. Any where from 5 minutes to a couple days, more MAC's have been added to the list, from devices that don't off hand belong there (not mine). Sometimes, some of the devices that I have put there, will be removed and replaced with the others. Those that are replaced then do not have access. There are about 18 common MAC's that show up.
As an experiment, after many times of replacing these stray MAC's, I tried putting all of the stray MAC's in and restricting them from access. That was good for about 24 hours and the list was misteriously deleted from the restricted list. There is no common thread between time or devices connected.
The following is a list of devices as they appear. Most will reappear after being deleted from the list:
0A:60:76 Unknown
00:FF:30 Unknown
00:25:F0 Suga Electronics Limited
00:1F:16 Wistron Corporation
70:1A:04 Liteon Tech Corp.
0C:60:76 Hon Hai Precision Ind. Co.,Ltd.
00:1F:16 Wistron Corporation
70:1A:04 Liteon Tech Corp.
00:26:22 COMPAL INFORMATION (KUNSHAN) CO., LTD.
08:00:27 cadmus computer systems
90:E6:BA ASUSTek COMPUTER INC.
00:23:CC Nintendo Co., Ltd.
00:16:44 Liteon Tech Corp.
F0:B4:79 Unknown
00:1E:8C ASUSTek COMPUTER INC.
00:26:9E Quanta Computer Inc
08:00:27 cadmus computer systems
00:10:75 Maxtor Corp. (was: creative design solutions,inc.)
I have assigned IP's to the devices that I want connected.
I have reset to factory settings.
I have the current firmware. I even reinstalled the current firmware.
I have scanned for viruses and malware.
I am using WPA2 security.
The only hardwired computer that I am on now is running Windows 7. All other computers are running W7. All computers are up to date. All antivirus and malware soft is up to date. All other devices, (cameras, drives, printers, etc.) have firmware up to date.
Any suggestions?

Here is the issue:
If I use Permit, MAC's are added to the list which eventually fills up and starts knocking off the one's that I want there.
If I use Prevent, the MAC's that have appeared in the Permit list will start disappearing from the Prevent list.
I have WPA2 Personal encryption on. Remote access turned off.
If I have the Prevent list on with Remote access off, how are these stray MAC's being removed.
If I have the Permit list on with Remote access off, how are these MAC's being added and removing the correct one's.

Problem: The wireless client Obtaining IP address.

Problem: The wireless client Obtaining IP address.
Setup.
I have a fiber circuit which feedes my Wan port. Then
I made a local network that then I branch off to five other AirPort Extremes.
Acting as access points with a static IP for local network, with no security enable and extending the wireless network name is off.
With both types of models, the new & older all extreme models.
Sym:
I can reset the head end airport router with will fix the problem for a day or so.
Question:Can the wireless client cause this type of problem. the reason I asked, everything was working fine for the last 2 two years until I added a new access point. I have change it out with another unit which did not help the dhcp problem.
So my thinking either my head end router is starting to go bad with DHCP or a wireless client interaction may be locking up DHCP until I restart the router again.
Has any one had the same type of problems with DHCP???

Thanks for the quick response.
The first option sounds like I need some type of wireless software which at the moment I'm not utilizing so don't know how to do that.
option 2 also sounds foreign to me ! ;-)
Can you add some details or point me to any links you can ref me to so I can try to familiarize myself with these options ?
Regards
Mark

1131AG: Wireless clients randomly unreachable

Hi,
I have a weird issue with my 1131AG-E-K9. I set up a lab at home to get back into the topic after a few years break. My 1131AG is connected to one of the PoE ports of an ASA5505. Clients are 2 Soundbridge internet radios, my Android phone and my laptop. The wireless clients get their IP via DHCP from a central server in the wired LAN.
Now the problem:
The wireless clients become randomly unreachable. The DHCP leases are valid 1 hour and once a day, usually in the afternoon, the radios don't get a new IP anymore. When I monitor the LAN, I see the DHCPREQUEST, DHCPDISCOVER and DHCPOFFER packets but they don't seem to arrive in the WLAN. When I manually deassociate one arbitrary client or a completely different client, say, my laptop joins the network and gets an IP via DHCP, suddenly all clients receive the DHCPOFFER and go back active.
So it looks like the access point would somehow start throwing away packets from the server to the radios after some time.
I'm pretty much clueless and have googled for hours to find a solution...
The server and the radios are talking constantly to each other, however, mostly through broadcasts (Bonjour and DLNA).
I do not have the problem when I use a cheap crap consumer AP instead of the 1131AG, so I would at first glance exclude the ASA as source of the problems. The network is also flat, i.e. the WLAN is the same subnet as the LAN and there's no routing, no fw rules and no different VLANs involved.
Ideas, anyone?
-S

Hi Sebastian, thank you for your reply! The access point is an autonomous access point AIR-AP1131-AG-E-K9, so there is no WLC involved.
This is the config:
! Last configuration change at 15:16:16 UTC Mon Nov 24 2014 by sgofferj
! NVRAM config last updated at 15:16:21 UTC Mon Nov 24 2014 by sgofferj
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname echo
no logging buffered
no logging rate-limit
no logging console
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
server [RFC1918] auth-port 1812 acct-port 1813
aaa group server radius rad_admin
server [RFC1918] auth-port 1812 acct-port 1813
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server tacacs+ tac_admin
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting exec default start-stop group rad_acct
aaa accounting network acct_methods start-stop group rad_acct
aaa cache profile admin_cache
all
aaa session-id common
no ip igmp snooping
dot11 syslog
dot11 vlan-name LAN vlan 1
dot11 ssid Stefan_Gofferje
   vlan 1
   authentication open
   authentication key-management wpa version 2
   guest-mode
   mbssid guest-mode
   wpa-psk ascii 7 [CODE]
   no ids mfp client
power inline negotiation injector 001d.450b.fb08
crypto pki trustpoint TP-self-signed-2716624410
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2716624410
revocation-check none
rsakeypair TP-self-signed-2716624410
crypto pki certificate chain TP-self-signed-2716624410
certificate self-signed 01
30820249 308201B2 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32373136 36323434 3130301E 170D3134 30373136 31393132
35375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37313636
32343431 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C3E0 BCF4B199 68C92993 E4DA9F8E BFD62231 C974A8DA A39F47A7 1268E490
F59A3BCD 123D0F8C 98B4DAC1 0E65FB70 BE42A8A5 A8CF8A75 A5287804 7B3244AC
3AAF5F88 A0533A76 B192A6F8 88AFBADF 2D101637 E6061BC3 FE2F197B BA7E3172
BA5FAA01 85F59AA6 3A99E2C5 4F1F1624 71657D4E 9392E228 B0FA6D3C F97EAFB5
0F770203 010001A3 71306F30 0F060355 1D130101 FF040530 030101FF 301C0603
551D1104 15301382 11656368 6F2E676F 66666572 6A652E6E 6574301F 0603551D
23041830 1680141C 09AC7570 978D1975 1CA7A73C 5927A051 6DB28630 1D060355
1D0E0416 04141C09 AC757097 8D19751C A7A73C59 27A0516D B286300D 06092A86
4886F70D 01010405 00038181 000EB3FE 7EA03ABE D215F9DB 0421AC99 CACC9501
9710D99B 3B2F155B FB7C24E1 45DA20E8 FCF7FC2D 4B794CAA 7FDF7B0E 3253A0DE
510B067D 5832636C BE03EA47 F673A389 7488788A 329F014A 755D5D1A 92502A41
11FAD8E8 CE1458DF 45246365 42B42549 C3370C03 7C8FEA47 5F0D4E01 1FF20773
741A6839 A6BBB581 7CDA3262 32
quit
username sgofferj privilege 15 password 7 [CODE]
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm
encryption vlan 1 mode ciphers aes-ccm
broadcast-key change 10
ssid Stefan_Gofferje
no short-slot-time
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2437
station-role root
no dot11 extension aironet
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
encryption mode ciphers aes-ccm
encryption vlan 1 mode ciphers aes-ccm
broadcast-key change 10
ssid Stefan_Gofferje
no dfs band block
speed basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel dfs
station-role root
no dot11 extension aironet
interface Dot11Radio1.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address dhcp client-id FastEthernet0
no ip route-cache
no ip http server
ip http authentication aaa
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
logging trap debugging
logging [RFC1918]
access-list 111 permit tcp any any neq telnet
snmp-server view dot11view ieee802dot11 included
snmp-server community public RO
tacacs-server host [RFC1918] key 7 [CODE]
radius-server attribute 32 include-in-access-req format %h
radius-server host [RFC1918] auth-port 1812 acct-port 1813 key 7 [CODE]
radius-server vsa send accounting
bridge 1 route ip
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
sntp server [RFC1918]
sntp broadcast client
end

WRT600N Doesn't show any entries in the Wireless Client List

Hi, my WRT600N is on firmware 1.01.35 build 3. When I check the wireless client list from the Wireless MAC Filter page, it is empty, even though I know I have 3 clients connected. They are all using 802.11g, as I don't have any N devices yet. When I go to the Status page and check the DHCP Client Table, both of my wired clients are there, but only 1 wireless client appears. The DHCP Client Log file is useless, as it only appears to log the ip address it receives from my isp. There are no entries of the ip addresses it has given out. Is my WRT600N defective, or is there firmware in the works to correct this?

Another thing I've notice, is that the DHCP client table is showing the 2.4 wireless devices as LAN interfaces. Shouldn't it show the frequency, like it does my one 5GHz device? Things have changed, because the Wii is now showing in both the Wireless Client List, as well as the DHCP Client table. It shows as a LAN interface though, which is wrong, it should be 2.4GHz. My one pc that is a 5GHz N device, is also showing in both the Wireless Client List, & the DHCP Client table. Neither the wireless 2.4 gaming adapter, or the HR20 connected to it show up in either list. Neither does a laptop which is 2.4GHz. This is really a concern, because I've caught 2 neighbors stealing my bandwidth in the past, and I can't stop them if I can't see them.

Bridge does not work for wireless clients - connecting to existing network.

Hi - I really hope somebody can help out here, after hours of trial & error, I have finally given up
I need to connect my Airport Extreme Base Station to my existing network. I have a linksys router (192.168.15.1) connected to my modem and this linksys router acts as DHCP server too.
I suppose I have to use "bridge mode" for that to work. But should the linksys be connected to the AEBS using the AEBS's WAN or LAN port?
If I use "bridge mode", then wired computers to the AEBS works fine - getting an IP from the linksys etc. BUT, the wireless clients will have a self-assigned IP and not get through to the internet. It's like the AEBS will not allow wireless clients to "get through" unless AEBS itself is handing out IP addresses.
Page 36 of this manual ( http://manuals.info.apple.com/en/DesigningAirPort_Networks10.5-Windows.pdf ) shows the setup I want. But in the picture, it says "Ethernet WAN port" but the text says: "The Apple wireless device (in this example, a Time Capsule) uses your Ethernet network to communicate with the Internet through the Ethernet LAN port ( <--> )." I don't know which one to use, WAN or LAN - they show WAN but say LAN?
When I set it up as "share an IP address", the AEBS status tells me "double nat" and to change from "shared IP" to "bridge mode". I do that, and everything seems fine - for the wired clients. Now the wireless clients cannot connect, Airport on the MacBook Pro just say "Connection failed" and the MacBook says "Invalid password" (translated from danish), even though I set the Airport Utlity to save the password in keyring, so it should be correct... If I disable wireless encryption, the wireless clients will connect but get a self-assigned IP, and therefor not work (cannot get online)...
It seems the only way I can get wireless to work, is if I set AEBS up as DHCP, but then it won't be on the "same network" as the linksys (192.168.15.1), but rather on 10.0.x.x as I select. If I select 192.168.x.x within AEBS, I'm also getting some error messages, conflict/subnet thing.
Anyway - I really hope somebody knows how to get wireless clients to get an IP address from existing ethernet when connected to the AEBS.
Thanks!!

I've given up and had to go back to running "Double NAT" which also reports as a "problem" within the AEBS, but I just "ignore" it so the light will always be green.
It still ***** though, as "Double NAT" is also a reason for "Back to my Mac" not working properly, but how the ** am I supposed to avoid Double NAT when the wireless will not work in bridged mode?!

E1200 Wireless Client List will not display and causes web UI to temporarily stop responding

I picked up an E1200 and set it up successfully. I am using wireless MAC filtering, and decided to pull up the list of connected wireless clients (Wireless >> Wireless MAC Filter >> push "Wireless Client List" button).
When I do so, it immediately throws this back:
Immediately after this the Web UI of the E1200 becomes inaccessible. It still routes traffic, and the router remains pingable, but it will not allow access to the Web UI for several minutes. The error that appears upon attempt to access the Web UI during this time window is similar to the above, but reads "Error 102 (net::ERR_CONNECTION_REFUSED): The server refused the connection."
I have tried this in Google Chrome, Firefox 4, and MSIE on two separate computers. Each browser displays the error a bit differently (MSIE, for example, just says it can't display the page and gives no further detail) but the net results are always the same. I have tried resetting the device to factory defaults in addition to re-downloading the firmware from the Cisco/Linksys website and installing it. No improvement.
I have also noted that the Log (Administration >> Log; and yes, I have it enabled) doesn't appear to be picking up anything at all. In fact, the Security log, which supposedly (according to the Help) "displays the login information for the Router’s browser-based utility," is also blank.
Is this a bug, or should I head back to the retailer and swap this device?

Ok - I nailed this down, I think, and it looks like a firmware bug.
Short version is that a factory reset cleared the issue, but during stepwise reconfiguration the problem came back. Through a bunch of iteration I figured out that if I have the E1200's DHCP server disabled *and* have wireless clients connected to it, the problem I described appears.
Turn the DHCP server back on and the problem goes away. Turn it off and the problem comes back. Turn it back on and it goes away. You get the idea.
If I had to pose a theory here, it's that the initial display of the Wireless Client List, which uses "IP Address" as the default sort, somehow implodes if the E1200 isn't actually assigning those IP addresses to the clients.
When this happens it appears to crash the Web UI wholesale. Just for grins, while the Web UI was unresponsive, I pinged the router it as before - still pingable - then ran nmap against it - no open ports found on the router. When the Web UI is functional, though, nmap detects port 80 quite easily. I have not timed how long it takes for the Web UI to come back up, but it is longer than 5 minutes, and I presume some sort of watchdog process has to detect that it has gone kaput and start it up again.
Final test was to restore my saved configuration from before the factory reset (note that the saved config was done under the same firmware version, and in this config, the DHCP server is disabled). Boom, problem. Wait for the Web UI to come back, turn on the DHCP server. Problem goes away. Turn the DHCP server off. Boom, problem comes back.
So, there you go.
Would be interesting if someone could verify this via a test against another E1200. It may be worth noting that in my baseline test I was also using Manual wireless setup (vs. Wi-Fi Protected Setup), and WPA2. Didn't make any other setting changes from the factory defaults. I did not actually have to turn the Wireless MAC Filter on to do the test. All one needs to do is click Enable on the Wireless MAC Filter tab, and then do *not* click Save Settings - just clicking Enable will light up the Wireless Client List button, which you can then push to get the list. That is how I handled testing to ensure that neither specific entries, nor the Prevent/Permit setting, nor having the filter enabled in saved configuration were involved in the problem.
Separately, no explanation for the lack of entries in the security log, but that pretty much looks like a firmware bug to me as well.

Airport Extreme and Dlink dwl-2000AP+ as wireless client

Hi,
i'm trying to let an old iMac G3 without any airport card, join an existing lan using an Airport Extreme as router, connecting an old D-Link access point configured as wireless client and connected via ethernet to the iMac G3. All my setup works fine if the wireless connection is open without encryption, but it won't work using any protection like WPA or WEP.
When the airport express wireless connection is protected via WPA, the dlink won't be present in wireless clients list panel. When i use WEP (with a password of 13 characters) i can see in the wireless clients list both the MAC address of the iMac's ethernet and of the dwl-2000AP+ etherenet. But the connection won't work.
I'm sure i'm not configuring right the DWL-2000AP+ wireless protection:
i can't understand if i can change the airport express WEP encryption to a 64 bits or to a 128 bit, if the WEP method used is with a shared key or not.
The only info i get from it to let the clients connect are the WEP ASCII plain-text 13 characters password and its conversion in HEX base.
I'm assuming, since the password is a 13 character, that in WEP encryption the Airport Extreme uses a 128 bits key, but, again, how i can understand if it is used in shared way or in open way?
And why the dlink AP that is WPA capable cannot connect as wireless client to the airport express when is using WPA/WPA2 Personal encryption?
I upgraded the DWL-2000AP+ to its latest firmware that (they sayd)fixes any issue with the wireless client mode on WPA or WEP protected connections.
Thanks in advance for any help given.
P.S.: sorry for my "broken" english
Message was edited by: Rayced

Resolved by myself. It works only setting the Dlink dwl-2000AP+ wireless client connection (wireless pane in the admin control of it) as open with WEP 128bits and using as key an ascii password of 13 charcaters. The Airport Extreme's wireless encryption should be set as WEP, using the same password of 13 charcaters. I still can't uderstand why the WPA/WPA2 encryption wouldn't work since the Dlink dwl-2000AP is WPA capable.
Maybe it could be so because the Airport Extreme is WPA2 and at the first negotiation between it and the dwl-2000AP+, the Airport Extreme won't downgrade to WPA encryption? Does anybody else tried to connect a WPA wireless client to the Airport Extreme setup as WPA2/WPA Personal?
@wallstreet 04: try to setup your Airport Extreme's wireless encryption to WEP and use a 13 chars password, then do the same on the Dlink wireless client you are trying to connect to the base, i don't know how is its control panel but the wireless should be setup as open with WEP 128, as key use that 13 chars password you put in the Extreme's as WEP password. If in the Dlink WEP 128 bits key field you have to put an HEX value instead of the ASCII, you can get that from the Airport Utility from the menu BASE AIRPOT select PASSWORD NETWORK... (the one before the last choice that should be ADD WIRELESS CLIENT).
I hope it will help.

Configure Wireshark on 3850 to capture bi-directional Wireless Client Traffic

I'm trying to configure Wireshark to capture bi-directional client traffic of a single wireless client only. The IP address is 10.10.10.14 on VLAN 1. Since I can't apply filters to the CAPWAP interface, I chose VLAN 1, with the following base commands.
monitor capture MCAP interface VLAN1 both
monitor capture MCAP file location usbflash:mcap.pcap buffer-size 1
monitor capture MCAP limit duration 120
If I configure "monitor capture MCAP match ipv4 any any" I get too much information. If I use "monitor capture MCAP match ipv4 host 10.10.10.14 any" I get packets transmitted by 10.10.10.14, but not the responses.
Is there a way to accomplish this, or do I need to use Wireshark to filter unwanted packets? If this were a busy AP, this could result in a very large capture file. Thanks for the help.

I'm trying to configure Wireshark to capture bi-directional client traffic of a single wireless client only. The IP address is 10.10.10.14 on VLAN 1. Since I can't apply filters to the CAPWAP interface, I chose VLAN 1, with the following base commands.
monitor capture MCAP interface VLAN1 both
monitor capture MCAP file location usbflash:mcap.pcap buffer-size 1
monitor capture MCAP limit duration 120
If I configure "monitor capture MCAP match ipv4 any any" I get too much information. If I use "monitor capture MCAP match ipv4 host 10.10.10.14 any" I get packets transmitted by 10.10.10.14, but not the responses.
Is there a way to accomplish this, or do I need to use Wireshark to filter unwanted packets? If this were a busy AP, this could result in a very large capture file. Thanks for the help.

Can router dhcp different addresses to different vlans for wireless clients

is it possible for the router to hand out different ip's to wireless clients on different vlans?

Yes, the router needs to have a dhcp pool on each subnet and have an "interface Vlan x" for each vlan. It will then assign ips to clients in different vlans.
One vlan per SSID.

Client not receive ip address - dhcp_reqd

Hi,
In my environment there's a 5508 (firmware 7.4.110.0) and ap 1600 with a ias radius server. All wlan are in flex-connect local switching, one client try to connect on a wlan but not receive ip address. After enabled debug aaa all i took the log corresponding :
Cisco Controller) >*emWeb: Feb 11 16:52:36.047: Created WARP Capabilities IE (length 12) for WLAN LAB
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Adding mobile on LWAPP AP 00:3a:9a:77:55:a0(0)
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Association received from mobile on BSSID 00:3a:9a:77:55:06
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Rf profile 200 Clients are allowed to AP radio
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Max Client Trap Threshold: 50 cur: 3
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Rf profile 200 Clients are allowed to AP wlan
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 0 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 Re-applying interface policy for client
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
*apfMsConnTask_2: Feb 11 16:54:22.495: 18:3d:a2:25:01:a4 In processSsidIE:4264 setting Central switched to FALSE
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying site-specific Local Bridging override for station 18:3d:a2:25:01:a4 - vapId 103, site 'Test', interface 'management'
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying Local Bridging Interface Policy for station 18:3d:a2:25:01:a4 - vlan 0, interface id 0, interface 'management'
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying site-specific override for station 18:3d:a2:25:01:a4 - vapId 103, site 'Test', interface 'management'
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Applying Interface policy on Mobile, role Unassociated. Ms NAC State 2 Quarantine Vlan 0 Access Vlan 0
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Re-applying interface policy for client
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2018)
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:2246)
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 STA - rates (8): 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 STA - rates (12): 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Processing WPA IE type 221, length 24 for mobile 18:3d:a2:25:01:a4
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 8
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 unsetting PmkIdValidatedByAp
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state START (0)
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state AUTHCHECK (2)
*apfMsConnTask_2: Feb 11 16:54:22.496: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) DHCP required on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1for this client
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1 flex-acl-name:
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfMsAssoStateInc
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfPemAddUser2 (apf_policy.c:276) Changing state for mobile 18:3d:a2:25:01:a4 on AP 00:3a:9a:77:55:a0 from Idle to Associated
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfPemAddUser2:session timeout forstation 18:3d:a2:25:01:a4 - Session Tout 0, apfMsTimeOut '0' and sessionTimerRunning flag is 0
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Func: apfPemAddUser2, Ms Timeout = 0, Session Timeout = 0
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 Sending Assoc Response to station on BSSID 00:3a:9a:77:55:a0 (status 0) ApVapId 1 Slot 0
*apfMsConnTask_2: Feb 11 16:54:22.497: 18:3d:a2:25:01:a4 apfProcessAssocReq (apf_80211.c:7399) Changing state for mobile 18:3d:a2:25:01:a4 on AP 00:3a:9a:77:55:a0 from Associated to Associated
*apfMsConnTask_2: Feb 11 16:54:22.506: 18:3d:a2:25:01:a4 Updating AID for REAP AP Client 00:3a:9a:77:55:a0 - AID ===> 4
*dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 Station 18:3d:a2:25:01:a4 setting dot1x reauth timeout = 1800
*dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Connecting state
*dot1xMsgTask: Feb 11 16:54:22.512: 18:3d:a2:25:01:a4 Sending EAP-Request/Identity to mobile 18:3d:a2:25:01:a4 (EAP Id 1)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 Received EAPOL START from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Connecting state
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.513: 18:3d:a2:25:01:a4 Sending EAP-Request/Identity to mobile 18:3d:a2:25:01:a4 (EAP Id 2)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.541: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.541: 18:3d:a2:25:01:a4 Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Received Identity Response (count=2) from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 EAP State update from Connecting to Authenticating for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Authenticating state
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.554: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=3) for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.572: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 3)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 3, EAP Type 25)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.585: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=4) for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.598: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 4)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 4, EAP Type 25)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.613: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Processing Access-Challenge for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Entering Backend Auth Req state (id=7) for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 WARNING: updated EAP-Identifier 4 ===> 7 for STA 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.627: 18:3d:a2:25:01:a4 Sending EAP Request from AAA to mobile 18:3d:a2:25:01:a4 (EAP Id 7)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Received EAPOL EAPPKT from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Received EAP Response from mobile 18:3d:a2:25:01:a4 (EAP Id 7, EAP Type 25)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.643: 18:3d:a2:25:01:a4 Entering Backend Auth Response state for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Processing Access-Accept for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Resetting web IPv4 acl from 255 to 255
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Resetting web IPv4 Flex acl from 65535 to 65535
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting re-auth timeout to 1800 seconds, got from WLAN config.
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Station 18:3d:a2:25:01:a4 setting dot1x reauth timeout = 1800
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Username entry (pippo) created for mobile, length = 253
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Username entry (pippo) created in mscb for mobile, length = 253
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Creating a PKC PMKID Cache entry for station 18:3d:a2:25:01:a4 (RSN 0)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 8
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Setting active key cache index 8 ---> 0
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.656: 18:3d:a2:25:01:a4 Sending EAP-Success to mobile 18:3d:a2:25:01:a4 (EAP Id 7)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Freeing AAACB from Dot1xCB as AAA auth is done for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Starting key exchange to mobile 18:3d:a2:25:01:a4, data packets will be dropped
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                    state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Entering Backend Auth Success state (id=7) for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 Received Auth Success while in Authenticating state for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.657: 18:3d:a2:25:01:a4 dot1x - moving mobile 18:3d:a2:25:01:a4 into Authenticated state
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Received EAPOL-key in PTK_START state (message 2) from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.671: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                    state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 apfMs1xStateInc
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) DHCP required on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1for this client
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.689: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 00:3a:9a:77:55:a0 vapId 103 apVapId 1 flex-acl-name:
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 5952, Adding TMP rule
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule
type = Airespace AP - Learn IP address
on AP 00:3a:9a:77:55:a0, slot 0, interface = 13, QOS = 0
IPv4 ACL ID = 255, IP
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridging Vlan = 0, Local Bridging intf id = 0
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 Key exchange done, data packets from mobile 18:3d:a2:25:01:a4 should be forwarded shortly
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 Sending EAPOL-Key Message to mobile 18:3d:a2:25:01:a4
                                                                                                                    state PTKINITDONE (message 5 - group), replay counter 00.00.00.00.00.00.00.02
*pemReceiveTask: Feb 11 16:54:22.690: 18:3d:a2:25:01:a4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
*spamApTask3: Feb 11 16:54:22.707: 18:3d:a2:25:01:a4 Sent EAPOL-Key M5 for mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.768: 18:3d:a2:25:01:a4 Received EAPOL-Key from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.768: 18:3d:a2:25:01:a4 Received EAPOL-key in REKEYNEGOTIATING state (message 6) from mobile 18:3d:a2:25:01:a4
*Dot1x_NW_MsgTask_4: Feb 11 16:54:22.769: 18:3d:a2:25:01:a4 Stopping retransmission timer for mobile 18:3d:a2:25:01:a4
*apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
*apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) pemAdvanceState2 5576, Adding TMP rule
*apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule
type = Airespace AP - Learn IP address
on AP 00:3a:9a:77:55:a0, slot 0, interface = 13, QOS = 0
IPv4 ACL ID = 255,
*apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 15206 Local Bridging Vlan = 0, Local Bridging intf id = 0
*apfReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule (IPv4 ACL ID 255, IPv6 ACL ID 255)
*pemReceiveTask: Feb 11 16:54:25.619: 18:3d:a2:25:01:a4 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0
(Cisco Controller) >*emWeb: Feb 11 16:54:46.127: 18:3d:a2:25:01:a4 Central Switch = FALSE
*emWeb: Feb 11 16:54:46.128: 18:3d:a2:25:01:a4 Central Switch = FALSE
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >*emWeb: Feb 11 16:55:36.461: 18:3d:a2:25:01:a4 Central Switch = FALSE
*emWeb: Feb 11 16:55:36.463: 18:3d:a2:25:01:a4 Central Switch = FALSE
From log i know that 802.1x passed, while dhcp don't send ip address. It seems that the local vlan id is 0 while in reality is 3... WHY ? i don't understand.
Someone can help me to find the problem? i think the problem is on the network, the dhcp ( the corporate router) is directly connected to the ap.

Are you setting your FlexConnect native vlan and the wlan to vlan mapping? You also need to make sure you have the ip helpers setup and that dhcp is working. I would configure a switch port to a vlan that the wireless users is suppose to be on locally at that site and connect a laptop to that port and make sure that the laptop gets an address.
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Wireless client keep loosing IP address.

Hi,
I am in hot water, i am not good with wireless i have wireless LAN in my network which is connected to wired network. the problem is my clients get connected to the network but suddently they loose connectivity and start dhcp request and get limited connecitivity with automatic ip address.
My network design is like this.
1. I have a three floor building every floor has its own core and access layer and floors are connected layer 3 (not usual layer 2).
2. Wireless Controllers 4402 are in layer 3 mode and are on ground floor and AP are everywhere in building.
3. Wireless controllers are connected to ground floor core using a VLAN say VLAN 205 and AP's on ground floor and other floors are in different VLANs (physical connectivity of AP's).
4. controllers are configured for two different VLAN's say VLAN 212 for data and VLAN 213 for voice.
5. VLAN interface of the controller is configured with right helper address for DHCP.
My problem is i am a bit confused with the desigh of the network. As i mentioned all floors are connected layer 3 it means seperate VTP domain and seperate VLAN's, all APs on all floors are in differnt IP subnet respectively. but the wireless VLAN is common for all the users on all floors, this is the bit which confuses me alot. the wireless data VLAN has its own IP subnet which is advertised from gound floor only (make sense) but the users are not connecting to ground floor APs only they are connecting everywhere in the building. Users are getting IP address from the wireless VLAN range on every floor, can anybody explain me how they are getting communication because wireless subnet is only local to ground floor core not to first floor or second floor but some people are connecting to 1st floor and 2nd floor AP and are working fine.
The next pain is that my laptops started loosing IP address and they get automatic private IP address hence loose connectivity, the communication issue i referred above is secondary i am actually looking to rectify the ip address issue because users are having problem with it. Signal strength on every floor is perfect and coverage is ok, i have tried to debug dhcp detail packet but i don't receive any because controllers are in differnt VLAN for physical connectivity. Can somebody help me with this thing?
Regards,

Your wireless clients will associate to the best AP interms of signal strenght and signal to noise etc.
There is an LWAPP tunnel between the access point and the controller.
At the controller there will be logical interfaces for the wireless LANS that are asssociated to specific VLANs on the wired network.
It doesn't matter where you are in the building as a client as its the controller that puts the client data onto the wired network.
All client data is tunneled between the access point and the controller.
With regard to the losing IP address situation. I assume that the clients do initially get an IP address and then lose it after a period of time.
Check the session timeout paramter on the controller (look on the WLAN-Advanced).
There is a bug with some versions of software relating to session timeouts. Try setting the timeout to 65535 seconds. The default setting is probably 30 minutes.

Wireless clients don't receive IP addresses (DHCP)

Similar Messages

Maybe you are looking for