Similar documents
ext-web-auth-wlc.pdf

標準 BIG 中文字型碼表 A 0 9 B C D E F 一 乙 丁 七 乃 九 了 二 人 儿 入 八 几 刀 刁 力 匕 十 卜 又 三 下 丈 上 丫 丸 凡 久 么 也 乞 于 亡 兀 刃 勺 千 叉 口 土 士 夕 大 女 子 孑 孓 寸 小 尢 尸 山 川 工 己 已 巳 巾 干 廾

1 2 / 3 1 A (2-1) (2-2) A4 6 A4 7 A4 8 A4 9 A ( () 4 A4, A4 7 ) 1 (2-1) (2-2) ()

4 / ( / / 5 / / ( / 6 ( / / / 3 ( 4 ( ( 2

1 WLAN 接 入 配 置 本 文 中 的 AP 指 的 是 LA3616 无 线 网 关 1.1 WLAN 接 入 简 介 WLAN 接 入 为 用 户 提 供 接 入 网 络 的 服 务 无 线 服 务 的 骨 干 网 通 常 使 用 有 线 电 缆 作 为 线 路 连 接 安 置 在 固 定


2

民 國 105 年 大 專 程 度 義 務 役 預 備 軍 官 預 備 士 官 考 選 簡 章 目 錄 壹 考 選 依 據 1 貳 考 ( 甄 ) 選 對 象 1 參 資 格 規 定 1 肆 員 額 及 專 長 類 別 2 伍 報 名 及 選 填 志 願 日 期 方 式 3 陸 選 填 官 科 (

SIK) 者, 需 實 施 1 年 以 上, 經 體 格 檢 查 無 後 遺 症 者 5. 身 體 任 何 部 分 有 刺 青 紋 身 穿 耳 洞 者, 不 得 報 考, 各 項 檢 查 結 果 須 符 合 體 位 區 分 標 準 常 備 役 體 位 二 在 校 軍 訓 成 績 總 平 均 70 分

IP505SM_manual_cn.doc

PS PS GMM SM.zte.com.

!!""# $ %#" & $$ % $()! *% $!*% +,-. / 0 %%"#" 0 $%1 0 * $! $#)2 "


untitled

AL-M200 Series

Ps22Pdf

!" #$%#&#! () *+, -.!" #$%#/# $!" /$12 0!" 3 4 $$255 % 67 8 $ %% #! " # $9&$

untitled

SL2511 SR Plus 操作手冊_單面.doc

untitled

民國八十九年台灣地區在校學生性知識、態度與行為研究調查

解 除 身 份 验 证 机 密 性 Wep 等 一 些 加 密 机 制 MSDU 传 递 (MAC Service Data Unit) 负 责 将 数 据 传 送 给 实 际 的 接 收 端 传 输 功 率 控 制 (Transmit Power Control 简 称 TPC) 欧 洲 标 准

Visualize CMap

!!"#$ " # " " " " " "$%%& " $%% " "!!

PL600 IPPBX 用户手册_V2.0_.doc

EPSON


財金資訊-80期.indd

Simulator By SunLingxi 2003

untitled


<4D F736F F D F F315FAAFEA5F333AAF9B645C2E5C0F8AA41B0C8C249BCC6B24DB3E6B443C5E9A5D3B3F8AEE6A6A12E646F63>

!!!!"#$ " " %& ( " # " " " " " "$%%& " $%% " "!!

高二立體幾何

IC-900W Wireless Pan & Tilt Wireless Pan & Tilt Remote Control / Night Vision FCC ID:RUJ-LR802UWG

WCA Regulations and Guidelines

Ps22Pdf

一.NETGEAR VPN防火墙产品介绍

!""# $!""%!"&" #

Microsoft Word - NHIS2013_C_130716_送印_.doc

D E 答 案 :C 3. 工 作 站 A 配 置 的 IP 地 址 为 /28. 工 作 站 B 配 置 的 IP 地 址 为 /28. 两 个 工 作 站 之 间 有 直 通 线 连 接, 两 台

E170C2.PDF

NSC-161

EPSON

Chapter 2

untitled



# #$$%& ()*+, -$. #-# / & 0 & 0 #& $& 1 #.& /# 2(3 #$$# $..-$ #$ 0 0 $$$$4 0 0 %# 0-5$ 6 /-0 /0 #$ 0 5$$$ #$$% 0 0 #$$% ()*+, -$. #-# / 7, $8 $$

1

ebook140-9



種 類 左 淋 巴 總 管 ( 胸 管 ) 右 淋 巴 總 管 血 管 連 接 連 接 左 鎖 骨 下 靜 脈 連 接 右 鎖 骨 下 靜 脈 淋 巴 收 集 範 圍 左 上 半 身 及 下 半 身 淋 巴 液 右 上 半 身 淋 巴 液 長 度 很 長 很 短 (3) 循 環 路 徑 : (4)

ebook140-8

ebook20-8

ebook140-11


epub 61-2

比 賽 表 Competition Schedule 報 到 : 比 賽 開 始 前 15 分 鐘 Reporting : 15 minutes before the scheduled time for the match 各 參 賽 隊 伍 必 須 依 照 大 會 編 定 的 出 場 比 賽,

数 学 高 分 的 展 望 一 管 理 类 联 考 分 析 第 一 篇 大 纲 解 析 篇 编 写 : 孙 华 明 1 综 合 能 力 考 试 时 间 :014 年 1 月 4 日 上 午 8:30~11:30 分 值 分 配 : 数 学 :75 分 逻 辑 :60 分 作 文 :65 分 ; 总

例 009 年高考 全国卷Ⅱ 理 8 如 图 直 三 棱 柱 ABC ABC 中 AB AC D E 分 别为 AA BC 的中点 DE 平面 BCC 证明 AB AC 设二面角 A BD C 为 0o 求 BC 与平面 BCD 所 成角的大小 图 - 略 证明 以 D 为坐标原点 DA DC DD

"!! " "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! " #$$%!& #$$%! " #! "

第 7 章 下 一 代 网 际 协 议 IPv6 141 足 的 措 施 只 能 是 权 宜 之 计 (3) 路 由 表 膨 胀 早 期 IPv4 的 地 址 结 构 也 造 成 了 路 由 表 的 容 量 过 大 IPv4 地 址 早 期 为 网 络 号 + 主 机 号 结 构, 后 来 引 入

AL-MX200 Series

中华人民共和国海关进出口税则

ebook 185-6

untitled

《计算机网络》实验指导书

!"# $%& ()) *+,+)-./01!"# $%& ()) *+,+)-./01!"#! "#$ 2!"# ):; 2!B! 2 "B # $ 2 %4 C C 2 &4 %D?<?4 6<5 2 (9D =6

untitled

Symantec™ Sygate Enterprise Protection 防护代理安装使用指南

Microsoft Word - template.doc

!% &$ % (% )% &%!""* +% ($ % )% &%,% ($ % )% &% ) *% ($ ( #% )$ % (% &% ( -% ($.% ($ ( ) & /. /!""*! $!"

untitled


!"#$!"%&!"$!""( )( )( #( "#*!&#) %&*!(+,- %.!/( )( #( ,-2 89 /



Windows 2000 Server for T100

穨control.PDF

SIGNUM 3SB3

+00DE _01EN.book

主 題 四 : 都 卜 勒 效 應 一 都 卜 勒 效 應 1. 現 象 : 當 波 源 與 觀 察 者 連 線 間 有 相 對 運 動 時, 聽 者 所 接 收 到 的 頻 率 ( 視 頻 ) 將 與 波 源 之 原 頻 率 不 同, 此 現 象 稱 為 都 卜 勒 效 應 例 如 站 於 路 旁

2 response personnel to speed up the rescue operations after various natural or man-made disasters. Keywords: SMS, Database, Disaster

<4D F736F F D20C1E3B5E3CFC2D4D8C4A3B0E52E646F63>


HOL-CHG-1695

MICROMASTER 410/420/430/440 DA kW 250kW MICROMASTER Eco & MIDIMASTER Eco MICROMASTER, MICROMASTER Vector DA64 MIDIMASTER Vector 90kW (Low

产品画册 S2700系列企业交换机 2

CIP. / ISBN Ⅰ.... Ⅱ.... Ⅲ. Ⅳ. G CIP http / /press. nju. edu. cn

" "##$ """ $ $%%& %& ()(*(+,& " - - # -./ % # - - $( +?5 - %( +?5 ;&77&12 0 # -01,( 2+0 1% ( ) &) 3 $, -01,( 2+0 "##$ %4# %

! "! #$# +&#!! %& #!"# )*+ % #!"!!!"!! =1.>7? "$+"+ (!! &< =1.>7? % $%& $& ( )*+ $*& $(B *& ;; / %" ;; C% %( &&& 0, ;17 -#D" (D-"" B ( %&& 0

※※※※※

IDS-Concepts

zt

:;< =;< >!?%(, (-+ *$5(1 *$%* *#%0$#34 65&# *--.20$ $-.#+-317 A$#, 4%, 5* 54! >! B-3 0$5)/3#( * %* $-.# 5( *$#53 B3## *5.#7

Bus Hound 5

! *!"#$%&'()*+,-./#01 6, 8 6, 8 6, 8 8!"# ( / )!"# ( / )!"# ( / )! ( ) 3SB3!" Ø22mm!"# ( / ) 6, 8 6, 8 6, 8 8!"# ( / )!"# ( / )!"# ( ) 7, 10 7, 9 7, 8

Transcription:

5760/3850 无 线 控 制 器 使 用 外 部 RADIUS 服 务 器 进 行 EAP 身 份 验 证 的 配 置 示 例 介 绍... 2 先 决 条 件... 2 要 求... 2 使 用 的 组 件... 2 配 置... 3 网 络 拓 扑 图... 3 概 览... 3 使 用 CLI 配 置 5760/3850 无 线 控 制 器... 4 使 用 GUI 配 置 5760/3850 无 线 控 制 器... 4 配 置 ACS 5.2(RADIUS 服 务 器 )... 9 验 证... 11 故 障 排 除... 11

介 绍 本 文 档 介 绍 了 如 何 配 置 无 线 控 制 器 使 用 外 部 RADIUS 服 务 器 进 行 可 扩 展 身 份 验 证 协 议 EAP- FAST 的 认 证 此 配 置 示 例 使 用 思 科 安 全 访 问 控 制 服 务 器 (ACS) 作 为 以 验 证 无 线 客 户 端 的 外 部 RADIUS 服 务 器 先 决 条 件 要 求 思 科 建 议 您 具 备 以 下 知 识 : * 轻 量 级 无 线 接 入 点 思 科 5760 无 线 控 制 器 和 Catalyst 3850 系 列 交 换 机 的 配 置 基 本 知 识 * 轻 型 无 线 接 入 点 协 议 (LWAPP) 的 基 本 知 识 * 如 何 配 置 外 部 RADIUS 服 务 器 的 知 识, 例 如 Cisco Secure ACS 5.2 版 本 本 文 配 置 的 例 子 是 EAP-FAST * 一 般 的 EAP 框 架 功 能 知 识 * 安 全 协 议 的 基 本 知 识, 例 如 Microsoft 质 询 握 手 身 份 验 证 协 议 版 本 2(MS-CHAPv2) 和 EAP- 通 用 令 牌 卡 (EAP-GTC) * 数 字 证 书 的 基 本 知 识 使 用 的 组 件 本 文 档 中 的 信 息 基 于 以 下 软 件 和 硬 件 版 本 : * 思 科 无 线 控 制 器 5760 版 本 3.2.2 * 思 科 3602 系 列 无 线 接 入 点 * 具 有 英 特 尔 PROSet 客 户 端 的 微 软 Windows XP 系 统 * 思 科 安 全 访 问 控 制 服 务 器 5.2 版 * 思 科 Catalyst 3560 系 列 交 换 机 本 文 档 中 的 资 料 是 从 一 个 特 定 实 验 室 环 境 中 的 设 备 上 生 成 的 本 文 档 中 使 用 的 所 有 设 备 以 缺 省 ( 默 认 ) 配 置 开 始 配 置 如 果 您 的 网 络 是 正 在 使 用 的 生 产 系 统, 请 确 保 您 了 解 所 有 命 令 带 来 的 潜 在 影 响

配 置 注 意 : 使 用 命 令 查 找 工 具 ( 只 有 CCO 注 册 的 用 户 可 以 访 问 ) 以 获 取 有 关 本 部 分 所 使 用 命 令 的 详 细 信 息 网 络 拓 扑 图 下 图 提 供 了 网 络 拓 扑 的 例 子 : 概 览

配 置 分 两 个 步 骤 完 成 : 1. 命 令 行 界 面 (CLI) 或 图 形 用 户 界 面 配 置 5760/3850 无 线 控 制 器 2. 配 置 ACS 5.2(RADIUS 服 务 器 ) 使 用 CLI 配 置 5760/3850 无 线 控 制 器 此 过 程 说 明 如 何 使 用 CLI 以 配 置 WLAN 的 客 户 端 所 需 的 VLAN, 并 将 其 映 射 到 身 份 验 证 方 法 列 表 : wlan EAPFAST 4 EAPFAST client vlan VLAN0020 security dot1x authentication-list ACS session-timeout 1800 no shutdown aaa new-model!! aaa group server radius ACS server name ACS! aaa authentication dot1x ACS group ACS radius server ACS address ipv4 10.106.102.50 auth-port 1645 acct-port 1646 key Cisco123 dot1x system-auth-contro 使 用 GUI 配 置 5760/3850 无 线 控 制 器 此 过 程 介 绍 如 何 使 用 GUI 配 置 5760 控 制 器 和 3850 交 换 机 : 1. 为 了 添 加 RADIUS 服 务 器, 导 航 到 Configuration > Security > AAA:

2. 导 航 到 Server Groups > Radius, 以 名 称 ACS 创 建 RADIUS 服 务 器 组 : 3. 导 航 到 RADIUS > Services, 配 置 ACS 的 RADIUS 服 务 器 :

这 是 一 个 完 整 配 置 的 例 子 : 4. 导 航 到 Method Lists > General, 启 用 Dot1x System Auth Control(802.1x 认 证 系 统 控 制 ) 否 则, 身 份 验 证 可 能 会 失 败 : 5. 导 航 到 Method Lists > Authentication, 映 射 配 置 为 ACS RADIUS 服 务 器 的 方 法 列 表, 这 反 过 来 又 被 映 射 到 WLAN 的 认 证, 授 权 和 计 费 (AAA) 服 务 器 :

这 是 ACS 在 方 法 列 表 中 : 6. 为 了 配 置 WLAN 和 映 射 ACS, 打 开 在 GUI 界 面, 导 航 到 Configuration > Wireless > WLAN > WLANs 7. 在 WLAN 页 面, 单 击 新 建, 然 后 导 航 到 General 活 页 夹 创 建 一 个 802.1X 认 证 的 无 线 局 域 网 并 映 射 RADIUS 服 务 器 :

8. 导 航 到 Security Tab > Layer 2, 确 保 有 WPA/WPA2 和 802.1X 启 用 : 9. 导 航 到 AAA 服 务 器 选 项 卡, 然 后 在 WLAN 中 映 射 验 证 方 法 列 表 为 ACS :

配 置 ACS 5.2(RADIUS 服 务 器 ) 此 过 程 介 绍 如 何 配 置 RADIUS 服 务 器 假 设 5760 无 线 控 制 器 和 3850 交 换 机 已 经 作 为 AAA 客 户 端 添 加 到 ACS 1. 导 航 到 Users and Identity Stores > Internal Identity Stores > Users, 在 ACS 配 置 用 户 和 用 户 数 据 库 : 2. 导 航 到 Access Policies > Access Services > Default Network Access, 启 用 所 需 的 身 份 验 证 协 议 在 本 例 子 中 请 启 用 EAP-FAST:

3. 导 航 到 Default Network Access > Identity, 配 置 身 份 序 列 规 则 EAP-FAST: 4. 导 航 到 Default Network Access > Authorization, 查 看 认 证 成 功 后 对 EAP 客 户 端 授 权 的 授 权 访 问 规 则 :

验 证 使 用 本 节, 以 确 认 您 的 配 置 工 作 正 常 客 户 端 连 接 到 WLAN EAPFAST 故 障 排 除 注 : 使 用 debug 命 令 之 前 请 参 阅 有 关 Debug 命 令 的 重 要 信 息

Controller#sh debugging Nova Platform: dot11/state debugging is on pem/events debugging is on client/mac-addr debugging is on dot11/detail debugging is on mac/ filters[string 0021.5c8c.c761] debugging is on dot11/error debugging is on dot11/mobile debugging is on pem/state debugging is on set trace group-wireless-client filter mac 0021.5c8c.c761 set trace wcm-dot1x event filter mac 0021.5c8c.c761 set trace wcm-dot1x aaa filter mac 0021.5c8c.c761 set trace aaa wireless events filter mac 0021.5c8c.c761 set trace access-session core sm filter mac 0021.5c8c.c761 set trace access-session method dot1x filter 0021.5c8c.c761 Controller# *Sep 1 06:00:18.282: 0021.5C8C.C761 Association received from mobile on AP C8F9.F983.4260 1 wcm:.d^iw for client 0:21:5c:t! w\2105hnj^iwy_status 0 attr len^g$8\227v^k *Sep 1 06:00:18.282: 0021.5C8C.C761 qos upstream policy is unknown and downstream policy is unknown 1 wcm: r client 0:21:5c:t! w\2105hnj^iwy_status 0 attr len^g$8\227v^k *Sep 1 06:00:18.282: 0021.5C8C.C761 apchanged 0 wlanchanged 1 mscb ipaddr 20.20.20.3, apf RadiusOverride 0x0, numipv6addr=0 1 wcm: nj^iwy_status 0 attr len^g$8\227v^k *Sep 1 06:00:18.282: 0021.5C8C.C761 Applying WLAN policy on MSCB. 1 wcm: ipaddr 20.20.20.3, apf RadiusOverride 0x0, numipv6addr=0 *Sep 1 06:00:18.282: 0021.5C8C.C761 Scheduling deletion of Mobile Station: 1 wcm: (callerid: 50) in 1 seconds *Sep 1 06:00:18.282: 0021.5C8C.C761 Disconnecting client due to switch of WLANs from 1(wpa2psk) to 4(EAPFAST) 1 wcm: numipv6addr=0 *Sep 1 06:00:19.174: 0021.5C8C.C761 apfmsexpirecallback (apf_ms.c: 1 wcm: 664) Expiring Mobile! *Sep 1 06:00:19.174: 0021.5C8C.C761 apfmsexpiremobilestation (apf_ms.c: 1 wcm: 6953) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Associated to Disassociated *Sep 1 06:00:19.174: 0021.5C8C.C761 Sent Deauthenticate to mobile on BSSID C8F9.F983.4260 slot 1(caller apf_ms.c: 1 wcm: 7036) *Sep 1 06:00:19.174: 0021.5C8C.C761 apfmsexpiremobilestation (apf_ms.c: 1 wcm: 7092) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from

Disassociated to Idle *Sep 1 06:00:19.174: 0021.5C8C.C761 20.20.20.3 RUN (20) Deleted mobile LWAPP rule on AP [ C8F9.F983.4260 ] 1 wcm: 5C8C.C761 on AP C8F9.F983.4260 from Disassociated to Idle *Sep 1 06:00:19.174: PEM recv processing msg Del SCB(4) 1 wcm: Deleted mobile *Sep 1 06:00:19.174: 0021.5C8C.C761 20.20.20.3 RUN (20) FastSSID for the client [ C8F9.F983.4260 ] NOTENABLED 1 wcm: C.C761 on AP C8F9.F983.4260 from Disassociated to Idle *Sep 1 06:00:19.174: 0021.5C8C.C761 Incrementing the Reassociation Count 1 for client (of interface VLAN0020) 1 wcm: D *Sep 1 06:00:19.174: 0021.5C8C.C761 Clearing Address 20.20.20.3 on mobile 1 wcm: for client (of interface VLAN0020) *Sep 1 06:00:19.174: 0021.5C8C.C761 20.20.20.3 RUN (20) Skipping TMP rule add 1 wcm: lient (of interface VLAN0020) *Sep 1 06:00:19.174: 0021.5C8C.C761 20.20.20.3 RUN (20) Change state to DHCP_REQD (7) last state RUN (20) 1 wcm: *Sep 1 06:00:19.174: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x8a3a8000000043, bssid C8F9.F983.4260 *Sep 1 06:00:19.174: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:19.174: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Suppressing SPI (client pending deletion) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 *Sep 1 06:00:19.174: 0021.5C8C.C761 Sending SPI spi_epm_epm_terminate_session successfull 1 wcm: pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 *Sep 1 06:00:19.175: 0021.5C8C.C761 Sending SPI spi_epm_epm_terminate_session successfull 1 wcm: pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 *Sep 1 06:00:19.175: 0021.5C8C.C761 Deleting wireless client; Reason code 0, Preset 1, AAA cause 1 1 wcm: 7 state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 *Sep 1 06:00:19.175: 0021.5C8C.C761 WCDB_DEL: 1 wcm: Successfully sent *Sep 1 06:00:19.175: 0021.5C8C.C761 Expiring mobile state delete 1 wcm: on code 0, Preset 1, AAA cause 1 *Sep 1 06:00:19.175: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) Handling pemdelscb Event skipping delete 1 wcm: state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 *Sep 1 06:00:19.178: 0021.5C8C.C761 WCDB SPI response msg handler client code 1 mob state 1 1 wcm: g delete *Sep 1 06:00:19.178: 0021.5C8C.C761 apfprocesswcdbclientdelete: 1 wcm: Delete ACK from WCDB. *Sep 1 06:00:19.178: 0021.5C8C.C761 WCDB_DELACK: 1 wcm: wcdbackrecvdflag updated *Sep 1 06:00:19.178: 0021.5C8C.C761 WCDB_DELACK: 1 wcm: Client IIF Id dealloc SUCCESS w/ 0x8006400000004e.

*Sep 1 06:00:19.178: 0021.5C8C.C761 Invoked platform delete and cleared handle 1 wcm: w/ 0x8006400000004e. *Sep 1 06:00:19.178: 0021.5C8C.C761 Deleting mobile on AP C8F9.F983.4260 (1) 1 wcm: w/ 0x8006400000004e. *Sep 1 06:00:19.178: 0021.5C8C.C761 Unlinked and freed mscb 1 wcm: 8F9.F983.4260 (1) *Sep 1 06:00:19.178: WCDB_IIF: 1 wcm: Ack Message ID: 0x8006400000004e code 1003 *Sep 1 06:00:19.361: 0021.5C8C.C761 Adding mobile on LWAPP AP C8F9.F983.4260 (1) 1 wcm: x800640000.d^iwe. *Sep 1 06:00:19.361: 0021.5C8C.C761 Creating WL station entry for client - rc 0 1 wcm: *Sep 1 06:00:19.361: 0021.5C8C.C761 Association received from mobile on AP C8F9.F983.4260 1 wcm: 0.D^Iwe. *Sep 1 06:00:19.361: 0021.5C8C.C761 qos upstream policy is unknown and downstream policy is unknown 1 wcm: *Sep 1 06:00:19.361: 0021.5C8C.C761 apchanged 0 wlanchanged 0 mscb ipaddr 0.0.0.0, apf RadiusOverride 0x0, numipv6addr=0 1 wcm: \2105HnJ^Iwlient_id 0x80064000^G$8\227v^K *Sep 1 06:00:19.361: 0021.5C8C.C761 Applying WLAN policy on MSCB. 1 wcm: ipaddr 0.0.0.0, apf RadiusOverride 0x0, numipv6addr=0 *Sep 1 06:00:19.361: 0021.5C8C.C761 Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numipv6addr=0 *Sep 1 06:00:19.361: 0021.5C8C.C761 No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usoverride 0x0, numipv6addr=0 *Sep 1 06:00:19.361: 0021.5C8C.C761 Applying site-specific IPv6 override for station 0021.5C8C.C761 - vapid 4, site 'default-group', interface 'VLAN0020' 1 wcm: *Sep 1 06:00:19.361: 0021.5C8C.C761 Applying local bridging Interface Policy for station 0021.5C8C.C761 - vlan 20, interface 'VLAN0020' 1 wcm: erface 'VLAN0020' *Sep 1 06:00:19.361: 0021.5C8C.C761 STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0 *Sep 1 06:00:19.361: 0021.5C8C.C761 new capwap_wtp_iif_id b6818000000038, sm capwap_wtp_iif_id 0 1 wcm: 8C.C761 - vlan 20, interface 'VLAN0020' *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: Radio IIFID 0xbfcdc00000003a, BSSID IIF Id 0x81fac000000041, COS 4 *Sep 1 06:00:19.361: Load Balancer: 1 wcm: Success, Resource allocated are: Active Switch number: 1, Active Asic number : 0, Reserve Switch number 0 Reserve Asic number 0. AP Asic num 0 *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: Anchor Sw 1, Doppler 0 *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ALLOCATE: 1 wcm: Client IIF Id alloc SUCCESS w/ client 84fd0000000050 (state 0). *Sep 1 06:00:19.361: 0021.5C8C.C761 iifid Clearing Ack flag 1 wcm: F Id alloc SUCCESS w/ client 84fd0000000050 (state 0). *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: Adding opt82 len 0

*Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: Cleaering Ack flag *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: ssid EAPFAST bssid C8F9.F983.4260 vlan 20 auth=association(0) wlan(ap-group/global) 4/4 client 0 assoc 3 mob=unassoc(0) radio 1 m_vlan 20 ip 0.0.0.0 src 0xb6818000000038 dst 0x0 cid 0x84fd0000000050 glob rsc id 16dhcpsrv 0.0.0.0 *Sep 1 06:00:19.361: 0021.5C8C.C761 WCDB_ADD: 1 wcm: mscb iifid 0x84fd0000000050 msinfo iifid 0x0 *Sep 1 06:00:19.361: 0021.5C8C.C761 0.0.0.0 START (0) Initializing policy 1 wcm: info iifid 0x0 *Sep 1 06:00:19.361: 0021.5C8C.C761 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2) 1 wcm: (ap-group/global) 4/4 client 0 assoc 3 mob=unassoc(0) radio 1 m_vlan 20 ip 0.0.0.0 src 0xb6818000000038 dst 0x0 cid 0x84fd0000000050 glob rsc id 16dhcpsrv 0.0.0.0 *Sep 1 06:00:19.361: 0021.5C8C.C761 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3) 1 wcm: oup/global) 4/4 client 0 assoc 3 mob=unassoc(0) radio 1 m_vlan 20 ip 0.0.0.0 src 0xb6818000000038 dst 0x0 cid 0x84fd0000000050 glob rsc id 16dhcpsrv 0.0.0.0 *Sep 1 06:00:19.361: 0021.5C8C.C761 0.0.0.0 8021X_REQD (3) DHCP Not required on AP C8F9.F983.4260 vapid 4 apvapid 4for this client 1 wcm: lient 0 assoc 3 mob=unassoc(0) radio 1 m_vlan 20 ip 0.0.0.0 src 0xb6818000000038 dst 0x0 cid 0x84fd0000000050 glob rsc id 16dhcpsrv 0.0.0.0 *Sep 1 06:00:19.361: 0021.5C8C.C761 Not Using WMM Compliance code qoscap 00 1 wcm: ed on AP C8F9.F983.4260 vapid 4 apvapid 4for this client *Sep 1 06:00:19.361: 0021.5C8C.C761 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP C8F9.F983.4260 vapid 4 apvapid 4 1 wcm: client *Sep 1 06:00:19.361: 0021.5C8C.C761 apfpemadduser2 (apf_policy.c: 1 wcm: 161) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Idle to Associated *Sep 1 06:00:19.361: 0021.5C8C.C761 Stopping deletion of Mobile Station: 1 wcm: (callerid: 48) *Sep 1 06:00:19.361: 0021.5C8C.C761 Ms Timeout = 0, Session Timeout = 1800 1 wcm: llerid: 48) *Sep 1 06:00:19.361: 0021.5C8C.C761 Sending Assoc Response to station on BSSID C8F9.F983.4260 (status 0) ApVapId 4 Slot 1 1 wcm:.f983.4260 from Idle to Associated *Sep 1 06:00:19.362: 0021.5C8C.C761 apfprocessassocreq (apf_80211.c: 1 wcm: 5260) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Associated to Associated *Sep 1 06:00:19.362: WCDB_IIF: 1 wcm: Ack Message ID: 0x84fd0000000050 code 1001 *Sep 1 06:00:21.239: 0021.5C8C.C761 client incoming attribute size are 485 1 wcm: anging state for.d^iwle 0021.5C8C.C761 t! w\2105hnj^iwf983.4260 from Ass^G$8\227v^K *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state L2AUTHCOMPLETE (4) 1 wcm: ^IwF983.4260 from

Ass^G$8\227v^K *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x81fac000000041, bssid C8F9.F983.4260 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_LLM: 1 wcm: NoRun Prev Mob 0, Curr Mob 0 llmreq 1, return False *Sep 1 06:00:21.258: 0021.5C8C.C761 auth state 1 mob state 0 setwme 0 wme 1 roam_sent 0 1 wcm: rn False *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: auth=l2_auth(1) vlan 20 radio 1 client_id 0x84fd0000000050 mobility=unassoc(0) src_int 0xb6818000000038 dst_int 0x0 ackflag 0 reassoc_client 0 llm_notif 0 ip 0.0.0.0 ip_learn_type UNKNOWN *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: In L2 auth but l2ack waiting lfag not set,so set *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 L2AUTHCOMPLETE (4) pemadvancestate2: 1 wcm: MOBILITY-INCOMPLETE with state 4. *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 L2AUTHCOMPLETE (4) pemadvancestate2: 1 wcm: MOBILITY-INCOMPLETE with state 4. *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 L2AUTHCOMPLETE (4) DHCP Not required on AP C8F9.F983.4260 vapid 4 apvapid 4for this client 1 wcm: 6818000000038 dst_int 0x0 ackflag 0 reassoc_client 0 llm_notif 0 ip 0.0.0.0 ip_learn_type UNKNOWN *Sep 1 06:00:21.258: 0021.5C8C.C761 Not Using WMM Compliance code qoscap 00 1 wcm: quired on AP C8F9.F983.4260 vapid 4 apvapid 4for this client *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP C8F9.F983.4260 vapid 4 apvapid 4 1 wcm: client *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state DHCP_REQD (7) 1 wcm: apvapid 4 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x81fac000000041, bssid C8F9.F983.4260 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Suppressing SPI (Mobility state not known) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=unassoc(0) ackflag 1 dropd 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) pemadvancestate2 4001, Adding TMP rule 1 wcm: e 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=unassoc(0) ackflag 1 dropd 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) Adding Fast Path rule on AP C8F9.F983.4260, slot 1 802.1P = 0 1 wcm: client_id 0x84fd0000000050 mob=unassoc(0) ackflag 1 dropd 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule 1 wcm: F9.F983.4260, slot 1 802.1P = 0^M *Sep 1 06:00:21.258: PEM recv processing msg Add SCB(3) 1 wcm: 7) Successfully plumbed mobile rule

*Sep 1 06:00:21.258: 0021.5C8C.C761 Incrementing the Reassociation Count 1 for client (of interface VLAN0020) 1 wcm: lot 1 802.1P = 0^M *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0, auth_state 7 mmrole Unassoc!!! 1 wcm: r client (of interface VLAN0020) *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0, auth_state 7 mmrole Unassoc, updating wcdb not needed 1 wcm: VLAN0020) *Sep 1 06:00:21.258: 0021.5C8C.C761 Tclas Plumb needed: 1 wcm: 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) pemadvancestate2: 1 wcm: MOBILITY-COMPLETE with state 7. *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) State Update from Mobility-Incomplete to Mobility-Complete, mobility role=local, client state=apf_ms_state_associated 1 wcm: 1 dropd 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) pemadvancestate2 3611, Adding TMP rule 1 wcm: o Mobility-Complete, mobility role=local, client state=apf_ms_state_associated *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) Replacing Fast Path rule on AP C8F9.F983.4260, slot 1 802.1P = 0 1 wcm: e=local, client state=apf_ms_state_associated *Sep 1 06:00:21.258: 0021.5C8C.C761 0.0.0.0 DHCP_REQD (7) Successfully plumbed mobile rule 1 wcm: C8F9.F983.4260, slot 1 802.1P = 0^M *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x81fac000000041, bssid C8F9.F983.4260 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_LLM: 1 wcm: NoRun Prev Mob 0, Curr Mob 1 llmreq 1, return False *Sep 1 06:00:21.258: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Suppressing SPI (ACK message not recvd) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.258: 0021.5C8C.C761 Error updating wcdb on mobility complete 1 wcm: not recvd) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.258: PEM recv processing msg Epm spi response(12) 1 wcm: complete *Sep 1 06:00:21.258: 0021.5C8C.C761 aaa attribute list length is 79 1 wcm: complete *Sep 1 06:00:21.258: 0021.5C8C.C761 Sending SPI spi_epm_epm_session_create successfull 1 wcm: ) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.258: PEM recv processing msg Add SCB(3) 1 wcm: pm_session_create successfull *Sep 1 06:00:21.259: 0021.5C8C.C761 0.0.0.0, auth_state 7 mmrole Local!!! 1 wcm: successfull *Sep 1 06:00:21.259: 0021.5C8C.C761 0.0.0.0, auth_state 7 mmrole Local, updating wcdb not needed 1 wcm: 7 state LEARN_IP(2) vlan 20 client_id 0x84fd0000000050

mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.259: 0021.5C8C.C761 Tclas Plumb needed: 1 wcm: 0 *Sep 1 06:00:21.260: EPM: 1 wcm: Session create resp - client handle 84fd0000000050 session f2000027 *Sep 1 06:00:21.260: EPM: 1 wcm: Netflow session create resp - client handle 84fd0000000050 sess f2000027 *Sep 1 06:00:21.260: PEM recv processing msg Epm spi response(12) 1 wcm: le 84fd0000000050 sess f2000027 *Sep 1 06:00:21.261: 0021.5C8C.C761 Received session_create_response for client handle 37432873367634000 1 wcm: LEARN_IP(2) vlan 20 client_id 0x84fd0000000050 mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.261: 0021.5C8C.C761 Received session_create_response with EPM session handle 4060086311 1 wcm: *Sep 1 06:00:21.261: 0021.5C8C.C761 Send request to EPM 1 wcm: ate_response with EPM session handle 4060086311 *Sep 1 06:00:21.261: 0021.5C8C.C761 aaa attribute list length is 485 1 wcm: with EPM session handle 4060086311 *Sep 1 06:00:21.261: 0021.5C8C.C761 Sending Activate request for session handle 4060086311 successful 1 wcm: 1 *Sep 1 06:00:21.261: 0021.5C8C.C761 Post-auth policy request sent! Now wait for post-auth policy ACK from EPM 1 wcm: N_IP(2) vlan 20 client_id 0x84fd0000000050 mob=local(1) ackflag 1 dropd 1 *Sep 1 06:00:21.261: EPM: 1 wcm: Init feature, client handle 84fd0000000050 session f2000027 authz 8f000011 *Sep 1 06:00:21.261: EPM: 1 wcm: Activate feature client handle 84fd0000000050 sess f2000027 authz 8f000011 *Sep 1 06:00:21.261: PEM recv processing msg Epm spi response(12) 1 wcm: 0050 sess f2000027 authz 8f000011 *Sep 1 06:00:21.261: 0021.5C8C.C761 Received activate_features_resp for client handle 37432873367634000 1 wcm: m EPM *Sep 1 06:00:21.261: 0021.5C8C.C761 Received activate_features_resp for EPM session handle 4060086311 1 wcm: 0 *Sep 1 06:00:21.261: EPM: 1 wcm: Policy enforcement - client handle 84fd0000000050 session a8000011 authz 8f000011 *Sep 1 06:00:21.261: EPM: 1 wcm: Netflow policy enforcement - client handle 84fd0000000050 sess a8000011 authz 8f000011 msg_type 0 policy_status 0 attr len 0 *Sep 1 06:00:21.262: PEM recv processing msg Epm spi response(12) 1 wcm: e 84fd0000000050 sess a8000011 authz 8f000011 msg_type 0 policy_status 0 attr len 0 *Sep 1 06:00:21.262: 0021.5C8C.C761 Received policy_enforcement_response for client handle 37432873367634000 1 wcm: 011 msg_type 0 policy_status 0 attr len 0 *Sep 1 06:00:21.262: 0021.5C8C.C761 Received policy_enforcement_response for EPM session handle 2818572305 1 wcm: 0 *Sep 1 06:00:21.262: 0021.5C8C.C761 Received response for _EPM_SPI_ACTIVATE_FEATURES request sent for client 1 wcm: 011 msg_type 0

policy_status 0 attr len 0 *Sep 1 06:00:21.262: 0021.5C8C.C761 Received _EPM_SPI_STATUS_SUCCESS for request sent for client 1 wcm: for client *Sep 1 06:00:21.262: 0021.5C8C.C761 Post-auth policy ACK recvd from EPM, unset flag on MSCB 1 wcm: ient *Sep 1 06:00:21.262: 0021.5C8C.C761 WCDB SPI response msg handler client code 0 mob state 0 1 wcm: ient *Sep 1 06:00:21.262: 0021.5C8C.C761 WcdbClientUpdate: 1 wcm: L2 Auth ACK from WCDB *Sep 1 06:00:21.262: 0021.5C8C.C761 WCDB_L2ACK: 1 wcm: wcdbackrecvdflag updated *Sep 1 06:00:21.262: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x81fac000000041, bssid C8F9.F983.4260 *Sep 1 06:00:21.262: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:21.262: 0021.5C8C.C761 WCDB_LLM: 1 wcm: NoRun Prev Mob 0, Curr Mob 1 llmreq 1, return False *Sep 1 06:00:21.263: 0021.5C8C.C761 auth state 2 mob state 1 setwme 0 wme 1 roam_sent 0 1 wcm: rn False *Sep 1 06:00:21.263: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: auth=learn_ip(2) vlan 20 radio 1 client_id 0x84fd0000000050 mobility=local(1) src_int 0xb6818000000038 dst_int 0x0 ackflag 2 reassoc_client 0 llm_notif 0 ip 0.0.0.0 ip_learn_type UNKNOWN *Sep 1 06:00:24.425: 0021.5C8C.C761 WCDB_IP_BIND: 1 wcm: w/ IPv4 20.20.20.3 ip_learn_type DHCP add_delete 1,options_length 0 *Sep 1 06:00:24.425: 0021.5C8C.C761 WcdbClientUpdate: 1 wcm: IP Binding from WCDB ip_learn_type 1, add_or_delete 1 *Sep 1 06:00:24.425: 0021.5C8C.C761 IPv4 Addr: 1 wcm: 20:20:20:3 *Sep 1 06:00:24.425: 0021.5C8C.C761 MS got the IP, resetting the Reassociation Count 0 for client 1 wcm: _delete 1 *Sep 1 06:00:24.425: 0021.5C8C.C761 20.20.20.3 DHCP_REQD (7) Session Update not required for Initial authenticated dot1x client 1 wcm: nt 0xb6818000000^G$8\227v^K *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3 DHCP_REQD (7) Change state to RUN (20) last state RUN (20) 1 wcm: ticated dot1x client *Sep 1 06:00:24.426: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: Client 1 m_vlan 20 Radio iif id 0xbfcdc00000003a bssid iif id 0x81fac000000041, bssid C8F9.F983.4260 *Sep 1 06:00:24.426: 0021.5C8C.C761 WCDB_AUTH: 1 wcm: Adding opt82 len 0 *Sep 1 06:00:24.426: 0021.5C8C.C761 WCDB_LLM: 1 wcm: prev Mob state 1 curr Mob State 1 llreq flag 0 *Sep 1 06:00:24.426: 0021.5C8C.C761 auth state 4 mob state 1 setwme 0 wme 1 roam_sent 0 1 wcm: g 0 *Sep 1 06:00:24.426: 0021.5C8C.C761 WCDB_CHANGE: 1 wcm: auth=run(4) vlan 20 radio 1 client_id 0x84fd0000000050 mobility=local(1) src_int 0xb6818000000038 dst_int 0x0 ackflag 2 reassoc_client 0 llm_notif 0 ip 20.20.20.3 ip_learn_type DHCP *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3 RUN (20) Reached PLUMBFASTPATH:

1 wcm: from line 4430 *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3 RUN (20) Replacing Fast Path rule on AP C8F9.F983.4260, slot 1 802.1P = 0 1 wcm: 0xb6818000000038 dst_int 0x0 ackflag 2 reassoc_client 0 llm_notif 0 ip 20.$=6v0.3 ip_lt^_dv^\7hnp6v^d6hl5ht^_dv$6h8^ r^d6h>&5v8^ r^d6h>&5v^d6ht^m^lw^\7h8^ r *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3 RUN (20) Successfully plumbed mobile rule 1 wcm: C8F9.F983.4260, slot 1 802.1P = 0^M *Sep 1 06:00:24.426: 0021.5C8C.C761 Sending IPv4 update to Controller 10.105.135.176 1 wcm: e *Sep 1 06:00:24.426: 0021.5C8C.C761 Assigning Address 20.20.20.3 to mobile 1 wcm: 05.135.176 *Sep 1 06:00:24.426: PEM recv processing msg Add SCB(3) 1 wcm: 20.20.3 to mobile *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3, auth_state 20 mmrole Local!!! 1 wcm: 135.176 *Sep 1 06:00:24.426: 0021.5C8C.C761 20.20.20.3, auth_state 20 mmrole Local, updating wcdb not needed 1 wcm: 3.4260, slot 1 802.1P = 0^M *Sep 1 06:00:24.426: 0021.5C8C.C761 Tclas Plumb needed: 1 wcm: 0 *Sep 1 06:00:34.666: PEM recv processing msg Del SCB(4) 1 wcm: *Sep 1 06:00:34.864: PEM recv processing msg Add SCB(3) 1 wcm: *Sep 1 06:00:34.865: EPM: 1 wcm: Init feature, client handle a028c00000004c session a600001f authz 5e00000d *Sep 1 06:00:34.865: EPM: 1 wcm: Activate feature client handle a028c00000004c sess a600001f authz 5e00000d *Sep 1 06:00:34.865: PEM recv processing msg Epm spi response(12) 1 wcm: 004c sess a600001f authz 5e00000d *Sep 1 06:00:34.865: EPM: 1 wcm: Policy enforcement - client handle a028c00000004c session ca00000d authz 5e00000d *Sep 1 06:00:34.865: EPM: 1 wcm: Netflow policy enforcement - client handle a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0 *Sep 1 06:00:34.865: PEM recv processing msg Epm spi response(12) 1 wcm: e a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0 *Sep 1 06:00:52.802: PEM recv processing msg Del SCB(4) 1 wcm: onse(12) *Sep 1 06:00:53.015: PEM recv processing msg Add SCB(3) 1 wcm: *Sep 1 06:00:53.015: EPM: 1 wcm: Init feature, client handle a028c00000004c session a600001f authz 5e00000d *Sep 1 06:00:53.015: EPM: 1 wcm: Activate feature client handle a028c00000004c sess a600001f authz 5e00000d *Sep 1 06:00:53.015: PEM recv processing msg Epm spi response(12) 1 wcm: 004c sess a600001f authz 5e00000d *Sep 1 06:00:53.016: EPM: 1 wcm: Policy enforcement - client handle a028c00000004c session ca00000d authz 5e00000d *Sep 1 06:00:53.016: EPM: 1 wcm: Netflow policy enforcement - client handle a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0

*Sep 1 06:00:53.016: PEM recv processing msg Epm spi response(12) 1 wcm: e a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0 *Sep 1 06:01:18.829: PEM recv processing msg Del SCB(4) 1 wcm: nse(12) *Sep 1 06:01:19.037: PEM recv processing msg Add SCB(3) 1 wcm: *Sep 1 06:01:19.037: EPM: 1 wcm: Init feature, client handle a028c00000004c session a600001f authz 5e00000d *Sep 1 06:01:19.037: EPM: 1 wcm: Activate feature client handle a028c00000004c sess a600001f authz 5e00000d *Sep 1 06:01:19.037: PEM recv processing msg Epm spi response(12) 1 wcm: 004c sess a600001f authz 5e00000d *Sep 1 06:01:19.037: EPM: 1 wcm: Policy enforcement - client handle a028c00000004c session ca00000d authz 5e00000d *Sep 1 06:01:19.037: EPM: 1 wcm: Netflow policy enforcement - client handle a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0 *Sep 1 06:01:19.037: PEM recv processing msg Epm spi response(12) 1 wcm: e a028c00000004c sess ca00000d authz 5e00000d msg_type 0 policy_status 0 attr len 0 *Sep 1 06:01:20.108: 0021.5C8C.C761 Client stats update: 1 wcm: Time now in sec 1378015280, Last Acct Msg Sent at 1378015224 sec [09/01/13 11:59:18.282 IST 1572 5933] 0021.5C8C.C761 Scheduling deletion of Mobile Station: (callerid: 50) in 1 seconds --More-- [09/01/13 11:59:18.282 IST 1573 5933] 0021.5C8C.C761 Disconnecting client due to switch of WLANs from 1(wpa2psk) to 4(EAPFAST) [09/01/13 11:59:19.174 IST 1574 5933] 0021.5C8C.C761 apfmsexpirecallback (apf_ms.c:664) Expiring Mobile! [09/01/13 11:59:19.174 IST 1575 5933] 0021.5C8C.C761 apfmsexpiremobilestation (apf_ms.c:6953) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Associated to Disassociated [09/01/13 11:59:19.174 IST 1576 5933] 0021.5C8C.C761 1XA: Cleaning up dot1x [09/01/13 11:59:19.174 IST 1577 5933] 0021.5C8C.C761 1XA: Session Manager Call to cleanup session for Client capwap iif_id b6818000000038 [09/01/13 11:59:19.174 IST 1578 5933] 0021.5C8C.C761 Sent Deauthenticate to mobile on BSSID C8F9.F983.4260 slot 1(caller apf_ms.c:7036) [09/01/13 11:59:19.174 IST 1579 5933] 0021.5C8C.C761 AAAS: acct method list NOT configured for WLAN 1, accounting skipped [09/01/13 11:59:19.174 IST 157a 5933] 0021.5C8C.C761 AAAS: freeing AAA accounting session [09/01/13 11:59:19.174 IST 157b 5933] 0021.5C8C.C761 apfmsassostatedec [09/01/13 11:59:19.174 IST 157c 5933] 0021.5C8C.C761 apfmsexpiremobilestation (apf_ms.c:7092) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Disassociated to Idle [09/01/13 11:59:19.174 IST 157d 33] ACCESS-CORE-SM-CLIENT-SPI-NOTF:

[0021.5c8c.c761, Ca1] Session stop request received for Client[1] MAC [0021.5c8c.c761] SID [] Disc cause [(default)/0] --More-- [09/01/13 11:59:19.174 IST 157e 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Received session event 'SESSION_STOP' from client [09/01/13 11:59:19.174 IST 157f 5933] 0021.5C8C.C761 Incrementing the Reassociation Count 1 for client (of interface VLAN0020) [09/01/13 11:59:19.174 IST 1580 5933] 0021.5C8C.C761 Clearing Address 20.20.20.3 on mobile [09/01/13 11:59:19.174 IST 1581 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Session stop for 0021.5c8c.c761 - Audit ID (none), reason (default)/0 [09/01/13 11:59:19.174 IST 1582 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Unlocking 0xF3000023 for deletion [09/01/13 11:59:19.174 IST 1583 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Processing SM CB request for 0xF3000023: Event: Pre-Disconnect notification t [09/01/13 11:59:19.174 IST 1584 5933] 0021.5C8C.C761 apfmsrunstatedec [09/01/13 11:59:19.174 IST 1585 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Predisconnect notification - teardown complete for 0xF3000023(0021.5c8c.c761) [09/01/13 11:59:19.174 IST 1586 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Session teardown completing, deleting context [09/01/13 11:59:19.174 IST 1587 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Signalling "pre" delete for client 0021.5c8c.c761 / 0xF3000023 [09/01/13 11:59:19.174 IST 1588 5933] 0021.5C8C.C761 WCDB_AUTH: Adding opt82 len 0 [09/01/13 11:59:19.174 IST 1589 5933] 0021.5C8C.C761 WCDB_CHANGE: Suppressing SPI (client pending deletion) pemstate 7 state LEARN_IP(2) vlan 20 client_id 0x8006400000004e mob=local(1) ackflag 2 dropd 0, delete 1 --More-- [09/01/13 11:59:19.174 IST 158a 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Deleted record - hdl 0xF3000023. 2 session(s) remain on IDB. [09/01/13 11:59:19.174 IST 158b 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Processing SM CB request for 0xF3000023: Event: Client disconnect notificatio [09/01/13 11:59:19.174 IST 158c 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] AAA-ID 0x0000001C for 0021.5c8c.c761 not freed, as externally generated [09/01/13 11:59:19.174 IST 158d 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Removed policy (tgt 0x00000000) from session (hdl 0xF3000023) [09/01/13 11:59:19.174 IST 158e 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Unblock events for 0021.5c8c.c761. [09/01/13 11:59:19.174 IST 158f 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] AAA-ID 0x0000001C for 0021.5c8c.c761 not freed, as externally generated [09/01/13 11:59:19.174 IST 1590 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Freed Auth Manager context 0xF3000023 [09/01/13 11:59:19.174 IST 1591 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Signalling "post" delete for client in domain DATA [09/01/13 11:59:19.174 IST 1592 5933] 0021.5C8C.C761 Sending SPI spi_epm_epm_terminate_session successfull

[09/01/13 11:59:19.175 IST 1593 5933] 0021.5C8C.C761 Sending SPI spi_epm_epm_terminate_session successfull [09/01/13 11:59:19.175 IST 1594 5933] 0021.5C8C.C761 Deleting wireless client; Reason code 0, Preset 1, AAA cause 1 [09/01/13 11:59:19.175 IST 1595 5933] 0021.5C8C.C761 WCDB_DEL: Successfully sent [09/01/13 11:59:19.175 IST 1596 5933] 0021.5C8C.C761 Expiring mobile state delete --More-- [09/01/13 11:59:19.175 IST 1597 190] [WCDB] ==Delete event for Wireless client (0021.5c8c.c761) client id (0x8006400000004e) vlan 20 auth_state RUN mob_state LOCAL flags 2 [09/01/13 11:59:19.175 IST 1598 190] [WCDB] wcdb_client_mcast_update_notify: add = 0, port_update = 0, delete = 1 [09/01/13 11:59:19.175 IST 1599 190] ACCESS-CORE-SM-FEATURE-WIRED_TUNNEL-NOT: [0021.5c8c.c761] Client 0021.5c8c.c761 is not tunnel client..return [09/01/13 11:59:19.176 IST 159a 190] [WCDB] wcdb_ffcp_wcdb_client_delete_notify: client (0021.5c8c.c761) id 0x8006400000004e ffcp delete [09/01/13 11:59:19.178 IST 159b 33] [WCDB] wcdb_ffcp_cb: client (0021.5c8c.c761) client (0x8006400000004e): FFCP operation (DELETE) return code (0) [09/01/13 11:59:19.178 IST 159c 33] [WCDB] wcdb_send_delete_notify_callback_event: Delete ACK sent to WCM after confirming clientle is deleted for mac 0021.5c8c.c761 [09/01/13 11:59:19.178 IST 159d 33] [WCDB] wcdb_client_delete_actual: WCDB DB client 0021.5c8c.c761 is being deleted [09/01/13 11:59:19.178 IST 159e 33] [WCDB] wcdb_client_delete_actual Client delete notification is sent to DHCP snooping: host mac: 0021.5c8c.c761, IP: 20.20.20.3 [09/01/13 11:59:19.178 IST 159f 33] [WCDB] wcdb_client_delete_actual: Exit: WCDB DB client 0021.5c8c.c761 is being deleted [09/01/13 11:59:19.178 IST 15a0 186] ACCESS-CORE-SM-CLIENT-IPDT-ERR: [0021.5c8c.c761, Ca1] No session for MAC 0021.5c8c.c761 [09/01/13 11:59:19.178 IST 15a1 5933] 0021.5C8C.C761 WCDB SPI response msg handler client code 1 mob state 1 --More-- [09/01/13 11:59:19.178 IST 15a2 5933] 0021.5C8C.C761 apfprocesswcdbclientdelete: Delete ACK from WCDB. [09/01/13 11:59:19.178 IST 15a3 5933] 0021.5C8C.C761 WCDB_DELACK: wcdbackrecvdflag updated [09/01/13 11:59:19.178 IST 15a4 5933] 0021.5C8C.C761 Invoked platform delete and cleared handle [09/01/13 11:59:19.178 IST 15a5 5933] 0021.5C8C.C761 apfms1xstatedec [09/01/13 11:59:19.178 IST 15a6 5933] 0021.5C8C.C761 Deleting mobile on AP C8F9.F983.4260 (1) [09/01/13 11:59:19.178 IST 15a7 5933] 0021.5C8C.C761 1XA: Cleaning up dot1x [09/01/13 11:59:19.178 IST 15a8 5933] 0021.5C8C.C761 Unlinked and freed mscb [09/01/13 11:59:19.361 IST 15a9 5933] 0021.5C8C.C761 Adding mobile on LWAPP AP C8F9.F983.4260 (1) [09/01/13 11:59:19.361 IST 15aa 5933] 0021.5C8C.C761 Association received from mobile on AP C8F9.F983.4260

[09/01/13 11:59:19.361 IST 15ab 5933] 0021.5C8C.C761 qos upstream policy is unknown and downstream policy is unknown [09/01/13 11:59:19.361 IST 15ac 5933] 0021.5C8C.C761 apchanged 0 wlanchanged 0 mscb ipaddr 0.0.0.0, apf RadiusOverride 0x0, numipv6addr=0 [09/01/13 11:59:19.361 IST 15ad 5933] 0021.5C8C.C761 Applying WLAN policy on MSCB. [09/01/13 11:59:19.361 IST 15ae 5933] 0021.5C8C.C761 Applying WLAN ACL policies to client [09/01/13 11:59:19.361 IST 15af 5933] 0021.5C8C.C761 No Interface ACL used for Wireless client in WCM(NGWC) --More-- [09/01/13 11:59:19.361 IST 15b0 5933] 0021.5C8C.C761 Applying site-specific IPv6 override for station 0021.5C8C.C761 - vapid 4, site 'default-group', interface 'VLAN0020' [09/01/13 11:59:19.361 IST 15b1 5933] 0021.5C8C.C761 Applying local bridging Interface Policy for station 0021.5C8C.C761 - vlan 20, interface 'VLAN0020' [09/01/13 11:59:19.361 IST 15b2 5933] 0021.5C8C.C761 STA - rates (8): 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0 [09/01/13 11:59:19.361 IST 15b3 5933] 0021.5C8C.C761 Processing RSN IE type 48, length 22 for mobile 0021.5C8C.C761 [09/01/13 11:59:19.361 IST 15b4 5933] 0021.5C8C.C761 Received RSN IE with 0 PMKIDs from mobile 0021.5C8C.C761 [09/01/13 11:59:19.361 IST 15b5 5933] 0021.5C8C.C761 1XK: Looking for BSSID C8F9.F983.426C in PMKID cache [09/01/13 11:59:19.361 IST 15b6 5933] 0021.5C8C.C761 1XK: Set Link Secure: 0 [09/01/13 11:59:19.361 IST 15b7 5933] 0021.5C8C.C761 new capwap_wtp_iif_id b6818000000038, sm capwap_wtp_iif_id 0 [09/01/13 11:59:19.361 IST 15b8 5933] 0021.5C8C.C761 WCDB_ADD: Adding opt82 len 0 [09/01/13 11:59:19.361 IST 15b9 5933] 0021.5C8C.C761 WCDB_ADD: ssid EAPFAST bssid C8F9.F983.4260 vlan 20 auth=association(0) wlan(ap-group/global) 4/4 client 0 assoc 3 mob=unassoc(0) radio 1 m_vlan 20 ip 0.0.0.0 src 0xb6818000000038 dst 0x0 cid 0x84fd0000000050 glob rsc id 16dhcpsrv 0.0.0.0 [09/01/13 11:59:19.361 IST 15ba 5933] 0021.5C8C.C761 Not Using WMM Compliance code qoscap 00 --More-- [09/01/13 11:59:19.361 IST 15bb 5933] 0021.5C8C.C761 apfmsassostateinc [09/01/13 11:59:19.361 IST 15bc 5933] 0021.5C8C.C761 apfpemadduser2 (apf_policy.c:161) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Idle to Associated [09/01/13 11:59:19.361 IST 15bd 5933] 0021.5C8C.C761 Stopping deletion of Mobile Station: (callerid: 48) [09/01/13 11:59:19.361 IST 15be 5933] 0021.5C8C.C761 Ms Timeout = 0, Session Timeout = 1800 [09/01/13 11:59:19.361 IST 15bf 5933] 0021.5C8C.C761 Sending Assoc Response to station on BSSID C8F9.F983.4260 (status 0) ApVapId 4 Slot 1 [09/01/13 11:59:19.362 IST 15c0 5933] 0021.5C8C.C761 apfprocessassocreq

(apf_80211.c:5260) Changing state for mobile 0021.5C8C.C761 on AP C8F9.F983.4260 from Associated to Associated [09/01/13 11:59:19.363 IST 15c1 190] [WCDB] ==Add event: type Regular Wireless client (0021.5c8c.c761) client id (0x84fd0000000050) client index (16) vlan (20) auth_state (ASSOCIATION) mob_state (INIT) [09/01/13 11:59:19.363 IST 15c2 190] [WCDB] ===intf src/dst (0xb6818000000038)/ (0x0) radio_id (1) p2p_state (P2P_BLOCKING_DISABLE) switch/asic (1/0) [09/01/13 11:59:19.367 IST 15c3 5933] 0021.5C8C.C761 1XA: Initiating authentication [09/01/13 11:59:19.368 IST 15c4 5933] 0021.5C8C.C761 1XA: Setting reauth timeout to 1800 seconds --More-- *Sep 1 06:01:59.543: PEM recv processing msg Del SCB(4) 1 wcm: Time now in sec 1378015280, Last Ac.D^Iwsg Sent at 137801522t! w\2105hnj^iw_status 0 attr len ^G$8\227v^K *Sep 1 06:01:59.547: WCDB_IIF: 1 wcm: Ack Message ID: 0x973c000000004f code 1003 *Sep 1 06:02:50.119: 0021.5C8C.C761 Client stats update: 1 wcm: Time now in sec 1378015370, Last Acct Msg Sent at 1378015224 sec *Sep 1 06:02:50.119: 0021.5C8C.C761 Requested to send acct interim update request msg to APF task for client 0: 1 wcm: 21:5c:8c:c7:61 [09/01/13 11:59:19.368 IST 15c5 5933] 0021.5C8C.C761 1XK: Set Link Secure: 0 --More-- [09/01/13 11:59:19.368 IST 15c6 5933] 0021.5C8C.C761 1XA: Allocated uid 30 [09/01/13 11:59:19.368 IST 15c7 5933] 0021.5C8C.C761 1XA: Calling Auth Mgr to authenticate client 84fd0000000050 uid 30 --More-- [09/01/13 11:59:19.368 IST 15c8 5933] 0021.5C8C.C761 1XA: Session Start from wireless client --More-- [09/01/13 11:59:19.368 IST 15c9 5933] 0021.5C8C.C761 Session Manager Call Client 84fd0000000050, uid 30, capwap id b6818000000038,flag 0, Audit-Session ID 0a6987b05222d7f30000001e, method list ACS [09/01/13 11:59:19.368 IST 15ca 33] ACCESS-CORE-SM-CLIENT-SPI-NOTF: [0021.5c8c.c761, Ca1] Session start request from Client[1] for 0021.5c8c.c761 (method: Dot1X, method list: ACS, aaa id: 0x0000001E) [09/01/13 11:59:19.368 IST 15cb 33] ACCESS-CORE-SM-CLIENT-SPI-NOTF: [0021.5c8c.c761, Ca1] - client iif_id: 84FD0000000050, session ID: 0a6987b05222d7f30000001e for 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 15cc 33] ACCESS-CORE-SM-CLIENT-SPI-NOTF: [0021.5c8c.c761, Ca1] - eap profile: none [09/01/13 11:59:19.368 IST 15cd 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1]

Received session event 'SESSION_START' from client [09/01/13 11:59:19.368 IST 15ce 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Session start for 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 15cf 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Found 2 sessions on this port, checking host limit [09/01/13 11:59:19.368 IST 15d0 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Using stored AAA ID 0x0000001E [09/01/13 11:59:19.368 IST 15d1 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Retrieved Client IIF ID 84FD0000000050 [09/01/13 11:59:19.368 IST 15d2 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Allocated new Auth Manager context (handle 0x32000026) --More-- [09/01/13 11:59:19.368 IST 15d3 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method state to 'Not run' [09/01/13 11:59:19.368 IST 15d4 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method Session Mgr IPDT Shim to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15d5 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method SVM state to 'Not run' [09/01/13 11:59:19.368 IST 15d6 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method SVM to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15d7 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method state to 'Not run' [09/01/13 11:59:19.368 IST 15d8 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method Switch PI to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15d9 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method state to 'Not run' [09/01/13 11:59:19.368 IST 15da 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method Session Mgr SISF Shim to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15db 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method iaf state to 'Not run' [09/01/13 11:59:19.368 IST 15dc 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method iaf to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15dd 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method Tag state to 'Not run' [09/01/13 11:59:19.368 IST 15de 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method Tag to runnable list for session 0x32000026 --More-- [09/01/13 11:59:19.368 IST 15df 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method dct state to 'Not run' [09/01/13 11:59:19.368 IST 15e0 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method dct to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15e1 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method SM Reauth Plugin state to 'Not run' [09/01/13 11:59:19.368 IST 15e2 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1]

Adding method SM Reauth Plugin to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15e3 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method SM Accounting Feature state to 'Not run' [09/01/13 11:59:19.368 IST 15e4 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method SM Accounting Feature to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15e5 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method state to 'Not run' [09/01/13 11:59:19.368 IST 15e6 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method Session Mgr FFCP Shim to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15e7 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method state to 'Not run' [09/01/13 11:59:19.368 IST 15e8 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method AIM to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15e9 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method dot1x state to 'Not run' [09/01/13 11:59:19.368 IST 15ea 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method dot1x to runnable list for session 0x32000026 --More-- [09/01/13 11:59:19.368 IST 15eb 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method mab state to 'Not run' [09/01/13 11:59:19.368 IST 15ec 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method mab to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15ed 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Initialising Method webauth state to 'Not run' [09/01/13 11:59:19.368 IST 15ee 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Adding method webauth to runnable list for session 0x32000026 [09/01/13 11:59:19.368 IST 15ef 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Processing SM CB request for 0x32000026: Event: New client notification (201) [09/01/13 11:59:19.368 IST 15f0 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Create attr list, session 0x32000026: [09/01/13 11:59:19.368 IST 15f1 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding MAC 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 15f2 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding Swidb 0x99E27F00 [09/01/13 11:59:19.368 IST 15f3 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding AAA_ID=1E [09/01/13 11:59:19.368 IST 15f4 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding Audit_sid=0a6987b05222d7f30000001e [09/01/13 11:59:19.368 IST 15f5 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding IIF ID=0x84FD0000000050 [09/01/13 11:59:19.368 IST 15f6 173] ACCESS-CORE-SM-CLIENT-IPDT-NOTF: [0021.5c8c.c761, Ca1] NewClient: No entry for 0021.5c8c.c761. session 0x32000026 --More-- [09/01/13 11:59:19.368 IST 15f7 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] New client 0021.5c8c.c761 - client handle 0x00000001 for SVM

[09/01/13 11:59:19.368 IST 15f8 173] ACCESS-CORE-SM-CLIENT-SISF-NOTF: [0021.5c8c.c761, Ca1] No IPv6 binding found for 0021.5c8c.c761(0x32000026) [09/01/13 11:59:19.368 IST 15f9 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Added record to DB - hdl 0x32000026 / 0021.5c8c.c761. 3 session(s) on IDB [09/01/13 11:59:19.368 IST 15fa 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding MAC 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 15fb 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding SWIDB Capwap1 [09/01/13 11:59:19.368 IST 15fc 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding AAA-ID 1E [09/01/13 11:59:19.368 IST 15fd 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding AUDIT-ID 0a6987b05222d7f30000001e [09/01/13 11:59:19.368 IST 15fe 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding IIF-ID 0x84FD0000000050 [09/01/13 11:59:19.368 IST 15ff 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Add record - adding TARGET_SCOPE (Client) [09/01/13 11:59:19.368 IST 1600 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] No policy handle to bind session [09/01/13 11:59:19.368 IST 1601 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] Create attr list, session 0x32000026: [09/01/13 11:59:19.368 IST 1602 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding MAC 0021.5c8c.c761 --More-- [09/01/13 11:59:19.368 IST 1603 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding Swidb 0x99E27F00 [09/01/13 11:59:19.368 IST 1604 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding AAA_ID=1E [09/01/13 11:59:19.368 IST 1605 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding Audit_sid=0a6987b05222d7f30000001e [09/01/13 11:59:19.368 IST 1606 173] ACCESS-CORE-SM-DEB: [0021.5c8c.c761, Ca1] - adding IIF ID=0x84FD0000000050 [09/01/13 11:59:19.368 IST 1607 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Processing SM CB request for 0x32000026: Event: Start a method (200) [09/01/13 11:59:19.368 IST 1608 173] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: initialising [09/01/13 11:59:19.368 IST 1609 173] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: disconnected [09/01/13 11:59:19.368 IST 160a 173] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: entering restart [09/01/13 11:59:19.368 IST 160b 173] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Override cfg - MAC 0021.5c8c.c761 - profile (none) [09/01/13 11:59:19.368 IST 160c 173] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Override cfg - SuppTimeout 30s, ReAuthMax 2, MaxReq 2, TxPeriod 30s [09/01/13 11:59:19.368 IST 160d 173] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Sending create new context event to EAP for 0xA100000F (0021.5c8c.c761)

[09/01/13 11:59:19.368 IST 160e 173] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: entering init state --More-- [09/01/13 11:59:19.368 IST 160f 173] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F:entering idle state [09/01/13 11:59:19.368 IST 1610 173] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Created a client entry (0xA100000F) [09/01/13 11:59:19.368 IST 1611 173] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Dot1x authentication started for 0xA100000F (0021.5c8c.c761) [09/01/13 11:59:19.368 IST 1612 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Context changing state from 'Idle' to 'Running' [09/01/13 11:59:19.368 IST 1613 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Client 0021.5c8c.c761, Method dot1x changing state from 'Not run' to 'Running' [09/01/13 11:59:19.368 IST 1614 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] SM will not apply policy for SESSION_STARTED on 0x32000026 / 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 1615 173] ACCESS-CORE-SM-NOTF: [0021.5c8c.c761, Ca1] Processing default action(s) for event SESSION_STARTED for session 0x32000026. [09/01/13 11:59:19.368 IST 1616 179] ACCESS-CORE-SM-CLIENT-DOT11-NOTF: [0021.5c8c.c761, Ca1] DB alloc for 0021.5c8c.c761 [09/01/13 11:59:19.368 IST 1617 179] ACCESS-CORE-SM-CLIENT-DOT11-NOTF: [0021.5c8c.c761, Ca1] Dot11 params, bssid: c8f9.f983.4260, radio id: 1, wlan id: 4, assoc id: 3, ssid: EAPFAST [09/01/13 11:59:19.368 IST 1618 179] ACCESS-CORE-SM-CLIENT-DOT11-NOTF: [0021.5c8c.c761, Ca1] Dot11 params, wlan bssid set to: c8f9.f983.426c [09/01/13 11:59:19.368 IST 1619 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] Posting!EAP_RESTART on Client 0xA100000F [09/01/13 11:59:19.368 IST 161a 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F:enter connecting state --More-- [09/01/13 11:59:19.368 IST 161b 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: restart connecting [09/01/13 11:59:19.368 IST 161c 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] Posting RX_REQ on Client 0xA100000F [09/01/13 11:59:19.368 IST 161d 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F: authenticating state entered [09/01/13 11:59:19.368 IST 161e 262] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F:connecting authenticating action [09/01/13 11:59:19.368 IST 161f 270] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] Posting AUTH_START for 0xA100000F [09/01/13 11:59:19.368 IST 1620 270] ACCESS-METHOD-DOT1X-DEB: [0021.5c8c.c761, Ca1] 0xA100000F:entering request state [09/01/13 11:59:19.368 IST 1621 270] ACCESS-METHOD-DOT1X-NOTF: [0021.5c8c.c761, Ca1] Sending EAPOL packet [09/01/13 11:59:19.368 IST 1622 270] ACCESS-METHOD-DOT1X-INFO: [0021.5c8c.c761, Ca1] Platform changed src mac of EAPOL packet [09/01/13 11:59:19.368 IST 1623 270] ACCESS-METHOD-DOT1X-INFO: [0021.5c8c.c761, Ca1]