PART 8 - C9800 - Troubleshooting Commands - Always On : successful client connection : client connection failure : AP join failures

Always On: successful client connection

show log profile wireless filter mac 0040.96b9.b5c4 to-file output.txt

[client-orch-sm] [21109]: (note): MAC: f0c1.f10b.8ac1 Association received. BSSID 7069.5a51.4ec0, old BSSID 0000.0000.0000, WLAN RomanTest, Slot 0 AP 7069.5a51.4ec0, AP4C77.6D9E.6162

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_INIT -> S_CO_ASSOCIATING

[dot11] [21109]: (note): MAC: f0c1.f10b.8ac1 Association success. AID 1, Roaming = False, WGB = False, 11r = False, 11w = False AID list: 0x1|0x0| 0x0| 0x0

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_ASSOCIATING -> S_CO_L2_AUTH_IN_PROGRESS

[client-auth] [21109]: (note): MAC: f0c1.f10b.8ac1 ADD MOBILE sent. Client state flags: 0x71 BSSID: MAC: 7069.5a51.4ec0 capwap IFID:0x90000004

[client-auth] [21109]: (note): MAC: f0c1.f10b.8ac1 L2 Authentication initiated. method DOT1X, Policy VLAN 1477,AAA override = 0 , NAC = 0

[ewlc-infra-evq] [21109]: (note): Authentication Success. Resolved Policy bitmap:11 for client f0c1.f10b.8ac1

[client-auth] [21109]: (note): MAC: f0c1.f10b.8ac1 L2 Authentication Key Exchange Start. Resolved VLAN: 1477, Audit Session id:1E27300A0000000E127592C3

[client-keymgmt] [21109]: (note): MAC: f0c1.f10b.8ac1 EAP Key management successful. AKM:DOT1X Cipher:CCMP WPA2

[client-orch-sm] [21109]: (note): MAC: f0c1.f10b.8ac1 Mobility discovery triggered. Client mode: Local

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_L2_AUTH_IN_PROGRESS ->S_CO_MOBILITY_DISCOVERY_IN_PROGRESS

[mm-client] [21109]: (note): MAC: f0c1.f10b.8ac1 Mobility Successful. Roam Type None, Sub Roam Type MM_SUB_ROAM_TYPE_NONE, Previous BSSID MAC:0000.0000.0000 Client IFID: 0xa0000001, Client Role: Local PoA: 0x90000004 PoP: 0x0

[client-auth] [21109]: (note): MAC: f0c1.f10b.8ac1 ADD MOBILE sent. Client state flags: 0x72 BSSID: MAC: 7069.5a51.4ec0 capwap IFID:0x90000004

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_MOBILITY_DISCOVERY_IN_PROGRESS ->S_CO_DPATH_PLUMB_IN_PROGRESS

[dot11] [21109]: (note): MAC: f0c1.f10b.8ac1 Client datapath entry params - ssid:RomanTest,slot_id:0 bssid ifid: 0x0, radio_ifid: 0x90000003,wlan_ifid: 0xf0400002

[dpath_svc] [21109]: (note): MAC: f0c1.f10b.8ac1 Client datapath entry created for ifid 0xa0000001

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_DPATH_PLUMB_IN_PROGRESS -> S_CO_IP_LEARN_IN_PROGRESS

[client-iplearn] [21109]: (note): MAC: f0c1.f10b.8ac1 Client IP learn successful. Method: DHCP IP: 192.168.77.200

[client-orch-state] [21109]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_IP_LEARN_IN_PROGRESS -> S_CO_RUN

Always On: client connection failure

sh logging profile wireless filter mac f0c1.f10b.8ac to-file dot1x-failure.txt

2019/10/29 09:35:34.048 {wncd_x_R0-0}{1}: [client-orch-sm] [19470]: (note): MAC: f0c1.f10b.8ac1 Association received. BSSID 7069.5a51.4ec0, old BSSID7069.5a51.4ec0, WLAN RomanTest, Slot 0 AP 7069.5a51.4ec0, AP4C77.6D9E.6162

2019/10/29 09:35:34.048 {wncd_x_R0-0}{1}: [client-orch-state] [19470]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_L2_AUTH_IN_PROGRESS-> S_CO_L2_AUTH_IN_PROGRESS

2019/10/29 09:35:34.048 {wncd_x_R0-0}{1}: [dot11] [19470]: (note): MAC: f0c1.f10b.8ac1 Association success. AID 1, Roaming = False, WGB = False, 11r= False, 11w = False AID list: 0x1| 0x0| 0x0| 0x0

2019/10/29 09:35:34.048 {wncd_x_R0-0}{1}: [client-orch-state] [19470]: (note): MAC: f0c1.f10b.8ac1 Client state transition: S_CO_L2_AUTH_IN_PROGRESS-> S_CO_L2_AUTH_IN_PROGRESS

2019/10/29 09:35:34.048 {wncd_x_R0-0}{1}: [client-auth] [19470]: (note): MAC: f0c1.f10b.8ac1 ADD MOBILE sent. Client state flags: 0x71 BSSID: MAC:7069.5a51.4ec0 capwap IFID: 0x90000004

2019/10/29 09:35:34.051 {wncd_x_R0-0}{1}: [client-auth] [19470]: (note): MAC: f0c1.f10b.8ac1 L2 Authentication initiated. method DOT1X, Policy VLAN1477,AAA override = 0 , NAC = 0

2019/10/29 09:35:34.330 {wncd_x_R0-0}{1}: [errmsg] [19470]: (note): %DOT1X-5-FAIL: Authentication failed for client (f0c1.f10b.8ac1) with reason (CredFail) on Interface capwap_90000004 AuditSessionID 000000000000000B16D9A13D Username: drghgdf

Always On : AP join failures

show log profile wir filter mac to-file output.txt

• Unsupported AP

[apmgr-capwap-join] [1263]: UUID: 0, ra: 0, TID: 0 (ERR): d824.bde8.3690 Join request not accepted: Unsupported AP Model AIR-LAP1142N-A-K9

• Reg Domain failure

[apmgr-capwap-config] [1394]: UUID: 10000000002ed, (ERR): f44e.0597.fb50 Failed to verify reg domain slot.validation of country code(UX) to regulatory domain(-A) error:1

[apmgr-capwap-config] [1394]: UUID: 10000000002ed, (ERR): f44e.0597.fb50 Failed to get ap default country code. Getdefault country code for AP error.

[apmgr-capwap-config] [1394]: UUID: 10000000002ed, (ERR): f44e.0597.fb50 Failed to set reg domain check status.country code US is not configured on WLC

• Cert Failure

[apmgr-capwap-config] [1394]: UUID: 10000000002ed, (ERR), %PKI-3-CERTIFICATE_INVALID_NOT_YET_VALID: Certificate chain validation has failed. The certificate (SN: 6B4F09560000001763DF) is not yet valid Validity period starts on 22:48:43 IST Sep 9 2014

• Discovery to non wireless mgmt interface

{wncmgrd_R0-0}{2}: [capwapac-srvr] [16320]: UUID: 0, ra::0, TID: 0 (ERR): IP:3.3.3.1[5246], Discovery to non wireless mgmt interface