Catalyst 9800 Wireless Controller 공통 무선 클라이언트 연결 문제

Similar documents
TTA Verified : HomeGateway :, : (NEtwork Testing Team)

시스코 무선랜 설치운영 매뉴얼(AP1200s_v1.1)

ARMBOOT 1

SRC PLUS 제어기 MANUAL

목차 BUG offline replicator 에서유효하지않은로그를읽을경우비정상종료할수있다... 3 BUG 각 partition 이서로다른 tablespace 를가지고, column type 이 CLOB 이며, 해당 table 을 truncate

ORANGE FOR ORACLE V4.0 INSTALLATION GUIDE (Online Upgrade) ORANGE CONFIGURATION ADMIN O

Microsoft PowerPoint - 2.Catalyst Switch Intrastructure Protection_이충용_V1 0.ppt [호환 모드]

Network seminar.key

1,000 AP 20,000 ZoneDirector IT 5, WLAN. ZoneFlex AP ZoneDirector. WLAN. WLAN AP,,,,,,., Wi-Fi. AP. PSK PC. VLAN WLAN.. ZoneDirector 5000 WLAN L

VZ94-한글매뉴얼

untitled

Remote UI Guide

VTP(VLAN Trunk Protocol) Cisco 전용프로토콜로서트렁크로연결된스위치간에 VLAN 정보를공유하는기능을수행한다. 즉, 하나의스위치에서 VLAN을생성하거나, 삭제또는수정을실시하면, 트렁크로연결된다른스위치에게변경된 VLAN 데이터베이스정보를공유하는기능을담

본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. [ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase sta

소개 TeraStation 을 구입해 주셔서 감사합니다! 이 사용 설명서는 TeraStation 구성 정보를 제공합니다. 제품은 계속 업데이트되므로, 이 설명서의 이미지 및 텍스트는 사용자가 보유 중인 TeraStation 에 표시 된 이미지 및 텍스트와 약간 다를 수

bn2019_2

untitled

UDP Flooding Attack 공격과 방어

PWR PWR HDD HDD USB USB Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl Cable PC PC DDNS (

TTA Journal No.157_서체변경.indd

KISA-GD

PCServerMgmt7


Mango220 Android How to compile and Transfer image to Target

PowerPoint 프레젠테이션

ETL_project_best_practice1.ppt

<C0CCBCBCBFB52DC1A4B4EBBFF82DBCAEBBE7B3EDB9AE2D D382E687770>

본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. 제 28 장이더체널 블로그 : net123.tistory.com 저자김정우

네트워크연결매뉴얼 SRP-Q300/302 감열식프린터 Rev

Mars OS System Administration Guide

침입방지솔루션도입검토보고서

hd1300_k_v1r2_Final_.PDF

Intro to Servlet, EJB, JSP, WS

Windows 8에서 BioStar 1 설치하기


thesis

untitled

Microsoft PowerPoint - ch07.ppt

차 례 설치순서 1 인터넷 유무선공유 설치하기 2 스마트에어컨 회원등록 6 캐리어에어컨 스마트앱 사용하기 8

Microsoft PowerPoint - L4-7Switch기본교육자료.ppt

PRO1_04E [읽기 전용]

USB USB DV25 DV25 REC SRN-475S REC SRN-475S LAN POWER LAN POWER Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl C

Microsoft Word - ZIO-AP1500N-Manual.doc

Analytics > Log & Crash Search > Unity ios SDK [Deprecated] Log & Crash Unity ios SDK. TOAST SDK. Log & Crash Unity SDK Log & Crash Search. Log & Cras

시스코-Unified Wireless

1217 WebTrafMon II

PowerPoint 프레젠테이션

목차 BUG DEQUEUE 의 WAIT TIME 이 1 초미만인경우, 설정한시간만큼대기하지않는문제가있습니다... 3 BUG [qp-select-pvo] group by 표현식에있는컬럼을참조하는집합연산이존재하지않으면결괏값오류가발생할수있습니다... 4

(SW3704) Gingerbread Source Build & Working Guide

별지 제10호 서식

chapter4

Copyright 2009 Hewlett-Packard Development Company, L.P. Intel 은 미국 및 다른 국가에서 Intel Corporation 의 상표입니다. Microsoft 및 Windows 는 Microsoft Corporation 의

Microsoft Word - release note-VRRP_Korean.doc

Microsoft Word Question.doc

Microsoft Word - FS_ZigBee_Manual_V1.3.docx

Microsoft Word - eClipse_사용자가이드_

강의10

Microsoft PowerPoint - ch13.ppt

Network Security - Wired Sniffing 실습 ICNS Lab. Kyung Hee University

RHEV 2.2 인증서 만료 확인 및 갱신

6주차.key

이도경, 최덕재 Dokyeong Lee, Deokjai Choi 1. 서론

<4D F736F F F696E74202D20B8B6C0CCC5A9B7CEC7C1B7CEBCBCBCAD202839C1D6C2F7207E203135C1D6C2F >

목차 BUG 문법에맞지않는질의문수행시, 에러메시지에질의문의일부만보여주는문제를수정합니다... 3 BUG ROUND, TRUNC 함수에서 DATE 포맷 IW 를추가지원합니다... 5 BUG ROLLUP/CUBE 절을포함하는질의는 SUBQUE

CPX-E-EC_BES_C_ _ k1

Something that can be seen, touched or otherwise sensed

SMB_ICMP_UDP(huichang).PDF

0.1-6

I What is Syrup Store? 1. Syrup Store 2. Syrup Store Component 3.

AAA AAA란라우터로접속하는사용자에대한인증, 권한, 과금을수행하기위한보안관련기능을수행하며, 클라이언트장비가서버쪽장비와연결되어네트워크서비스연결을시도할때도 AAA 기능을통해서장비인증및권한을실시한다. AAA 기능을사용하기이전에는라우터접근제어는 Console 라인과 VTY

PowerPoint Presentation


untitled

Windows 네트워크 사용 설명서


7782 WI-FI AP (5GHz/2.4GHz) RF 6dB / 15dB 4bB, af/at PoE(Power over Ethernet) 802.3af/at VAC GPS,, 2~4 IP 900Mbps (450Mbps/ ) 32 BSSID, QoS ** Q

1. Windows 설치 (Client 설치 ) 원하는위치에다운받은발송클라이언트압축파일을해제합니다. Step 2. /conf/config.xml 파일수정 conf 폴더에서 config.xml 파일을텍스트에디터를이용하여 Open 합니다. config.xml 파일에서, 아

TCP.IP.ppt

F1-1(수정).ppt

Æí¶÷4-¼Ö·ç¼Çc03ÖÁ¾š

VPN.hwp

비식별화 기술 활용 안내서-최종수정.indd

서버설정 1. VLAN 설정 1.1 토폴로지를참고로 SW1 에 vlan 설정을한다. (vlan 이름을설정하고해당인터페이스에 vlan 이름과동일한코멘트를처리하시오.) 1.2 PC에토폴로지에부여된 IP를설정하고, 게이트웨이는네트워크의마지막주소를사용합니다. - 서버에는 DN

1.LAN의 특징과 각종 방식

(Asynchronous Mode) ( 1, 5~8, 1~2) & (Parity) 1 ; * S erial Port (BIOS INT 14H) - 1 -

Multi Channel Analysis. Multi Channel Analytics :!! - (Ad network ) Report! -! -!. Valuepotion Multi Channel Analytics! (1) Install! (2) 3 (4 ~ 6 Page

PowerChute Personal Edition v3.1.0 에이전트 사용 설명서

Microsoft Word - ntasFrameBuilderInstallGuide2.5.doc

Polly_with_Serverless_HOL_hyouk

Sena Device Server Serial/IP TM Version

CD-RW_Advanced.PDF

10X56_NWG_KOR.indd

about_by5

¨ìÃÊÁ¡2

歯DCS.PDF

Backup Exec

歯메뉴얼v2.04.doc

FON_이용안내_A4_ _01.pub

4. 스위치재부팅을실시한다. ( 만약, Save 질문이나오면 'no' 를실시한다.) SWx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] (

Transcription:

Catalyst 9800 Wireless Controller 공통무선클라이언트연결문제 목차 소개사전요구사항요구사항사용되는구성요소로그수집시나리오웹인증자격증명이작동하지않음정책프로필에정의된유효한 VLAN 이없으므로클라이언트를연결할수없습니다 잘못된암호로인해클라이언트를연결할수없습니다 RADIUS 에서보낸 ACL 이 9800 WLC 에없으므로클라이언트를연결할수없습니다 RADIUS 에서보낸 VLAN 이 9800 WLC 에없기때문에클라이언트가연결할수없습니다 WLAN 또는정책프로파일변경으로인해클라이언트연결이끊김네트워크에서수동으로제거된클라이언트 EAP 시간초과로인해클라이언트연결끊김 AP 무선리셋으로인해클라이언트연결이끊어졌습니다 웹인증시간초과로인해클라이언트연결이끊어졌습니다 세션시간초과로인해클라이언트연결이끊어졌습니다 유휴시간제한으로인해클라이언트연결이끊김 SSID 간에클라이언트이동 소개 이문서에서는가장일반적인무선클라이언트연결문제시나리오와 Catalyst 9800 Wireless Controller 에서문제를해결하는방법에대해설명합니다 사전요구사항 요구사항 다음주제에대한지식을보유하고있으면유용합니다 Cisco Catalyst 9800 Series Wireless Controller 무선컨트롤러에대한 CLI(Command Line Interface) 액세스 사용되는구성요소 IOS-XE Gibraltar 1610 이상이문서의정보는특정랩환경의디바이스를토대로작성되었습니다 이문서에사용된모든디바이스는초기화된 ( 기본 ) 컨피그레이션으로시작되었습니다 현재네트워크가작동중인경우, 모든

명령어의잠재적인영향을미리숙지하시기바랍니다 로그수집 WLC 9800 은 ALWAYS-ON 추적기능을제공합니다 이렇게하면모든클라이언트연결관련오류, 경고및알림수준메시지가지속적으로로깅되며, 발생후장애또는장애상태에대한로그를볼수있습니다 참고 : 생성되는로그볼륨에따라몇시간에서며칠로돌아갈수있습니다 기본적으로수집된 9800 WLC 의추적을보려면 SSH/ 텔넷을통해 9800 WLC 에연결하고다음단계를수행하십시오 ( 텍스트파일에세션을로깅하는지확인 ) 1 단계 컨트롤러의현재시간을확인하여문제가발생한시점으로돌아가로그를추적할수있습니다 # show clock 2 단계 시스템컨피그레이션에따라컨트롤러의버퍼또는외부 syslog 에서 syslog 를수집합니다 시스템상태및오류 ( 있는경우 ) 를빠르게볼수있습니다 # show logging 3 단계 디버그조건이활성화되었는지확인합니다 # show debugging IOSXE Conditional Debug Configs: Conditional Debug Global State: Stop IOSXE Packet Tracing Configs: Packet Infra debugs: Ip Address Port ------------------------------------------------------ ---------- 참고 : 나열된조건이있는경우, 활성화된조건 (mac 주소, ip 주소등 ) 이발생하는모든프로세스의디버그레벨로추적이로깅되고있음을의미합니다 이렇게하면로그볼륨이증가합니다 따라서능동적으로디버깅하지않을때는모든조건을지우는것이좋습니다 4 단계 테스트중인 mac 주소가 3 단계에서조건으로나열되지않았다고가정하면특정 mac 주소에대한상시알림레벨추적을수집합니다 # show logging profile wireless filter { mac ip } { <aaaabbbbcccc> <abcd> } to-file always-on-<filenametxt> 세션의내용을표시하거나파일을외부 TFTP 서버에복사할수있습니다

# more bootflash:always-on-<filenametxt> or # copy bootflash:always-on-<filenametxt> tftp://abcd/path/always-on-<filenametxt> 조건부디버깅및무선활성추적 Always-On 추적이조사중인문제의트리거를확인할수있는충분한정보를제공하지않는경우조건부디버깅을활성화하고 RA(Radio Active) 추적을캡처할수있습니다 그러면지정된조건과상호작용하는모든프로세스 ( 이경우클라이언트 MAC 주소 ) 에대한디버그수준추적을제공할수있습니다 조건부디버깅을활성화하려면다음단계를수행합니다 5 단계 활성화된디버그조건이없는지확인합니다 # clear platform condition all 6 단계 모니터링할무선클라이언트 MAC 주소에대한디버그조건을활성화합니다 이명령은제공된 mac 주소를 30 분 (1800 초 ) 동안모니터링하기시작합니다 선택적으로이시간을최대 2085978494 초로늘릴수있습니다 # debug wireless mac <aaaabbbbcccc> {monitor-time <seconds>} 참고 : 한번에두개이상의클라이언트를모니터링하려면 mac 주소당디버그무선 mac <aaaabbbbcccc> 명령을실행합니다 참고 : 모든항목이내부적으로버퍼링되어나중에볼수있으므로터미널세션에서클라이언트활동의출력이표시되지않습니다 7 단계 모니터링할문제또는동작을재현합니다 8 단계 기본또는구성된모니터시간이시작되기전에문제가재현되는경우디버그를중지합니다 # no debug wireless mac <aaaabbbbcccc> 모니터시간이경과하거나디버그무선이중지되면 9800 WLC 는이름이다음과같은로컬파일을생성합니다 ra_trace_mac_aaabbcccc_hhmssxxx_timezone_dayweek_month_day_yearlog 9 단계 mac 주소활동의파일을수집합니다 ra trace log 를외부서버에복사하거나화면에직접출력을표시할수있습니다 RA 추적파일의이름확인 # dir bootflash: inc ra_trace 파일을외부서버에복사합니다

# copy bootflash:ra_trace_mac_aaaabbbbcccc_hhmmssxxx_timezone_dayweek_month_day_yearlog tftp://abcd/ra-filenametxt 내용표시 : # more bootflash:ra_trace_mac_aaaabbbbcccc_hhmmssxxx_timezone_dayweek_month_day_yearlog 10 단계 근본원인이아직명확하지않은경우디버그수준로그를보다자세히볼수있는내부로그를수집합니다 이미수집및내부적으로저장된디버그로그만자세히살펴보기때문에클라이언트를다시디버깅할필요가없습니다 # show logging profile wireless internal filter { mac ip } { <aaaabbbbcccc> <abcd> } to-file ra-internal-<filename>txt 참고 : 이명령출력은모든프로세스의모든로깅레벨에대한추적을반환하며상당한양의데이터를제공합니다 Cisco TAC 에문의하여이러한추적을분석하십시오 ra-internal-filenametxt 를외부서버에복사하거나화면에직접출력을표시할수있습니다 파일을외부서버에복사합니다 # copy bootflash:ra-internal-<filename>txt tftp://abcd/ra-internal-<filename>txt 내용표시 : # more bootflash:ra-internal-<filename>txt 11 단계 디버그조건을제거합니다 # clear platform condition all 참고 : 문제해결세션후에항상디버그조건을제거해야합니다 시나리오 웹인증자격증명이작동하지않음 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [27915]: UUID: 100000000015b, ra: 15, (info): [e4b3185190ff:capwap_90800003] Authc failure from WebAuth, Auth event fail 클라이언트가유효한자격증명을사용하고있지않습니다 9800 WLC에정의된기본권한부여네트워크가없습니다 가능한솔루션 클라이언트가유효한자격증명을사용하고있는지확인

기본권한부여네트워크방법추가 Configuration( 컨피그레이션 ) > Security( 보안 ) > AAA > AAA Method List(AAA 방법목록 ) > Authorization( 권한부여 ) > + Add( 추가 ) 로이동하여이러한매개변수를사용하여새권한부여방법을생성합니다 # config t # aaa authorization network default local 정책프로필에정의된유효한 VLAN 이없으므로클라이언트를연결할수없습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [epm] [25054]: UUID: 1000000000019, ra: 15, (ERR): EPM_PLUGIN_VLAN_ERR: [HDL = 0x0] Unable to get active_feature_ctx for vlan group name YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [sanet-shim-miscellaneous] [25054]: UUID: 1000000000019, ra: 15, (ERR): MAC: 087402771345 Error in fetching vlans YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [sanet-shim-miscellaneous] [25054]: UUID: 1000000000019, ra: 15, (ERR): MAC: 087402771345 building Mobile Announce Vlanid payload failed WLAN 에할당된정책프로필에유효한 VLAN 이정의되지않았습니다 솔루션 1 클라이언트에서어떤정책프로파일을사용하는지확인합니다 Monitoring( 모니터링 ) > Wireless( 무선 ) > Clients( 클라이언트 ) > Client row( 클라이언트행 ) > Client

Properties( 클라이언트속성 ) 로이동합니다 (MAC 주소를사용하여특정클라이언트에대한선택적검색 ) # show wireless client mac-address <aaaabbbbcccc> detail inc Policy Profile Policy Profile : default-policy-profile 2 해당정책프로파일에어떤 VLAN 이할당되었는지확인합니다 Configuration( 컨피그레이션 ) > Tags & Profiles( 태그및프로파일 ) > Policy( 정책 ) > Policy Profile( 정책프로파일 ) 행 > Access Policies( 액세스정책 ) 로이동합니다 # show wireless profile policy detailed default-policy-profile inc VLAN VLAN : VLAN2686 3 VLAN 매개변수에 VLAN 이름또는 VLAN ID가유효하고활성상태인지확인합니다 Configuration( 컨피그레이션 ) > Layer2 > VLAN > VLAN 으로이동합니다

# show vlan brief VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Te0/0/2, Te0/0/3 210 VLAN0210 active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 2600 VLAN2600 active 2601 VLAN2601 active 2602 VLAN2602 active 2686 VLAN2686 active 참고 : VLAN 이름을사용하는경우대 / 소문자를구분하므로 show vlan briefcase 명령에표시된것과정확히동일해야합니다 4 필요에따라 VLAN 을수정합니다 Configuration( 구성 ) > Tags & Profiles( 태그및프로파일 ) > Policy( 정책 ) > Policy Profile( 정책프로파일 ) 행 > Access Policies( 액세스정책 ) 로다시이동하여 VLAN 을수정합니다 # config t # wireless profile policy default-policy-profile # shutdown # vlan <vlan-# or vlan-name> # no shutdown 잘못된암호로인해클라이언트를연결할수없습니다

YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-keymgmt] [27782]: UUID: 1000000000088, ra: 15, (ERR): MAC: e4b3187c3058 Keymgmt: Failed to validate eapol mic MIC mismatch YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-keymgmt] [27782]: UUID: 1000000000088, ra: 15, (ERR): MAC: e4b3187c3058 Keymgmt: Failed to validate eapol key m2 MIC validation failed 클라이언트가잘못된암호를입력하고있습니다 가능한솔루션 엔드포인트디바이스에서비밀번호수정 SSID의비밀번호수정 Configuration( 컨피그레이션 ) > Wireless( 무선 ) > WLANs(WLANs) > WLAN name(wlan 이름 ) > Security( 보안 ) > Layer2( 레이어 2) 로이동하고비밀번호를수정합니다

# config t # wlan <wlan-name> # shut # security wpa psk set-key ascii 0 <clear-text-password> # no shut RADIUS 에서보낸 ACL 이 9800 WLC 에없으므로클라이언트를연결할수없습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [epm-acl] [8104]: (ERR): ACL acl-sent-by-ise is missing in configuration for mac e4b3187c3058 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [epm-acl] [8104]: (ERR): Unable to parse EPM attributes YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet App Event EV_PLUGIN_CONF YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [epm] [8104]: (ERR): Error in activating feature (EPM ACL PLUG-IN) EPM Data Base: Number of Authz_info: 2 Authz info 1 details Number of feat info: 2, State: Success, Priority: 254 EPM Vlan PLUG-IN Status: Success VLAN Group: VLAN2602 VLAN-ID: 2602 SM Reauth PLUG-IN Status: Success Authz info 2 details Number of feat info: 4, State: Fail, Priority: 100 EPM MISC PLUG-IN Status: Success Anchor Vlan: 0 EPM ACL PLUG-IN Status: Activate Failure SM ACCOUNTING PLUG-IN Status: Success linksec Status: Success YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-infra-evq-lib] [8104]: (note): already started radioactive trace on key:[e4b3187c3058] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet App Event EV_SVM_APPLY_UP_FAIL YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8104]: (ERR): [e4b3187c3058:capwap_90000003] SM unable to apply User Profile for 0x1A000004 - 'Subsystem(4)' detected the 'fatal' condition 'Code(47)' YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8104]: (ERR): [e4b3187c3058:capwap_90000003] Unable to process authc result for 0x1A000004 - success handling failed YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet eventq: AUTH_MGR_MQ, message:3 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-auth] [8104]: (ERR): MAC: e4b3187c3058 client authz result: FAILURE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-exclusion] [8104]: (info): MAC: e4b3187c3058 Add client to exclusionlist, sending ipc to add client to client exclusion table, reason: ACL failure, timeout: 60, AP: MAC: f07f06eef590 RADIUS 서버에서보낸 ACL 이 9800 WLC 에존재하지않습니다

가능한솔루션 올바른 ACL 이름을전송하도록 RADIUS 서버컨피그레이션을수정합니다 누락된 ACL을 9800 WLC에추가 RADIUS 에서보낸 VLAN 이 9800 WLC 에없기때문에클라이언트가연결할수없습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [epm] [8104]: (ERR): Error in activating feature (EPM Vlan PLUG-IN) YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet App Event EV_START_CALL YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-infra-evq] [8104]: (ERR): EPM Data Base: Number of Authz_info: 2 Authz info 1 details Number of feat info: 2, State: Success, Priority: 254 EPM Vlan PLUG-IN Status: Conflict SM Reauth PLUG-IN Status: Success Authz info 2 details Number of feat info: 4, State: Activate, Priority: 100 EPM MISC PLUG-IN Status: Success Anchor Vlan: 0 SM ACCOUNTING PLUG-IN Status: Success EPM Vlan PLUG-IN Status: Activate Failure VLAN Group: vlan-sent-by-ise VLAN-ID: 0 linksec Status: Success YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet App Event EV_SVM_APPLY_UP_FAIL YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8104]: (ERR): [e4b3187c3058:capwap_90000003] SM unable to apply User Profile for 0x0E000005 - 'Subsystem(4)' detected the 'fatal' condition 'Code(47)' YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8104]: (ERR): [e4b3187c3058:capwap_90000003] Unable to process authc result for 0x0E000005 - success handling failed YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8104]: (info): Sanet eventq: AUTH_MGR_MQ, message:3 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-auth] [8104]: (ERR): MAC: e4b3187c3058 client authz result: FAILURE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-exclusion] [8104]: (info): MAC: e4b3187c3058 Add client to exclusionlist, sending ipc to add client to client exclusion table, reason: VLAN failure, timeout: 60, AP: MAC: f07f06eef590 RADIUS 서버에서보낸 VLAN 이 9800 WLC 에존재하지않습니다 가능한솔루션 올바른 VLAN 이름 /ID를전송하도록 RADIUS 서버컨피그레이션을수정합니다 누락된 VLAN을 9800 WLC에추가 WLAN 또는정책프로파일변경으로인해클라이언트연결이끊김

YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-infra-evq] [8522]: (note): Mcast: Sent L2 MGID 2602 DEL to AP vap_id 2 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [apmgr-bssid] [8522]: (ERR): 00c88b26d790 Radio:0 BSSID:1 - Bssid ifid is not created so no need to push data to fman YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [8522]: (info): MAC: e4b3187c3058 Deleting the client, reason: 5, CO_CLIENT_DELETE_REASON_BSSID_DOWN, Client state S_CO_RUN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [8522]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_BSSID_DOWN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [8522]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-qos-client] [8522]: (ERR): MAC: e4b3187c3058 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [multicast-main] [8522]: (info): MAC: e4b3187c3058 No Flex/Fabric main record exists for client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-iplearn] [8522]: (info): MAC: e4b3187c3058 IP-learn state transition: S_IPLEARN_COMPLETE -> S_IPLEARN_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {mobilityd_r0-0}{1}: [mm-transition] [19496]: (info): MAC: e4b3187c3058 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from WNCD[0] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dpath_svc] [8522]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000001 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-transition] [8522]: (info): MAC: e4b3187c3058 MMIF FSM transition: S_MA_LOCAL -> S_MA_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-client] [8522]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8522]: (info): Sanet App Event EV_SESSION_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8522]: (info): [e4b3187c3058:capwap_90000003] Disconnect request from SANET-SHIM (12) for e4b3187c3058 / 0xfb6000001 - term: service-unavailable, abort: Unknown, disc: session disconnect YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [aaa-attr-inf] [8522]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "VLAN2602" ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [aaa-attr-inf] [8522]: (info): [ Applied attribute : timeout 0 1800 (0x708) ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-auth] [8522]: (info): MAC: e4b3187c3058 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_SANET_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dot11] [8522]: (info): MAC: e4b3187c3058 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 5, CO_CLIENT_DELETE_REASON_BSSID_DOWN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dot11] [8522]: (info): MAC: e4b3187c3058 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED GUI 에서변경사항이적용되었거나 SSID 또는정책프로파일이수동으로비활성화되었습니다 솔루션 이는정상적인동작이므로프로덕션시간에 SSID 또는정책프로필을변경하지마십시오 네트워크에서수동으로제거된클라이언트 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [8522]: (info): MAC: e4b3187c3058 Deleting the client, reason: 12, CO_CLIENT_DELETE_REASON_ADMIN_RESET, Client state S_CO_RUN YYYY/DD/MM HH:MM:SSxxx {mobilityd_r0-0}{1}: [mm-transition] [19496]: (info): MAC:

e4b3187c3058 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from WNCD[0] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [8522]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_ADMIN_RESET YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [8522]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-qos-client] [8522]: (ERR): MAC: e4b3187c3058 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [multicast-main] [8522]: (info): MAC: e4b3187c3058 No Flex/Fabric main record exists for client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-iplearn] [8522]: (info): MAC: e4b3187c3058 IP-learn state transition: S_IPLEARN_COMPLETE -> S_IPLEARN_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dpath_svc] [8522]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000001 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-transition] [8522]: (info): MAC: e4b3187c3058 MMIF FSM transition: S_MA_LOCAL -> S_MA_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-client] [8522]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [wncd_0] [8522]: (info): Sanet App Event EV_SESSION_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [auth-mgr] [8522]: (info): [e4b3187c3058:capwap_90000003] Disconnect request from SANET-SHIM (12) for e4b3187c3058 / 0x30000003 - term: admin-reset, abort: Unknown, disc: session disconnect YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [aaa-attr-inf] [8522]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "VLAN2602" ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [aaa-attr-inf] [8522]: (info): [ Applied attribute : timeout 0 1800 (0x708) ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-auth] [8522]: (info): MAC: e4b3187c3058 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_SANET_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dot11] [8522]: (info): MAC: e4b3187c3058 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 12, CO_CLIENT_DELETE_REASON_ADMIN_RESET YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dot11] [8522]: (info): MAC: e4b3187c3058 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED CLI 에서클라이언트를네트워크에서수동으로제거했습니다 # wireless client mac-address aaaabbbbcccc deauthenticate 또는 GUI 에서 솔루션 없음, 사용자가시작한일반동작

EAP 시간초과로인해클라이언트연결끊김 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [errmsg] [8681]: (note): %DOT1X-5-FAIL: Authentication failed for client (087402771345) with reason (Timeout) on Interface capwap_90800003 AuditSessionID 34AD580A0000000D7F735399 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Authc failure from Dot1X, Auth event timeout YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] (Re)try failed method Dot1X - 087402771345 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Retrying (count 3) method dot1x YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-sm] [8681]: (info): MAC: 087402771345 Deleting the client, reason: 7, CO_CLIENT_DELETE_REASON_CONNECT_TIMEOUT, Client state S_CO_L2_AUTH_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-sm] [8681]: (note): MAC: 087402771345 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_CONNECT_TIMEOUT YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-state] [8681]: (note): MAC: 087402771345 Client state transition: S_CO_L2_AUTH_IN_PROGRESS -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [mm-transition] [8681]: (info): MAC: 087402771345 MMIF FSM transition: S_MA_INIT -> S_MA_LOCAL_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [mm-client] [8681]: (ERR): MAC: 087402771345 Client not present in DB Responding to CO with Delete Ack YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet App Event EV_SESSION_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Disconnect request from SANET-SHIM (12) for 087402771345 / 0x30000003 - term: supplicant-restart, abort: Unknown, disc: authorization failure YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (info): MAC: 087402771345 Client auth-interface state transition: S_AUTHIF_DOT1XAUTH_PENDING -> S_SANET_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [dot11] [8681]: (info): MAC: 087402771345 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 7, CO_CLIENT_DELETE_REASON_CONNECT_TIMEOUT YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [dot11] [8681]: (info): MAC: 087402771345 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (info): MAC: 087402771345 Client auth-interface state transition: S_SANET_DELETE_IN_PROGRESS -> S_AUTHIF_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet eventq: EAP_CORE_MQ, message:2 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-state] [8681]: (note): MAC: 087402771345 Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED 클라이언트가 EAP-Request Timeout 간격또는 EAP-Request Max Retries 시간내에 9800 WLC 에서보낸 EAP 패킷에응답하지않습니다 가능한솔루션 무선클라이언트드라이버를최신드라이버로업데이트

무선클라이언트신뢰 RADIUS 인증서확인 EAP-Request Timeout(EAP 요청시간제한 ) 및 / 또는 EAP-Request Max Retries(EAP 요청최대재시도횟수 ) 증가 # config t # wireless security dot1x request retries <0-20> # wireless security dot1x timeout <1-120 seconds> Configuration( 컨피그레이션 ) > Security( 보안 ) > Advanced EAP( 고급 EAP) 로이동하고필요한설정을사용자지정합니다 AP 무선리셋으로인해클라이언트연결이끊어졌습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [apmgr-capwap-config] [8621]: (info): f07f06eef590 Radio: 1 is Operationally DOWN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [apmgr-db] [8621]: (note): MAC: f07f06eef590 Radio 1 is disabled, on receiving change state event message from AP YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [radio-history-reset] [8621]: (info): Radio reset of the AP f07f06eef590 Slot:1 Band:80211a due to Cause:0, Detailed Cause : 56 - Interface UP for Channel Change YYYY/DD/MM HH:MM:SSxxx {mobilityd_r0-0}{1}: [mm-transition] [19496]: (info): MAC: e4b3187c3058 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from WNCD[1] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-sm] [8621]: (info): MAC: e4b3187c3058 Deleting the client, reason: 5, CO_CLIENT_DELETE_REASON_BSSID_DOWN, Client state S_CO_RUN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-sm] [8621]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_BSSID_DOWN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-state] [8621]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dpath_svc] [8621]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000001 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [mm-transition] [8621]: (info): MAC: e4b3187c3058 MMIF FSM transition: S_MA_LOCAL -> S_MA_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [mm-client] [8621]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [wncd_1] [8621]: (info): Sanet App Event EV_SESSION_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [auth-mgr] [8621]: (info): [e4b3187c3058:capwap_90400003] Disconnect request from SANET-SHIM (12) for e4b3187c3058 / 0xf89000008 - term: service-unavailable, abort: Unknown, disc: session disconnect YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-auth] [8621]: (info): MAC: e4b3187c3058 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_SANET_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dot11] [8621]: (info): MAC: e4b3187c3058 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 5, CO_CLIENT_DELETE_REASON_BSSID_DOWN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dot11] [8621]: (info): MAC: e4b3187c3058 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED 클라이언트가변경된채널또는전원에연결된 AP 로인해무선리셋이발생했습니다

가능한솔루션 이는정상적인동작입니다 9800 WLC가채널변경을허용할빈도를구성할수있습니다 # config t # ap dot11 { 5ghz 24ghz } rrm channel dca interval <0-24> Valid values 1,2,3,4,6,8,12 and 24 hours, 0 = 10 minutes (default) Configuration( 컨피그레이션 ) > Radio Configurations( 무선컨피그레이션 ) > RRM > 5GHz Band/24GHz Band(5GHz 대역 ) > DCA > Increase interval( 간격증가 ) 설정으로이동합니다 웹인증시간초과로인해클라이언트연결이끊어졌습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Authc failure from WebAuth, Auth event no-response YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet eventq: AUTH_MGR_MQ, message:6 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet App Event EV_SESSION_AUTHC_FAILED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] AUTHC_FAIL - unauthorize by default YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [9800 WLC-infra-evq] [8681]: (ERR): Authc failure for mac 087402771345, username, audit session id 34AD580A0000000E7FFA4ED8, Failure reason: No Response from Client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Signalling Authc fail for client 087402771345 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [errmsg] [8681]: (note): %SESSION_MGR-5-FAIL: Authorization failed or unapplied for client (087402771345) on Interface capwap_90800003 AuditSessionID 34AD580A0000000E7FFA4ED8 Failure reason: Authc fail Authc failure reason: No Response from Client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Authz failed/unapplied for 0x08000004 (087402771345), method: webauth Signal switch PI YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet App Event EV_SESSION_AUTHZ_FAILED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (info): MAC: 087402771345 Client auth-interface state transition: S_AUTHIF_WEBAUTH_PENDING -> S_AUTHIF_WEBAUTH_PENDING YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (ERR): MAC: 087402771345 L3 Authentication FAIL YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (info): MAC: 087402771345 Client auth-interface state transition: S_AUTHIF_WEBAUTH_PENDING -> S_WAIT_FOR_CO_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [9800 WLC-infra-evq] [8681]: (ERR): WLAN profile = prof-name, Policy profile = default-policy-profile, AP name = AP1702-05 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-sm] [8681]: (info): MAC: 087402771345 Deleting the client, reason: 0, CO_CLIENT_DELETE_REASON_NONE, Client state S_CO_L3_AUTH_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-sm] [8681]: (note): MAC: 087402771345 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_NONE

YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-orch-state] [8681]: (note): MAC: 087402771345 Client state transition: S_CO_L3_AUTH_IN_PROGRESS -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [9800 WLC-qos-client] [8681]: (ERR): MAC: 087402771345 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [multicast-main] [8681]: (info): MAC: 087402771345 No Flex/Fabric main record exists for client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-iplearn] [8681]: (info): MAC: 087402771345 IP-learn state transition: S_IPLEARN_COMPLETE -> S_IPLEARN_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [dpath_svc] [8681]: (note): MAC: 087402771345 Client datapath entry deleted for ifid 0xfa0000002 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [mm-transition] [8681]: (info): MAC: 087402771345 MMIF FSM transition: S_MA_LOCAL -> S_MA_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [mm-client] [8681]: (ERR): MAC: 087402771345 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [wncd_2] [8681]: (info): Sanet App Event EV_SESSION_DELETE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [auth-mgr] [8681]: (info): [087402771345:capwap_90800003] Disconnect request from SANET-SHIM (12) for 087402771345 / 0x08000004 - term: none, abort: Unknown, disc: (default) YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [aaa-attr-inf] [8681]: (info): [ Applied attribute :bsn-vlan-interface-name 0 "VLAN2602" ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [aaa-attr-inf] [8681]: (info): [ Applied attribute : timeout 0 1800 (0x708) ] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [client-auth] [8681]: (info): MAC: 087402771345 Client auth-interface state transition: S_WAIT_FOR_CO_DELETE -> S_SANET_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {mobilityd_r0-0}{1}: [mm-transition] [19496]: (info): MAC: 087402771345 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from WNCD[2] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-2}{1}: [dot11] [8681]: (info): MAC: 087402771345 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED 클라이언트가허용된시간 ( 약 120 초 ) 내에웹인증을완료하지못했습니다 솔루션 클라이언트가 120초내에웹인증을완료하는지확인 세션시간초과로인해클라이언트연결이끊어졌습니다 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-auth] [8621]: (info): MAC: e4b3187c3058 Client auth-interface state transition: S_AUTHIF_PSK_AUTH_DONE -> S_SANET_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-sm] [8621]: (info): MAC: e4b3187c3058 Deleting the client, reason: 23, CO_CLIENT_DELETE_REASON_SESSION_TIMEOUT, Client state S_CO_RUN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-sm] [8621]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_SESSION_TIMEOUT YYYY/DD/MM HH:MM:SSxxx {mobilityd_r0-0}{1}: [mm-transition] [19496]: (info): MAC: e4b3187c3058 MMFSM transition: S_MC_RUN -> S_MC_HANDOFF_END_RCVD_TR on E_MC_HANDOFF_END_RCVD from WNCD[1] YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-state] [8621]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [9800 WLC-qos-client] [8621]: (ERR): MAC: e4b3187c3058 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [multicast-main] [8621]: (info): MAC: e4b3187c3058 No Flex/Fabric main record exists for client YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-iplearn] [8621]: (info): MAC: e4b3187c3058 IP-learn state transition: S_IPLEARN_COMPLETE -> S_IPLEARN_DELETE_IN_PROGRESS

YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dpath_svc] [8621]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000001 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [mm-transition] [8621]: (info): MAC: e4b3187c3058 MMIF FSM transition: S_MA_LOCAL -> S_MA_DELETE_PROCESSED_TR on E_MA_CO_DELETE_RCVD YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [mm-client] [8621]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-auth] [8621]: (info): MAC: e4b3187c3058 Client auth-interface state transition: S_SANET_DELETED -> S_AUTHIF_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dot11] [8621]: (info): MAC: e4b3187c3058 Sent deauth to client, deauth reason: 252, CLIENT_DEAUTH_REASON_ADMIN_RESET delete reason: 23, CO_CLIENT_DELETE_REASON_SESSION_TIMEOUT YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [dot11] [8621]: (info): MAC: e4b3187c3058 DOT11 state transition: S_DOT11_ASSOCIATED -> S_DOT11_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-state] [8621]: (note): MAC: e4b3187c3058 Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED 클라이언트가세션시간초과에도달했습니다 가능한솔루션 이는정상적인동작입니다 SSID와연결된정책프로파일세션시간초과증가 # config t # wireless profile policy <policy-profile-name> # shutdow # session-timeout <20-86400 seconds> # no shutdown Configuration( 컨피그레이션 ) > Tags & Profiles( 태그및프로파일 ) > Policy( 정책 ) > Policy Profile Name( 정책프로파일이름 ) > Advanced( 고급 ) > WLAN Timeout(WLAN 시간초과 ) 으로이동하고필요에따라타이머를사용자지정합니다 유휴시간제한으로인해클라이언트연결이끊김 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [7807]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_MN_IDLE_TIMEOUT YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [7807]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-qos-client] [7807]: (ERR): MAC: e4b3187c3058 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dpath_svc] [7807]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000002 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-client] [7807]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [7807]: (note): MAC: e4b3187c3058 Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED 클라이언트가유휴시간제한구성간격내에트래픽 ( 또는충분한트래픽 ) 을전송하지못했습니다

가능한솔루션 이는정상적인동작입니다 SSID와연결된정책프로파일유휴설정을사용자지정합니다 # config t # wireless profile policy <policy-profile-name> # shutdow # idle-timeout <15-100000 seconds> # idle-threshold <0-4294967295 bytes> # no shutdown Configuration( 컨피그레이션 ) > Tags & Profiles( 태그및프로파일 ) > Policy( 정책 ) > Policy Profile Name( 정책프로파일이름 ) > Advanced( 고급 ) > WLAN Timeout(WLAN 시간제한 ) 으로이동하고필요에따라유휴설정을사용자지정합니다 참고 : 유휴임계값을구성하지않으면클라이언트는유휴시간제한기간내에어떤양의트래픽도전송해야연결이끊기지않습니다 유휴임계값을구성할경우클라이언트는연결이끊기지않도록유휴시간제한내에해당바이트양을전송해야합니다 ( 즉, 유휴임계값 10 바이트와유휴시간제한 30 초를구성하면무선클라이언트는네트워크에서연결이끊기지않도록 30 초마다최소 10 바이트의트래픽을전송해야합니다 ) SSID 간에클라이언트이동 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [7807]: (note): MAC: e4b3187c3058 Association received BSSID f07f06eef59d, old BSSID f07f06eef59e, WLAN 1, Slot 1 AP f07f06eef590, 3702-02 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [7807]: (ERR): MAC: e4b3187c3058 Failed to start dot11 processing Failed to populate client record in DB YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [7807]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_RUN YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-sm] [7807]: (note): MAC: e4b3187c3058 Client delete initiated Reason: CO_CLIENT_DELETE_REASON_WLAN_CHANGE YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [7807]: (note): MAC: e4b3187c3058 Client state transition: S_CO_RUN -> S_CO_DELETE_IN_PROGRESS YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [9800 WLC-qos-client] [7807]: (ERR): MAC: e4b3187c3058 Fail to get qos lib ctxt while handle sip cac on client delete YYYY/DD/MM HH:MM:SSxxx {fman_fp_f0-0}{1}: [wireless-client] [10254]: UUID: 1000000006930, ra: 5 (note): WLCLIENT 0xa0000002 pd_hdl 0x33 AOM delete succeeded YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [dpath_svc] [7807]: (note): MAC: e4b3187c3058 Client datapath entry deleted for ifid 0xfa0000002 YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [mm-client] [7807]: (ERR): MAC: e4b3187c3058 Invalid transmitter ip in build client context YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-0}{1}: [client-orch-state] [7807]: (note): MAC: e4b3187c3058 Client state transition: S_CO_DELETE_IN_PROGRESS -> S_CO_DELETED YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-sm] [8009]: (note): MAC: e4b3187c3058 Association received BSSID 00c88b26d79d, old BSSID 000000000000, WLAN 1, Slot 1 AP 00c88b26d790, AP-1700-x

YYYY/DD/MM HH:MM:SSxxx {wncd_x_r0-1}{1}: [client-orch-state] [8009]: (note): MAC: e4b3187c3058 Client state transition: client_orch_sm_state none -> S_CO_ASSOCIATING 클라이언트가 SSID 에연결되어다른 SSID 로이동했습니다 가능한솔루션 정상동작 클라이언트에서두번째 SSID 제거