AP250 - 7.1r1.142326 - DHCP issue is back again ?

  • 1
  • Question
  • Updated 1 year ago
  • (Edited)
Team I am apparently having the same issue reported other times, and unfortunately the ALG SIP ENABLE command did not fix it

Basic config, 2 SSIDs, both PSK, different VLANS, one SSID-VLAN internal, the other SSID-VLAN filtered for internet access only

AP250, HM Classic 6.8r7, all of a sudden and for one AP250 only the issue of random discarding the DHCP message to the client is back again. I have many client connected, but some suffer the DHCP issue. Still other clients connect and are OK, but a few are having this issue, one has been investigated and the trace is reported

In the same environment there are other AP121 with HiveOS 6.5r4 Honolulu.128121

Client under AP250 ( name ISG03), handshake ok, DHCP releases the IP address but client never receive the message

Client roam under ISG72 ( AP121) , all works fine

HM client monitor below --

I have also downgraded the AP250 back to 7.0.2 but no changes ( see second trace below)

I missed downloading the AP 250 log on time ( buffer overridden) and cannot share full config but let me know what part of it you need to investigate

Client is a MacBook Air Yosemite 10.10.5

Looking forward to your comments...

Franco

03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (429)Rx assoc req (rssi -57dB)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (430)Tx assoc resp (status 0, pwr 13dBm)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (431)WPA-PSK auth is starting (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (432)Sending 1/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (433)Received 2/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (434)Sending 3/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (435)Received 4/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (436)PTK is set (at if=wifi1.2)
03/16/2017 03:19:23 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (437)Authentication is successfully finished (at if=wifi1.2)
03/16/2017 03:19:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (438)station sent out DHCP REQUEST message
03/16/2017 03:19:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (439)DHCP server sent out DHCP ACKNOWLEDGE message to station
03/16/2017 03:19:25 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (440)DHCP session completed for station
03/16/2017 03:19:25 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (441)IP 192.168.100.204 assigned for station
03/16/2017 03:19:27 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (442)station sent out DHCP REQUEST message
03/16/2017 03:19:27 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (443)DHCP server sent out DHCP ACKNOWLEDGE message to station
03/16/2017 03:19:27 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (444)DHCP session completed for station
03/16/2017 03:19:27 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (445)IP 192.168.100.204 assigned for station
03/16/2017 03:19:32 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (446)station sent out DHCP DISCOVER message
03/16/2017 03:19:32 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (447)DHCP server sent out DHCP OFFER message to station
03/16/2017 03:19:33 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (448)station sent out DHCP DISCOVER message
03/16/2017 03:19:33 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (449)DHCP server sent out DHCP OFFER message to station
03/16/2017 03:19:35 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (450)station sent out DHCP DISCOVER message
03/16/2017 03:19:35 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (451)DHCP server sent out DHCP OFFER message to station
03/16/2017 03:19:40 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (452)station sent out DHCP DISCOVER message
03/16/2017 03:19:40 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (453)DHCP server sent out DHCP OFFER message to station
.......
ROAMING TO ANOTHER AP
....
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4728 ISG72 DETAIL (255)Rx probe req (rssi 46dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4729 ISG72 DETAIL (256)Rx probe req (rssi 46dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (257)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4728 ISG72 DETAIL (258)Rx probe req (rssi 48dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4729 ISG72 DETAIL (259)Rx probe req (rssi 48dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (260)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (261)Rx probe req (rssi 26dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (262)Rx probe req (rssi 26dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (263)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (264)Rx probe req (rssi 25dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (265)Rx probe req (rssi 25dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (266)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (267)Rx probe req (rssi 19dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (268)Rx probe req (rssi 19dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (269)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (270)Rx probe req (rssi 47dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (271)Rx probe req (rssi 47dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (272)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (273)Rx probe req (rssi 47dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (274)Rx probe req (rssi 47dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (275)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (276)Rx probe req (rssi 26dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (277)Rx probe req (rssi 26dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (278)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (279)Rx probe req (rssi 30dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (280)Rx probe req (rssi 30dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (281)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4714 ISG72 DETAIL (282)Rx probe req (rssi 25dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 DETAIL (283)Rx probe req (rssi 25dB)
03/16/2017 03:20:41 PM 98E0D99E419B F09CE91A4715 ISG72 BASIC (284)Tx probe resp (pwr 11dBm)
03/16/2017 03:20:44 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (535)Sta(at if=wifi1.2) is de-authenticated because of STA roam away
03/16/2017 03:20:44 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (536)Tx disassoc (reason 4 , pwr 13dBm)
03/16/2017 03:20:44 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (537)Sta(at if=wifi1.2) is de-authenticated because of notification of driver
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (285)Rx auth (frame 1, rssi 44dB)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (286)Tx auth (frame 2, status 0, pwr 11dBm)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (287)Rx assoc req (rssi 47dB)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (288)Tx assoc resp (status 0, pwr 11dBm)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (289)WPA-PSK auth is starting (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (290)Sending 1/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (291)Received 2/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (292)Sending 3/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (293)Received 4/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (294)PTK is set (at if=wifi1.2)
03/16/2017 03:20:44 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (295)Authentication is successfully finished (at if=wifi1.2)
03/16/2017 03:21:40 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (296)station sent out DHCP DISCOVER message
03/16/2017 03:21:41 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (297)DHCP server sent out DHCP OFFER message to station
03/16/2017 03:21:41 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (298)station sent out DHCP DISCOVER message
03/16/2017 03:21:42 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (299)DHCP server sent out DHCP OFFER message to station
03/16/2017 03:21:42 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (300)station sent out DHCP REQUEST message
03/16/2017 03:21:42 PM 98E0D99E419B F09CE91A4729 ISG72 INFO (301)DHCP server sent out DHCP ACKNOWLEDGE message to station
03/16/2017 03:21:42 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (302)DHCP session completed for station
03/16/2017 03:21:42 PM 98E0D99E419B F09CE91A4729 ISG72 BASIC (303)IP 192.168.100.204 assigned for station

I downgraded AP 250 to 7.0.2 but behavior is the same

03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (42)Rx auth (frame 1, rssi -51dB)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (43)Tx auth (frame 2, status 0, pwr 13dBm)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (44)Rx assoc req (rssi -51dB)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (45)Tx assoc resp (status 0, pwr 13dBm)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (46)WPA-PSK auth is starting (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (47)Sending 1/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (48)Received 2/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (49)Sending 3/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (50)Received 4/4 msg of 4-Way Handshake (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (51)PTK is set (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (52)Authentication is successfully finished (at if=wifi1.2)
03/16/2017 04:26:51 PM 98E0D99E419B 4018B11B3654 ISG62 DETAIL (609)Rx probe req (rssi 25dB)
03/16/2017 04:26:51 PM 98E0D99E419B 4018B11B3654 ISG62 BASIC (610)Tx probe resp (pwr 11dBm)
03/16/2017 04:26:51 PM 98E0D99E419B 4018B11B3655 ISG62 DETAIL (611)Rx probe req (rssi 25dB)
03/16/2017 04:26:51 PM 98E0D99E419B 4018B11B3655 ISG62 BASIC (612)Tx probe resp (pwr 11dBm)
03/16/2017 04:26:52 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (53)station sent out DHCP REQUEST message
03/16/2017 04:26:52 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (54)DHCP server sent out DHCP ACKNOWLEDGE message to station
03/16/2017 04:26:52 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (55)DHCP session completed for station
03/16/2017 04:26:52 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (56)IP 192.168.100.204 assigned for station
03/16/2017 04:26:55 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (57)station sent out DHCP REQUEST message
03/16/2017 04:26:55 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (57)station sent out DHCP REQUEST message
03/16/2017 04:26:55 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (58)DHCP server sent out DHCP ACKNOWLEDGE message to station
03/16/2017 04:26:55 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (59)DHCP session completed for station
03/16/2017 04:26:55 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (60)IP 192.168.100.204 assigned for station
03/16/2017 04:27:00 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (61)station sent out DHCP DISCOVER message
03/16/2017 04:27:00 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (62)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:01 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (63)station sent out DHCP DISCOVER message
03/16/2017 04:27:01 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (64)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:04 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (65)station sent out DHCP DISCOVER message
03/16/2017 04:27:04 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (66)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:08 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (67)station sent out DHCP DISCOVER message
03/16/2017 04:27:08 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (68)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (69)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (70)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (71)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 DETAIL (72)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (73)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (74)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (75)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (76)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (77)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (78)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (79)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (80)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 DETAIL (81)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (82)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (83)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (84)Rx probe req (rssi -55dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (85)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (86)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (87)Rx probe req (rssi -54dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (88)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (89)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 DETAIL (90)Rx probe req (rssi -53dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (91)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (92)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (93)Rx probe req (rssi -53dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (94)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (95)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (96)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (97)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (98)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 DETAIL (99)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (100)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (101)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (102)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (103)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (104)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (105)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (106)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (107)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 DETAIL (108)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (109)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (110)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (111)Rx probe req (rssi -57dB)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (112)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:11 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (113)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (114)Rx probe req (rssi -57dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (115)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (116)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA5 ISG03 DETAIL (117)Rx probe req (rssi -57dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA5 ISG03 BASIC (118)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6BA4 ISG03 BASIC (119)Tx probe resp (pwr 13dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (120)Rx probe req (rssi -51dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (121)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (122)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (123)Rx probe req (rssi -51dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (124)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (125)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (126)Rx probe req (rssi -49dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (127)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (128)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 DETAIL (129)Rx probe req (rssi -49dB)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B95 ISG03 BASIC (130)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:14 PM 98E0D99E419B C413E21B6B94 ISG03 BASIC (131)Tx probe resp (pwr 12dBm)
03/16/2017 04:27:17 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (132)station sent out DHCP DISCOVER message
03/16/2017 04:27:17 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (133)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:26 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (134)station sent out DHCP DISCOVER message
03/16/2017 04:27:26 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (135)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:34 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (136)station sent out DHCP DISCOVER message
03/16/2017 04:27:34 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (137)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:43 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (138)station sent out DHCP DISCOVER message
03/16/2017 04:27:43 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (139)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:27:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (140)station sent out DHCP DISCOVER message
03/16/2017 04:27:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (141)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:28:00 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (142)station sent out DHCP DISCOVER message
03/16/2017 04:28:00 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (143)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:08 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (144)station sent out DHCP DISCOVER message
03/16/2017 04:29:09 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (145)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:10 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (146)station sent out DHCP DISCOVER message
03/16/2017 04:29:11 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (147)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:12 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (148)station sent out DHCP DISCOVER message
03/16/2017 04:29:13 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (149)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:16 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (150)station sent out DHCP DISCOVER message
03/16/2017 04:29:17 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (151)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:24 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (152)station sent out DHCP DISCOVER message
03/16/2017 04:29:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (153)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:33 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (154)station sent out DHCP DISCOVER message
03/16/2017 04:29:34 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (155)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:41 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (156)station sent out DHCP DISCOVER message
03/16/2017 04:29:42 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (157)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:50 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (158)station sent out DHCP DISCOVER message
03/16/2017 04:29:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (159)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:29:58 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (160)station sent out DHCP DISCOVER message
03/16/2017 04:29:59 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (161)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:30:07 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (162)station sent out DHCP DISCOVER message
03/16/2017 04:30:08 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (163)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:16 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (164)station sent out DHCP DISCOVER message
03/16/2017 04:31:17 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (165)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:18 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (166)station sent out DHCP DISCOVER message
03/16/2017 04:31:19 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (167)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:20 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (168)station sent out DHCP DISCOVER message
03/16/2017 04:31:21 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (169)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (170)station sent out DHCP DISCOVER message
03/16/2017 04:31:26 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (171)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:33 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (172)station sent out DHCP DISCOVER message
03/16/2017 04:31:34 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (173)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:41 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (174)station sent out DHCP DISCOVER message
03/16/2017 04:31:42 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (175)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:50 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (176)station sent out DHCP DISCOVER message
03/16/2017 04:31:51 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (177)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:31:58 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (178)station sent out DHCP DISCOVER message
03/16/2017 04:31:59 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (179)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:32:06 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (180)station sent out DHCP DISCOVER message
03/16/2017 04:32:07 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (181)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:32:15 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (182)station sent out DHCP DISCOVER message
03/16/2017 04:32:15 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (183)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:24 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (184)station sent out DHCP DISCOVER message
03/16/2017 04:33:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (185)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (186)station sent out DHCP DISCOVER message
03/16/2017 04:33:25 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (187)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:27 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (188)station sent out DHCP DISCOVER message
03/16/2017 04:33:27 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (189)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:32 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (190)station sent out DHCP DISCOVER message
03/16/2017 04:33:32 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (191)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:40 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (192)station sent out DHCP DISCOVER message
03/16/2017 04:33:40 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (193)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:49 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (194)station sent out DHCP DISCOVER message
03/16/2017 04:33:49 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (195)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:33:58 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (196)station sent out DHCP DISCOVER message
03/16/2017 04:33:58 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (197)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:34:06 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (198)station sent out DHCP DISCOVER message
03/16/2017 04:34:06 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (199)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:34:15 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (200)station sent out DHCP DISCOVER message
03/16/2017 04:34:15 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (201)DHCP server sent out DHCP OFFER message to station
03/16/2017 04:34:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (202)station sent out DHCP DISCOVER message
03/16/2017 04:34:23 PM 98E0D99E419B C413E21B6BA5 ISG03 INFO (203)DHCP server sent out DHCP OFFER message to station
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes

Posted 1 year ago

  • 1
Photo of Om Prakash Ravipati

Om Prakash Ravipati

  • 22 Posts
  • 2 Reply Likes
Try configuring DHCP relay on any one of the APs for the VLAN where clients are having the issues. This worked for me.
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

Does this issue only impact MacOS or any other operating system as well? Does it occur on both radios? Could you please share the following information?

1. Data rate configuration
2. Radio Profile
3. Show interface wifi0 and wifi1 output

Thank you,

Eastman
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Thank you Eastman, any hint is very appreciated

- issue occurs with different clients, different OS, mobile device or laptop while others are never impacted

- So far I have investigated the issue with this MacOs client only, connecting to wifi1.2 but I am expecting this to happen even on 2.4 GHz

-datarate profile:  
2.4 has 1 to 11 N/A, 12 Basic, 18 to 54 optional
5 has 6 and 9 N/A, 12 Basic, 18 to 54 optional
MCS 0 to 31 all optional
2.4-GHz VHT and 5.0-GHz 11ac MCS Rate Setting: left as default

-Radio Profile
NG0: 802.11 g/n, all default, 20 MHz channell width, WIPS disabled, Deny 802.11b Clients
AC0: 802.11a/n/ac,  20 MHz channell widt, MU-MIMO enabled (chain auto), basically all deafault, WIPS disabled

-#sh int wifi0

AC=access category; be=best-effort; bg=background; vi=video; vo=voice;
AIFS=Arbitration Inter-Frame Space; Txoplimit=transmission opportunity limit;
IDP=Intrusion detection and prevention; BGSCAN=background scan; PS=Power save;
HT=High throughput; A-MPDU=Aggregate MAC protocol data unit;
DFS=Dynamic Frequency Selection; CU=Channel Utilization;
Summary state=Good;
Mode=access; Radio disabled=no;
Admin state=enabled; Operational state=up;
MAC addr=c413:e21b:6b90; MTU=1500;
Freq(Chan)=2412Mhz(1); EIRP power=25.77dBm; Diversity=disabled;
Tx range=300m; Noise floor=-95dBm; Tx power control=disabled;
Radio profile=ISG_250_ng0; IDP profile=N/A;
Beacon interval=100; Max clients number=100;
Phymode=11ng; Short preamble mode=enabled;
Tx Chain=static 3; Rx Chain=static 3;
A-MPDU=enabled; Short guard interval=disabled;
Channel width=20Mhz; HT-protection=Green field; Deny client=11b;
AC=be; CWmin=4; CWmax=6; AIFS=3; Txoplimit=0; NoACK=disabled;
AC=bg; CWmin=4; CWmax=10; AIFS=7; Txoplimit=0; NoACK=disabled;
AC=vi; CWmin=3; CWmax=4; AIFS=1; Txoplimit=3008; NoACK=disabled;
AC=vo; CWmin=2; CWmax=3; AIFS=1; Txoplimit=1504; NoACK=disabled;
Rx packets=7594299; errors= 139; dropped=0;
Tx packets=1467635; errors=3046; dropped=0;
Rx bytes=2082613469 (1.940 GB); Tx bytes=668098773 (637.149 MB);
BGSCAN allow=enabled; BGSCAN during voice=disabled; BGSCAN interval=10 minutes;
BGSCAN with client=enabled; BGSCAN with PS client=disabled;
Number of BGSCAN=766; Number of BGSCAN requested=1356; Number of BGSCAN missed=590;
DFS=disabled; Number of detected radar signals=0;
LLDP state=N/A; CDP state=N/A;
Rx airtime=78.94 s; Tx airtime=483.51 s; CRC error airtime=73.44 s;
Rx airtime percent=0.00%; Tx airtime percent=0.00%; CRC error airtime percent=0.25%;
Tx utilization=1%; Rx utilization=6%; Interference utilization=2%; Total utilization=9%;
Backhaul failover=disable;
Benchmark 11a score=222000; 11b score=50500; 11g score=222000; 11n score=501000; 11ac score=889000;
A-MSDU=disabled; A-MPDU Limit=1048575;
VHT support in 2.4G interface=disabled
frameburst=disabled
Spectral scan=off Rx attenuation=0dB

-#sh int wifi1

AC=access category; be=best-effort; bg=background; vi=video; vo=voice;
AIFS=Arbitration Inter-Frame Space; Txoplimit=transmission opportunity limit;
IDP=Intrusion detection and prevention; BGSCAN=background scan; PS=Power save;
HT=High throughput; A-MPDU=Aggregate MAC protocol data unit;
DFS=Dynamic Frequency Selection; CU=Channel Utilization;
Summary state=Good;
Mode=access; Radio disabled=no;
Admin state=enabled; Operational state=up;
MAC addr=c413:e21b:6ba0; MTU=1500;
Freq(Chan)=5200Mhz(40); EIRP power=25.77dBm; Diversity=disabled;
Tx range=300m; Noise floor=-95dBm; Tx power control=disabled;
Radio profile=ISG_250_ac0; IDP profile=N/A;
Beacon interval=100; Max clients number=100;
Phymode=11ac; Short preamble mode=enabled;
Tx Chain=static 3; Rx Chain=static 3;
A-MPDU=enabled; Short guard interval=disabled;
Channel width=20Mhz; HT-protection=Green field; Deny client=11b;
AC=be; CWmin=4; CWmax=6; AIFS=3; Txoplimit=0; NoACK=disabled;
AC=bg; CWmin=4; CWmax=10; AIFS=7; Txoplimit=0; NoACK=disabled;
AC=vi; CWmin=3; CWmax=4; AIFS=1; Txoplimit=3008; NoACK=disabled;
AC=vo; CWmin=2; CWmax=3; AIFS=1; Txoplimit=1504; NoACK=disabled;
Rx packets=1368103; errors=132; dropped=0;
Tx packets=2294836; errors=989; dropped=0;
Rx bytes=435919942 (415.726 MB); Tx bytes=1389869918 (1.294 GB);
BGSCAN allow=enabled; BGSCAN during voice=disabled; BGSCAN interval=10 minutes;
BGSCAN with client=enabled; BGSCAN with PS client=disabled;
Number of BGSCAN=395; Number of BGSCAN requested=3530; Number of BGSCAN missed=3135;
DFS=disabled; Number of detected radar signals=0;
LLDP state=N/A; CDP state=N/A;
Rx airtime=77.02 s; Tx airtime=585.06 s; CRC error airtime=1.61 s;
Rx airtime percent=0.02%; Tx airtime percent=0.04%; CRC error airtime percent=0.04%;
Tx utilization=1%; Rx utilization=1%; Interference utilization=3%; Total utilization=5%;
Backhaul failover=disable;
Benchmark 11a score=222000; 11b score=50500; 11g score=222000; 11n score=501000; 11ac score=889000;
A-MSDU=disabled; A-MPDU Limit=1048575;
Tx Beamforming=auto
frameburst=disabled
MU-MIMO=Enabled; Station receive chain=auto;
Smart-antenna=Disabled;
Spectral scan=off Rx attenuation=0dB
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

Thanks for the information, First thing that we need to get right is the radio profile, mixing 802.11n and 802.11a/c in the same location is not a good idea.  You might want to use 802.11n radio profile on AP250 or disable 5GHz on AP121. This may not be related to DHCP issue, but it can cause other issues.

I would also start with default data rate setting first and test on both radios.

Please change the above settings and check if the issue is still seen. If yes, we will need to run some debugs and capture the traffic.

Eastman
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Eastman, thanks for the suggestions.

I understand the points but unfortunately I cannot apply all the radio changes you are suggesting, coverage and rates have been tuned in the last weeks and for the clients who are able to connect this works fine after some difficult time.

PCs are steady, there is no real roaming indeed, when they move from a room to another they are just fine to disconnect and reconnect.

I can indeed change the profile from 11ac to 11n on the 250, it may be worth a try

I have plenty of logs and trace already, let me include just the wireshark capture at the client side showing the failure in the DHCP exchange. Looks to me the frame sequence is "messed up", but again other clients under the same coverage just work fine and a wireshark capture with them shows the perfect DHCP exchange

Let me know if based on the capture below you see something else

On monday afternoon I will move the 250 to 11n only proflie

Regs

Franco
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Last 2 replies unreadable, what has been posted ?

regs

F
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

I would like to see the air capture not the capture from the client. Please capture the four-way handshake so we scan decrypt the traffic. Please also ensure that you upgrade the AP back to 7.1r1

Thank you,

Eastman
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Eastman, you mean the wireshark captuer using the remote-sniffer feature ?

Let me recap to see if the procedure is right - neven done this before

- SHH to the AP
- CLI: exec capture remote-sniffer local-port 2002 promiscuous

- On a local PC connected wired to the LAN an able tocommunicate to the AP, open Wireshark and do option>remote capture> and add a new one and put the Ip address of the AP and the above port number then proceed with the capture.

- I have been told you can then remote-capture traffic on eth0 or wifi0 or wifi1, what remote capture you want me to perform ? eth 0 or WiFi x ?

Thanks

F
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Eastman, let me upload here the remote-sniffer capture filtered in display for the involved eth.addr

involved mac address is Apple_9e:41:9b, what looks strange to me is that I see a mix of lines where the same device ( or at least the same MAC) shows an associated IP address while indeed it has not yet obtained it form the main DHCP service, so I wondering if andy service ( NBNS or other Apple related services) might be conflicting/overlapping with DHCP

The main issue occurs after DHCP request at line 86, like 89 shows ACK, , DHCP request again at line 132, ACk again at 133, then 160-161 and similar lines down in the exchange are leading to an unsuccesful DHCP negotiation
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Eastman, is there any way I can send you the pcap instead of attaching tens of lines here ?
(Edited)
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Here the minimum subset of info I would like to share, if the full pcap is needed I can only send to you direct

let me know if from here there is something evident to you

regs

Franco

2;2017-03-20 15:49:47.062614;Apple_9e:41:9b;Broadcast;ARP;60;Gratuitous ARP for 192.168.100.204 (Request)
3;2017-03-20 15:49:47.065788;Apple_9e:41:9b;Broadcast;ARP;60;Who has 169.254.255.255? Tell 192.168.100.204
7;2017-03-20 15:49:47.385160;Apple_9e:41:9b;Broadcast;ARP;60;Who has 169.254.255.255? Tell 192.168.100.204
11;2017-03-20 15:49:47.705449;Apple_9e:41:9b;Broadcast;ARP;60;Who has 169.254.255.255? Tell 192.168.100.204
15;2017-03-20 15:49:48.026408;Apple_9e:41:9b;Broadcast;ARP;60;Who has 169.254.255.255? Tell 192.168.100.204
22;2017-03-20 15:49:48.417283;Apple_9e:41:9b;Broadcast;ARP;60;Who has 169.254.255.255? Tell 192.168.100.204
27;2017-03-20 15:49:48.795204;0.0.0.0;255.255.255.255;DHCP;342;DHCP Request - Transaction ID 0x8232e8f5
36;2017-03-20 15:49:50.158085;Apple_9e:41:9b;Broadcast;ARP;60;Gratuitous ARP for 192.168.100.204 (Request)
65;2017-03-20 15:50:06.866500;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
66;2017-03-20 15:50:06.866746;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
67;2017-03-20 15:50:07.264198;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
68;2017-03-20 15:50:07.264305;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
70;2017-03-20 15:50:07.637657;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
71;2017-03-20 15:50:07.637773;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
72;2017-03-20 15:50:08.005596;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
73;2017-03-20 15:50:08.005841;0.0.0.0;255.255.255.255;DHCP;346;DHCP Request - Transaction ID 0x8232e8f6
74;2017-03-20 15:50:08.005882;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
75;2017-03-20 15:50:08.006439;192.168.100.1;192.168.100.204;DHCP;342;DHCP ACK - Transaction ID 0x8232e8f6
76;2017-03-20 15:50:08.128892;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
77;2017-03-20 15:50:08.129028;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
78;2017-03-20 15:50:08.129053;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
79;2017-03-20 15:50:08.129139;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
85;2017-03-20 15:50:09.207629;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
86;2017-03-20 15:50:09.207886;0.0.0.0;255.255.255.255;DHCP;346;DHCP Request - Transaction ID 0x8232e8f6
87;2017-03-20 15:50:09.207925;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
88;2017-03-20 15:50:09.208574;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
89;2017-03-20 15:50:09.208744;192.168.100.1;192.168.100.204;DHCP;342;DHCP ACK - Transaction ID 0x8232e8f6
90;2017-03-20 15:50:09.208853;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
91;2017-03-20 15:50:09.253887;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
92;2017-03-20 15:50:09.254012;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
130;2017-03-20 15:50:11.957575;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
131;2017-03-20 15:50:11.957709;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
132;2017-03-20 15:50:11.958141;0.0.0.0;255.255.255.255;DHCP;346;DHCP Request - Transaction ID 0x8232e8f6
133;2017-03-20 15:50:11.959033;192.168.100.1;192.168.100.204;DHCP;342;DHCP ACK - Transaction ID 0x8232e8f6
134;2017-03-20 15:50:11.998208;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
135;2017-03-20 15:50:11.998335;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
136;2017-03-20 15:50:12.036048;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
137;2017-03-20 15:50:12.036176;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
158;2017-03-20 15:50:16.052880;Apple_9e:41:9b;CiscoMer_2c:47:90;ARP;46;Who has 192.168.100.1? Tell 192.168.100.204
159;2017-03-20 15:50:16.052990;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;192.168.100.1 is at e0:55:3d:2c:47:90
160;2017-03-20 15:50:16.053470;0.0.0.0;255.255.255.255;DHCP;346;DHCP Discover - Transaction ID 0x8232e8f7
161;2017-03-20 15:50:16.054227;192.168.100.1;192.168.100.204;DHCP;342;DHCP Offer - Transaction ID 0x8232e8f7
167;2017-03-20 15:50:17.387479;0.0.0.0;255.255.255.255;DHCP;346;DHCP Discover - Transaction ID 0x8232e8f7
168;2017-03-20 15:50:17.388324;192.168.100.1;192.168.100.204;DHCP;342;DHCP Offer - Transaction ID 0x8232e8f7
173;2017-03-20 15:50:18.359009;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;Who has 192.168.100.204? Tell 192.168.100.1
175;2017-03-20 15:50:20.091260;0.0.0.0;255.255.255.255;DHCP;346;DHCP Discover - Transaction ID 0x8232e8f7
176;2017-03-20 15:50:20.092121;192.168.100.1;192.168.100.204;DHCP;342;DHCP Offer - Transaction ID 0x8232e8f7
179;2017-03-20 15:50:24.326631;0.0.0.0;255.255.255.255;DHCP;346;DHCP Discover - Transaction ID 0x8232e8f7
180;2017-03-20 15:50:24.327909;192.168.100.1;192.168.100.204;DHCP;342;DHCP Offer - Transaction ID 0x8232e8f7
184;2017-03-20 15:50:33.260377;0.0.0.0;255.255.255.255;DHCP;346;DHCP Discover - Transaction ID 0x8232e8f7
185;2017-03-20 15:50:33.260561;Apple_9e:41:9b;Broadcast;ARP;46;Who has 169.254.107.120? Tell 0.0.0.0
186;2017-03-20 15:50:33.261176;192.168.100.1;192.168.100.204;DHCP;342;DHCP Offer - Transaction ID 0x8232e8f7
187;2017-03-20 15:50:33.631098;Apple_9e:41:9b;Broadcast;ARP;46;Who has 169.254.107.120? Tell 0.0.0.0
188;2017-03-20 15:50:34.026437;Apple_9e:41:9b;Broadcast;ARP;46;Who has 169.254.107.120? Tell 0.0.0.0
189;2017-03-20 15:50:34.362566;CiscoMer_2c:47:90;Apple_9e:41:9b;ARP;60;Who has 192.168.100.204? Tell 192.168.100.1
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Today's update: AP250 is back to 7.1.r1

1- on AP250 changed Radio Profile from 11ac to 11n : client tested, connected auth OK , DHCP issue still present
2- on AP250 changed 5 GHz Channel from 40 to 60:  client tested, connected auth OK , DHCP issue still present
3- turned 5 GHz off, forced client to use 2.4 : client tested, connected auth OK , DHCP issue still present
4- asked to connect the client to a diff AP ( Ap121) connected to the same switch: worked like a charm

I have nothing left to do on the AP250 at this stage - apart setting the DHCP Relay and I will try it tomorrow - then will raise an official case request.

Unless in the meantime you have other hints......

regs

F
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

Could you connect the client to AP250 and do show station? Do the same on AP121 as well and ensure all the information is the same. Do you mind to share your SSID configuration?
Can you untick non-strict form the SSID settings and test?




If you decide to open a support case please collect the following information?

_ff id 1 dhcp-client xxx:xxx:xxxx

_df id 1 data src-mac xxx:xxx:xxxx bidirectional interface wifi<x>

_kdebug fe detail

_kdebug eth all

_kdebug wifi all

xxx:xxx:xxxx is the client mac address


wifi<x> is the radio the client is connected to.

You may need to perform a radio capture. If you have MacBook you can run Wireless Diagnostics > Window>Sniffer and select the channel you need to sniff. Please capture the handshake and provide the PSK so the support team can decrypt the packet.



Eastman
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Thanks Eastman

I am applying the Non strict suggestion on the fly, will let you know

Then will work on the rest 

regs

F
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
SSID config summarized - could not be simpler...

WPA/WPA2 PSK personal
ASCII Key

Radio and rates: see attached pic
Dos prevention and filters: default
Advanced: Only WMM ticked

User profile: just the local assignement to the INternet VLAn ( 4) pplus the tipical Internet Access L3 firewall rule
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Radio profile
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
I will try later today Auto WPA/WPA2 and Auto TKIP / AES

Then I really have done it all---

Thx
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

I did not realise you had a firewall configured. Could you create the return rule for the DHCP? Although our firewall is stateful, in some cases it fails to keep DHCP sessions.
The rule you need to create: source DHCP server IP address - destination any - network service DHCP client - permit




Failing this please raise a support case.

Eastman
(Edited)
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Applied, let's wait and see

I also have inherited this firewall policy with some NAT included, not sure they are required and I am wondering what is the meaning of having some of those services NATed..

can you please explain what the NAT lines might make sense for ?

thx

Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
unticking non-strict seems to have no effect...
Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Franco,

When you choose NAT it means that the Ip address of the client will be NATed to the management interface. You NAT the HTTP traffic going to 192.168.0.0/16, this means when the station connect to an HTTP server on that network the source IP address of the client will be the management IP address of the AP.

Have you created an IP-Policy for the the return traffic and tested? Apply it to "To-Access".

Thank you,

Eastman
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Right, I have to apply the DHCP-client to "To-Access", sorry for the mistake

So globally now the Firewall config is in the following pice, the return is "forced" permit by the DHCP-Stateful policy, the rest is Permit by default, right?

Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
You can leave it permit. 
Photo of Franco Gobbetti

Franco Gobbetti

  • 45 Posts
  • 0 Reply Likes
Unless I need to clear something in terms of stateful sessions, the behavior is still the same...

Photo of Eastman Rivai

Eastman Rivai, Official Rep

  • 146 Posts
  • 17 Reply Likes
Did you clear the forwarding-engine ip-session and test? if the issue still there please raise the case it seems to be related to the f/w configuration. To rule out f/w issue you can remove the IP policy and test.