Web Passthrough Configuration Example

This document describes how to configure the web passthrough feature on a Wireless LAN Controller (WLC).

Prerequisites

Ensure all the initial configurations are completed on the WLC.

Supported Platforms and Releases

The information in this document is based on the following:

  • Cisco Catalyst 3850 Series Switch

  • Cisco Aironet 3600 Series Lightweight Access Point

  • Microsoft Windows 7 Native Wireless Supplicant


Note

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command

Web Passthrough on WLC

Web passthrough is a solution that is typically used for guest access. The process of web passthrough is similiar to that of web authentication, except that no authentication credentials are required for web passthrough.

In web passthrough, wireless users are redirected to the usage policy page when they try to use the Internet for the first time. Once the users accept the policy, they can browse the Internet. This redirection to the policy page is handled by the WLC.

In this example, a VLAN interface is created on a separate subnet on the WLC. Then, a separate Wireless LAN (WLAN) or Service Set Identifier (SSID) or both is created and configured with web passthrough and it is mapped to VLAN interface created.


Note

Web passthrough does not provide any data encryption.

Configuring Web Passthrough on Wireless LAN Controller

The following figure shows the network diagram of the configuration:

Figure 1. Network Diagram



You can complete the configuration either using CLI or GUI.

Configuring Web Passthrough on Wireless LAN Controller using CLI

To configure DHCP snooping for the VLANs used for clients, use the following commands:

In the following example, VLAN20 is used. The pool is configured on the same WLC. TenGigabitEthernet 1/0/1 from Cisco Catalyst 3850 Series Switch connects to the uplink switch. If you have the DHCP server configured on the server beyond the WLC or on an external DHCP server, then you have to trust DHCP snooping and Relay information. 

ip device tracking
ip dhcp snooping vlan 12,20,30,40
ip dhcp snooping
!
ip dhcp pool vlan20
network 20.20.20.0 255.255.255.0
default-router 20.20.20.1

interface Vlan20
ip address 20.20.20.1 255.255.255.0

interface TenGigabitEthernet1/0/1
switchport trunk native vlan 12
switchport mode trunk
ip dhcp relay information trusted
ip dhcp snooping trust

wlan webauth 4 webauth
 client vlan 74
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security web-auth
 security web-auth authentication-list default
 security web-auth parameter-map internal
 no shutdown
 
parameter-map type webauth global
 virtual-ip ipv4 1.2.3.4
 intercept-https-enable
parameter-map type webauth internal
 type consent

Configuring Web Passthrough on Wireless LAN Controller (GUI)

Perform the following steps to configure the WLC on the GUI:

    Step 1  
    To configure security, from the WLC GUI, navigate to Navigation > Security.
    Figure 2. Configuring Security



    Step 2  
    To choose Webauth Parameter map, on the bottom-right of the Security page, navigate to Webauth > Webauth Parameter Map.
    Figure 3. Webauth Parameter Map



    Step 3  

    Choose global for the default parameter map on Webauth Parameter Map screen.

    Step 4  

    To configure the virtual IP address, navigate to Webauth Parameter Map > Edit.

    Step 5  
    To make global parameter (Web passthrough) as consent, from the Type field drop-down list choose Consent.
    Figure 4. Global Parameter as Consent



    Note   

    It is not mandatory to configure the global parameter map to consent.

    Step 6  
    To create the parameter map, from the Type field drop-down list, choose consent. The configuration in the following figure uses web as the Parameter-map name, which is used under the WLAN for the users to access the Consent page.
    Figure 5. Web Parameter Map



    The following figure shows the parameter maps on the GUI:
    Figure 6. Parameter Maps on the GUI



    Step 7  
    To create a new WLAN, from the WLC GUI, navigate to Configuration > Wireless > WLAN. In the following figure, Webauth as the WLAN mapped to VLAN20.
    Figure 7. Mapping Webauth to VLAN



    Step 8  
    Navigate to WLAN > Edit > Security > Layer2, and then choose None for Layer 2 Security:
    Figure 8. Security for Layer 2



    Step 9  
    To choose the appropriate settings for Webauth Parameter Map, navigate to WLAN > Edit > Security > Layer3. For example, Web.
    Figure 9. Webauth Parameter Map Settings



    Step 10  

    Save the configuration and it is ready to test.

    Step 11  

    A client receives the IP address, once you connect to the WLAN. When you access the internet or open the browser with the virtual IP address,the Consent Login Page displays. Click the Accept radio button.

    Note   

    If Domain Name Server (DNS) is configured, then any access to http / https results in Consent Login Page display.

    Step 12  

    Once you click Accept, the successful authentication page launches, which gives you the option to navigate to the requested page.

    Step 13  

    Once you click Accept, the successful authentication page launches, which gives you the option to navigate to the requested page

    Client-side Capture

      Step 1  

      After the client receives the IP address, the client opens the browser, and types the virtual IP address.

      Note   

      If the DNS is configured properly, then there is no need to enter the virtual IP address on the browser.

      Step 2  

      Since WLC configuration does not use any webauth certifications, there are CERT errors in packet capture.

      Step 3  
      After successful authentication, the client is in the RUN state on the WLC GUI.
      Figure 10. RUN state on the WLC



      Verifying the Web Passthrough Configuration

      There is no verification procedure available for this configuration.

      Troubleshooting Web Passthrough Configuration Issues

      Enter the debugs in following order to troubleshoot your configuration issues: 

       debug platform condition mac 48f8.b38a.f1b0
 debug platform condition start
 request platform software trace rotate all

 debug ip http all


Device# debug ip admission all
All IP admission debugging is on

Device# show debugging 
edi2#
Nov 25 03:52:57.525: IOSXE_INFRA_BIPC: Rcvd TPS bipc Status: Birth
Nov 25 03:52:57.525: TPS: BIPC channel brith
Nov 25 03:52:57.533: Enters in tps_ipc_msg_rcvd_handler
Nov 25 03:52:57.534: Queue Event buffer len = 90 ...
buffer content ...
BC FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00
00 00 00 42 00 08 C0 00 00 00 00 3A 6E 7B 78 9E
A3 C5 BE 7D 02 BF 5A 66 B2 3F 9E A1 00 00 00 00
00 14 FF FF FF FF 00 00 00 00 00 00 00 00 00 00
00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00
Nov 25 03:52:57.534: TPS: Rcv Msg len = 66
Nov 25 03:52:57.534: TPS: Msg name is NULL
Nov 25 03:52:57.537: Received pki_sd -1
Nov 25 03:52:57.537: Received persistent 0
Nov 25 03:52:57.537: Received seqnum 1
Nov 25 03:52:57.537: Received tp length 0tinfo is FF9FAB86A8
tp name is TP-self-signed-1652845493
Auth is 1 scep poll rate 1 max poll no 999 cert loaded 1 self 1 enrol in progress 0 regen on renewal 0
 
Nov 25 03:52:57.542: Length of marshalled msg 148
Nov 25 03:52:57.542:  get tp info response message send succeeded
Nov 25 03:52:57.563: Enters in tps_ipc_msg_rcvd_handler
Nov 25 03:52:57.563: Queue Event buffer len = 90 ...
buffer content ...
BC FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00
00 00 00 60 00 08 C0 00 00 00 00 3A 7B C3 C6 74
1E 0D 2C C7 DA E7 80 22 A2 BB 9D 14 00 00 00 00
00 32 FF FF FF FF 00 00 00 1A 54 50 2D 73 65 6C
66 2D 73 69 67 6E 65 64 2D 31 36 35 32 38 34 35
34 39 33 00 00 00 00 02 00 00
Nov 25 03:52:57.564: TPS: Rcv Msg len = 96
Nov 25 03:52:57.564: TPS: Msg name is NULL
Nov 25 03:52:57.565: Received pki_sd -1
Nov 25 03:52:57.565: Received options 0x2
Nov 25 03:52:57.565: Received seqnum 2
Nov 25 03:52:57.565: Received chain_len 0
Nov 25 03:52:57.565: Received tp_len 26
Nov 25 03:52:57.566: Received tp_label TP-self-signed-1652845493num certs 1 SS Cert 1 router cert on chain 0 root 
cert in chain 0
Cert index 1 Cert len is 655. Cert :
0x30
Nov 25 03:52:57.566: 0x82 0x2 0x8B 0x30 0x82 0x1 0xF4 0xA0 0x3 0x2 0x1 0x2 0x2 0x1 0x1 0x30
Nov 25 03:52:57.568: 0xD 0x6 0x9 0x2A 0x86 0x48 0x86 0xF7 0xD 0x1 0x1 0x5 0x5 0x0 0x30 0x61
Nov 25 03:52:57.569: 0x31 0x2F 0x30 0x2D 0x6 0x3 0x55 0x4 0x3 0x13 0x26 0x49 0x4F 0x53 0x2D 0x53
Nov 25 03:52:57.570: 0x65 0x6C 0x66 0x2D 0x53 0x69 0x67 0x6E 0x65 0x64 0x2D 0x43 0x65 0x72 0x74 0x69
Nov 25 03:52:57.572: 0x66 0x69 0x63 0x61 0x74 0x65 0x2D 0x31 0x36 0x35 0x32 0x38 0x34 0x35 0x34 0x39
Nov 25 03:52:57.573: 0x33 0x31 0x2E 0x30 0x12 0x6 0x3 0x55 0x4 0x5 0x13 0xB 0x46 0x4F 0x43 0x31
Nov 25 03:52:57.574: 0x37 0x32 0x31 0x56 0x31 0x43 0x39 0x30 0x18 0x6 0x9 0x2A 0x86 0x48 0x86 0xF7
Nov 25 03:52:57.576: 0xD 0x1 0x9 0x2 0x16 0xB 0x73 0x74 0x68 0x69 0x74 0x69 0x2D 0x65 0x64 0x69
Nov 25 03:52:57.577: 0x32 0x30 0x1E 0x17 0xD 0x31 0x35 0x31 0x30 0x31 0x34 0x31 0x32 0x30 0x31 0x33
Nov 25 03:52:57.578: 0x39 0x5A 0x17 0xD 0x32 0x30 0x30 0x31 0x30 0x31 0x30 0x30 0x30 0x30 0x30 0x30
Nov 25 03:52:57.580: 0x5A 0x30 0x61 0x31 0x2F 0x30 0x2D 0x6 0x3 0x55 0x4 0x3 0x13 0x26 0x49 0x4F
Nov 25 03:52:57.581: 0x53 0x2D 0x53 0x65 0x6C 0x66 0x2D 0x53 0x69 0x67 0x6E 0x65 0x64 0x2D 0x43 0x65
Nov 25 03:52:57.582: 0x72 0x74 0x69 0x66 0x69 0x63 0x61 0x74 0x65 0x2D 0x31 0x36 0x35 0x32 0x38 0x34
Nov 25 03:52:57.584: 0x35 0x34 0x39 0x33 0x31 0x2E 0x30 0x12 0x6 0x3 0x55 0x4 0x5 0x13 0xB 0x46
Nov 25 03:52:57.585: 0x4F 0x43 0x31 0x37 0x32 0x31 0x56 0x31 0x43 0x39 0x30 0x18 0x6 0x9 0x2A 0x86
Nov 25 03:52:57.587: 0x48 0x86 0xF7 0xD 0x1 0x9 0x2 0x16 0xB 0x73 0x74 0x68 0x69 0x74 0x69 0x2D
Nov 25 03:52:57.588: 0x65 0x64 0x69 0x32 0x30 0x81 0x9F 0x30 0xD 0x6 0x9 0x2A 0x86 0x48 0x86 0xF7
Nov 25 03:52:57.589: 0xD 0x1 0x1 0x1 0x5 0x0 0x3 0x81 0x8D 0x0 0x30 0x81 0x89 0x2 0x81 0x81
Nov 25 03:52:57.591: 0x0 0xB2 0x12 0x8F 0x83 0x42 0x99 0xF7 0xE7 0x7 0xCE 0x3D 0x81 0xF3 0xD8 0xAE
Nov 25 03:52:57.592: 0x7F 0x0 0x71 0x22 0xC4 0x12 0x96 0x20 0x2F 0x49 0x20 0x85 0x13 0xDB 0x5B 0xE7
Nov 25 03:52:57.593: 0x62 0x97 0xAB 0x22 0xA3 0xC8 0x9E 0x10 0x2C 0xC0 0x16 0xC0 0x13 0x6C 0x5F 0x2A
Nov 25 03:52:57.595: 0x59 0x7B 0x24 0x9E 0xAC 0x2F 0x1A 0xE5 0x29 0x4F 0x3C 0xEC 0x25 0xC0 0x33 0xC5
Nov 25 03:52:57.596: 0xFF 0xA5 0xEB 0x80 0xDD 0x1C 0xCD 0x4F 0xD7 0x7C 0x54 0xC3 0x69 0xAF 0xA3 0xA
Nov 25 03:52:57.597: 0x3E 0xFE 0x48 0x92 0x39 0xCC 0xAE 0xEB 0x8 0xAA 0xEB 0xD6 0x77 0x24 0x55 0x26
Nov 25 03:52:57.599: 0xF0 0x27 0x64 0x68 0x6C 0x69 0xEE 0x2B 0x43 0xD1 0xF1 0x90 0xF1 0x63 0x2C 0xF9
Nov 25 03:52:57.600: 0x9E 0x63 0x85 0xB9 0xFE 0xE0 0x55 0x74 0xC0 0xEE 0x51 0xB3 0x28 0xD7 0x53 0xFA
Nov 25 03:52:57.601: 0xBD 0x2 0x3 0x1 0x0 0x1 0xA3 0x53 0x30 0x51 0x30 0xF 0x6 0x3 0x55 0x1D
Nov 25 03:52:57.602: 0x13 0x1 0x1 0xFF 0x4 0x5 0x30 0x3 0x1 0x1 0xFF 0x30 0x1F 0x6 0x3 0x55
Nov 25 03:52:57.604: 0x1D 0x23 0x4 0x18 0x30 0x16 0x80 0x14 0x68 0xA1 0x5D 0xB0 0x64 0xE 0xA0 0x15
Nov 25 03:52:57.605: 0x29 0x9 0x5A 0x8 0x2C 0xA6 0xD 0x9C 0x11 0xF0 0x23 0xBB 0x30 0x1D 0x6 0x3
Nov 25 03:52:57.607: 0x55 0x1D 0xE 0x4 0x16 0x4 0x14 0x68 0xA1 0x5D 0xB0 0x64 0xE 0xA0 0x15 0x29
Nov 25 03:52:57.608: 0x9 0x5A 0x8 0x2C 0xA6 0xD 0x9C 0x11 0xF0 0x23 0xBB 0x30 0xD 0x6 0x9 0x2A
Nov 25 03:52:57.609: 0x86 0x48 0x86 0xF7 0xD 0x1 0x1 0x5 0x5 0x0 0x3 0x81 0x81 0x0 0x3A 0xF0
Nov 25 03:52:57.611: 0xF0 0xAA 0x6B 0x80 0x8F 0x4F 0x8 0x72 0x65 0xC2 0x2F 0x20 0xE3 0xF2 0x22 0x73
Nov 25 03:52:57.612: 0x69 0xA7 0x3E 0x6A 0x28 0xB 0x93 0x83 0x71 0x96 0xD2 0xBC 0xA 0x59 0xFE 0xDD
Nov 25 03:52:57.613: 0x17 0xFE 0x95 0x23 0x69 0x71 0xD8 0x61 0xB9 0x27 0x2D 0x2B 0x3E 0xFC 0x8D 0xCB
Nov 25 03:52:57.615: 0x88 0xCD 0xFB 0x29 0xA9 0x43 0xEA 0x1B 0xCD 0x10 0x7D 0x1 0xD0 0x50 0xE5 0x7A
Nov 25 03:52:57.616: 0xF8 0x86 0x62 0xE3 0x95 0xF0 0xE5 0x1E 0xBB 0xFE 0x9C 0xBA 0xDF 0x50 0x16 0xBB
Nov 25 03:52:57.617: 0xE9 0x6C 0xE 0xE9 0xB7 0xC5 0x82 0xB6 0x5C 0xDA 0xA3 0x0 0xA 0xAE 0x96 0x7
Nov 25 03:52:57.619: 0xCE 0xDD 0xE1 0xCC 0x5B 0xFA 0xCB 0xB4 0x15 0x4B 0x23 0xF2 0xCB 0xBA 0x1A 0x9A
Nov 25 03:52:57.620: 0x76 0x44 0x6D 0x5F 0x20 0x43 0xCE 0x71 0xA0 0xAB 0xA0 0xDB 0xC8 0x17
Nov 25 03:52:57.621:
Nov 25 03:52:57.622: Length of marshalled msg 787
Nov 25 03:52:57.625:  decrypt_response  message send succeeded
Nov 25 03:52:57.646: Enters in tps_ipc_msg_rcvd_handler
Nov 25 03:52:57.647: Queue Event buffer len = 90 ...
buffer content ...
BC FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00
00 00 00 DC 00 08 C0 00 00 00 00 3A 70 0B 9F 3B
DC 30 F1 2E CB 1F AD BB CD 58 1E E0 00 00 00 00
00 AE 54 50 2D 73 65 6C 66 2D 73 69 67 6E 65 64
2D 31 36 35 32 38 34 35 34 39 33 00 00 00 00 00
00 00 00 80 09 8F 28 96 1F 19
Nov 25 03:52:57.647: TPS: Rcv Msg len = 220
Nov 25 03:52:57.647: TPS: Msg name is NULL
Nov 25 03:52:57.649: Received Padding 1
Nov 25 03:52:57.649: Received seqnum 3
Nov 25 03:52:57.650: Received From Len 128
Nov 25 03:52:57.651: Received tp name TP-self-signed-1652845493
Nov 25 03:52:57.651: tps_tp_priv_decrypt
Nov 25 03:52:57.651: tps_srv_create_key_id
Nov 25 03:52:57.651: Received tpname: TP-self-signed-1652845493
Nov 25 03:52:57.652: KPL is  TP-self-signed-1652845493
Nov 25 03:52:57.652: tps_keyid_priv_decrypt
Nov 25 03:52:57.652: Priv decryption input buffer len = 128 ...
buffer content ...
09 8F 28 96 1F 19 D8 77 0C 17 E9 04 5D 2E 1F 24
EC 6E D2 56 8C 97 2E 36 14 79 B2 73 FF A7 8B 44
08 60 62 53 1B 0D B9 5A A6 46 9E D2 F0 AB 59 02
4D C1 41 6F 5B CE BC 66 54 D1 AD 6F C4 FC 84 0E
A3 3C 0F 24 A1 C9 4C E1 59 3E C5 93 A1 93 FB 18
0A FE AA 1F F8 59 95 98 C8 58 CF 19 4E C1 FB 24
DE 91 0F 40 04 B8 3E 02 F8 1B 19 EF 13 25 F3 58
26 0F E5 7D 21 3F 8C AB 1D EC 10 D7 3A EE 88 83
 ../snip/
buffer too big to print, truncating.
Nov 25 03:52:57.673: Decrypted output buffer len = 48 ...
buffer content ...
03 03 F0 25 92 D5 50 31 C7 E5 F8 1D 33 EC 85 0F
6C C0 A1 63 82 ED 26 9D 1E CA DD 53 3C D5 6C CF
B3 C9 37 E1 B3 31 2F FC BE DE B8 3C 2D 3B 44 57
 
Nov 25 03:52:57.673: Length of marshalled msg 104
Nov 25 03:52:57.674:  decrypt_response  message send succeeded
Nov 25 03:53:54.065: Enters in tps_ipc_msg_rcvd_handler
Nov 25 03:53:54.066: Queue Event buffer len = 90 ...
buffer content ...
BC FF FF FF FF FF FF 00 00 00 00 00 00 00 00 00
00 00 00 DC 00 08 C0 00 00 00 00 3A 70 0B 9F 3B
DC 30 F1 2E CB 1F AD BB CD 58 1E E0 00 00 00 00
00 AE 54 50 2D 73 65 6C 66 2D 73 69 67 6E 65 64
2D 31 36 35 32 38 34 35 34 39 33 00 00 00 00 00
00 00 00 80 88 54 62 9D 10 1B
Nov 25 03:53:54.066: TPS: Rcv Msg len = 220
Nov 25 03:53:54.066: TPS: Msg name is NULL
Nov 25 03:53:54.066: Received Padding 1
Nov 25 03:53:54.066: Received seqnum 4
Nov 25 03:53:54.066: Received From Len 128
Nov 25 03:53:54.066: Received tp name TP-self-signed-1652845493
Nov 25 03:53:54.067: tps_tp_priv_decrypt
Nov 25 03:53:54.067: tps_srv_create_key_id
Nov 25 03:53:54.067: Received tpname: TP-self-signed-1652845493
Nov 25 03:53:54.067: KPL is  TP-self-signed-1652845493
Nov 25 03:53:54.067: tps_keyid_priv_decrypt
Nov 25 03:53:54.067: Priv decryption input buffer len = 128 ...
buffer content ...
88 54 62 9D 10 1B 72 21 A2 3F 88 86 AA B5 0F D1
E3 42 8F C8 9D DE 22 95 B6 51 71 A7 00 35 BC 86
B3 1F 70 77 58 48 10 8A 43 6A 54 00 73 84 9F B2
39 73 91 AB 28 16 21 31 5D 1D FD 88 F1 89 4E 41
5A 10 90 0E 6F 78 92 7A 43 12 D0 C3 22 F5 7A 45
80 C3 7E 6B 52 58 26 82 DB 10 9A 4F 00 07 2B 21
89 99 1A CA B9 8A 69 DD 83 C4 52 E6 AE 35 F5 3E
64 C5 5D 42 06 C7 C0 AE 40 6D 18 3A 47 E6 85 64
 ../snip/
buffer too big to print, truncating.
Nov 25 03:53:54.088: Decrypted output buffer len = 48 ...
buffer content ...
03 03 BD 52 5A BA 99 01 B3 23 24 08 7D 2D 7A F7
D3 4F E7 7B A2 42 8F B2 45 BC 4C 34 FD 40 FB 8E
79 15 47 94 07 33 97 E1 17 76 DE 9E 41 FC A1 66
 
Nov 25 03:53:54.089: Length of marshalled msg 104
Nov 25 03:53:54.089:  decrypt_response  message send succeeded
Nov 25 03:54:17.877: [WCDB] wcdb_send_add_notify: Notifying other features about client add
Nov 25 03:54:17.877: pvlan_pre_addr_addition: vlan 74, addr 48f8.b38a.f1b0
Nov 25 03:54:17.877: mat_add_addr_entry: addr:48f8.b38a.f1b0 addr_type: 65793 table_type:1 table_id:74
Nov 25 03:54:17.877: matm_wl_add_addr_entry: addr:48f8.b38a.f1b0 addr_type: 65793 table_type:1 table_id:74
Nov 25 03:54:17.877:  Add event has already been programmed by WCM. Return.: Added
Nov 25 03:54:17.878: pvlan_post_addr_addition: vlanid:74, addr:48f8.b38a.f1b0
Nov 25 03:54:17.881: ngwc_dataglean_ip_mac_add: The client_id x80000012 and ipsg flag 0 is received from the wcdb 
entry for the host mac 48f8.b38a.f1b0
Nov 25 03:54:17.885: Processed SISF BT event STATE_CHANGE for addr 48f8.b38a.f1b0:9.5.74.106
Nov 25 03:54:17.885: sisf_hwapi_bridging_pre_encap_setup: pre data FFA387693A network FFA3876948
Nov 25 03:54:17.885: SISF pre_encap: pak info:
        Pak: 0xFFA3875DD8        Link Type: 1
        Dest Mac: ffff.ffff.ffff         etype: 2
        if_input: None   if_output: Ca3
        ether_sa: aaaa.0300.000c         ether_da: 24cf.2401.0032
        group: -1        vlan_id: 74, pak->vlan_id: 0
        icmpv6 type: 0   consume: 1
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: pak 0xFFA3875DD8 SUPPRESS_TO_WCM as groupid=-1 , etype=2
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: pak 0xFFA3875DD8 Direct Forward
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup:pak 0xFFA3875DD8 not IPv6, output port set
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: Pak 0xFFA3875DD8 Set vlan, old pak vlan 0 new pak vlan 74
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: pak 0xFFA3875DD8 src-mac aaaa.0300.000c, 
data-area 0c27.24cf.244a etype = 2,  old pak vlan 74 new pak vlan 74 !!!
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: pak 0xFFA3875DD8 src-mac aaaa.0300.000c, 
data-area 0c27.24cf.244a etype = 2, old pak vlan 74 new pak vlan 74
Nov 25 03:54:17.886: sisf_hwapi_bridging_pre_encap_setup: SISF packet 0xFFA3875DD8 if_input None etype - 2 
returned for encap!!
Nov 25 03:54:17.886: capwap_oqueue, .11 format.
Nov 25 03:54:17.886: capwap_oqueue, MGID obtained is 74
Nov 25 03:54:17.887:  Transmitting CAPWAP packet
Nov 25 03:54:17.887:  Src IP addr: 9.5.74.10, Dest IP addr: 9.5.74.101

      Device#
11/25 09:24:17.846 [mob-handoff]: [22238]:  UUID: 8c0000000006d, ra: 7 (debug): 48f8.b38a.f1b0 
MC: Changing client state from 0 to 1
11/25 09:24:17.846 [mob-handoff]: [21656]:  UUID: 8c0000000006d, ra: 7 (debug): 48f8.b38a.f1b0
[1476: Handoff Complete Ack MC->MA] from 9.5.74.10:16666
11/25 09:24:17.846 [sim-cs]: [21656]:  UUID: 8c0000000006d, ra: 7 (info): System IP addr : 9.5.74.10 
 
11/25 09:24:17.846 [cond_debug]: [21656]:  UUID: 8c0000000006d, ra: 7 (info): Search condition: ft_id 43, 
cond: type 16, fmt 2, id: 0x1010074, name: 
11/25 09:24:17.846 [cond_debug]: [21656]:  UUID: 8c0000000006d, ra: 7 (info): Condition not found
11/25 09:24:17.846 [wcm]: [21656]:  UUID: 8c0000000006e, ra: 7 (appctx): mac  48:f8:b3:8a:f1:b0 
11/25 09:24:17.846 [mob-handoff]: [21656]:  UUID: 8c0000000006e, ra: 7 (debug): 48f8.b38a.f1b0 
mmProcessInMsg:1377 MA FSM event MM_MAFSM_EV_HDOFF_COMPL_ACK: state Local -> Local
11/25 09:24:17.853 [tdllib]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): unmarshal: got uuid 8c00000000066, ra 7 
11/25 09:24:17.853 [smrcl]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): EEDGE-RCL: Rx - [eEdge --> IOS] 
OUT Callback Notify type 4 for rcl_conn_hdl = 101
11/25 09:24:17.853 [wcm]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): AAA-Proxy attr list alloc: 
Created attribute list = (AC00004C)
11/25 09:24:17.853 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Start response cb rcvd, 
label: 1006632973, ASID: 09054A0A000000173CC70BBD
11/25 09:24:17.853 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 
Start response cb from SANET successfully enqueued
11/25 09:24:17.853 [apf-mobile]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 
Start response callback from SANET successfully processed
11/25 09:24:17.853 [wcm]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): AAA-Proxy attr list free: 
Freed attribute list = (AC00004C).
11/25 09:24:17.853 [smrcl]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): ipc(mqipc/wcm/smd-wcm):End of MQIPC queue 
with 2 messages in 0 ms
11/25 09:24:17.871 [tdllib]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): unmarshal: got uuid 8c00000000066, ra 7 
11/25 09:24:17.871 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Policy Source received in 
Bind Call: policy_src[0]: NONE
11/25 09:24:17.871 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Policy Source received in 
Bind Call: policy_src[1]: NONE
11/25 09:24:17.871 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Policy Source received in 
Bind Call: policy_src[2]: NONE
11/25 09:24:17.871 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Policy Source received in 
Bind Call: policy_src[3]: CLI
11/25 09:24:17.871 [aaa]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Bind policy msg from SANET 
successfully enqueued
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 
***------ Bind policies from EPM -------***
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Vlan: 74, Vlan Name: , 
Vlan Source: CLI
11/25 09:24:17.871 [smrcl]: [17333]:  UUID: 8c00000000066, ra: 7 (debug): ipc(mqipc/wcm/smd-wcm):End of MQIPC 
queue with 2 messages in 1 ms
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Session Timeout: 1800
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 IF_NUM: 0x80000004
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Template name: 
implicit_deny_v6:implicit_deny:preauth_v6:preauth_v4:IP-Adm-V6-Int-ACL-global:IP-Adm-V4-Int-ACL-global:, 
URL Present: 1
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 Qos Level: 5, Qos Level Src: 
NONE, Qos Input Name: ,  Qos Input Src: NONE, Qos Output Name: , Qos Ouput Src: NONE
11/25 09:24:17.871 [aaa]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 
***-------------------------------------***
11/25 09:24:17.871 [apf-mobile]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 Processing the policy 
bind call from SANET
11/25 09:24:17.871 [apf-mobile]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 
Device Classification:Applying Session Timeout. State DHCP_REQD 
 Current SessionTimeout 1800 Updated Timeout 1800
 
11/25 09:24:17.871 [apf-mobile]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 
Device Classification: Setting Session Timeout to 1800
 
11/25 09:24:17.871 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 
Setting session timeout 1800 on mobile  48f8.b38a.f1b0 
11/25 09:24:17.871 [apf-mobile-state]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): 48f8.b38a.f1b0 
Session Timeout is 1800 - starting session timer for the mobile 
11/25 09:24:17.871 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info): Not applying bind vlan policy: 
Policy Vlan 74, Access Vlan 74, MmRole 1
 
11/25 09:24:17.871 [qos]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 [QOS] %: 
Sending native profile info to QoS task
11/25 09:24:17.871 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info):  48f8.b38a.f1b0  0.0.0.0 DHCP_REQD (7) 
BIND-COMPLETE with state 7.
 
11/25 09:24:17.872 [qos-ipc]: [21623]:  UUID: 8c00000000066, ra: 7 (info): [QOS-IPC] %: 
QOS_HANDLE_NATIVE_PROFILE_CLIENT_POLICY_POST_RUN: 20 Recvd.
11/25 09:24:17.872 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info):  48f8.b38a.f1b0  0.0.0.0 DHCP_REQD (7) 
State Update from BIND-Incomplete to BIND-Complete, mobility role=Local, client state=APF_MS_STATE_ASSOCIATED
11/25 09:24:17.872 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info):  48f8.b38a.f1b0  0.0.0.0 DHCP_REQD (7) 
pemAdvanceState2 3944, Adding TMP rule
11/25 09:24:17.872 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info):  48f8.b38a.f1b0  0.0.0.0 DHCP_REQD (7) 
Adding Fast Path rule
  on AP  5087.89be.7420 , slot 1 802.1P = 0
 
11/25 09:24:17.872 [pem]: [21661]:  UUID: 8c00000000066, ra: 7 (info):  48f8.b38a.f1b0  0.0.0.0 DHCP_REQD (7) 
Successfully plumbed mobile rule 
11/25 09:24:17.872 [apf-mobile]: [21661]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 Successfully 
processed the policy bind call from SANET
11/25 09:24:17.872 [pem]: [21652]:  UUID: 8c00000000066, ra: 7 (info): PEM recv processing msg Add SCB(3) 
11/25 09:24:17.872 [qos-ipc]: [21623]:  UUID: 8c00000000066, ra: 7 (info): [QOS-IPC] %: Regular QoS requests 
can be processed...
11/25 09:24:17.872 [pem]: [21652]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 0.0.0.0, auth_state 7 mmRole 
Local !!!
11/25 09:24:17.872 [pem]: [21652]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 ***WLCLIENT IIF 0x80000012: 
adding to FMAN and WDB
11/25 09:24:17.872 [capwap]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): Platform capability 
Asic-level-load-balancing is FALSE
11/25 09:24:17.872 [apf-lb]: [21652]:  UUID: 8c00000000066, ra: 7 (info): Platform not supported
11/25 09:24:17.872 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): IPC_ADD: WLCLIENT: IIF 0x80000012 
send station ADD to FMAN and IOSD
11/25 09:24:17.872 [tdllib]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): marshal: set uuid 8c00000000066, ra 7 
11/25 09:24:17.872 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): IPC_ADD: WLCLIENT: IIF 0x80000012 
Sending station ADD to FMAN
11/25 09:24:17.872 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): Client bitmap is 010000000000000010
11/25 09:24:17.872 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): MOBILITY_STATE set
11/25 09:24:17.872 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): DYNAMIC_POLICY_TEMPLATE set
11/25 09:24:17.873 [apf-mobile]: [21652]:  UUID: 8c00000000066, ra: 7 (info): wcm_wdb create: ipv4_addr = 0.0.0.0 
11/25 09:24:17.873 [apf-mobile]: [21652]:  UUID: 8c00000000066, ra: 7 (info): wcm_wdb create: numv6 address = 0
11/25 09:24:17.873 [apf-mobile]: [21652]:  UUID: 8c00000000066, ra: 7 (info): Setting WCDB VLAN to 74
11/25 09:24:17.873 [tdllib]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): marshal: set uuid 8c00000000066, ra 7 
11/25 09:24:17.873 [apf-mobile]: [21652]:  UUID: 8c00000000066, ra: 7 (info): WLCLIENT: wcm_wdb client creation 
message was sent successfully
11/25 09:24:17.873 [client]: [21652]:  UUID: 8c00000000066, ra: 7 (debug): IPC_ADD: WLCLIENT: IIF 0x80000012 
Sending station ADD to IOSD
11/25 09:24:17.873 [pem]: [21652]:  UUID: 8c00000000066, ra: 7 (info): 48f8.b38a.f1b0 Tclas Plumb needed: 0
11/25 09:24:17.881 [tdllib]: [21661]:  UUID: 8c00000000066, ra: 7 (debug): unmarshal: got uuid 8c00000000066, ra 7 
11/25 09:24:17.881 [cond_debug]: [21661]:  UUID: 8c00000000066, ra: 7 (info): Search condition: ft_id 43, cond: 
type 16, fmt 2, id: 0x48f8b38a, name: H����
11/25 09:24:17.881 [cond_debug]: [21661]:  UUID: 8c00000000066, ra: 7 (info): Condition found
11/25 09:24:17.881 [wcm]: [21661]:  UUID: 8c0000000006f, ra: 7 (appctx): mac  48:f8:b3:8a:f1:b0 
11/25 09:24:17.881 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 wcm_wdb received 
ip binding message: client mac 48f8.b38a.f1b0, ip learn type 2, v4/v6 0, ipv4 address 9.5.74.106 , 
ipv6 address 0000:0000:0000:0000:0000:0000:0000:0000, add/delete 1, options length 0, subnet vlan 74
11/25 09:24:17.881 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 wcm_wdb ip binding 
message was processed
11/25 09:24:17.881 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 WcdbClientUpdate: 
IP Binding from WCDB ip_learn_type 2, add_or_delete 1
11/25 09:24:17.881 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 IPv4 Addr: 9:5:74:106
 
11/25 09:24:17.882 [pem]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 MS got the IP, resetting the 
Reassociation Count 0 for client
11/25 09:24:17.882 [apf-lb]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 fap IP change 
from 0 to 9054a6a for client  48f8.b38a.f1b0 
11/25 09:24:17.882 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): In apfHaIpChangeAfterRunChkpt: 
ssoClientHaFlag 0x0, IP 0x9054a6a 48f8.b38a.f1b0
11/25 09:24:17.882 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 
***WLCLIENT IIF 0x80000012: IP address updated. Set flag for IPADDR_INFO
11/25 09:24:17.882 [pem-state]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 Moving to webauth 
state, URL Flag is set
11/25 09:24:17.882 [pem-state]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 Change state to 
WEBAUTH_REQD (8) last state DHCP_REQD (7)
 
11/25 09:24:17.882 [capwap]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): Platform capability 
Asic-level-load-balancing is FALSE
11/25 09:24:17.882 [apf-lb]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): Platform not supported
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): IPC_UPDATE: WLCLIENT: IIF 0x80000012 
send station UPDATE to FMAN and IOSD
11/25 09:24:17.882 [tdllib]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): marshal: set uuid 8c0000000006f, ra 7 
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): IPC_UPDATE: WLCLIENT: IIF 0x80000012 
Sending station UPDATE to FMAN
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): Client bitmap is 001000000010000010
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): AUTH_STATE set
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): IPADDR_INFO set
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): DYNAMIC_POLICY_TEMPLATE set
11/25 09:24:17.882 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): Not sending IP address in WDB update 
for local/anchor case
11/25 09:24:17.882 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): wcm_wdb create: ipv4_addr = 0.0.0.0 
11/25 09:24:17.882 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): wcm_wdb update: numv6 address = 0
11/25 09:24:17.882 [tdllib]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): marshal: set uuid 8c0000000006f, ra 7 
11/25 09:24:17.882 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): WLCLIENT: wcm_wdb client update 
message was sent successfully
11/25 09:24:17.883 [client]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): IPC_UPDATE: WLCLIENT: IIF 0x80000012 
Sending station UPDATE to IOSD
11/25 09:24:17.883 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 
 Sending IPv4 update to Controller 9.5.74.10 
 
11/25 09:24:17.883 [sim-cs]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): System IP addr : 9.5.74.10 
 
11/25 09:24:17.883 [sim-cs]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): System IP addr : 9.5.74.10 
 
11/25 09:24:17.883 [mob-handoff]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 
mmBuildSendClientUpdate: destIp:9.5.74.10, destType:2 callType:1
11/25 09:24:17.883 [mob-handoff]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 
mmBuildMsgUpdateIpPayload:3938 Sending msg with new client IP 9.5.74.106
11/25 09:24:17.883 [mob-handoff]: [21661]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 
[1477: Client Update MA->MC] to 9.5.74.10:16666
11/25 09:24:17.883 [apf-mobile]: [21661]:  UUID: 8c0000000006f, ra: 7 (info): 48f8.b38a.f1b0 
Assigning Address 9.5.74.106 to mobile 
11/25 09:24:17.883 [mob-handoff]: [22238]:  UUID: 8c0000000006f, ra: 7 (debug): 48f8.b38a.f1b0 
[1477: Client Update MA->MC] from 9.5.74.10:16666
11/25 09:24:17.883 [cond_debug]: [22238]:  UUID: 8c0000000006f, ra: 7 (info): Search condition: ft_id 43, 
cond: type 16, fmt 2, id: 0x48f8b38a, name: H����
11/25 09:24:17.883 [cond_debug]: [22238]:  UUID: 8c0000000006f, ra: 7 (info): Condition found
11/25 09:24:17.883 [wcm]: [22238]:  UUID: 8c00000000070, ra: 7 (appctx): mac  48:f8:b3:8a:f1:b0 
11/25 09:24:17.883 [mob-handoff]: [22238]:  UUID: 8c00000000070, ra: 7 (debug): 48f8.b38a.f1b0 Updating client 
IPv4 address:  9.5.74.106 . Client learn type: 2.
11/25 09:24:35.501 [tdllib]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): unmarshal: got uuid 8c00000000082, ra 7 
11/25 09:24:35.501 [wcm]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): AAA-Proxy attr list alloc: 
Created attribute list = (EE00004D)
11/25 09:24:35.501 [smrcl]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): EEDGE-RCL: policy_src[0] 
in rcl_sm_handler is : [0]
11/25 09:24:35.501 [smrcl]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): EEDGE-RCL: policy_src[1] 
in rcl_sm_handler is : [0]
11/25 09:24:35.501 [smrcl]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): EEDGE-RCL: policy_src[2] 
in rcl_sm_handler is : [0]
11/25 09:24:35.501 [smrcl]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): EEDGE-RCL: policy_src[3] 
in rcl_sm_handler is : [4]
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): AUTHC Callback rcvd from SANET, 
label: 1006632973, auth_result:0 bind result:0  eap_type: 0
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): SMD policy src[0]: 0
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): Qos source received from SMD: 0 ->NONE
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): SMD policy src[1]: 0
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): Qos source received from SMD: 1 ->NONE
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): SMD policy src[2]: 0
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): Qos source received from SMD: 2 ->NONE
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): SMD policy src[3]: 4
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): Qos source received from SMD: 3 ->CLI
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 
***------ Bind policies from EPM -------***
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 Vlan: 74, 
Vlan Name: VLAN0074, Vlan Source: CLI
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 Session Timeout: 1800
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 IF_NUM: 0x80000004
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 
Template name: IP-Adm-V4-LOGOUT-ACL:, URL Present: 0
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 
Qos Level: 5, Qos Level Src: NONE, Qos Input Name: ,  Qos Input Src: NONE, Qos Output Name: , Qos Ouput Src: NONE
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 
***-------------------------------------***
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug):   AVP type=757 len=4   : 0x00000001 (1)
11/25 09:24:35.501 [aaa]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): Session Label: 1006632973client mac 
48f8.b38a.f1b0
Auth Results 0
 
11/25 09:24:35.501 [pem]: [17333]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 WEBAUTH: received 
authentication response, status=0
11/25 09:24:35.501 [smrcl]: [17333]:  UUID: 8c00000000082, ra: 7 (debug): ipc(mqipc/wcm/smd-wcm):End of MQIPC 
queue with 2 messages in 1 ms
11/25 09:24:35.502 [pem]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 WEBAUTH: Received message 
from webauth queue: 1
11/25 09:24:35.502 [pem]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 WEBAUTH: SANET Auth 
Event - Authentication Success!
11/25 09:24:35.502 [pem]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 Policy Source: 
QOS IN NONE QOS OUT: NONE, VLAN:CLI
11/25 09:24:35.502 [aaa]: [21653]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 
Applying new AAA override for station  48f8.b38a.f1b0 AllowOverRide 1
11/25 09:24:35.502 [aaa]: [21653]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 Override Values: 
source: 48, valid_bits: 0x0101, qosLevel: -1 dscp: 0xffffffff, dot1pTag: 0xffffffff, sessionTimeout: 1800
11/25 09:24:35.502 [aaa]: [21653]:  UUID: 8c00000000082, ra: 7 (debug): 48f8.b38a.f1b0 dataAvgC: -1, 
rTAvgC: -1, dataBurstC: -1 rTimeBurstC: -1, vlanIfName: , aclName: 
11/25 09:24:35.502 [qos]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 QoS policies from SMD: 
dot1pTag: 0xffffffff, qosLevel: -1, qos-policy-In: , qos-in-src:NONE qos-policy-out: , qos-out-src:NONE 
sub-qos-policy-in:  sub-qos-policy-out: , sub-policy-in:  sub-policy-out: 
11/25 09:24:35.502 [apf-mobile]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 Clearing 
Dhcp state for station  --- 
11/25 09:24:35.502 [pem]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 Applying WLAN ACL 
policies to client
11/25 09:24:35.502 [pem]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 No Interface 
ACL used for Wireless client in WCM(NGWC)
11/25 09:24:35.502 [ap-grp]: [21653]:  UUID: 8c00000000082, ra: 7 (debug): no location defined
 
11/25 09:24:35.502 [apf-mobile]: [21653]:  UUID: 8c00000000082, ra: 7 (info): 48f8.b38a.f1b0 Inserting AAA 
Override struct for mobile
MAC:  48f8.b38a.f1b0 , source 48

      Note

      Debugs are processor-intensive. Hence, run the debugs in a scheduled maintenance window.