(MC1) #aaa test-server mschapv2 RADIUS01 test aruba Authentication Successful ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (MC1) (config) #show aaa authentication-server radius RADIUS01 RADIUS Server "RADIUS01" ------------------------ Parameter Value --------- ----- Host 10.254.1.21 Key ******** Auth Port 1812 Acct Port 1813 Retransmits 3 Timeout 5 sec NAS ID N/A NAS IP N/A Source Interface N/A Use MD5 Disabled Use IP address for calling station ID Disabled Mode Enabled ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (MC1) (config) #show aaa authentication-server radius statistics RADIUS Server Statistics ------------------------ Server Acct Rq Raw Rq PAP Rq CHAP Rq MSCHAP Rq MSCHAPv2 Rq Mismatch Rsp Bad Auth Acc Rej Acct Rsp Chal Ukn Rsp Tmout AvgRspTm Tot Rq Tot Rsp Uptime SEQ ------ ------- ------ ------ ------- --------- ----------- ------------ -------- --- --- -------- ---- ------- ----- -------- ------ ------- ------ --- RADIUS01 0 8 0 0 0 4 0 0 1 0 0 0 0 44 81 12 1 0:0:1 255/255 *AvgRspTm is in msec, Uptime is in d:h:m, SEQ is in Total/Free Orphaned requests = 0 (MC1) (config) #show log user-debug all Sep 30 03:29:59 :501065: |stm| Sending STA 00:23:15:d0:d9:78 message to Auth and Mobility Unicast Encr WPA PSK AES Multicast Encr Static WPA,WPA2 PSK TKIP VLAN 0xb, wmm:1, rsn_cap:0 Sep 30 03:29:59 :500511: |mobileip| Station 00:23:15:d0:d9:78, 0.0.0.0: Received disassociation on ESSID: naik-employee1 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name Master-AP-125-1 Group MC1 BSSID 00:1a:1e:8b:de:60, phy g, VLAN 11 Sep 30 03:29:59 :500010: |mobileip| Station 00:23:15:d0:d9:78, 255.255.255.255: Mobility trail, on switch 10.1.10.100, VLAN 11, AP Master-AP-125-1, naik-employee1/00:1a:1e:8b:de:60/g Sep 30 03:29:59 :522036: |authmgr| MAC=00:23:15:d0:d9:78 Station DN: BSSID=00:1a:1e:8b:de:60 ESSID=naik-employee1 VLAN=11 AP-name=Master-AP-125-1 Sep 30 03:29:59 :501080: |stm| Deauth to sta: 00:23:15:d0:d9:78: Ageout AP 10.1.10.150-00:1a:1e:8b:de:60-Master-AP-125-1 Unspecified Failure Sep 30 03:29:59 :501000: |stm| Station 00:23:15:d0:d9:78: Clearing state Sep 30 03:35:41 :522005: |authmgr| MAC=00:23:15:d0:d9:78 IP=10.1.11.102 User entry deleted: reason=idle timeout Sep 30 03:43:14 :501095: |stm| Assoc request @ 03:43:14.909614: 7c:11:be:6d:a0:56 (SN 4062): AP 10.1.10.150-00:1a:1e:8b:de:60-Master-AP-125-1 Sep 30 03:43:14 :501100: |stm| Assoc success @ 03:43:14.915581: 7c:11:be:6d:a0:56: AP 10.1.10.150-00:1a:1e:8b:de:60-Master-AP-125-1 Sep 30 03:43:14 :501065: |stm| Sending STA 7c:11:be:6d:a0:56 message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr Dynamic WPA,WPA2 8021X TKIP VLAN 0xb, wmm:1, rsn_cap:c Sep 30 03:43:14 :522035: |authmgr| MAC=7c:11:be:6d:a0:56 Station UP: BSSID=00:1a:1e:8b:de:60 ESSID=naik-employee1 VLAN=11 AP-name=Master-AP-125-1 Sep 30 03:43:14 :524124: |authmgr| dot1x_supplicant_up(): MAC:7c:11:be:6d:a0:56, pmkid_present:True, pmkid:0c 12 18 60 2d 1a 0c 18 1b ff 00 00 00 00 00 00 Sep 30 03:43:14 :500511: |mobileip| Station 7c:11:be:6d:a0:56, 0.0.0.0: Received association on ESSID: naik-employee1 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name Master-AP-125-1 Group MC1 BSSID 00:1a:1e:8b:de:60, phy g, VLAN 11 Sep 30 03:43:14 :500010: |mobileip| Station 7c:11:be:6d:a0:56, 0.0.0.0: Mobility trail, on switch 10.1.10.100, VLAN 11, AP Master-AP-125-1, naik-employee1/00:1a:1e:8b:de:60/g Sep 30 03:43:25 :501102: |stm| Disassoc from sta: 7c:11:be:6d:a0:56: AP 10.1.10.150-00:1a:1e:8b:de:60-Master-AP-125-1 Reason STA has left and is disassociated Sep 30 03:43:25 :501065: |stm| Sending STA 7c:11:be:6d:a0:56 message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr Dynamic WPA,WPA2 8021X TKIP VLAN 0xb, wmm:1, rsn_cap:c Sep 30 03:43:25 :500511: |mobileip| Station 7c:11:be:6d:a0:56, 0.0.0.0: Received disassociation on ESSID: naik-employee1 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name Master-AP-125-1 Group MC1 BSSID 00:1a:1e:8b:de:60, phy g, VLAN 11 Sep 30 03:43:25 :522036: |authmgr| MAC=7c:11:be:6d:a0:56 Station DN: BSSID=00:1a:1e:8b:de:60 ESSID=naik-employee1 VLAN=11 AP-name=Master-AP-125-1 Sep 30 03:43:25 :500010: |mobileip| Station 7c:11:be:6d:a0:56, 255.255.255.255: Mobility trail, on switch 10.1.10.100, VLAN 11, AP Master-AP-125-1, naik-employee1/00:1a:1e:8b:de:60/g Sep 30 03:43:25 :501000: |stm| Station 7c:11:be:6d:a0:56: Clearing state (MC1) (config) # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ (MC1) (config) # (MC1) (config) #show log security 20 ~ Sep 30 03:30:13 :126075: |wms| |ids| AP(00:1a:1e:8b:de:60@Master-AP-125-1): Valid Client Misassociation: An AP detected a misassociation between valid client 00:23:15:d0:d9:78 and access point (BSSID 1c:b1:7f:00:a7:82 and SSID aterm-8057c5-g on CHANNEL 7). Association type is (Association To External AP), SNR of client is 0. Sep 30 03:30:54 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:31:21 :132197: |authmgr| Maximum number of retries was attempted for station test 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60, deauthenticating the station Sep 30 03:31:21 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:31:42 :132197: |authmgr| Maximum number of retries was attempted for station test 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60, deauthenticating the station Sep 30 03:31:42 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:32:03 :132197: |authmgr| Maximum number of retries was attempted for station test 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60, deauthenticating the station Sep 30 03:32:03 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:32:41 :132197: |authmgr| Maximum number of retries was attempted for station test 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60, deauthenticating the station Sep 30 03:32:41 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:33:03 :132197: |authmgr| Maximum number of retries was attempted for station test 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60, deauthenticating the station Sep 30 03:33:03 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x Sep 30 03:42:26 :126005: |wms| |ids| Interfering AP: The system classified an access point (BSSID 1c:b1:7f:d4:40:25 and SSID aterm-996370-g on CHANNEL 2) as interfering. Additional Info: Detector-AP-Name:Master-AP-125-1; Detector-AP-MAC:00:1a:1e:8b:de:60; Detector-AP-Radio:2. Sep 30 03:43:34 :132053: |authmgr| Dropping the radius packet for Station 7c:11:be:6d:a0:56 00:1a:1e:8b:de:60 doing 802.1x ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~