ArubaOS and Controllers

Reply
Occasional Contributor II

Apple 802.1x Settings

Hello,

My school district recently implemented Aruba controllers and APs at each school site. We also got an XServe running Open Directory and is used as an LDAP server. Students are provided laptops from a cart for use in their class. Each student has a network account only, no local accounts so they need to be able to authenticate to the wireless at the login window.

I have created a Login Window Profile in network preferences but they will not authenticate at the login window. I am new to both the Aruba system and 802.1x. I do believe it has to do with the settings of the authentication protocols.

I can authenticate to the wireless by manually selecting the SSID and entering in a students credentials, then a User profile is created in the Network Preferences, so I check out the settings that are automatically created. I see that TTLS, PEAP and EAP-Fast are selected and configured. Now from what I understand EAP-Fast is not supported for the Login Window Profile.

Now going into the Aruba controller, I can not for the life of me find anything to do with EAP-Fast, so I do not understand where the Airport is getting this setting from . In the controller EAP type is set to PEAP GTC.

So with my lack of knowledge and expertise here, I am stumped. If anyone has implemented this and knows the proper settings, please advise.

Thank you.
Guru Elite

Re: Apple 802.1x Settings

You need to import the certificate into the Mac OSX trusted root keychain, for this to work at login. You need to do this as an admin user. Individual users can trust the cert manually when they are logged in already and attempt to connect to wireless, but at the login screen, the trusted cert must already be in the keychain.

The wireless profile might say it has leap, eap-fast, and gtc checked, but ultimately it only uses one.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Apple 802.1x Settings

Thank you very much for your reply. However it did not work. Here is what I did and you tell me if this is the wrong way.

I am getting the certificate by logging into my controllers page and from the lock icon in the top right, I am double clicking and then dragging the certificate to the desktop.

Then from terminal I run the security command like this:
sudo security add-trusted-cert -d -r trustRoot -k “/System/Library/Keychains/SystemRootCertificates.keychain” “/path/to/cert/securelogin.arubanetworks.com.cer”

I ensure that it is in the System Roots keychain in KeyChain Access and then open it and tell it to trust all.

Log out of admin and try logging in with student credentials. No go.

Any other ideas?
Guru Elite

Re: Apple 802.1x Settings

I did not ask what error you got.... What error does the mac kick back? Bad username or password? What is your backend radius server? Does it register a failure? Make sure you do not have a duplicate username already created on your local mac.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Apple 802.1x Settings

Actually the Mac doesn't seem to get any error. After typing in user name and password of network user (the user does not exist locally) the gear spins (sometimes for a minute, sometimes for a few seconds) then login window shakes signifying an invalid user name or password. I looked in the Console and here is what it reported from the time launchd started to attempting to log in as network user and then successfully logging in as admin. Then below that is what is recorded from the Aruba controller during the same period.

Apple Console logs

7/7/11 5:02:57 PM com.apple.launchd *** launchd has started up. ***

7/7/11 5:03:56 PM com.apple.WindowServer Thu Jul 7 17:03:56 ocean-student-laptop-01.local WindowServer : kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.

7/7/11 5:04:19 PM com.apple.loginwindow 2011-07-07 17:04:19.372 MCXLoginLogoutScriptTool login: "loginscripts" in "com.apple.mcxloginscripts" is missing or is not a CFArray.

7/7/11 5:04:19 PM com.apple.launchd.peruser.501 (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self

7/7/11 5:04:26 PM com.apple.launchd.peruser.501 (com.apple.Kerberos.renew.plist) Exited with exit code: 1

7/7/11 5:04:26 PM ServerScanner Not scanning because node /LDAPv3/main.losd.ca is in searchPath

7/7/11 5:04:30 PM UIMgmt *** __NSAutoreleaseNoPool(): Object 0x400540 of class NSCFNumber autoreleased with no pool in place - just leaking

7/7/11 5:04:30 PM .com.trendmicro.TM.TmLoginMgr 2011-07-07 17:04:30.392 UIMgmt *** __NSAutoreleaseNoPool(): Object 0x400540 of class NSCFNumber autoreleased with no pool in place - just leaking

7/7/11 5:04:30 PM UIMgmt *** __NSAutoreleaseNoPool(): Object 0x4159b0 of class NSCFDictionary autoreleased with no pool in place - just leaking

7/7/11 5:04:30 PM .com.trendmicro.TM.TmLoginMgr 2011-07-07 17:04:30.397 UIMgmt *** __NSAutoreleaseNoPool(): Object 0x4159b0 of class NSCFDictionary autoreleased with no pool in place - just leaking

7/7/11 5:05:14 PM com.apple.launchd (com.apple.xprotectupdater) Exited with exit code: 255



Aruba Controller logs

Jul 7 17:04:11 authmgr: <132161> |authmgr| Station 00:19:e3:05:25:a7 00:24:6c:b5:e1:34 sent Invalid TLS Record Layer Type 21

Jul 7 17:04:30 sapd: <404003> |AP 00:24:6c:c3:46:c3@172.22.104.212 sapd| AM 00:24:6c:b4:6c:30: Interfering AP detected with SSID 2WIRE777 and BSSID 3c:ea:4f:c8:7e:29

Jul 7 17:04:42 authmgr: <109013> |authmgr| LDAP Server LOSD-Staff-Backup: Connectivity lost. Server is down


I do see that it says that the server is down, but I do not understand what it is referring to. The Xserve acting as an LDAP server with OD on it is up and running and I am still able to authenticate via 802.1x once logged into the desktop.
Occasional Contributor II

Re: Apple 802.1x Settings

Forgot to mention that I have tried this on several laptops and several user accounts.
Guru Elite

Re: Apple 802.1x Settings

I just spoke to someone who was doing this in the past and he told me that he stopped, because even though he got it to work, it was unreliable on the MAC; that of course is just one person. You might want to contact Apple support to see if they have any insight about how this should work. There are a number of pages on Apple's website about how this is supposed to work, but no information about what to look at if your issue is seen.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Apple 802.1x Settings

Bummer. Yeah, I have read through a bunch of apple article on 802.1x and followed their instructions. I also spoke with Apple tech support. They worked with me for quite a while but were unable to get it to work. They said since it involved a 3rd party device (i.e. The Aruba system) they would have to pass me on to one of their contracted, pay per incident parters. By any chance do you know what your friend ended up doing for a solution for his mobile computers?
Guru Elite

Re: Apple 802.1x Settings

Okay.

I got this to "work" using the article here: http://www.esecurityplanet.com/views/article.php/3899996/How-to-Use-Enterprise-Wi-Fi-Encryption-and-8021X-in-Mac-OS-X.htm

So, delete the user profile that you probably have configured in the 802.1x window and only keep the login profile. If you have already authenticated and trusted the certificate once, it is in your keychain, so you are good to go. Only select PEAP in the 802.1x profile. Try to authenticate and type:

"config t
logging level debug user"

Then:

"show log user 50" while you are authenticating to see if your user is making any progress.

If it shows that you are authenticated, type "show user" to see if you made it into the user table.


The only issue is that it does not let me past the login screen. I look on the Aruba Controller and I get an ip address and everything, but it is stuck at the login screen:

Jul 16 06:47:24 :501109:   |AP cjoseph-ap105@10.69.80.28 stm|  Auth request: 08:55:cd:f5:30:2d: AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105 auth_alg 0
Jul 16 06:47:24 :501093: |AP cjoseph-ap105@10.69.80.28 stm| Auth success: 08:55:cd:f5:30:2d: AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105
Jul 16 06:47:24 :501095: |stm| Assoc request @ 06:47:24.425916: 08:55:cd:f5:30:2d (SN 795): AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105
Jul 16 06:47:24 :501095: |AP cjoseph-ap105@10.69.80.28 stm| Assoc request @ 06:47:19.284810: 08:55:cd:f5:30:2d (SN 795): AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105
Jul 16 06:47:24 :501100: |AP cjoseph-ap105@10.69.80.28 stm| Assoc success @ 06:47:19.285979: 08:55:cd:f5:30:2d: AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105
Jul 16 06:47:24 :501100: |stm| Assoc success @ 06:47:24.429831: 08:55:cd:f5:30:2d: AP 10.69.80.28-00:1a:1e:41:a0:81-cjoseph-ap105
Jul 16 06:47:24 :501065: |stm| Sending STA 08:55:cd:f5:30:2d message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr WPA2 8021X AES VLAN 0x3e9, wmm:1, rsn_cap:0
Jul 16 06:47:24 :522035: |authmgr| MAC=08:55:cd:f5:30:2d Station UP: BSSID=00:1a:1e:41:a0:81 ESSID=aruba-wpa2 VLAN=1001 AP-name=cjoseph-ap105
Jul 16 06:47:24 :500511: |mobileip| Station 08:55:cd:f5:30:2d, 0.0.0.0: Received association on ESSID: aruba-wpa2 Mobility service Off, HA Discovery on Association Off, Fastroaming Disabled, AP: Name cjoseph-ap105 Group default BSSID 00:1a:1e:41:a0:81, phy g, VLAN 1001
Jul 16 06:47:24 :500010: |mobileip| Station 08:55:cd:f5:30:2d, 0.0.0.0: Mobility trail, on switch 10.69.67.32, VLAN 1001, AP cjoseph-ap105, aruba-wpa2/00:1a:1e:41:a0:81/g
Jul 16 06:47:26 :522038: |authmgr| username=cjoseph MAC=08:55:cd:f5:30:2d IP=0.0.0.0 Authentication result=Authentication Successful method=802.1x server=aruba-win2008
Jul 16 06:47:26 :522044: |authmgr| MAC=08:55:cd:f5:30:2d Station authenticate(start): method=802.1x, role=logon//, VLAN=1001/1001/0/0/0, Derivation=0/0, Value Pair=1
Jul 16 06:47:26 :522029: |authmgr| MAC=08:55:cd:f5:30:2d Station authenticate: method=802.1x, role=aruba-staff-tunnel//, VLAN=1001/1001/0/0/0, Derivation=1/0, Value Pair=1
Jul 16 06:47:26 :522026: |authmgr| MAC=08:55:cd:f5:30:2d IP=0.0.0.0 User miss: ingress=0x1093, VLAN=1001
Jul 16 06:47:27 :522026: |authmgr| MAC=08:55:cd:f5:30:2d IP=10.69.81.250 User miss: ingress=0x1093, VLAN=1001
Jul 16 06:47:27 :522006: |authmgr| MAC=08:55:cd:f5:30:2d IP=10.69.81.250 User entry added: reason=Sibtye
Jul 16 06:47:27 :522008: |authmgr| User Authentication Successful: username=cjoseph MAC=08:55:cd:f5:30:2d IP=10.69.81.250 role=aruba-staff-tunnel VLAN=1001 AP=cjoseph-ap105 SSID=aruba-wpa2 AAA profile=aruba-mdac-aaa-profile auth method=802.1x auth server=aruba-win2008

(3600.arubanetworks.com) #  show user

Users
-----
IP MAC Name Role Age(d:h:m) Auth VPN link AP name Roaming Essid/Bssid/Phy Profile Forward mode Type
---------- ------------ ------ ---- ---------- ---- -------- ------- ------- --------------- ------- ------------ ----
10.69.81.250 08:55:cd:f5:30:2d cjoseph aruba-staff 00:00:01 802.1x cjoseph-ap105 Wireless aruba-wpa2/00:1a:1e:41:a0:81/g-HT aruba-peap-aaa-profile tunnel OS X

User Entries: 5/5


The only thing that I saw that looked amiss was:

"DS was not able to bind to any servers before time expired"

It looks like the laptop authenticates, gets an ip address, and then looks for a directory server before anything gets past the login screen. Below is the contents of my MAC's Console> Database Searches> All Messages. Please try the instructions at that URL above to set this up and make sure your mac is bound to the domain.

 setting hostname to "colin-josephs-macbook-air.local"
7/16/11 8:46:58 AM kernel Auth result for: 00:1a:1e:41:a0:81 MAC AUTH succeeded
7/16/11 8:47:20 AM SecurityAgent Network Authentication will be attempted
7/16/11 8:47:20 AM SecurityAgent Attempting EAPOL connection
7/16/11 8:47:20 AM SecurityAgent EAPOLConnectTimeout = 60.000000
7/16/11 8:47:20 AM SecurityAgent DSBindTimeout = 60.000000
7/16/11 8:47:20 AM eapolclient en0 START
7/16/11 8:47:20 AM kernel vmnet: bridge-en0: interface en is coming UP
7/16/11 8:47:20 AM kernel vmnet: bridge-en0: interface en is coming UP
7/16/11 8:47:24 AM vmnet-bridge Preferences changed called
7/16/11 8:47:24 AM vmnet-bridge Preferences changed called
7/16/11 8:47:24 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:24 AM kernel AirPort: Link Down on en0. Reason 8 (Disassociated because station leaving).
7/16/11 8:47:24 AM kernel vmnet: bridge-en0: interface en is going DOWN
7/16/11 8:47:24 AM kernel Auth result for: 00:1a:1e:41:a0:81 MAC AUTH succeeded
7/16/11 8:47:24 AM kernel AirPort: Link Up on en0
7/16/11 8:47:24 AM kernel vmnet: bridge-en0: interface en is coming UP
7/16/11 8:47:24 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:25 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:25 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:25 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:26 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:26 AM eapolclient eapmschapv2_success_request: successfully authenticated
7/16/11 8:47:26 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:26 AM SecurityAgent EAPOL is Authenticating
7/16/11 8:47:26 AM eapolclient PEAP: successfully authenticated
7/16/11 8:47:26 AM SecurityAgent EAPOL Authenticated
7/16/11 8:47:26 AM kernel AirPort: RSN handshake complete on en0
7/16/11 8:47:27 AM NetworkMonitor device_darwin:scCallback:29 SC Callback Key changed: State:/Network/Interface/en0/IPv4
7/16/11 8:47:27 AM com.arubanetworks.via.NetworkMonitorLaunchd SC Callback Key changed: State:/Network/Interface/en0/IPv4
7/16/11 8:47:27 AM NetworkMonitor device_darwin:scCallback:38 IP address change:
7/16/11 8:47:27 AM NetworkMonitor device_darwin:scCallback:51 Address: 10.69.81.250
7/16/11 8:47:27 AM com.arubanetworks.via.NetworkMonitorLaunchd IP address change: 10.69.81.250
7/16/11 8:47:27 AM vmnet-bridge Dynamic store changed
7/16/11 8:47:27 AM configd network configuration changed.
7/16/11 8:47:27 AM configd setting hostname to "Colin-Josephs-MacBook-Air.local"
7/16/11 8:47:29 AM NetworkMonitor connectivity_darwin:via_nm_test_trusted_lan:100 Succeeded to get X-VIA http header
7/16/11 8:47:29 AM NetworkMonitor main:via_nm_connectivity_changed:92 Waiting for complete network type lan 1 g/w 0
7/16/11 8:48:26 AM SecurityAgent DS was not able to bind to any servers before time expired
7/16/11 8:48:26 AM eapolclient en0 STOP
7/16/11 8:48:26 AM SecurityAgent EAPOL NOT connected
7/16/11 8:48:26 AM SecurityAgent User info context values set for cjoseph
7/16/11 8:48:26 AM SecurityAgent unknown-user (cjoseph) login attempt PASSED for auditing


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Apple 802.1x Settings

So, when logged into the system,
I did as you said and made sure only the login window profile was present and only PEAP was selected. I also brought it to the top of the list. I am assuming that gives it priority. I then authenticated and looked at the log and saw I was authenticated, then looked at the user table and indeed I was listed there.

Then I restarted the laptop to start fresh and I do not see any authentication being logged and obviously am not in the user table. Below is the log. There was only about 2 seconds of activity before the login window shook and denied me.

I notice a lot of "Discovery on Association off", "Fastroaming Disabled" and "Dissiaco" being mentioned. I am not sure what a lot of that means but if it means something to you and is relevant here, please let me know.

By the way the mac address of the laptop is 00:19:e3:03:a8:6c

Jul 19 08:45:00 :501102:   |AP 00:24:6c:c3:5e:13@172.22.104.205 stm|  Disassoc from sta: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13 Reason STA has left and is disassocisted
Jul 19 08:45:00 :501102: |stm| Disassoc from sta: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13 Reason STA has left and is disassocisted
Jul 19 08:45:00 :501000: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Station 00:19:e3:03:a8:6c: Clearing state
Jul 19 08:45:00 :501065: |stm| Sending STA 00:19:e3:03:a8:6c message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr WPA2 8021X AES VLAN 0x262, wmm:1, rsn_cap:0
Jul 19 08:45:00 :500511: |mobileip| Station 00:19:e3:03:a8:6c, 0.0.0.0: Received disassociation on ESSID: GAStudent-TEST Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name 00:24:6c:c3:5e:13 Group default BSSID 00:24:6c:b5:e1:34, phy g, VLAN 610
Jul 19 08:45:00 :522036: |authmgr| MAC=00:19:e3:03:a8:6c Station DN: BSSID=00:24:6c:b5:e1:34 ESSID=GAStudent-TEST VLAN=610 AP-name=00:24:6c:c3:5e:13
Jul 19 08:45:00 :522004: |authmgr| MAC=00:19:e3:03:a8:6c ingress 0x1117 (tunnel 151), u_encr 64, m_encr 64, slotport 0x1041 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 19 08:45:00 :522004: |authmgr| station free: bssid=00:24:6c:b5:e1:34, valid=1, @=0x108005cc
Jul 19 08:45:00 :501000: |stm| Station 00:19:e3:03:a8:6c: Clearing state
Jul 19 08:45:02 :501095: |stm| Assoc request @ 08:45:02.692802: 00:19:e3:03:a8:6c (SN 1): AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501095: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Assoc request @ 08:45:02.671899: 00:19:e3:03:a8:6c (SN 1): AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501100: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Assoc success @ 08:45:02.672781: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501100: |stm| Assoc success @ 08:45:02.696188: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501065: |stm| Sending STA 00:19:e3:03:a8:6c message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr WPA2 8021X AES VLAN 0x262, wmm:1, rsn_cap:0
Jul 19 08:45:02 :500511: |mobileip| Station 00:19:e3:03:a8:6c, 0.0.0.0: Received association on ESSID: GAStudent-TEST Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name 00:24:6c:c3:5e:13 Group default BSSID 00:24:6c:b5:e1:34, phy g, VLAN 610
Jul 19 08:45:02 :522035: |authmgr| MAC=00:19:e3:03:a8:6c Station UP: BSSID=00:24:6c:b5:e1:34 ESSID=GAStudent-TEST VLAN=610 AP-name=00:24:6c:c3:5e:13
Jul 19 08:45:02 :522004: |authmgr| MAC=00:19:e3:03:a8:6c ingress 0x1117 (tunnel 151), u_encr 64, m_encr 64, slotport 0x1041 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 19 08:45:02 :501102: |stm| Disassoc from sta: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13 Reason STA has left and is disassocisted
Jul 19 08:45:02 :501102: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Disassoc from sta: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13 Reason STA has left and is disassocisted
Jul 19 08:45:02 :501065: |stm| Sending STA 00:19:e3:03:a8:6c message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr WPA2 8021X AES VLAN 0x262, wmm:1, rsn_cap:0
Jul 19 08:45:02 :501000: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Station 00:19:e3:03:a8:6c: Clearing state
Jul 19 08:45:02 :500511: |mobileip| Station 00:19:e3:03:a8:6c, 0.0.0.0: Received disassociation on ESSID: GAStudent-TEST Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name 00:24:6c:c3:5e:13 Group default BSSID 00:24:6c:b5:e1:34, phy g, VLAN 610
Jul 19 08:45:02 :522036: |authmgr| MAC=00:19:e3:03:a8:6c Station DN: BSSID=00:24:6c:b5:e1:34 ESSID=GAStudent-TEST VLAN=610 AP-name=00:24:6c:c3:5e:13
Jul 19 08:45:02 :522004: |authmgr| MAC=00:19:e3:03:a8:6c ingress 0x1117 (tunnel 151), u_encr 64, m_encr 64, slotport 0x1041 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 19 08:45:02 :522004: |authmgr| station free: bssid=00:24:6c:b5:e1:34, valid=1, @=0x108005cc
Jul 19 08:45:02 :501000: |stm| Station 00:19:e3:03:a8:6c: Clearing state
Jul 19 08:45:02 :501095: |stm| Assoc request @ 08:45:02.737503: 00:19:e3:03:a8:6c (SN 1): AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501095: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Assoc request @ 08:45:02.716545: 00:19:e3:03:a8:6c (SN 1): AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501100: |AP 00:24:6c:c3:5e:13@172.22.104.205 stm| Assoc success @ 08:45:02.717418: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501100: |stm| Assoc success @ 08:45:02.740975: 00:19:e3:03:a8:6c: AP 172.22.104.205-00:24:6c:b5:e1:34-00:24:6c:c3:5e:13
Jul 19 08:45:02 :501065: |stm| Sending STA 00:19:e3:03:a8:6c message to Auth and Mobility Unicast Encr WPA2 8021X AES Multicast Encr WPA2 8021X AES VLAN 0x262, wmm:1, rsn_cap:0
Jul 19 08:45:02 :500511: |mobileip| Station 00:19:e3:03:a8:6c, 0.0.0.0: Received association on ESSID: GAStudent-TEST Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name 00:24:6c:c3:5e:13 Group default BSSID 00:24:6c:b5:e1:34, phy g, VLAN 610
Jul 19 08:45:02 :522035: |authmgr| MAC=00:19:e3:03:a8:6c Station UP: BSSID=00:24:6c:b5:e1:34 ESSID=GAStudent-TEST VLAN=610 AP-name=00:24:6c:c3:5e:13
Jul 19 08:45:02 :522004: |authmgr| MAC=00:19:e3:03:a8:6c ingress 0x1117 (tunnel 151), u_encr 64, m_encr 64, slotport 0x1041 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 19 08:45:07 :522004: |authmgr| icmp request sent for user 10.22.6.60
Jul 19 08:45:07 :522004: |authmgr| MAC=d8:30:62:0a:ac:5f IP=10.22.6.60 Sending ping 1 of 3 (id=8214, seq=39653)
Jul 19 08:45:08 :522004: |authmgr| MAC=d8:30:62:0a:ac:5f IP=10.22.6.60 Got ping response (seq=39653, user-ingress=0x10e3 ingress=0x10e3, type=idle)
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: