Now that's a darn handy command I didn't know!
Ton of information there. And yes, that wasn't the whole problem so thank you for suggesting this.
Now to figure out how to use this information to solve the problem. Obviously there is still a vlan problem.
Non-working:
Name: , IP: 10.44.90.15, MAC: 28:6a:ba:e7:35:3d, Role:guest, ACL:3/0, Age: 00:14:32
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: AAA profile default role
VLAN Derivation: unknown
Idle timeouts: 161, ICMP requests sent: 163, replies received: 161, Valid ARP: 0
Mobility state: Wireless, HA: Yes, Proxy ARP: No, Roaming: No Tunnel ID: 0 L3 Mob: 0
Flags: internal=0, trusted_ap=0, l3auth=0, mba=0
Flags: innerip=0, outerip=0, guest=0, download=1, nodatapath=0, wispr=0
Auth fails: 0, phy_type: a, reauth: 0, BW Contract: up:0 down:0, user-how: 1
Vlan default: 1, Assigned: 0, Current: 1 vlan-how: 0 DP assigned vlan:0
Mobility Messages: L2=0, Move=0, Inter=0, Intra=0, ProxyArp=0, Flags=0x0
Tunnel=0, SlotPort=0x1040, Port=0x10de (tunnel 94)
Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role : n/a
Current Role name: guest, role-how: 10, L2-role: guest, L3-role: guest
Essid: MSDPT, Bssid: d8:c7:c8:f7:5f:d9 AP name/group: AP-DM-Office-Hall/default Phy-type: a
RadAcct sessionID:n/a
RadAcct Traffic In 10323/1297358 Out 10836/11636078 (0:10323/0:0:19:52174,0:10836/0:0:177:36206)
Timers: ping_reply 0, spoof reply 0, reauth 0
Profiles AAA:MSDPT-aaa_prof, dot1x:, mac: CP: def-role:'guest' sip-role:'' via-auth-profile:''
ncfg flags udr 0, mac 0, dot1x 0, RADIUS interim accounting 0
IP Born: 1423088666 (Wed Feb 4 17:24:26 2015)
Core User Born: 1423088665 (Wed Feb 4 17:24:25 2015)
Upstream AP ID: 0, Downstream AP ID: 0
DHCP assigned IP address 10.44.90.15, from DHCP server 0.0.0.0
Device Type: Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) Mobile/11D257
Working: (different 3400
(MB-Controller) #show user-table ip 10.236.64.165
Name: , IP: 10.236.64.165, MAC: 04:e5:36:be:74:d9, Role:guest, ACL:3/0, Age: 00:00:00
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: AAA profile default role
VLAN Derivation: unknown
Idle timeouts: 415, ICMP requests sent: 0, replies received: 0, Valid ARP: 0
Mobility state: Wireless, HA: Yes, Proxy ARP: No, Roaming: No Tunnel ID: 0 L3 Mob: 0
Flags: internal=0, trusted_ap=0, l3auth=0, mba=0
Flags: innerip=0, outerip=0, guest=0, download=1, nodatapath=0, wispr=0
Auth fails: 0, phy_type: a, reauth: 0, BW Contract: up:0 down:0, user-how: 1
Vlan default: 303, Assigned: 0, Current: 303 vlan-how: 0 DP assigned vlan:0
Mobility Messages: L2=0, Move=0, Inter=0, Intra=0, ProxyArp=0, Flags=0x0
Tunnel=0, SlotPort=0x1040, Port=0x1105 (tunnel 133)
Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role : n/a
Current Role name: guest, role-how: 10, L2-role: guest, L3-role: guest
Essid: MSDPT, Bssid: d8:c7:c8:f2:f1:a9 AP name/group: AP-MB-27 - p18/default Phy-type: a
RadAcct sessionID:n/a
RadAcct Traffic In 26398/2223129 Out 13870/10473226 (0:26398/0:0:33:60441,0:13870/0:0:159:53002)
Timers: ping_reply 0, spoof reply 0, reauth 0
Profiles AAA:MSDPT-aaa_prof, dot1x:, mac: CP: def-role:'guest' sip-role:'' via-auth-profile:''
ncfg flags udr 0, mac 0, dot1x 0, RADIUS interim accounting 0
IP Born: 1423141463 (Thu Feb 5 08:04:23 2015)
Core User Born: 1422450793 (Wed Jan 28 08:13:13 2015)
Upstream AP ID: 0, Downstream AP ID: 0
DHCP assigned IP address 10.236.64.165, from DHCP server 0.0.0.0
Device Type: server-bag [iPhone OS,7.1.2,11D257,iPad2,4]