I'm troubleshooting a new Xbox One at one of my client's houses. During the Xbox setup, it sees the SSID, you enter the PSK, it attempts to connect & then displays an error, "Can't connect to your DHCP server". It then suggests that your router may be filtering MAC addresses.
We're running a 620 local controller (AOS 6.1.3.4-Airgroup) with 3x AP-105's. The master is a 620 running the same AOS. ALL AP's terminate to the local controller. No traffic is routed back to the master. We're using WPA2-PSK AES. Absolutely no mac filtering. Other devices (IOS, Android, HP...etc) have no issues connecting.
Here is some output from debug. So far I haven't had any luck finding a root cause for this. I'm inclined to think there is an issue with the Xbox, but the customer completely disagrees & it would be nice to have some proof. I would greatly appreciate any thoughts or suggestions.
===============================================================
(aructrl) (config) #logging level debugging user-debug 50:1a:c5:b1:ac:e0
(aructrl) #show log user 20
Jul 29 14:06:22 :501065: <DBUG> |stm| Sending STA c0:9f:42:10:84:e1 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x2a, wmm:1, rsn_cap:c
Jul 29 14:06:22 :522036: <INFO> |authmgr| MAC=c0:9f:42:10:84:e1 Station DN: BSSID=6c:f3:7f:15:85:81 ESSID=Section_10 VLAN=42 AP-name=AP-HU-2
Jul 29 14:06:22 :500511: <DBUG> |mobileip| Station c0:9f:42:10:84:e1, 0.0.0.0: Received disassociation on ESSID: Section_10 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-HU-2 Group HU-House BSSID 6c:f3:7f:15:85:81, phy g, VLAN 42
Jul 29 14:06:22 :500010: <NOTI> |mobileip| Station c0:9f:42:10:84:e1, 255.255.255.255: Mobility trail, on switch <SCRUBBED>, VLAN 42, AP AP-HU-2, Section_10/6c:f3:7f:15:85:81/g
Jul 29 14:06:22 :522004: <DBUG> |authmgr| MAC=c0:9f:42:10:84:e1 ingress 0x10cf (tunnel 15), u_encr 32, m_encr 32, slotport 0x1020 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 29 14:06:22 :522004: <DBUG> |authmgr| station free: bssid=6c:f3:7f:15:85:81, @=0x108e5014
Jul 29 14:06:22 :501000: <DBUG> |stm| Station c0:9f:42:10:84:e1: Clearing state
Jul 29 14:06:25 :501065: <DBUG> |stm| send_ageout_sta_ack 8369: Send ageout sta 50:1a:c5:b1:ac:e0 ack back to AP (192.168.77.199)
Jul 29 14:06:25 :501105: <NOTI> |AP AP-HU-1@192.168.77.199 stm| Deauth from sta: 50:1a:c5:b1:ac:e0: AP 192.168.77.199-6c:f3:7f:15:85:59-AP-HU-1 Reason STA has left and is deauthenticated
Jul 29 14:06:25 :501105: <NOTI> |stm| Deauth from sta: 50:1a:c5:b1:ac:e0: AP 192.168.77.199-6c:f3:7f:15:85:59-AP-HU-1 Reason STA has left and is deauthenticated
Jul 29 14:06:25 :501000: <DBUG> |AP AP-HU-1@192.168.77.199 stm| Station 50:1a:c5:b1:ac:e0: Clearing state
Jul 29 14:06:25 :501065: <DBUG> |stm| Sending STA 50:1a:c5:b1:ac:e0 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x2a, wmm:1, rsn_cap:28
Jul 29 14:06:25 :522036: <INFO> |authmgr| MAC=50:1a:c5:b1:ac:e0 Station DN: BSSID=6c:f3:7f:15:85:59 ESSID=Section_10 VLAN=42 AP-name=AP-HU-1
Jul 29 14:06:25 :522004: <DBUG> |authmgr| MAC=50:1a:c5:b1:ac:e0 ingress 0x10d7 (tunnel 23), u_encr 32, m_encr 32, slotport 0x1023 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 29 14:06:25 :522004: <DBUG> |authmgr| station free: bssid=6c:f3:7f:15:85:59, @=0x108e566c
Jul 29 14:06:25 :522004: <DBUG> |authmgr| MAC=50:1a:c5:b1:ac:e0 Send Station delete message to mobility
Jul 29 14:06:25 :501065: <DBUG> |AP AP-HU-1@192.168.77.199 stm| remove_stale_sta 1748: client 50:1a:c5:b1:ac:e0 not in stale hash table
Jul 29 14:06:25 :500511: <DBUG> |mobileip| Station 50:1a:c5:b1:ac:e0, 0.0.0.0: Received disassociation on ESSID: Section_10 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-HU-1 Group HU-House BSSID 6c:f3:7f:15:85:59, phy a, VLAN 42
Jul 29 14:06:25 :500010: <NOTI> |mobileip| Station 50:1a:c5:b1:ac:e0, 255.255.255.255: Mobility trail, on switch <SCRUBBED>, VLAN 42, AP AP-HU-1, Section_10/6c:f3:7f:15:85:59/a
Jul 29 14:06:25 :501000: <DBUG> |stm| Station 50:1a:c5:b1:ac:e0: Clearing state
===============================================================
Here you can see the Xbox send a disassociation
(aructrl) #show log user 20
Jul 29 14:06:22 :501065: <DBUG> |stm| Sending STA c0:9f:42:10:84:e1 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x2a, wmm:1, rsn_cap:c
Jul 29 14:06:22 :522036: <INFO> |authmgr| MAC=c0:9f:42:10:84:e1 Station DN: BSSID=6c:f3:7f:15:85:81 ESSID=Section_10 VLAN=42 AP-name=AP-HU-2
Jul 29 14:06:22 :500511: <DBUG> |mobileip| Station c0:9f:42:10:84:e1, 0.0.0.0: Received disassociation on ESSID: Section_10 Mobility service ON, HA Discovery on Association Off, Fastroaming Disabled, AP: Name AP-HU-2 Group HU-House BSSID 6c:f3:7f:15:85:81, phy g, VLAN 42
Jul 29 14:06:22 :500010: <NOTI> |mobileip| Station c0:9f:42:10:84:e1, 255.255.255.255: Mobility trail, on switch <SCRUBBED>, VLAN 42, AP AP-HU-2, Section_10/6c:f3:7f:15:85:81/g
Jul 29 14:06:22 :522004: <DBUG> |authmgr| MAC=c0:9f:42:10:84:e1 ingress 0x10cf (tunnel 15), u_encr 32, m_encr 32, slotport 0x1020 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 29 14:06:22 :522004: <DBUG> |authmgr| station free: bssid=6c:f3:7f:15:85:81, @=0x108e5014
Jul 29 14:06:22 :501000: <DBUG> |stm| Station c0:9f:42:10:84:e1: Clearing state
Jul 29 14:06:25 :501065: <DBUG> |stm| send_ageout_sta_ack 8369: Send ageout sta 50:1a:c5:b1:ac:e0 ack back to AP (192.168.77.199)
Jul 29 14:06:25 :501105: <NOTI> |AP AP-HU-1@192.168.77.199 stm| Deauth from sta: 50:1a:c5:b1:ac:e0: AP 192.168.77.199-6c:f3:7f:15:85:59-AP-HU-1 Reason STA has left and is deauthenticated
Jul 29 14:06:25 :501105: <NOTI> |stm| Deauth from sta: 50:1a:c5:b1:ac:e0: AP 192.168.77.199-6c:f3:7f:15:85:59-AP-HU-1 Reason STA has left and is deauthenticated
Jul 29 14:06:25 :501000: <DBUG> |AP AP-HU-1@192.168.77.199 stm| Station 50:1a:c5:b1:ac:e0: Clearing state
Jul 29 14:06:25 :501065: <DBUG> |stm| Sending STA 50:1a:c5:b1:ac:e0 message to Auth and Mobility Unicast Encr WPA2 PSK AES Multicast Encr WPA2 PSK AES VLAN 0x2a, wmm:1, rsn_cap:28
Jul 29 14:06:25 :522036: <INFO> |authmgr| MAC=50:1a:c5:b1:ac:e0 Station DN: BSSID=6c:f3:7f:15:85:59 ESSID=Section_10 VLAN=42 AP-name=AP-HU-1
Jul 29 14:06:25 :522004: <DBUG> |authmgr| MAC=50:1a:c5:b1:ac:e0 ingress 0x10d7 (tunnel 23), u_encr 32, m_encr 32, slotport 0x1023 , type: local, FW mode: 0, AP IP: 0.0.0.0
Jul 29 14:06:25 :522004: <DBUG> |authmgr| station free: bssid=6c:f3:7f:15:85:59, @=0x108e566c
Jul 29 14:06:25 :522004: <DBUG> |authmgr| MAC=50:1a:c5:b1:ac:e0 Send Station delete message to mobility
===============================================================
Side note. Are these logs normal? I'm not sure why I'm seeing CPPM activity. I don't have Clearpass at all. This may be completely unrelated, but I thought I'd mention it.
(aructrl-hunt) #show log user 20
Jul 29 14:05:44 :527003: <DBUG> |mdns| CPPM mdns_aal_authenticate 297 No server available
Jul 29 14:05:44 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1297 response; result:Fail, mac:64:76:ba:d6:24:36
Jul 29 14:05:44 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1300 VP not set
Jul 29 14:05:46 :501106: <NOTI> |AP AP-HU-2@192.168.77.197 stm| Deauth to sta: c0:9f:42:10:84:e1: Ageout AP 192.168.77.197-6c:f3:7f:15:85:81-AP-HU-2 handle_sapcp
Jul 29 14:05:46 :501080: <NOTI> |AP AP-HU-2@192.168.77.197 stm| Deauth to sta: c0:9f:42:10:84:e1: Ageout AP 192.168.77.197-6c:f3:7f:15:85:81-AP-HU-2 Denied: AP Ageout
Jul 29 14:05:46 :501065: <DBUG> |stm| send_ageout_sta_ack 8369: Send ageout sta c0:9f:42:10:84:e1 ack back to AP (192.168.77.197)
Jul 29 14:05:46 :501065: <DBUG> |AP AP-HU-2@192.168.77.197 stm| store_stale_sta 1664: sta c0:9f:42:10:84:e1 saved to stale_sta_hash_table
Jul 29 14:05:46 :501114: <NOTI> |stm| Deauth from sta: c0:9f:42:10:84:e1: AP 192.168.77.197-6c:f3:7f:15:85:81-AP-HU-2 Reason 255
Jul 29 14:05:46 :501044: <NOTI> |stm| Station c0:9f:42:10:84:e1: No authentication found trying to de-authenticate to BSSID 6c:f3:7f:15:85:81 on AP AP-HU-2
Jul 29 14:05:46 :501065: <DBUG> |AP AP-HU-2@192.168.77.197 stm| remove_stale_sta 1758: sta c0:9f:42:10:84:e1 is freed and removed from stale_sta_hash_table
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_amigopod_fetch 1116 single mac case : 64:76:ba:d6:24:36
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_authenticate 1435 MAC Authenticate; mac=64:76:ba:d6:24:36
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_aal_authenticate 297 No server available
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1297 response; result:Fail, mac:64:76:ba:d6:24:36
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1300 VP not set
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_amigopod_fetch 1116 single mac case : 24:a2:e1:e8:7e:f3
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_authenticate 1435 MAC Authenticate; mac=24:a2:e1:e8:7e:f3
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_aal_authenticate 297 No server available
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1297 response; result:Fail, mac:24:a2:e1:e8:7e:f3
Jul 29 14:05:48 :527003: <DBUG> |mdns| CPPM mdns_mac_auth_handler 1300 VP not set
===============================================================