Guest

Preview Tool

Cisco Bug: CSCvs68062 - 9800-40 WLC excludes Spectralink clients due to "Wrong PSK" or "Excluded by Mobility Peer"

Last Modified

Jan 23, 2020

Products (1)

  • Cisco Catalyst 9800 Series Wireless Controllers

Known Affected Releases

16.12.1s 16.12.2s

Description (partial)

Symptom:
9800-40 WLCs with 2702/9120 APs and both AP models show the same behaviour where clients, mostly Spectralink 802x/3641 phones can't associate to the PSK WLAN and go the exclusion list with one of two reasons "Wrong PSK" or "Excluded by Mobility Peer". Also, when excluded, the timer always shows 0 for most of the clients.

- Even if security is open, they still go to the exclusion list.
- The log showed a mobility handoff rejection by one of the peers and that's why it went to exclusion list.

Jan 6 09:24:57: %MM_INFRA_LOG-3-MSG_PROC_FAILED: Chassis 1 R0/0: mobilityd: 0000.0000.0000: Unable to process the received mobility message handoff from ipv4: 10.10.24.7 . reason: Failed to handle the message
Jan 6 09:24:57: %CLIENT_EXCLUSION_SERVER-5-ADD_TO_BLACKLIST_REASON: Chassis 1 R0/0: wncmgrd: Client MAC: 0090.7a13.7687 was added to exclusion list, reason: Excluded by Mobility Peer
Jan 6 09:24:57: %MM_INFRA_LOG-7-MSG_PROC_UNEXISTING_CLIENT: Chassis 1 R0/0: mobilityd: 0090.7a13.7687: Unable to process the received mobility message handoff_end from WNCD[0]. reason: Received message for unknown client

- WLAN and Policy Profiles are not anchored and there's no special config but mobility peers exist.
- Traces on WLC show no logs at all for affected clients.
- Disabled FT, no difference.
- OTA pcap show probe-request and probe-responses, assoc-requests but AP does not send assoc-responses.

#show wireless exclusionlist
Number of Excluded Clients : 12

MAC Address Description Exclusion Reason Time Remaining
------------------------------------------------------------------------------------------------------
0090.7a06.de75 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a07.b877 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a07.cfb3 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a0b.137b Wrong PSK 0 <------ Timer never resets or decrements
0090.7a0b.148b Wrong PSK 0 <------ Timer never resets or decrements
0090.7a0d.3560 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a13.15b5 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a13.50cd Wrong PSK 0 <------ Timer never resets or decrements
0090.7a13.7687 Wrong PSK 0 <------ Timer never resets or decrements
0090.7a13.7831 Wrong PSK 0 <------ Timer never resets or decrements

Number of Excluded Clients : 12

MAC Address Description Exclusion Reason Time Remaining
------------------------------------------------------------------------------------------------------
04c1.0302.7370 Wrong PSK 0
485a.b6b7.be2d Wrong PSK 06 <------ Timer shows normal reset behavior

#show wireless exclusionlist 
Number of Excluded Clients : 4
 
MAC Address       Description                       Exclusion Reason                    Time Remaining  
------------------------------------------------------------------------------------------------------
0090.7a0b.148b                                      Excluded by Mobility Peer                      0    <------ Same issue with the timer, and reason excluded by Peer
0090.7a0e.ac3e                                      Wrong PSK                                      0
0090.7a0e.fd5a                                      Wrong PSK                                      0
0090.7a13.7687                                      Excluded by Mobility Peer                      0    <------ Same issue with the timer, and reason excluded by Peer

Conditions:
None at this time.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.