客户端关联---802.1x认证--dhcp获取ip过程，debug详细过程

原文地址：https://cciewirelessnotes.wordpress.com/

Overview:

In this post we’ll examine a case where the client is unable to join the WLAN as the DHCP server continuously offered it an IP address that was already in use on the network. The client was then excluded for a period of time due to IP theft/reuse. When clients are excluded it can actually be quite helpful as the WLC will list a reason for the exclusion, possible conditions are:

Excessive 802.11 Association Failures
Excessive 802.11 Authentication Failures
Excessive 802.1X Authentication Failures
IP Theft or IP Reuse
Excessive Web Authentication Failures
Debug using CLI:

Client associated
802.1x completed successfully
DHCP discover sent by client
WLC relays DHCP discover to 1.2.3.4
DHCP server provides an offer (4.3.2.1)
Client Requests 4.3.2.1 from DHCP server
DHCP server accepts request
WLC recognises that the requested IP is already in use (assigned to a virtual interface)
Not shown – client is excluded due to IP theft/reuse

Association received
dot1x - moving mobile xx:xx:xx:xx:xx:xx into Connecting state
EAP State update from Connecting to Authenticating for mobile xx:xx:xx:xx:xx:xx
Processing Access-Accept for mobile xx:xx:xx:xx:xx:xx
Received Auth Success while in Authenticating state for mobile xx:xx:xx:xx:xx:xx
0.0.0.0 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state 8021X_REQD (3)
0.0.0.0 L2AUTHCOMPLETE (4) Change state to DHCP_REQD (7) last state L2AUTHCOMPLETE (4)
DHCP received op BOOTREQUEST (1) (len 317,vlan 99, port 13, encap 0xec03)
DHCP transmitting DHCP DISCOVER (1)
DHCP transmitting DHCP OFFER (2)
DHCP sending REQUEST to 1.2.3.4 (len 358, port 13, vlan 32)
DHCP received op BOOTREPLY (2) (len 312,vlan 32, port 13, encap 0xec00)
DHCP failed to register IP 4.3.2.1 - dropping ACK