Symptom

9800-40 WLCs with 2702/9120 APs and both AP models show the same behaviour where clients, mostly Spectralink 802x/3641 phones can't associate to the PSK WLAN and go the exclusion list with one of two reasons "Wrong PSK" or "Excluded by Mobility Peer". Also, when excluded, the timer always shows 0 for most of the clients. - Even if security is open, they still go to the exclusion list. - The log showed a mobility handoff rejection by one of the peers and that's why it went to exclusion list. Jan 6 09:24:57: %MM_INFRA_LOG-3-MSG_PROC_FAILED: Chassis 1 R0/0: mobilityd: 0000.0000.0000: Unable to process the received mobility message handoff from ipv4: 10.10.24.7 . reason: Failed to handle the message Jan 6 09:24:57: %CLIENT_EXCLUSION_SERVER-5-ADD_TO_BLACKLIST_REASON: Chassis 1 R0/0: wncmgrd: Client MAC: 0090.7a13.7687 was added to exclusion list, reason: Excluded by Mobility Peer Jan 6 09:24:57: %MM_INFRA_LOG-7-MSG_PROC_UNEXISTING_CLIENT: Chassis 1 R0/0: mobilityd: 0090.7a13.7687: Unable to process the received mobility message handoff_end from WNCD[0]. reason: Received message for unknown client - WLAN and Policy Profiles are not anchored and there's no special config but mobility peers exist. - Traces on WLC show no logs at all for affected clients. - Disabled FT, no difference. - OTA pcap show probe-request and probe-responses, assoc-requests but AP does not send assoc-responses. #show wireless exclusionlist Number of Excluded Clients : 12 MAC Address Description Exclusion Reason Time Remaining ------------------------------------------------------------------------------------------------------ 0090.7a06.de75 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a07.b877 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a07.cfb3 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a0b.137b Wrong PSK 0 <------ Timer never resets or decrements 0090.7a0b.148b Wrong PSK 0 <------ Timer never resets or decrements 0090.7a0d.3560 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a13.15b5 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a13.50cd Wrong PSK 0 <------ Timer never resets or decrements 0090.7a13.7687 Wrong PSK 0 <------ Timer never resets or decrements 0090.7a13.7831 Wrong PSK 0 <------ Timer never resets or decrements Number of Excluded Clients : 12 MAC Address Description Exclusion Reason Time Remaining ------------------------------------------------------------------------------------------------------ 04c1.0302.7370 Wrong PSK 0 485a.b6b7.be2d Wrong PSK 06 <------ Timer shows normal reset behavior #show wireless exclusionlist Number of Excluded Clients : 4 MAC Address Description Exclusion Reason Time Remaining ------------------------------------------------------------------------------------------------------ 0090.7a0b.148b Excluded by Mobility Peer 0 <------ Same issue with the timer, and reason excluded by Peer 0090.7a0e.ac3e Wrong PSK 0 0090.7a0e.fd5a Wrong PSK 0 0090.7a13.7687 Excluded by Mobility Peer 0 <------ Same issue with the timer, and reason excluded by Peer

Conditions

None at this time.

Workaround

Delete the mobility peers and add them back even if none of the policy profiles have anchors.

Further Problem Description