Client Isolation MAC OS (Apple) Failure - SZ300

[jardel_almeida1]

Gentlemen, I have a packet loss and connection failure problem when I enable the "client isolation" feature on my SZ300. Being very specific, the problem only happens with MAC OS (Apple).
The user connects, browses, but 2 minutes later he loses the connection, follow the logs below, someone already had something like :?

I tested on 2 controllers, and had the same problem:

Version:

System Info
5.1.0.0.496 Controller
5.1.0.0.447 CP
5.1.0.0.496 DP
5.1.0.0.595 AP

System Info
5.1.1.0.598 Controller
5.1.1.0.405 CP
5.1.1.0.598 DP
5.1.1.0.624 AP

Line 29361: Jul 18 19:44:42 WMRJEVENT521 daemon.info hostapd: wlan4: DRIVER wlan4: DRIVER: madwifi_del_key: Failed to delete key (addr 30:4b:07:8f:68:5a key_idx 0)
Line 29362: Jul 18 19:44:42 WMRJEVENT521 daemon.info hostapd: wlan4: DRIVER wlan4: DRIVER: madwifi_del_key: Failed to delete key (addr 30:4b:07:8f:68:5a key_idx 0)
Line 29629: Jul 18 19:47:23 WMRJEVENT521 daemon.info hostapd: wlan36: DRIVER wlan36: DRIVER: madwifi_del_key: Failed to delete key (addr 58:d9:c3:18:1c:3b key_idx 0)
Line 29630: Jul 18 19:47:23 WMRJEVENT521 daemon.info hostapd: wlan36: DRIVER wlan36: DRIVER: madwifi_del_key: Failed to delete key (addr 58:d9:c3:18:1c:3b key_idx 0)
Line 29799: Jul 18 19:49:18 WMRJEVENT521 daemon.info hostapd: wlan4: DRIVER wlan4: DRIVER: madwifi_del_key: Failed to delete key (addr 38:9a:f6:69:a9:95 key_idx 0)
  C:\Users\OI209147\Downloads\SupportLog_44_1E_98_38_6C_20.log (20 hits)
Line 13895: Jul 20 21:49:01 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr a0:99:9b:10:eb:95 key_idx 0)
Line 13896: Jul 20 21:49:01 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr a0:99:9b:10:eb:95 key_idx 0)
Line 13935: Jul 20 21:49:46 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr a0:99:9b:10:eb:95 key_idx 0)
Line 13936: Jul 20 21:49:46 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14483: Jul 20 22:37:56 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14484: Jul 20 22:37:56 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14585: Jul 20 22:41:23 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14586: Jul 20 22:41:23 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14826: Jul 20 22:55:39 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14827: Jul 20 22:55:39 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)



ine 14273: Jul 20 22:21:01 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 WPA: wlan32: WPA: mic_len:16 key_data_len:56, ie_len:22, gtk_len:16, igtk_kde_len:0, pad_len:2 ***
Line 14279: Jul 20 22:21:01 WMRJEVENT-MIGRACAO daemon.info hostapd: @@202,clientJoin,"apMac"="44:1e:98:38:6c:20","clientMac"="1c:36:bb:1c:c1:98","ssid"="MIGRACAO-CLIENT-ISOLATION","bssid"="44:1e:98:38:6c:2c","userId"="","wlanId"="47","iface"="wlan32","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="WMRJEVENT-MIGRACAO","vlanId"="208","radio"="a/n/ac","encryption"="WPA2-AES","Instantaneous rssi"="0","Xput"="0"
Line 14281: Jul 20 22:21:01 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 WPA: wlan32: WPA: pairwise key handshake completed (RSN)
Line 14284: Jul 20 22:21:05 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: handle_ue_state_change:501 UE[1c:36:bb:1c:c1:98][wlan32]UE state changed from [uninitialized] to [session_active]
Line 14285: Jul 20 22:21:05 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: build_and_send_scg_ue_ctx_create:592 UE[1c:36:bb:1c:c1:98][wlan32]apCrtCtxtReq.ueCtxtState=1 dot11State=1 wlanid=47 sessStartTime=1563661261 vlan=208 sessionTimeout=0
Line 14296: Jul 20 22:21:58 WMRJEVENT-MIGRACAO user.warn kernel: Added Mac - 1c:36:bb:1c:c1:98
Line 14311: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.warn Eved: STA-DISASSOC-REASON [ieee80211_recv_mgmt(),8959,recv disassociate (reason 8)] 1c:36:bb:1c:c1:98 rx_rssi=27,ack_rssi=0,reason=8,freq=5320,chan=64,rx pkt,byte;tx pkt,byte=(177869,34518743,249641,104875108)
Line 14312: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 IEEE 802.11: wlan32: IEEE 802.11: disassociated
Line 14313: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 IEEE 802.11: wlan32: IEEE 802.11: reason code = 8
Line 14314: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: @@204,clientDisconnect,"apMac"="44:1e:98:38:6c:20","clientMac"="1c:36:bb:1c:c1:98","ssid"="MIGRACAO-CLIENT-ISOLATION","bssid"="44:1e:98:38:6c:2c","userId"="","wlanId"="47","iface"="wlan32","tenantUUID"="839f87c6-d116-497e-afce-aa8157abd30c","apName"="WMRJEVENT-MIGRACAO","clientIP"="172.17.108.67","vlanId"="208","radio"="a/n/ac","encryption"="WPA2-AES","osType"="Mac OS X","hostname"="AirdeVinicius5","firstAuth"="1563661261","associationTime"="1563661261","ipAssignTime"="1563661265","disconnectTime"="1563661466","sessionDuration"="205","disconnectReason"="8","rxFrames"="177869","rxBytes"="34518743","txFrames"="249641","txBytes"="104875108","peakRx"="18733052","peakTx"="58038967","rssi"="32","receivedSignalStrength"="-73","Instantaneous rssi"="0","Xput"="0"
Line 14315: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14316: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_del_key: Failed to delete key (addr 1c:36:bb:1c:c1:98 key_idx 0)
Line 14317: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_set_sta_authorized: Failed to unauthorize STA 1c:36:bb:1c:c1:98
Line 14318: Jul 20 22:24:26 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: DRIVER wlan32: DRIVER: madwifi_set_sta_authstats: Failed to unauthorize STA authstats1c:36:bb:1c:c1:98
Line 14319: Jul 20 22:24:26 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: handle_ue_state_change:501 UE[1c:36:bb:1c:c1:98][wlan32]UE state changed from [session_active] to [deauth]
Line 14320: Jul 20 22:24:26 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: build_and_send_scg_ue_ctx_del:1016 UE[1c:36:bb:1c:c1:98][wlan32]apDelCtxtReq.ueCtxtState=0 dot11State=0 wlanid=47 last_discon=0 sessTerCause=1 terminate_cause=2 disconn_reason=8
Line 14326: Jul 20 22:25:47 WMRJEVENT-MIGRACAO user.warn kernel:  === [ieee80211_alloc_node] ENABLE CCD in mac (1c:36:bb:1c:c1:98) in driver === 
Line 14327: Jul 20 22:25:47 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 WPA: wlan32: WPA: send SM request iface=wlan32 ssid = MIGRACAO-CLIENT-ISOLATION
Line 14328: Jul 20 22:25:47 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: build_and_send_scg_ue_ctx_req:285 UE[1c:36:bb:1c:c1:98][wlan32] caleaEnabled=0
Line 14329: Jul 20 22:25:47 WMRJEVENT-MIGRACAO local1.info sessionMgr[405]: build_and_send_scg_ue_ctx_req:294 UE[1c:36:bb:1c:c1:98][wlan32] dpskEnabled=0, wlan id=47 ssid=MIGRACAO-CLIENT-ISOLATION cacheReq=1
Line 14330: Jul 20 22:25:47 WMRJEVENT-MIGRACAO daemon.info hostapd: wlan32: STA 1c:36:bb:1c:c1:98 IEEE 802.11: wlan32: IEEE 802.11: associated

[michael_brado]

You'll need more analysis.  This appears to be nothing more than an Apple client roaming (Reason 8 = left SSID).

STA-DISASSOC-REASON [ieee80211_recv_mgmt(),8959,recv disassociate (reason 8)]

[jardel_almeida1]

I have support, it seems to be something related to HSRP.

[mike_kuly]

Hi Jardel,

You posted this question on the Ruckus Cloud WiFi forum. The SZ300 would fall under the director or controllers forums. You might get a faster answer in there

[jardel_almeida1]

Thanks!