Cisco :: 2106 - APs Connected To Controller But Not Able To Ping Or Associate
May 31, 2011
I'm setting up a 2106 controller with 3 APs.
When I connect the APs to a port on our 3550 switch, the AP gets an IP and associates with the 2106 controller. I can ping the AP from a wired PC and associate a wireless client to it. When I connect them to the PoE ports that are on the controller, it gets an IP and associates with the controller but, I cannot ping it from a wired PC or wireless client but, I can associate a wireless client to it.
The AP manager and Management interfaces, under PHYSICAL OPERATION are configured for port 1, which is the port that connects the Controller to the rest of the network. Since the whole network is using VLAN 1, I set the VLANs for the Management interface and AP interface to 0, untagged. I noticed when I set the AP manager interface to 1 I get the same results.
I have a problem with pinging APs that are connected to WLC 2106. We have a TRUNK with VLAN50, VLAN51 and VLAN71 (all tagged) connected to our WLC 2106. VLAN50 is our management network. We have configured bot management and AP-management interfaces on WLC with IP addresses from our management network and we have set both to VLAN 50. We have also configured static IP addresses on every AP, connected to WLC.
The problem is we cannot ping APs. This means that APs can’t connect to any other device on the management network and we would like to use RADIUS for WiFi client authentication.
How can we solve this problem? I guess if we configure VLAN50 as native untagged VLAN in our TRUN, this would work? Is there any way to configure this without using native VLAN?
We also have problem with IPv6 connectivity. We have configured DHCP and we are using 1.1.1.1 DHCP proxy and it works great for IPv4, but how can we configure DHCP proxy for IPv6 addresses? Our WiFi clients need to get also IPv6 addresses. I have enabled “IPv6 enabled” option on the WLC.
When I connect the access-Point to the network, the AP associate only one time but i go to wireless for see the AP, i can see downloading of IOS, but the ios is 3.0.59, the ap don not nothing. I can not change any parameters.
I have a 5508 WLC licensed for 100 APs. I have 1 - 1042 LAP connected for testing. I have DHCP configured for the AP, and it gets an address of 192.168.254.100/24 - the controller's management interface is 192.168.254.99/24. I can see that the AP is getting an IP and I can ping it from the controller. However, I simply do not see the AP associating. I enabled capwap debiugging and watched the events, but I didn't see anything crazy that clued me in. What am I doing wrong?
The controller is v6.0.199.4
Every time I have set these up in the past they have been pretty straight forward. I haven't gotten too deep into the config on the WLC becuase I don't want to cause more issues.
We have other APs that associate w/o issue AIR-LAP1141N-A-K9. However our 1 1310 is having issues.. The Controller log shows:
2012-08-29 21:16:51 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:15.038: %LWAPP-3-DECRYPT_ERR5: spam_crypto.c:293 Error decrypting packet (using old key) from AP d4:8c:b5:15:3c:04 (session identifier a3ddb9c5) 2012-08-29 21:17:33 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:17.037: %LWAPP-3-DECRYPT_ERR: spam_lrad.c:3642 The system is unable to decrypt image data message; AP d4:8c:b5:15:3c:04 2012-08-29 21:17:33 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:17.037: %LWAPP-3-DECRYPT_ERR: spam_crypto.c:735 The system is unable to decrypt LWAPP packet; AP d4:8c:b5:15:3c:04
how I can find out what version of SSH that a cisco 2106 wireless LAN controller is using?Is there a CLI I can type to figure that out or do they only support one version?
I am trying to get one AP to join the 2106 controller, it did join once then never again!! Now all I get is: *Jan 22 11:16:22.088: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
after an unplanned power outage the WLAN in our office has stopped routing. Clients can associate and get an IP address from the DHCP server on the controller but cannot get past the controller. A PC on the LAN can ping the default gateway of the SSID (dynamic interface) but cannot ping the client. Attached is a diagram of the setup. I am trying to find out how to add a default/static route via the L3 switch that the controller is connected to but am unable to do so either through the CLI or GUI. The controller (AIR-WLC2106-K9) is operating on ver 5.2.157.0.
I have a question to migrate a customer from a 2106 controller to a 2504 controller. Can I use the configuration file with both controllers having the same version?
Or is there another way not having to do it again manually? The old configuration is OK, only the hardware is end of sale.
I would like to get webauth bundle sample to create custom page for our AP controllers but I'm unable to find the sample .tar within the WCS itself.Some other WCS manuals has references in them that says there should be link to download sample from WCS but clearly 2106 hasn't got one.There's one in download section "webauth bundle 1.0.2.zip" but this is for registered partners and costumers, we are not registered as partners and cannot download the sample ourselves.
I am not able to join 1042 wireless AP with 2106 controller, even i mention that controller ip is 192.168.200.5 it try to join with controller on 192.168.200.6 ip address always. following are the error logs i can see on console.
*Nov 30 19:50:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.6 peer_port: 5246 *Nov 30 19:50:20.001: %CAPWAP-5-CHANGED: CAPWAP changed state to *Nov 30 19:50:21.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.200.6 peer_port: 5246 *Nov 30 19:50:21.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.200.6 *Nov 30 19:50:21.436: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
i got the problem with 1300 bridges,root bridge with omni antenna and non root with sector antenna , it can associate and can pin each other , but whenever i try to browse several web pages its get timed out and radio was down.
I can figure out why I cant ping controller 10.1.99.100. Here is my controller config. It is connect to H3C 5800 switch. I have the switch config below as well. The port on the switch is on Native Vlan 1 untagged.
(Cisco Controller) show>interface summary
Interface Name Port Vlan Id IP Address Type Ap Mgr Guest -------------------------------- ---- -------- --------------- ------- ------ ----- ap-manager 1 untagged 10.1.99.101 Static Yes No
The issue i was having is when i connect to 192.168.50.* network i cannot seem to ping or connect to 192.168.51.2 (esxi host1) and 192.168.51.3 (esxi host2) and also free nas device i.e 192.168.52.2. i can only connect to these devices if i ping the 192. 168.50.1 from both the esxi hosts and also from free nas. Everything starts working if i ping from the esxihosts & Freenas device to 192.168.50.1.
f i connect to the hp procurve switch i can ping the hosts fine from the switch not when i connect to Draytek Router i.e 192.168.50.1 unless i run a ping from esxi hosts and free nas device then everything starts working.Here is my network setup for my ESXI home lab.
I have Draytek Vigor 2800 Router with ipaddress 192.168.50.1 (This Router is Downstairs and connected to DSL Line) and another Router with Firmware flushed with DD-WRT and IP address for this is 192.168.50.2. (this router is in upstairs labroom and is connected in Wireless Bridge Mode to Draytek Router Downstairs)
There is a HP Pro curve Switch 2610-24 with IPaddress of 192.168.50.3 and has VLAN's configured on this switch.The VLAN's are : VLAN10 is esxi vlan and ipaddress is 192.168.51.1 and vlan20 is storagevlan and ipaddress is 192.168.52.1 and vlan 30 is internet vlan and ipaddress is 192.168.50.3 (Switch Address).Port 24 is untagged to vlan 30 i.e internet vlan and connnected the port to dd-wrt router lan port. I have untagged ports 1 to 5 to vlan10 i.e esxivlan and connected esxi host's 1 & 2 to ports 1 and 2 respectively and connected freenas device i.e storage to port 6 which is untagged to vlan20 i.e storagevlan
IP Routing is enabled on the switch and ip route 0.0.0.0 0.0.0.0 192.168.50.2 and Default gateway on the switch is 192.168.50.1.
On the Draytek router i have configured a static route for 192.168.51.0/24 and Default Gateway is 192.168.50.3 and another static route 192.168.52.0/24 and default Gateway is 192.168.50.3
I've been stuck with a connection problem on my desktop for 6 months and nothing I do can fix it. My computer technician friends can't fix it either, so here's my last gasp attempt to get it online before I throw the machine out of the window.I'm using XP, don't recall ever having downloaded any Service Packs, and am trying to connect wirelessly to my home network here in France. Laptops and iPhones connect no problem. I don't think it's the wireless network card (which I bought nearly 5 years ago) as I had the same connection problem in my last apartment, with the same internet provider. I eventually borrowed an ethernet cable and managed to get it working wirelessly, but I have no idea how I did it.
The computer connects to the wireless network but I can't browse or ping. I've flushed dns, tried to input the ip manually, checked and unchecked LAN settings, checked and unchecked Internet Protocol TCP/IP, i've tried winsock, I've done the netsh reset and NOTHING worksI've checked the security settings, password and encryption a hundred times, I've disabled the firewall and today I've pulled out the recovery disks It didn't.Interestingly, the desktop has suddenly decided to go online once or twice (after I'd disabled Norton) but as soon as I shut down, I'm back to square one
Just bought two new LAP1041N APs to add to a dead spot on our campus. Well when trying to set them up the will not stay connected to the WLAN Controller (model 4402). The new APs boot fine, and will even appear in the controller for brief moments, but after a few seconds they dissapear and start showing the discovery status light pattern (green, red, amber). Just wondering if I am doing something wrong with these APs, or what the issue could possible be.We have 10 other APs that as soon as we connected to network were detected by controller and we configured from there. Most of those are 1010 or 1020s, we have a few 1131s and 1100s.
I've configured a lot vpn server for 857/1800, etc. But this has never happened.I configured 881 as VPN server using CP.Shared key, local group and local user authetication with split route.Local pool 192.168.100.1-254? I have acl for telnet which allows local pool IPs.I have acl to deny local network to local pool IPs for NAT.I've deleted the whole settings and re-run the wizard. It's still the same thing. I can connect from the VPN Client, but no traffic going through. The problem to me is isakmp with DPD. But why it is dead? Why no response from the server? If it is an error, why connection has no problem.
I've got a netbook (Acer Aspire One) with XP SP3 on it. It connects to my wireless network (so it says), but it won't get onto the internet. I can ping 127.0.0.1, but it won't ping my router. When I do ipconfig /release > ipconfig /flushdns > ipconfig /renew, it hangs up on the renew portion telling me that the DHCP server timed out. The exact error message is:"An error occurred while renewing interface Wireless Network Connection 2 : unable to contact your DHCP server. Request has timed out.No operation can be performed on Local Area Connection while it has its media disconnected"I've checked the TCP/IP settings, it's set to automatically obtain and IP address and DNS servers. I've checked the DHCP service and that's running. The internet works when it's wired. I've used the "repair" function when right-clicking the wireless icon and it tells me it can't renew my IP address. I made an ipconfig /all when it was connected and this is what it came up with:
I am struggling with the following issue. I have 6 1130 Accesspoints in lightweight mode connected to a 2106 wlan controller which runs software version 7.0.98.0. Everything seems to work fine. Clients can connect to the wifi network. However, they don't get an ip address from the dhcp server which is on the same subnet as the wlan controller. See attached screenshots for configuration. I have also tried the internal dhcp server of the wlan controller, but the same problem remains.
The logs says: Dropping primary discovery request from AP e8:b7:4x:xx:xx:xx - maximum APs joined 6/6 There are 6 AP's connected
I have a copper over ethernet connected to an adtran 908e connected to an ASA 5505 with a port 192.168.150.254 connected to the router on the Gigabitethernet 0/0
I can ping to internal and external ip addresses but when a device is connected through the wireless signal then the device cannot ping anything; what could be stopping the device from pinging any ip addresses internal and external?
I posted my current config for the router and ap:
Router: Current configuration : 2245 bytes ! ! Last configuration change at 16:03:06 UTC Tue Sep 6 2011
CISCO ASA 5520 -K9 .Client can connects ASA server and get ip address(172.168.31.X),but can't ping ASA inside interface ip address and other servers in lan .
I'm trying to configure a 2800 series router. .I'm consoled in and put a basic config on the router (see attached). After putting this basic config on, I plugged it into a small unmanaged switch, changed my laptop's IP and plugged it in the switch also. I can't ping the router from the laptop and vice versa. This is the second switch I've tried this with, so it must be.The first switch, I installed at location, connected a cisco cable to it and a local server, so i could remote in and finish configuration. In that scenario, I had plugged the switch into a managed switch and had the same result as I'm getting now--can't ping IP addresses (can't ping the switch's IP, not can it ping local IPs).
I am trying to connect my 2800 Series CIsco Office router with VPN client software from home. I can successfully authenticate and get the IP address from the pool configured but couldnt ping any LAN Ips including default gateway. I am pasting my router's configuration.
IP Address Of LAN: 192.168.22.x/ 24 IP Addresses handed out to Clients: 10.10.10.5- 10.10.10.20 aaa new-model ! ! aaa authentication login default local
[code]....
I have noticed that my virtual-access interface comes up but the line protocol of virtual-interface remains down as follows:
Virtual-Template100 x.x.x.x YES TFTP up down
Also The client PC picks up a random gateway of 10.10.10.1 which I never configured anywhere on the server.
I've setup a CISCO 871 which receives DHCP IP address on WAN interface Fa4 and DHCP-assigned static IP Address on virtual-ppp1. The static address is used for site-to-site VPN's, while I've planned the DHCP address for standard web access and CISCO VPN Client dial-out.
Internally, I've created 2 VLAN's, one for standard PC's with access to the remote sites via site-to-site and cisco client, and the other for a 'secured' area with only HTTP/S allowed out. [code]
Clients in the PCLAN should also be allowed to dial-out using CISCO VPN client to remote sites via the OUTSIDE interface. This is partially working because the client does log into a remote site, however I cannot ping or rdp remote stations once connected."ip inspect log drop-packets" does not reveal dropped packets when trying to ping or rdp. [code]
I've connected a dslmodem/router to a fast ethernet port(fa0/1) on a 2620 router.There is a 2950 switch connected to the other port (fa0/0).I can ping the Internet via the router but and the switch but not from a host connected to the switch.I can't reach the dslmodem from the host pc.I've configured nat(overload) on the router.
A friend recently re-installed windows XP on their HP Laptop. They were connected wirelessly with a Linsys router (model wrt54g.1) and an RCA Cable Modem. The Cable ISP can ping the modem and gave me the IP address over the phone. I cannot ping the modem even when I take the router out of the loop. The network card (i1394) in the Laptop is functioning normally and I can see traffic on the modem (both the Cable Internet light and the PC activity light are flashing green) the ethernet port on the laptop is also flashing (amber). However I cannot reach the internet and cannot even ping the modem. The modem is brand new..
if you have two no of win 7 computer , and you run ping command at the same time at both PCs but the successfull at only one PC , second computer shows unsuccess full ping
I have a netger router/moden connected to my phone line for broadband, an ethernet cable coming out of that to a netgear switch an then a cable going from the switch to fa4 on the 861. I can ping the netgear router from the 861, however, when I connect my PC to it, I am unable to ping let alone connect to the internet, the PC is getting an IP from the 861 and I can ping the fa4 interface from the pc. I just don't understand my I can not ping the broadband router, I even added a static route to the netgear with no luck.
I'm setting up a Cisco wireless mesh. The APs are all dual-band 3602s connected to a controller. So, let's say I'm broadcasting both 2.4 and 5.1GHz at the same time for the same SSID. Which frequency does a wireless client connect through, assuming the client supports both? Is there a way to default to one (say 5.1GHz) then fall back to the other, or is it strictly a matter of signal strength? (In which case, from the testing I've done, 2.4GHz almost always has a stronger signal strength.)
Or, should I broadcast separate networks (e.g. "work-network24" vs "work-network51") and manually authenticate/authorize against the appropriate band based on how I want to distribute load across the radios and spectrum?
I have created a VPN connection for ASA 5512-X by using the wizards and nothing seems to be wrong on the wizards's config.I am able to connect to the network by using the VPN but unable to ping internal network.Below is my config for your reference:
Result of the command: "sh run" : Saved : ASA Version 8.6(1)2 ! hostname FAA-ASA-1 enable password crzcsirI44h2BHoz encrypted passwd 2KFQnbNIdI.2KYOU encrypted
