rececntly we have installed 2504 WLC in of branch office, I can able to log via console but it is not coming over LAN not even showing in CDP, all config seems to be fine in wired side & WLC side & physical connection also fine...LED also green.I am seeing log message in WLC, is this related to License issue
View 2 RepliesI cannot for the life of me get the license file to upload. I purchased 25 more licenses. Download and install tftp and put the license file in C:Program FilesTftpd64 But no matter what path I put in Mangagment>Software Activation>Commands, it fails.
View 9 Replies View Relatedtell me when is available for order the High Availability for AIR-CT2504, like:
AIR-CT7510-HA-K9 Cisco 7500 Series High Availability Wireless Controller
AIR-CT5508-HA-K9 Cisco 5508 Series Wireless Controller for High Availability
I have a WLC 2504 with 5 AP licenses for which I have installed an adder license via GUI. The installation completed successfully, but I still cannot view the new license. The maximum number of APs is still showing as 5 and in fact I cannot add more that 5 APs. I tried installing the license file again, but now I get a "duplicate" error.
View 4 Replies View RelatedI have an issue with a loss of connectivity after 10-15 seconds. I have a Cisco WLC 2504 controlling a Cisco 1242AG AP. The following is the topology.
Wireless Client -> 1242AG (AP) -> Port 3 WLC 2504 -> Port 1 WLC 2504 goes to fa0/2 on 3560. Port fa0/1 goes to ASA5505 (Inside)
All devices are on VLAN 10 10.50.1.0/24. AP is getting DHCP just fine and is associating with the WLC just fine. I connect my laptop to it and it connects just fine.
I then ping the gateway (ASA) 10.50.1.1 or the layer 3 interface on the switch 10.50.1.7 and it is fine for about 10 seconds, then it just dies then comes back in a few minutes and then goes away again. I have looked for duplicate IP's and can find none in any arp table.
It I just ping the controller 10.50.1.20 it is completely stable. I have moved the WLC directly off the ASA5505, moved the switch port, changed cables and the problem follows. I have even moved the AP to be directly off the switch instead of the WLC and the problem still occurs.
I have one WLC 2504 with 7.3.101.0 code and 4 APs 1142 in Flexconnect mode all of them are in one group with 2 SSIDs in two differents VLAN:
-Admin VLAN 151
-Corporate VLAN 158
-Guest VLAN 159
-The auth is 802.1x using an ACS ver 4.2
I connect my Laptop to the corporate SSID and start to have access to web services, intranet services, etc but arround 15 25 min after i connect i lost connectivity to my GW and all the services but i still have my IP info. I do some tests on MAC books, Laptop with Windows XP, 7 and 8 and its the same for all. I config one switch port in the corporate VLAN and i never loose connectivity.
If i reset the WLAN connection all start to works.The ports in the SW are in trunk mode and almost always the APs are in connect mode.
Does the SVI ACL have impact on the CPU on 6509 ?
View 7 Replies View Relatedif SSH v1 is considered vulnerable why is it still enabled by default on the ASA 8.4 by default?What is the vulnerability impact of using SSH v1 on an ASA?
View 1 Replies View RelatedSo I bought a 2504 AP. I also have some AIR-CAP3602I-A-K9. The WLC web interface sees them in the CDP neighbors. The devices get an ip address but I can't add them as access points. I think if I can do that I can get something simple going.
On the access points I get the stuff below. I didn't set it? At least not the
CISCO-CAPWAP-CONTROLLER
I'll be honest I've never set one of these up and I'm on a steep learning curve!
% Invalid input detected at '^' marker.
%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar 1 00:00:50.167: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.33.0.75,
mask 255.255.255.0, hostname APfc99.47c8.518a(code)
Adding a vlan 820 to existing port channel trunk which currently allows many vlans. What is the best way to add vlan820 with least impact to network. Portchannels from 6513 core with IOS to Nexus 5k,Copy existing vlans, add 820 and paste under: switchport trunk allowed vlan 1,2,5,12,20,820
View 6 Replies View RelatedWhat is the impact of disabling xlate in FWSM
We have dynamic NAT configured from inside to outside interface, but still it is showing NAT entry as below.
"NAT from inside:177.26.99.10 to outside:177.26.99.10 flags Ii"
Expected NAT entry should as below :
"NAT from inside:177.26.99.10 to outside:111.111.111.111 flags Ii"
We were considering implementing "ip verify revert-path" .Hence here i am thinking whether xlate-bypass is the issue here and implementing same with "ip verify revert-path" woud be a good idea.
We plan to implement a large number of ACL on our Distribution switch which is a HSRP pair of 6509C switches running on sup-bootflash:s72033-psv-mz.122-18.SXD3.bin WE need to divide the Network in three layers
unsecure layer
Proxy layer
Secure layer
We have approximately 250 vlans on the our distribution switches and plan to implement 15 ACL on different vlans Each ACL can contain upto 30 lines or less.
basic ACL example we will be applying on different vlan
vlan 200
ip access-group test123 in
My question is Can these ACL on a vlan can have a massive impact on the 6509 CPU ?
What is the impact of incorrectly setting the antenna gain on a the b/g radio of an AP would have on a WLAN?
I've come across a site where around a 3rd of the AP's had their antenna gain set to 0. I can only assume that something missed setting this during setup. The site uses 1242ABG AP's and each has 2 4941 antennas and i believe the gain should be set to 4 x 0.5dBi
What's the difference between VPN Plus license and Security Plus license. I have new 5520 shipped with VPN Plus license.Also does it require a seperate license for Anyconnect for Mobile and AnyConnect Essentials.
View 1 Replies View RelatedI’m stuck in some problem with installation of LMS4.0 in customer site.
- we purchase a LMS4.0(CWLMS-4.0-100-K9) but couldn’t install it on Windows server 2008 R2 64bit because those things don’t support each other.
- I need to upgrade the LMS4.0 to LMS4.2 that is supporting Windows server 2008 R2 64bit.
- So, I ordered following items via product update tool (url...) [code]
- In this status, how to install LMS4.2 with license for 100 devices? If I install R-PI12-BASE-K9 first, can i enter a licese for 100 devices for CWLMS-4.0-100-K9 into PI1.2?
We have a Cisco ASA 5520 with the VPN Plus License and 8.04 IOS installed, we want to set up vpn access to our users. We can use the Cisco VPN client which works on Windows Platform, but we also have MAC OS 10.7 which works only with Cisco Any connect.
I am a little bit lost with all the client and the license, actually we can't setup more than 2 vpn session with an Any connect client installed on MAC or Windows. The authentication is by Certificate, the first two connect fine, but the third one don't connect and prompt for a username / password. I joined a SH VER of my ASA, what is wrong on the license or perhaps it's a configuration problem?
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
[Code]....
I am running HSRP on three 4506 switches..S1(active) S2( standby) and S3(listen)..S1 is active for all the vlansRight now, I wanted to make S3 active for two vlans: vlan 10 and 19What would be the impact to the end hosts?Also, can you tell me why the arp is not syncing for all the three devices? [code]
View 4 Replies View RelatedI have a query regarding the deletion and creation of one of my SVI interface on 6513 ,The reason behind it as follows.My traffic get to Internet in this manner
proxy(external int.)[IP:192.168.1.30] --> Gi0/9[6513 in VLAN 170] --> SVI VLAN 170[IP:192.168.1.10] --> Gi0/10[In VLAN 170] -->ASR[IP:192.168.1.20],I need to assign this VLAN ie 170 to my inside interface of firewall but it was mentioned in books like this "Assign the VLAN for the FWSM before it is applied to the MultilayerSwitch Feature Card (MSFC)." so I am thinking the following steps to assign VLAN 170 to firewall group first before creating SVI Interface for it
1.Remove all currently assign ie Gi 0/9 & Gi0/10 interfaces from this VLAN and then delete this VLAN.
2.Create the same SVI ie VLAN 170[IP:192.168.1.10] by this way the issue can be resolved.
As in part of my configuration PBR is define like this .
interface Vlan170
description "PUBLIC IP VLAN"
ip address 192.168.1.20. 255.255.255.0
ip policy route-map NAT
route-map NAT permit 10
match ip address 101
set ip next-hop 192.168.1.10
I need to clearify what impact it may have on PBR part if I delete and create the VLAN 170.Will the traffic move to the inside interface of FWSM.
On my D-link routher the power supply broke. I instal another one but it has 2.5A as output instead of 2A as the broken one has. Is it dangerous.
View 2 Replies View Relatedi must configure a secured wireless network with access restriction based on SSID. the equipements are : cisco wlc 2504 (soft 7.3) cisco secure acs aplliance 1121 (soft 5.4) . the users that will connect to the network are regrouped by identity groups, each identity group having it's own SSID. Clearly each group of users must access only one SSID. i followed the procedure below to configure it:
-- creating user identity groups;
-- creating users and assigning them to the groups;
--- creating authorization profiles for each SSID under policy element/ authorization and permission/network access/authorization profiles and putting the Airespace-Wlan-Id(the SSID number) in the radius tab.
--- assigning the authorization profiles to the identity groups under access policies.
after all these config the users can access the network using there userid/password configured. But the problem is Every user can access every SSID, seems like the restriction is so not very well configured.
i found some documentation on this kind of config but the version of ACS used seems older than the one that i use, so menu are very different.
2504 contrller with 1042N ap's. NPS and group policy (for computers) is setup. Certificates are setup.Logging on as a domain user I can connect to the wireless network but am only getting Internet access. I can not access any domain resources.DHCP is handled by a domain controller. I can ping servers and printers, but cannot access them. Can't map a drive, add a printer or access services on the network.
View 1 Replies View RelatedI wanted to know if there is a way of upgrading the IOS on a stack of 6 - 8 3750's with minimal impact at reload. Is there a way to reload one member at a time?
View 3 Replies View RelatedDo larger computer screens use more data? Or is it just a matter of screen resolution?
Is there a difference between large, small, laptops, and tablets in bandwidth consumption if all the screens were set to a resolution of 1024 x768?
I am trying to setup a 2504 Wireless Controller with a few AIR-AP1262N-E-K9 Access Points. But i'm having trouble getting the access points to connect to the controller.The controller and AP's are setup at a local network at one of my customers. They are part of a quite large organization and are therefore connected to some of their other divisions in different contries via MPLS. The DHCP and DNS servers are therefore on a different subnet.I have confirmed that the Access Points do get a correct IP from the DHCP server and that i am able to ping from the controller to the AP. When looking at the controller it does not receive any join requests from the AP's. I have setup a console connection to the controller and 1 AP, so i can view debug information.Most guides mention that you can run different LWAPP commands from the CLI on the AP like show lwapp for example. But i am not able to run any of these LWAPP commands on my AP.
View 8 Replies View RelatedI have 2 APs, Cisco Aironet 1040, and 2504 WLC.Is it possible to configure guest access (Guest SSID/VLAN and Corporative SSID/VLAN) without dedicated guest WLC in DMZ?
View 4 Replies View Relatedi have stand alone cisco 1130g ap ,and wlc 2504. wlc 2504 support this ap or not ?
View 3 Replies View RelatedWe have purchased Cisco 2504 Wireless Controller (One) and Ciscon 1042 Access Points (Five). At present I am going to use 3 access points only.I have attached a simple diagram of our office network. We have more than 30 VLANs configured in Core Switch, we are planning to give wifi access to only 3 VLANs.
1. VLAN 121 ( IP Segment - 10.52.121.0 /24)
2. VLAN 116 ( IP Segment - 10.52.116.0 /24)
3. VLAN 100 ( IP Segment - 192.168.100.0 /24) (Guest)
I would like to use LDAP or ACS for authentication purpose.
I am using Cisco WLC 2504 for provisioning Wireless Connectivity over my Wired Environment. Have deployed 4 Access Points spanning my entire campus as per Customer Requirements. Created 10 SSIDs for Different Networks. Would like to know if there is any possibility of Broadcasting say a particular SSID XYZ on only two or 3 Access Points and keep broadcast disabled on Others.
integrating the authentication on these SSIDs using Active Directory Domain Credentials.
I have setup guest access on the controller and this is not working at the moment. DHCP server setup on the controller for the Guest users. You are able to connect (get ip address from controller) and the browser gets redirected to 1.1.1.1 but then page can not be displayed instead of the login page.
View 10 Replies View RelatedWe have cisco 2504 controller and 1200 series access point.These are in India and country code is IN.When access point joins the controller , then in wireless>advanced , i see the two country code is already configured these are Sri Lnaka(LK) and Singpore (SG).I have disabled the radios and changed the country code to IN but after doing that Access point is not joining the controller and giving the duplicate error.
Then i have again set the country code to IN,LK and SG.I am able to see the LK and SG but In is not showing in drop down list.
Operationally everything is working fine.
Question about cisco 2504 wireless controller, is it support cisco 1552E outdoor access point? If NO provide me the correct series/model.
View 9 Replies View RelatedI have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
View 5 Replies View RelatedI wish to purchase Cisco Prime LMS 4.1, particularly Cisco part # R-LMS-4.1-500-K9 which support 500 Cisco nodes.We have about 360 Cisco switches/routers/ASA/FWs/WLCs so the 500 nodes license would seem to suffice for now & for future growth.We also have about 200 lightweight APs that are managed & monitored by our WLC/WCS/Navigator environment.According to the device support documentation for LMS, it supports and I assume will auto-discover these APs.Does that mean these APs will use up node licenses on LMS even though management of the APs is done by WLC/WCS? If so is there an easy way to suppress discovery of APs by LMS so we don’t have to purchase extra node licenses for LMS? Or, does LMS offer additional support features for wireless APs not already offered by WLC/WCS/Navigator?Just trying to understand how many network node licenses for LMS I have to purchase.
View 3 Replies View Related