Cisco :: 4402 - Unable To Setup WLC For LDAP
Apr 26, 2011
I'm trying to setup WLC for LDAP to authenticate the users. I have all the components required according to cisco's document. WLC4402, LAP1142N, 2008 AD serving as LDAP.
I'm configuring according to the document and also trying same settings from other users on this forum who (seems to) have got the WLC-LDAP up and working. My problem is that I'm receiving the below debug message on the controller and there is nothing on the internet on this error:
*LDAP DB Task 1: Apr 28 10:05:35.903: LDAP server 1 changed state to IDLE*emWeb: Apr 28 10:09:21.046: aaaLdapServerStateSet [1] changed state to 'DISABLED'.*emWeb: Apr 28 10:09:21.046: aaaLdapServerStateSet [1] changed state to 'ENABLED'.*LDAP DB Task 1: Apr 28 10:09:21.052: ldapTask [1] received msg 'CLOSE' (4) in state 'IDLE' (1)*LDAP DB Task 1: Apr 28 10:09:21.055: ldapClose [1] called lcapi_close (rc = 1008 - Invalid client handle)*LDAP DB Task 1: Apr 28 10:09:21.055: LDAP server 1 changed state to IDLE
I'm getting this error regardless of the authentication type, any username and attributes. So it makes me think WLC is not even trying to bind to LDAP. If the error was invalid credentials or something mismatch or something, it gives me some information to base my troubelshooting but I just can't find information on this (rc = 1008 - Invalid client handle) message.
View 3 Replies
ADVERTISEMENT
Dec 18, 2011
We are attempting to use LDAP for web authentication on a WLC 4402.
[URL]
You are able to connect to the SSID and it reidrects you to the login page as it should. When you enter your username and password you get a message that "the username and password combination you have entered is invalid." Based on the following log it looks like the LDAP bind is the issue.
*LDAP DB Task 1: Dec 19 11:19:26.584: %AAA-3-LDAP_CONNECT_SERVER_FAILED: ldap_db.c:1038 Could not connect to LDAP server 1, reason: 1005 (LDAP bind failed).
We are able to test the following configuration with ldp.exe successfully,
Server: ***.***.***.***
Port Number: 389
Bind Username: CiscoBYOT
[Code].....
View 2 Replies
View Related
Aug 2, 2011
I'd like to configure wireless access from winXP to authenticate with our corporate Novell LDAP through ACS
Setup:
WinXP SP3 --> WLC 4402 --> ACS 5.2 --> Novell LDAP
1. Our Novell LDAP server uses secure LDAP (port 636) to authentication user.On ACS 5.2, when we configure this option we need to select Root CA. Should the Root CA in ACS must be the same as the LDAP server's? (the LDAP's certificate issuer)
2. What kind of authentication that this setup supports? Does it support PEAP/MSCHAPv2 as in Windows Zero Configuration or it only supports PEAP-GTC, EAP-FAST, EAP-TLS (which means I have to use Intel Proset/Wireless software to configure).
View 2 Replies
View Related
Sep 1, 2011
I have a ACS 4.2 under windows, I setuped it to authenticate routers by RADIUS and TACACS+ protocols. now I have some devices whitch know only LDAP protocol. How can setup ACS as a ldap server to authenticate those devices?>
View 1 Replies
View Related
Jul 24, 2012
I am trying to setup a Wireless Network on my WLC that is totaly independent of our internal LAN. Port1 is designated at the .14.0 network and Port2 is the .18.0 network. The 14 network (Port1) will be the guest and 18 network (Port2) the internal wireless.
The issue i am having is nothing is routing to Port1. I have the Guest Wireless set to get DHCP from the WLC and i can get an address but i cant get internet access. I tried configuring a Network Route but it will only let me set the service port as the Gateway and not the IP for Port1.
I am running software version 5.1.151.0 and using this guide as it is the only one i can find. [URL]
Here is a screen shot of my Interface config.
View 7 Replies
View Related
Apr 30, 2012
When I try to add new MAC entrys to the WLC I get the following message unable to add mac entry to database, reached max size the problem is when I look at the stats there is only 386 MAC entry and the databse size was set to 1024 entry..The work around was to increase the size of the database to 2048.Is there any why to clean up the database?
View 2 Replies
View Related
Nov 15, 2011
We have a WLC 4402, with interface Management, AP-Manager, and only the ap-manager interface is enabled for dynamic AP Management, how can i enable the dynamic AP Management for management interface also. Because i couldn't access WLC from via wireless, only able to access it via wired.
View 15 Replies
View Related
Dec 9, 2012
I have a 4402 and recently I have not been able to access the device via the service-port interface. The service-port has an IP Address and it is connected to an access port in the Vlan which I am coming from, however it cannot even ping it's gateway, which as mentioned is within the same network. When I am at the console of the controller I can ping the service-port interface IP that I have assigned, just nothing else.
View 4 Replies
View Related
Jun 8, 2011
For unknown reason I cannot get WLC to authenticate correctly with ACS 5.2. it's very strange in the sense that when I checked the log. ACS authenticates and authorized the WLC 4402 but I cannot log to the WLC. login screen appeared, if I typed user name it jumped to Controller> user: password:
No matter what I typed (internal or external users) nothing seems to work. This is my frustration, I have no problem authenticating routers and switches except WLC 4402.
View 8 Replies
View Related
Jun 12, 2013
I am unable to get my 4402 and 2504 to pair in mobility, I made short video to explain my issues.also do not worry there is no propritary information in this video, I am working on a lab that does not mirror any production networks.
View 6 Replies
View Related
Mar 1, 2012
I am in the midst of trying to update the controller firmware of a cisco wireless lan contoller 4402, and having some issues getting the file to transfer to the controller. i am currently running verison 5.0.148 on the controller and attempting to upgrade to the latest version of 7.0.230 and for whatever reason it continues to not transfer. I have tried all 3 methods of cli, gui and using wcs software. all the no avail , I have tried tftp32 and 3cdaemon with the same results.
The error that i am getting from 3cdaemon is got socket timeout aborting code 10054, failing at 66MB transfered. I increased the timeouts both on the wlc and the tftp client to no avail
the error i get on the wlc is Code file transfer failed - Error while writing output file
View 5 Replies
View Related
Feb 23, 2011
Receiving the following syslog message from a 4402 WLC:
%CAPWAP-3-AP_DB_ALLOC: capwap_ac_db.c:145
Unable to allot AP entry in database. We receive this message about once a minute on average. I can't find any documentation saying what it is. It looks like a database error, which makes think it might be a memory issue or an issue with having too many AP's on the WLC. However, that controller has less than 30 AP's on it.
View 3 Replies
View Related
Jul 23, 2012
I've already done plenty of web search and gone through various forums. That's how I've gained knowledge of setting up wireless bridge. But for some unknown reasons I haven't been able to successfully pull it off. Let me explain.I have an ISP provided modem+wifi device. Its called PTCL Modem. I normally connect my laptop and other devices through its wifi. I need to extend the signals around my workplace. So I have bought a TP-Link wifi router (TL-WR740N). Both these devices support wireless bridging according to their admin settings. I'll go pic-by-pic to explain what steps I performed.Pic1: PTCL Modem wireless bridging options. It shows two options for AP Mode: Access Point and Wireless Bridge. And it shows three options for Bridge Restrict.
Pic2: TP-Link router home page Pic2a: I first change the TP-Link's IP Address, because the PTCL Modem's wireless is also using the same IP address (192.168.1.1) so the current address will conflict with it. I change the router's IP address to 192.168.2.1. It goes for a restart.Pic3: Next I turn off the DHCP Server, as suggested by various blogs and forums. Router goes for another reboot after saving this setting.Pic4: Now I go to Wireless Settings page and set Enable WDS on. It shows me bridging options.Pic5.
I click the Survey button and it shows me a list of wireless devices in its range along with their BSSID and Channel number. I select my PTCL Modem access point which is on Channel 6. My PTCL Modem's wireless is set to WPA2-PSK security with the password "********". I also set the Channel on my TP-Link router from Auto to 6, to come in line with PTCL Modem's wireless. Clicking Save makes router goes for another reboot.
View 8 Replies
View Related
Feb 2, 2012
The computer that i am using which is on the LAN Setup. Also it is connected to the domain. Whenever i tried to log on to the computer it is giving me an error message that "The System could not log on the "Domain Name" either the connection is disconnected or the domain is no longer available" somting like that. When i remove the LAN Cable and if i enter the domain password, i can login to the computer. after i log on the computer if i connect the LAN Cable it is working fine. I can access the other computer which is connected to the same domain. Why the error message is poping up?
View 4 Replies
View Related
Aug 26, 2012
I have a actiontec Wireless N ADSL Modem/Router Model# GT784WN & netgear n600 wndr3400v2 router that I would like to setup as a Wireless Repeater. I can not seem to get the netgear n600 setup.
View 1 Replies
View Related
May 11, 2013
I just bought a new router for my home network. It is the Cisco linksys EA4500. It looks great and is rich with features but I just wish I didn't buy it!
My old wireless router started to have its wireless signal very weak, hence this new linksys router. When it is time to setup the router, I just did what was supposed to be done(which is very straight forward, just a matter of choosing pppoe and inputting a username and password) and went ahead to test the internet connection which didn't work! Upon inspection, I discovered that the lights on the internet port on the router(WAN port) didn't turn on at all as if the cable wasn't connected. I quickly checked all connections and to kill any doubt I reconnected the cable to the old router to make sure it is working and it worked. So there is nothing wrong with the cable!
I tried everything one can think of to no avail. The only conclusion one would draw from this whole scenario is that the new router is bad. So, I took it back to the shop I bought it from and before giving me another one, he said he will test it out and I said okay. Surprisingly enough, it just worked !!! Don't ask me why but it just did work beautifully, although at my house if you plug the cat6 cable(that you know for sure has internet) into its internet port, it won't even turn its lights on.
View 19 Replies
View Related
Apr 2, 2012
I just moved and have a new laptop, Comcast came in to reset the cable and internet. A new router was given to us and I cannot seem to access the password. I reset the router and now where to go nest since I try using the IP address and it is not recognizing it. I am using an unsecured WIFI access and I am not comfortable doing so.
View 1 Replies
View Related
Jul 20, 2011
I have a dlink dir-655 router and an action tec dsl modem on windows 7. I connect with ethernet to the router for my cpu and use the wireless for the rest of the house. I used to have this working flawlessly but ever since I moved I've had trouble, I also just bought this computer so I was hoping for a clean start. I set up the modem and put in the ATT p/w and user name and installed the router drivers and set it up for PPPOE with the correct passwords but it only works when I connect my cpu directly to the DSL modem. I'm really struggling to figure out what could be causing this. Does the router need to be in some sort of bridged mode or something? I didn't run the ATT setup disks on this new cpu b/c I didn't think I would need to and I don't like putting their crummy software on my cpu.
View 7 Replies
View Related
Jan 26, 2012
Using the quick set up of DIR-600 from the CD, I encounter this message:"Your new router does not appear to be connected properly.Follow these steps:
1)Make sure that your are connecting your new router...
2)Make sure the ethernet cable from your PC is securely...
3)Click Retry to try installing your router again."
I tried all several times and still I end up on that screen message.
View 5 Replies
View Related
Aug 23, 2012
I just installed a WAP321. I literally configured a test SSID, implemented WPA Personal security, and could not get an iPad or Blackberry to associate with the network. The error message that appears in the Blackberry is "EAP Authentication Failed". But isn't EAP applicable only to the WPA Enterprise mode? The access point works fine if I have the test SSID without any security, but as soon as I turn on WPA Personal security, nothing can connect. Is there something really obvious I'm missing here?(When I select WPA Personal security, I have tried with just the "WPA2" version and "AES" cipher selected, as well as with check boxes ticked on both WPA/WPA2, and on both TKIP/AES. Neither works.)
View 8 Replies
View Related
Apr 10, 2012
I have 3 desk tops and 1 Laptop. the desk tops are wireless connected via my Xfinity ( cable Modem) and a Trendnet 652- 300 mgb router setup. Recently installed the
Trendnet router ( initially w/o security). I was able to readily connect to and access all pcs to Internet. However, recently went to Trendnet on line site and installed Router password security. Was able to connect and access the Internet on 2 of the 3 desktop pcs as well as the Laptop. However, 1 desktop ( running on Windows XP Professional, 5.1.2600 SVCPK 3, Optiplex G x 60 ) does not permit access to Internet. Once I get to the screen asking for the password ( network key) , I insert same I receive an error message stating "Network key s/b WEP pr a WPA key".
View 4 Replies
View Related
Feb 7, 2012
I have been having wireless issues for a while now and decided to buy a TP-Link router to work with this, unfortunately the wrong model was sent out, it's for Cable use only as it is just a router not modem too!I attempted to send it back but as I didn't know it was wrong until I opened it they won't take it back now as I should have checked first apparently.I did some research online and found information that I can use it as my wireless transmitter as long as I use my SKY router as the modem (with it's wireless function switched off).I have attempted the set-up as described in the manual for the TP-Link and I am now speaking to you using the Ethernet port on it, yet none of my wireless devices can see it in the available networks, both the "system" and "WLAN" lights are flashing to say the router is working but I still have no wireless signal.
View 10 Replies
View Related
Nov 4, 2012
So i got time warner cable and internet but for some odd reason a "wired" connection works perfectly fine but i cannot get any life out of my belkin n750 DB wireless router. ive hooked it all up modem to router to pc nothing so i reset everything still nothing
View 3 Replies
View Related
Jun 29, 2011
I'd had my camera offline for the last couple of months, and in the interim I've upgraded both my main pc and the wireless router. I'm running Windows 7 Ultimate 64-bit on the pc, and the router is a netgear gigabit dual band wired/wireless. When running through the camera setup I am not able to get setup to find the camera, whether wired or wireless. I know that the camera's online as it shows in the routers device table, and I'm able to access the camera with my browser. However, the failed setup prevents my registering the camera on MyDlink. Any thoughts? Should I be looking at the ports on the router in regard to the camera's IP?My goal is to be able to remotely monitor my home, which the MyDlink service seemed to offer. Based on what I've read, it appears there are other ways to achieve my goal, but I would like to figure out the install problem.
View 1 Replies
View Related
Feb 7, 2013
I've installed our previous WISMs and other WISM2s previously and never had a problem.
6500 running SXJ2. WISM2 running 7.3.101.0 (which is what the rest of our WISM2s are on)
Insert WISM and go through initial setup. Run a show wism status on the 6500, and show sysinfo on the WISM. All looks good. Service port and management vlans are up. From the 6500 I can ping the service port IP, but not the management IP. From the WISM I can't ping the managment default gw but I can the service port. Unable to get anything back from the GUI..not surprising as not even ping works.
Now, as I said I've done it this way many times before...in fact I'm following my documentation from the last successful implementation and even adding in Cisco docs.
View 7 Replies
View Related
Jun 18, 2012
I have a Cisco 881 setup with the following VPN config.
[code]...
The client is able to connect just fine to the network via VPN, but I am unable to gain access to any of the local resources. I know 192.168.1.1 has SSH running and 192.168.1.50 has telnet running but if I try to connect to either using the correct program they just timeout. I am really at a loss on why the vpn connection connects but I can not gain access to any of the resources on the VPN network.
View 3 Replies
View Related
Nov 9, 2012
I have blown the dust of my Cisco 1801 and looked the books out to put a decent router on my network now I am running my own server however I have hit a few bumps but totally stick now.
DHCP is disabled and I can't remember the sub net. Connected with the console cable but finding my admin password isn't accepted. Running the password recovery but unable to access ROMMON using special command > break. I should get this but the ATA monitor library just loads and I get stuck on the password screen.
*** System received an abort due to Break Key *** signal= 0x3, code= 0x500, context= 0x813ac158 PC = 0x802d0b60, Vector = 0x500, SP = 0x80006030 rommon 1 > #
From what I gather (still green behind the ears) the ROMMON command has been disabled. Any way to get into my Cisco or do I need to reload the IOS on the flash card?
Here is my event log/putty output
Event log
2012-11-09 19:59:47 Opening serial device COM6
2012-11-09 19:59:47 Configuring baud rate 9600
2012-11-09 19:59:47 Configuring 8 data bits
[code]......
View 4 Replies
View Related
Sep 9, 2012
I have assigned a task to configure a vpn between windows 2008 server and cisco asa 5505, what kind of vpn should i go with as the windows 2008 server r2 is on cloud and is it possible to configure site-to-site vpn for this network senario or not.. i have try ikev1/ipsec remote access vpn with l2tp with (CHAP, MS-CHAP v2) and couldn't find any document which will allow me to configure windows 2008 server to behave a client and connect it to asa, well what i did is that i configured a dail-up connnect with l2tp and found the following debug message
Sep 09 20:04:02 [IKEv1 DEBUG]IP = 172.16.32.5, Oakley proposal is acceptable
Sep 09 20:04:02 [IKEv1 DEBUG]IP = 172.16.32.5, IKE SA Proposal # 1, Transform # 1 acceptable Matches global IKE entry # 1
[Code].....
View 1 Replies
View Related
Mar 17, 2012
I have a Hawking 300N and I have misplaced my disk and I neing walked through this to have it set back up. I hooked it all up correctly and it says no internet connection
View 1 Replies
View Related
May 12, 2012
Just a day or two ago I was able to do what the title says, didn't make any adjustments to my E2000 while in it, had to find something though.Anyhow, connecting to http://192.168.1.1 results in "Unable to Connect", etc. Also tried it in IE9, Firefox Beta is my primary, and it still didn't work. Tried using Cisco Connect and it says it cannot connect to my router. I am wired to my E2000, which in turn is wired to my DSL modem (Actiontec GT701D-Its firewall not in use). I sitll have full connection to the internet as well as other wireless deveices do in my house.
View 1 Replies
View Related
Jun 4, 2012
I have a dell studio 1555 and i im not able to install bluetooth setup.While installing bluetooth setup a message will be shown by saying "switch on the wireless" but in my laptop there is no switch of wifi near hdmi port.
View 1 Replies
View Related
Nov 4, 2012
Model : TL-WDR3500
Hardware Version : Not Clear
Firmware Version :
ISP :
As we say, I followed all the directions but I am unable to setup the ftp server on this router. I even disabled Norton's firewall but am unable to access the server via WAN.
View 4 Replies
View Related
Feb 22, 2012
I'm unable to access the web setup screen from 4 different windows machines running IE 9 or Firefox (various combinations of wireless, wired, etc.). When I get to the certificate error and hit the "yes, i understand, continue", it comes back with a 'can't be reached' page and looking into the details says the 'connection was dropped'. However If I connect from a MacBook / safari, I'm able to reach the page fine (and admin the router).
Using a wrt610n.I am connected to the router, the ip address hasn't changed, the password hasn't changed.I can use the router & connect to the internet.I have the router set to require HTTPS, but switching it to allow HTTP doesn't work. Both Wired & Wireless Win 7 / IE9 machines can't connect.Tried setting the router ip address to 'trusted' zone in IE. Tried setting the router ip address to the 'compatibility' mode in IE. Tried using latest version of Firefox with the same results.
View 3 Replies
View Related
