I configure IP address on the management interface port 1 of 5508 controller when i connect it direct to my laptop i can't ping or access controller from my laptop even i connect through layer 2 switch still i can't not.
IP Address of management interface : 10.21.0.50
Laptop IP Address : 10.21.0,51
I'm trying to verify some behaviors I'm seeing with my 5508 controller setup, I've zero experience with this hardware and clueless on the best practices. With that said... out of the box I ran through the AutoInstall process.
I gave my service port an IP address on my subnet, 10.10.8.0/24 vlan 100 and gave the management interface the ip address 10.10.30.5/24 vlan 130
From my host I can ping the management interace 10.10.30.5 and the interface gateway 10.10.30.1
I cannot connect to the controller via 10.10.30.5 either through the web GUI or telnet
I can connect to the controller via 10.10.8.200 both through the web interface and telnet
while connected to the service port, I can ping the management port IP but I cannot ping the 10.10.30.1 gateway.
We have attached two test 3502I AP's and they found the controller and pulled correct ip addresses, clients can authenticate and access network resources as well as the Internet so for the most part, things are working but it concerns me that the management interface can't ping its own gateway.
After I've upgraded software to the v7.3 and applied AP-SSO it made imposible to access the controller's gui via Service-port. So we tried to access it by management-port, but there is some problem too. It is not working from another subnets. But default gateway on management vlan is set correctly and I even tried to turn of all acl's on switch. WLC is only accessible from the same network. But at the same time wlc is replying on ping fine.All other protocols cannot connect to the controller.
View 3 Replies View RelatedWe faced one recent issue with WLC configuration behavior and explaining our observation and workaround we did.Requirement is to manage the WLC (5508 with 7.4 code) using two SNMP managers in different locations. Also these two Servers should use the same community string to manage WLC.
We were able to configure the SNMP community string for one server IP (to allow access) through GUIWhile trying to add another Server – IP with same community string – it didn’t allow As per the configuration guide, Controller can use only one IP address range to manage SNMP community. So we cannot configure the same community string to allow only two different server IP addresses [code] We currently configured the major subnet ( 10.x / 8 - two match both server addresses) and it works fineAlso when we tried 0.0.0.0 / 0.0.0.0 , it didn’t work (SNMP was failing)But this creates a security issue wherein anybody can poll the WLC.
I'm setting up a new 5508. I've used the config from a 4402, have successfully connected to the Service port to manage the device, but for some reason cannot connect to the Management interface. In this case, port 1.
The service port is connected to a Catalyst switch and grabbed an ip address (10.2.x.x subnet) no problem. I can access the 5508 via https using the SP. However, port 1 is connected to the same Catalyst switch, but on a different vlan (subnet 10.20.x.x). Both ends show that the interfaces are up, I can ping the interface from any other host on the network, but when I try to manage the device via https I cannot connect. We are using WCS and I cannot add the device from the WCS. About all I can do is ping that interface.
I have 2 x 5508 Wireless Controllers, 1 mgmt port on each as standard. I noticied something different between these controllers running the same code.I can bound a physical port to the mgmt interface on one controller but not the other (both interfaces are untagged)see below, this config appears on one controller but not the other? Is this something to do with the initial setup? How can I add Phyiscal information to the other controller mgmt interface, I cannot delete the mgmt interface. Physical InformationPort Number Backup Port Active Port Enable Dynamic AP Management?
View 2 Replies View RelatedI have a wireless controller 5508 and all my interfaces can be accessed via https or ssh from a wireless client. Management access from a wireless client is disabled so I don't understand why this is happening.
View 10 Replies View RelatedI've just reset our WISM2 in the test lab back to factory default as I needed to reconfigure the 6500 and the WISM2 itself. Bearing in mind I had it working before.I've just renamed and re-addressed some of the vlans so things flow better and make it easier to add more WISM2s in the future.Now I've run through the initial configuration and it's rebooted ok and show WISM status is showing Oper-Up and there's a port channel 407 been created as I would expect. However, I am unable to get to the management interface via GUI or SSH. In fact from the 6500 I can't even ping the management interface (but I can the service port).The Vlans have been changed in the 6500 config so it knows the native-vlan and service vlan etc and all the vlans are up/up.
View 17 Replies View Related5508 controller is at the headquarters which can be normally pinged, telnetted, http'd and tftp'ed....at the remote site, controller can be pinged and http'ed but cannot be telnetted and tftp'ed.there is a complete tracert from the remote site pc all the way to the controller.from a switch at a remote site, the controller can be telnetted. but from a pc on the remote site (which belongs to a remote site vlan), it is unable to telnet and tftp the controller.all active components can be telnetted from the remote site, such as the core switches and routers at the headquearters, except the controller.upgraded the controller code to 7.2.xxx in headquarters but still unable to telnet and tftp the controller from remote site.is there any more settings on the controller for telnet and tftp?what could be the problem why the controller is not available for telnet and tftp from the remote site?
View 12 Replies View RelatedI have a 5508 wireless controller running version 6.0.199.4 (the image installed when the device was shipped) and I am trying to install by tftp version 7.3.112.0
The issue is when using tftpd32 gets to 82% transfered then fails with the error "% Error: Code file transfer failed - Error while writing output file"
I have a 5508 at a remote site and a 5508 at my main campus. I was doing some work on the remote site's controller, so I changed option 43 on our DNS/DHCP system, then applied an LWAPP template from NCS to the AP's to migrate them to the controller at my main campus (so users could still utilize the wireless at the remote site). They all moved over to the temporary (main campus) controller without an issue.
When I was ready to migrate the AP's back to their local (remote site) controller - I changed option 43 for each sub net that contained AP's @ the remote site to point back to their local controller's management IP address, pushed an LWAPP template again (pointing it to the local controller obviously) and apply template/reboot AP.
The AP reboots, disassociates from the main campus (temporary) controller, but when it comes back up a few minutes later - it associates BACK to the main campus controller it was on instead of to the remote site/local controller like option 43, the LWAAP template (and my frustrated screams) are now telling it to. I'm certain I'm just missing something.
I've got a new 5508 wireless lan controller and can ping the ip address of the management interface, but can't access the GUI at the management interface's ip address. I can access the GUI on the service-port interface. No static routes in the controller; trunk appears to be set up correctly.
View 5 Replies View RelatedIn our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest
Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) -
Mobility Group: Same configs at both ends
SSID Anchor : Anchor SSID on local and local SSID on Anchor.
AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
i cannot access the web managemnet interface of this router from a different subnet.THe WAN interface is a 4G LTE connection,I have disabled both the SPI firewall and NAT and enabled remote management from any ip address but i cannot access the admin web page from a remote subnet.Doing a port scan of the routers WAN or LAN address i cannot see any ports open at all...its as if firewall or NAT is still enabled somehow.
View 0 Replies View RelatedI've got an ASA 5505 running 6.3 I've connected the management interface to our management vlan (which contains switch IPs, ilo's etc)Is there a way to allow access to this vlan from another?
View 1 Replies View RelatedI am the Systems Admin at LDM Media and am trying to get some support for one of the SRW224G4 managed switches we have in our rack. The issue is as follows:
Any endpoint connected to the switch is assigned an IP address in the range of 169.254.154.XXX regardless of the switches set IP range, the second issue is that I cannot access the web view management interface through the default IP address 192.168.1.254 (and I have tried to use the last IP in the range set by the router 169.254.154.254, to no avail)
How to regaining control of this supposedly smart switch?
I have a requirement to set up a guest SSID for contractor so that they can use the internet while in the office.
Security say that all traffic on this SSID should be isolated and directed straight to the firewall, with no chance of contamination into the company network infrastructure.
With the 5508, my understanding is using the setting up a guest account functionality built in will achieve this, but all traffic would end up at the wireless controller. How do I then put a direct forward for all traffic to the firewall which will only affect the guest traffic?
I recently had a 5508 controller installed and configured for a corporate network as well as internet only guest access. Users authenticate via 802.1X key management on the corporate network and web authentication via guest. This works fine, however, I've run into a problem. We also use iPads for inspections and the inspection site is housed internally. I've had a network admin create an exception in the firewall that will allow connection to the internal sites from the guest network, however, it does not function. I did find that if I connect an iPad to the corporate wireless network I'm able to download the necessary certificate to the device but that only works if I use my login information which is not something I am interested in doing. Is it possible to enable another authentication for the corporate network without breaking the functionality of the existing 802.1X authentication? What could possibly be the cause on the guest network not allowing connectivity to the internal sites, even though the exception has been created?
View 3 Replies View RelatedJust brought another set of SRP521W, after changed the WAN setting to PPPOE, we unable to access the web management. The power/sys light will keep blink when trying to access the web management. We able to ping it. We tried the reset button but it did not work as well. Is that a way to upgrade the firmware without using the web management?
View 4 Replies View RelatedWe have an MPLS (layer 3) network 4 offices and a Data center. We are planning to install about 10 Access Points(3600 series) per office and have a controller(5508 series) in the Data center.
Questions:
1- Is this design possible, in other words, just one controller centralizing all Access point traffic in one controller in the Data center?
2- We would like to accomplish this in two phases:
A- install access points without controller handling authentication thru Microsoft IAS servers (current configuration with 1200 series)
B- Deploy wireless Controller in Data center and start migrating orphan AP to Controllers one office at a time.
We are having 5508 controller with Lightweight access points 1142, IS it possible to disable 802.11a on certain access points before turning it off completely on the controllers?? Could you provide steps for doing so on WCS?
View 5 Replies View Relatedoutput are here
*Mar 1 01:28:21.018: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 1 01:28:21.022: %LWAPP-3-CLIENTERRORLOG: bsnSetCurrentBHRate : fail to set
radio control and data rate
*Mar 1 01:28:21.179: %CDP_PD-2-POWER_LOW: All radios disabled - AC_ADAPTOR (00
00.0000.0000)
*Mar 1 01:28:21.984: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
ernet0, changed state to up
*Mar 1 01:28:34.341: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigne
d DHCP address 192.168.10.244, mask 255.255.255.0, hostname AP2c54.2d0d.c3c4
I have Cisco AIR-LAP1310G-E-K9 access point and 5508 wlan controller with version 7.0.220 and it is joining to the WLAN controller. I have enabled dhcp in the lan controller and i dont have external dns server. How to fix this issue? Can this LAN controller version will support this access point? My Lan Controller Management IP Address is 10.10.10.5 find the below configuration of 1300 access point.
AP001d.4513.dd68#reloadProceed with reload? [confirm]
%SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.%LWAPP-5-CHANGED: LWAPP changed state to DOWNXmodem file system is available.flashfs[0]: 4 files, 2 directoriesflashfs[0]: 0 orphaned files, 0 orphaned directoriesflashfs[0]: Total bytes: 7741440flashfs[0]: Bytes used: 2052608flashfs[0]: Bytes available: 5688832flashfs[0]: flashfs fsck took 14 seconds.Base ethernet MAC Address: 00:1d:45:13:dd:68Initializing ethernet port 0...Reset ethernet port 0...Reset done!ethernet link up, 100 mbps,
[code].....
I have 2 WLCs (Cisco 5508) in my network. The primary has 16 Aironet 1261 APs connected. Secondary WLC is just staying there and no APs are associated with it. Everything works fine. I was accessing the controller via a wireless client all this time through the management interface 10.74.15.2 using https. It was working fine.But when I tried to access the primary using the wireled network, I can access the seconday but cannot access the primary. They are in the same subnet and I can ping both of them.
View 2 Replies View RelatedI know that the 3600 series APs are not supported on the 4404 WLC. However, would the following scenario be supported? I would like to use the 4404 (software rel. 7.0) as a guest anchor with a 5508 (software release 7.2) as the foreign controller supporting series 3600 APs. I ask because the APs do not need to join the guest anchor.
View 7 Replies View RelatedWe have a customer that have 2 5508 as primary and backup controller and a 4400 as an anchor controller. We plan to upgrade the 5508 to 7.3.112.0 and the 4400 is already 7.0.116.0. Will there be any issue if the anchor controller is not the same code as the foreign controller? Do I also have to upgrade the acnhor controller to 7.0.240.0?
View 2 Replies View RelatedInterface management on WCL 5508 is assigned ip 192.168.255.200 and from a PC ( on different subnet), i can ping but cannot access https to WCL but From a PC ( in the same subnet) i can ping and https.
View 11 Replies View RelatedJust got my server team to install ACS 5.3 on a virtual machine.Unable to access the web interface url...Nothing happens when i try and access this.how i can fault find this as i have cli access.
View 8 Replies View RelatedI can't seem to be able to access my wireless routers settings on my iMac, whenever I type my router's ip adress in my browser's adress bar it's unable to connect. According to the network settings menu my router's ip adress is 78.21.0.1, I don't know if that has anything to do with it.
View 8 Replies View RelatedI have been working on figuring out a VPN problem on my companies ASA5510. I was accessing the device via: ASDM, SSH using Putty, and even initially with a console cable (also using Putty) using a computer in the networking closet. All 3 of these access methods worked properly for me.I believe I may have inadvertently changed something as of Friday using ASDM. I am mostly assuming this because, as of yesterday I can no longer connect to the device. I actually cannot even communicate with it (ping the interface I normally use to manage, which I could previously ping). No computer on the same subnet as me is able to ping the interface. The device is still accepting VPN connections, dishing out DHCP addresses and everything else it normally does, but I really need to be able to gain access to it again. I am thinking to reboot the device when there is some downtime, in the hopes that ASDM doesn't save to startup-config and only to running-config.
View 5 Replies View RelatedI have problems with an AP AIR-CAP1552C-E-K9 (MAC: 2c:36:f8:73:e8:a0 )this AP cannot join to WLC 5508 software version 7.2.110.0.The AP ever gets associated to WLC.
I saw timeout messages and this error message:
%CAPWAP-3-ECHO_ERR: capwap_ac_sm.c:5656 Did not receive heartbeat reply; AP: 2c:36:f8:73:e8:a0
I don´t see any connectivity issues between the AP and WLC thorugh HFC network.One time the AP join to WLC and I saw this messages in debug CAPWAP:
*spamApTask1: Nov 27 09:01:06.316: 2c:36:f8:73:e8:a0 Change State Event Response sent to 10.64.128.165:16012
*spamApTask1: Nov 27 09:01:06.316: 2c:36:f8:73:e8:a0 CAPWAP State: Run
*spamApTask1: Nov 27 09:01:06.316: 2c:36:f8:73:e8:a0 Sending the remaining config to AP 10.64.128.165:16012
[code].....
I can't access the bvi interface I use to manage the AP1261N from an IP address that is not in the same subnet of the bvi interface. The AP is configured as root bridge. Obviously I've the same behaviour for the non-root AP connected to it. For sure it's an ap configuration problem as other devices in the same vlan (vlan1) are reachable by the vlan I'm connected to. This is the conf:
version 15.2
no service pad
service timestamps debug datetime msec
[Code].....
I've been trying to configure a TP-Link L-WR740N to act as an access point using the instructions here as a guide. As stated in the guide, I've been changing the IP address of the TP-Link router to a new address that lies outwith the pool of available DHCP addresses in my combined modem/router but with less than resounding success. After rebooting the TP-Link router, I am unable to access the set-up interface - the newly allocated IP address doesn't work, neither does the original IP address work. What is happening here? If I change the IP address to one that lies within the DHCP pool and reboot, I can access it ok with the new address. However, that obviously clashes with the set-up instructions.
View 1 Replies View Related