I have been experiencing wireless connectivity issues with one of our Cisco 1231G AP. Every now and then users would not be able to connect to the AP. To dive deeper into this issue, I would like to configure SNMP traps on this AP. We are using PRTG and there is an option to configure SNMP trap. However, I would need to now the OID of the AP. Also i need to check for interface up/down status for both fastethernet and the radio. PRTG should be able to notify me when there is any interface resets.
I am getting these unwanted entries on my syslog server.03/10/2012 12:57:48 172.21.113.20 Error 23898: Interface FastEthernet0/1, changed state to downI tried to stop them with no snmp trap link-status but it hasn;t worked.[CODE]
I have a 3750 cluster and I want to know what are the recommended snmp traps to be sent. We definitely want to know when one of the switches in the cluster fails.
I've read about snmp-server enable traps stackwise and snmp-server enable traps cluster. What do these traps actually do?
I want to configure snmp-traps regarding stpx (root-inconsistency, loop-inconsistency) on a Cisco Nexus 1000V. The command "show snmp traps" lists stpx as a trap that could be configured and which is not at the moment.
Is there a way to send an SNMP trap form the ASA when port 80 is trying to be accessed??
We use the ASA5510 and also use ScanSafe Web Security. Web Security is great but we find ourselves worrying if user has edited their Browser connection settings to remove the proxy settings that we push down using Group Policy. We also cut off the users ability to make changes to those settings but it interferes when I need to troubleshoot a special program that cant use a proxy server. It just makes it harder for me. The other thing is that Group Policy only works for IE. Google Chrome will inherit the system settings in IE. So we have Safari and Firefox as well as a lot of others to worry about not getting the configuration. There is also debate about limitting the use of anything but IE and FireFox.
Without laying down the law and getting all sorts of hate mail and death threats I would like to run ScanSafe in such a way as to make sure each user receives the Group Policy settings and that is all.
I would now like to just set up an SNMP trap on the ASA for ANY traffic that is trying to get to port 80. Either get in in my syslog server or have the asa email me directly. Scansafe sends the Internet traffic out on 8080 to the Proxy towers.
I could block port 80 outbound but again, I limit my ability to troubleshoot on the fly. I would have to break this every time I need to troubleshoot.
I am seeing SNMP coldstart traps that either are delayed by many hours or are false (e.g. right after receiving the coldstart trap a query to sysUptime shows the nodes been up for days).I seen this twice this week in a new network environment for me for two different C2900s running C2900-UNIVERSALK9-M Version 15.0(1)M3 Assuming the coldstart traps are coming from the actual source nodes, I am curious what could be going on here.
1) One guess I have is possibly the system clock changed could cause the SNMP agent to send a false cold start trap. Then my guess is in the device log I should see a system time change syslog message.
2) I recall hearing once that syslog and possible traps messages are held in configurable buffer who default value is 1 and if not sent are held and then suffer a delayed sent. Is it true for both traps and syslog ? In the past I assumed this was simply the logging history buffer and applicable to syslog traps only. My assumption in the past was that last trap or last syslog message is sometimes held on reload and sent immediately after restart regardless of device connectivity to the management target.
I always assumed coldstart traps are never delayed for any reason and that they were pretty accurate substitutes for system reload syslog messages. Does anyknow know any reason for false or delayed coldstart traps on a C2900 with IOS 15.0(1) ?
Cisco LMS 4.0: Is able to forward SNMP traps (ver. 2c) received from device registered with it to a configurable IP address? • Traps contain the original Device Agent IP to identify the source (Not the IP of LMS)?• Is possible to configure one logical IP address or Domain Name for redundant LMS:Cisco Security Manager 4.1:Is able to forward SNMP traps (ver. 2c) received from device registered with it to a configurable IP address?• Traps contain the original Device Agent IP to identify the source (Not the IP of Security Manager)? • Is possible to configure one logical IP address or Domain Name for redundant Security Manager?
I have a couple of questions: I have a 161 AP,s most of which are AIR-LAP 1231G-A-K9 two 4400 WLC. Some of these APs are using AIR-ANT 1728 (2.4 GHz omidirectional 5.2 dBi) and Mobile Mark OD9-240 (2-GHz omnidirectional 9 dBi) on the same access points. Some of my AP are PoE and some are using a power supply (at the AP) some are using both. Power level is set at 2 a radios are not enabled just the bg radios. I'm having issues: I need to tweak the APs (Power settings & Channel settings) so my clients (LXE VX6) can refresh faster.
How to get the 1231g to work with WPA2-PSK (AES). My laptops cannot authenticate using this config but connect fine to the 1242AG. Below are some of the specifics:
1231G Radio Type: AIR-MP31G IOS Ver: 12.3(8) JED Multiple SSID Encryption: AES Key Management: Mandatory WPA *Laptops can connect to SSID with WEP
I bought 3 of the Aironet 1231g access points and cannot get any clients to connect to them. I have tried everything from an Iphone, Droid2, Win 7 and XP laptops with built in wireless G cards. All say that they cannot connect to the wireless network. I have two setup currently, one on Vlan 1 that I have configured the way I want with WPA2 enterprise. The other one is just one I setup while playing around.
I configured one vlan and trying to authenticate it through radius server.My objective is when a internal users want to connect through this SSID they just put username and password and authenticate through Radius server. Another vlan is getting authenticated through mac address that i need to manually put in AP.
there are always some Traps more or less processed by LMS showing up in Fault Monitor View.Especially some Pass-Through or Unidentified Traps can be annoying if you want to keep the view clean.I wonder how to disable such Traps to not beeing displayd on the DFM Fault Monitor View?
I am having an issue with my Cisco 1231G access points. When I make a password change on either SSID I am broadcasting, any device I try to reconnect to the network on will not prompt for the new password. It will just say unable to connect to whatever network. The 1231G AP is using the 12.8 (8) JEA IOS version. I have had Apple, Android, and windows laptops all not ask to enter a new password. It's like the device is not recognizing that it has changed. Is this an IOS bug or a setting I have to check. I can attach a configuration if necessary.
I need to install a AIR-AP1231G in one of our facilities. Its desired location is on a 1" thick solid steal wall filled with concrete. I thought maybe mounting it with a magnet would be easier than tap and die. Any reason I shouldn't use a high powered magnet to mount it with?
I have recently noticed that in my WLC traps I keep finding lots of Mac addresses that have many hits on joining but it's the same MAC ADDRESS. Example Mac addresss'08:11:96:e4:1a:60,4Wed Mar 27 16:05:56 2013Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate5Wed Mar 27 16:05:45 2013Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate7Wed Mar 27 16:04:53 2013Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate12Wed Mar 27 16:02:51 2013Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate This has like 20 hits in the traps section and when I check my ISE this is also reflected on the authentication aspect. This is starting to occur with many different client laptops, why does it keep re-authenticatiing into the profile joined?Is there a Time to Live TTL setting I can set so it doesn't poll so often? The users aren't doing anything this is all occuring automcatically, I think it's the WLC 5508 controller not the ISE.
Sometimes we have unidentified traps in our log, we don't know where they come from.
In high severity faults we see an active alert with device name “Unidentified” event name unresponsive but with a certain ip address.
What are these alerts about? Can I filter them?,A second issue I have is that I get interface down alerts. But when we log on to the device, there is no interface down at all. We can also ping the device from the lms server at that time. I have been told that the admin state and operational state has to be up.
I have WLC 2504 with 7.2.103.0 software version , & 2 different LWAP 1262n & 1231G with "c1200-rcvk9w8-mx.124-21a.JA" Image.The 1262n is joined to the to the controller and working fine but the 1231G it can't join the controller , the controller says "Join request received from an unsupported AP" !!i will attaches the logs for this AP.
My company AP 1231G is not passing the DHCP address to the client from the DHCP server, my config listed below basicly the AP is on its own VLAN 10.1.123.1 and the DHCP server is 10.1.10.2 -- trying to use iphelper to pass DHCP to clients and the AP is on static IP 10.1.123.2--
! ! Last configuration change at 13:15:56 +0800 Fri May 25 2012 by root ! NVRAM config last updated at 13:15:56 +0800 Fri May 25 2012 by root !
Is there any possible way to factory reset an AIR-AP1231G-A-K9 that was once attached to a WLC via SSH? I dont have physical access to it and the old WLC has long been decommissioned. I have tried the clear command but since it is in CAPWAP mode that command has been disabled. I know I can press and hold the mode button and reset it that way but I need to know if its possible through SSH to be reset. I have two that are in need of being reset in order to connect to the new WLC.
Where I live there is no DLS or cable to probide me with Interent access so I use my Verizon 3G/4G smart phone (Android) as a hotspot. Right now I am using an old Vista PC and ICS (Internet Connection Sharing) to provide Interent connectivity to my home network and Cisco lab. This works fine but I must have my smart phone near the PC for it to work. When I go to other rooms, I end up missing calls and texts since I have t oleave the phone if it is providing Inerent access at that time. If I can get the Airnet's to connect to the hot spot AND provide Internet access, that will provide me additional mobility. This would also be good for small businesses as a backup Internet Connection.
Is there any way that I could elimanate the Vista PC and have my Aironet 1231G Wireless router(s) automatically connect to my phone's 3G hotspot to provide Internet access to my lan?
I have 2 Airnoet 1231G's running the c1200-k9w7-mx.123-7.ja IOS and a C3550XL layer 3 switch.
We have 12 - AP-1231G access points in our warehouse with 2 SSID's, both on different VLAN's. We would like to set one of the VLAN/SSID 's to use DHCP from a windows DHCP server.Is this possible to do with option 43 or is that only for lightweight AP's ? Sho ver: Cisco IOS Software, C1200 Software (C1200-K9W7-M), Version 12.3(8).
Iam facing an issue with high cpu utilization of cisco 2600 router . When i give show cpu process command i can see three process are using high cpu those are as below
Router #sh proc cpu sorted CPU utilization for five seconds: 90%/3%; one minute: 92%; five minutes: 87% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 79 34734981 380093 91388 61.99% 60.36% 55.28% 0 Syslog Traps 70 3468095320 810529544 4278 14.41% 16.05% 16.15% 0 Encrypt Proc 32 2386134243 2409465973 0 6.79% 6.40% 6.57% 0 IP Input
I have an Aironet 1231G that I'm trying to recover an image on. I'm following the cisco directions of reloading the AP image file from an active TFTP server (which is myPC). My PC has a static ip address of 10.0.0.2 with the TFTP server running. I've verfied that the TFTP server works by upgrading a switch IOS.The issue I'm encountering is the 1231G does not see the TFTP server correctly. url...
I have two Aironet 1231Gs, that are both running the same version of fimware: Version 12.3(8)JEE
From the gui, I try and change the channel on the main radio interface--It works from one, and I get just a blank page on the other. When I try and change it via the cli, I use the "channel" command in conf int mode, and it works one the one, but the other one, the "channel" command doesnt exist.
