Cisco Infrastructure :: Unable To Associate LWAPP 1142N To WLC4402
May 30, 2012
I am having a problem associating an AIR-LAP1142-E-K9 AP to our WLC4402 Controller (running version 7.0.230).I have connected a console cable to the device and when it boots up it picks up an IP address. I have then entered the controller IP using the command: [code] The Controller is set to 'GB' (regional code -E), and has the correct time zone (though I do notice this is GMT and not BST) but when the AP connects it shows the time an hour earlier than the time on the WLC GUI.
I am testing our new wireless network using 1 Cisco 2504 wireless controller with 5 licenses 4 Cisco Air LAP 1142N Access Point I configured it very simple for testing There is only one interface and vlan is untaggetd There is also only one WLAN with one SSID Currently security setting is WPA + WPA2 + PSK (I also tested with no security setup) Wlan session time is diabled and controller user idle timeout is set to 1000000 (Max)AP boot version is 12.4.23.3 and ISO version is 12.4(23c)JA3 Problem is clinet(iphone) does not automatically associate with 1142N Access Point even after it learned network. Phone has to be authenticated again to connect to network same iphone can automatically associate with old 1220 Access point but not with New AP if I urn off and turn back on wifi from iphone, it does see the network but does not connect but I have to manually reconnect to it with password I want iphone to connect known network without reauthentication process after iphone's wifi function is turn on?
I just installed a WAP321. I literally configured a test SSID, implemented WPA Personal security, and could not get an iPad or Blackberry to associate with the network. The error message that appears in the Blackberry is "EAP Authentication Failed". But isn't EAP applicable only to the WPA Enterprise mode? The access point works fine if I have the test SSID without any security, but as soon as I turn on WPA Personal security, nothing can connect. Is there something really obvious I'm missing here?(When I select WPA Personal security, I have tried with just the "WPA2" version and "AES" cipher selected, as well as with check boxes ticked on both WPA/WPA2, and on both TKIP/AES. Neither works.)
We have other APs that associate w/o issue AIR-LAP1141N-A-K9. However our 1 1310 is having issues.. The Controller log shows:
2012-08-29 21:16:51 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:15.038: %LWAPP-3-DECRYPT_ERR5: spam_crypto.c:293 Error decrypting packet (using old key) from AP d4:8c:b5:15:3c:04 (session identifier a3ddb9c5) 2012-08-29 21:17:33 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:17.037: %LWAPP-3-DECRYPT_ERR: spam_lrad.c:3642 The system is unable to decrypt image data message; AP d4:8c:b5:15:3c:04 2012-08-29 21:17:33 local0.error 172.16.10.70 ITCNJ1WC01: *spamApTask0: Aug 28 21:17:17.037: %LWAPP-3-DECRYPT_ERR: spam_crypto.c:735 The system is unable to decrypt LWAPP packet; AP d4:8c:b5:15:3c:04
I have a few AIR-AP1242-E-K9 AP that I have upgraded to LWAPP, after the upgrade the AP's don't join the controller. But some AIR-AP1232AG-E-K9 on the same site joins without any issues.The controller is: AIR-CT2504-K9, SW: 7.0.220.0. [code]
I just Bought 1142N AP, I am unable to connect to it or open its Web interface, the Default IPs i am using are 10.0.0.1 for Router and 10.0.0.2 for my PC, whats its Default IP, What IP address should I put on PC, plus Do i need the IOS for the AP?
I am unable to login to switch c3560 through Hostname but able to login through IP address. when i am putting the command : login authentication telnetpwd
getting the below message:
AAA: Warning authentication list "telnetpwd" is not defined for LOGIN.
I'm trying to do configuration archiving in Prime Infrastructure 1.2 with a 5508 WLC (7.4).The job always fails (Admin -> Background Jobs) with the following error (see attachement):"SNMP: Failed to establish SNMP connection xxxx - Cause: Device is Unreachable. Check the ReadOnly community string." I double checked the SNMP credentials, they do match. For testing I also added a Public community just for the PI. Same result.Am I missing something?Is this not intended for Wireless Controllers?
I have been experiencing a strange problem i have a switch stack of 3750 in which 4 switches are cascaded. there is one one switch shows PROVISIONED status when I run "show switch". i have verified the stack cable connectivity its OK.
now when i try to console that particular switch i am unable to access it as well. I tried to reboot that switch and on reboot it only shows one LED syst blink once and after that remains constant and nothing happens to other LEDS. from the back of the switch FAN is working fine.
Model No:- AIR-WLC4402-50-K9 Current IOS:- 4.2.99.0 Upgrade to :- 7.0.220.0
I wants to upgade WLC with7.0.220.0 IOS. My question is that should i go for direct upgarde from 4.2.99.0 to 7.0.220.0 or is there any IOS version i have to upgarde.
I have one WLC AIR-WLC4402-50-K9 which is hitting some bug. So I done RMA for that devices and now i got the new WLC.Now i want to install that RMA WLC in network. So can any one tell me what is the process for installtion of WLC. I already have the old WLC in working now. Which file backup i need to take from old WLC.
info regarding my LAP521 access points that are refusing to join the WLC4402-12.This is my first lightweight access point implementation and I have 3 LAP521's and 1 AIR-CAP3502I-E-K9 access points on my network.They are meant to pick up ip address from external dhcp server and then join the WLC but only the 3502i joins successfuly while the 521's get dhcp address but do not join the WLC. From the logs, I can see that the WLC is discovered by the 521's and even get a response message from the controller but they are still unable to join as shown in the screenshot below.My WLC is running software version 7.0.230.0 and the 521's are running an lwapp image version 4.2.61.8. [code]
AIR-WLC4402-25-K9 running 5.2.193.0 and I setup guest internet-only access which worked for 2 days. I change both the "User Idle Timeout (seconds)" and "Enable Session Timeout " to 10hours (36000) as guest was complaining he had to re-authenticate again. Anyways, guest was still able to pickup ip address and logs show that life "appears" fine but he had not internet guest access. He had a Windows7 box...anyways, before I can finish troubleshooting, he had to leave....My question is if there is any issues with Windows 7 that others had a problem...or is it the timers I tweaked - or both?
Thu Apr 8 15:19:06 2010User joe logged in. Client MAC:00:12:f0:99:71:ce, Client IP:192.168.55.110, AP MAC:00:00:00:00:00:00, AP Name:N/A15Thu Apr 8 15:09:28 2010User joe logged in. Client MAC:00:12:f0:99:71:ce, Client IP:192.168.55.107, AP MAC:00:00:00:00:00:00, AP Name:N/A
Is there anyway to associate a name to an IP in the RV220W? I am coming from a WRVS4400N v2. Folks are complaining that they can't connect, for example via Real VNC, via the PC name any longer. They have to use the IP address. In the past I put the names of the PCs in the WRVS4400N when I reserved IPs via MAC addresses (some call this assigning static IPs). There isn't any place in the RV220W to put the name. Even when I look at the DHCP list a lot of them show up as "unknown". I am sure this is a NETBIOS thing but I'd rather fix this in the router as I have always done in the past.
We have 2 AIR-WLC4402-K9 devices at a remote location that will both drop their network connections some undetermined time after a reboot. We cannot reach them via telnet, SSH or HTTP. In fact, we cannot even ping them once they drop connection. The only cure we've found so far is to power-cycle the controllers. The controllers are in separate rooms and connected to separate switches. We've confirmed the links are configured as trunks and have the correct speed/duplex settings. I tried updating the IOS & boot loader on one of them but that had no effect on the problem.
I have a WLC 4402 on my network. Recently mobile phones can connect to the wireless network and obtain a valid IP address. This IP is pingable from a workstation anywhere else on the network. However, these phones will not display web pages. They come up page cannot be displayed. I even tried putting Google's IP address in the phone's browser and it still did not display. I can connect through the same WLAN via a laptop or iPad. These devices have no problem displaying web pages. I even went ahead and created a new TESTWLAN with no encyption but to no avail. Same results: laptops connect and display web pages and smart phones connect, gain IP but do not display web pages. Comes up page cannot be displayed. This matters not whether its an iPhone or Android platform.
today i upgraded our WLC4402 from 7.0.98.0 to 7.0.116.0. After the upgrade (also bootloader upgrade) the Aironet 1142 AP's do not joint the controller anymore. Error in log:*spamReceiveTask: Apr 26 11:30:46.301: %CAPWAP-3-DISC_INTF_ERR2: capwap_ac_sm.c:1468 Ignoring Primary discovery request received on a wrong VLAN (21) on interface (29) from AP ec:c8:82:ab:ed:00 Nothing changed in infrastructure. AP's are in VLAN 21, AP-Manager interface is in VLAN 21. Ap-Manager, Management Interface and Dynamic Interfaces are in PortChannel (LAG) = Interface 29.
I have a Cisco 4402 WLC running version 4.2.112.0 controlling 20+ AIR-LAP1242AG-E-K9 access points running IOS 12.4 (10b). I'm trying to setup an additional AP as MESH. When I try to change the mode from local to bridge, on what will be the rootAP, I get a message stating that bridging is not support on this unit.
I have two sites.Main site (local) has two Vlans: Vlan1 and Vlan2. Each has its own IP address range.VLAN 1 is the default Vlan and is used for CORPorate traffic. IP range 10.33.4.*VLAN 2 is for guest access to the internet IP range 10.10.10.*I have a WLC4402 on the this site with 2 WLANs: CORP on Vlan1 and GUEST on Vlan2.
Branch site (remote) which has 2 Vlans: Vlan1 and Vlan2. Each has its own IP address range.VLAN 1 is the default Vlan and is used for CORPorate traffic. IP range 10.125.15.*VLAN 2 is for guest access to the internet IP range 10.10.11.*I have an 1141 on this site using HREAP.
Locally, if you connect to CORP, you get a CORP ip address and access to CORP network. If you connect to GUEST, you get a guest ip address and guest access to the guest network. Simple so far....
Remotely, if you connect to CORP, you get a CORP ip address 10.125.15.x and access to CORP network (great). If you connect to GUEST, you get a CORP ip address 10.125.15.x and access to CORP network (not great). This is with the HREAP native vlan ID for the access point set to 2 on the controller.If I set the native vlan ID to 1 on the controller, I can not get an IP address at all.If I do not set the native vlan ID on the controller, I can not get an IP address at all.
I have one WLC 4402 & arround 29 Access point (1130) in our enterprise network. Wireless users LAN segment is diffrent from wired users.Wireless users like Laptop users, Mobile users & ipad users which are connetced with this wireless & using enterprise network.
Presently we are using WEP mode for security key. This WEP key are week & can be cracked easily. so security point of view i want to put strong encription mode.Presently i do not have any radius server.I found there are some modes are available Like WPA, WPA2 with PSK etc.
will there any problem with wireless users to access application after changing the mode? Which mode will be stronger & could not be crack. Could we achieve without radius server or not?
Our costumers has implemented 2 AIR-WLC4402-50-K9 with Software Release 7.0.98.0, the wireless infrastructure consist in 2 Root-Mesh-LAP and 8 Mesh connect over-the-air to deploy outdoor coverage.
All the LAP are Aironet 1520 Series Mesh Access Points with equipped with 3 antennas for 2.4GHz and 1 antenna for 5GHz (backhaul).For one year all seems to be ok, yesterday after a power outage of one Mesh-Root-LAP, 5 Mesh-Lap continues reload each 10-12 minutes, on the WLC Log you can see event like a reboot from AP Console, on the LAP console i can capture this event before the reload:
Log on LAP Mesh %DOT11-6-GEN_ERROR: Error on Dot11Radio0 - Not Beaconing for too long - Current 0 Last 0 %SYS-5-RELOAD: Reload requested by Dot11 driver. Reload Reason: Radio Not Beaconing for too long .... LWAPP-5-CHANGED: CAPWAP changed state to DOWN AP1780-Mesh uptime is 11 hours, 10 minutes System returned to ROM by power spike %DOT11-6-GEN_ERROR: Error on Dot11Radio0 - Not Beaconing for too long - Current 0 Last 0%SYS-5-RELOAD: Reload requested by Dot11 driver. Reload Reason:Radio Not Beaconing for too long ....*Sep 1 16:05:43.399: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
What does it mean? That the beacon signal trasmitted from Root-Mesh-LAP cannot reach the Mesh-Lap and so the Mesh-LAP force a reload?Where we should search the cause? In the power instability or in a interference on the 5GHz radio interface?
On one of mesh Lap I found a strange reason for a releoad:AP1780-Mesh uptime is 11 hours, 10 minutesSystem returned to ROM by power spike
Log on WLC Log System Time Trap 0 Thu Sep 1 17:31:11 2011 AP Disassociated. Base Radio MAC:00:22:be:41:33:00 1 Thu Sep 1 17:31:11 2011 AP's Interface:1(802.11a) Operation State Down: Base Radio MAC:00:22:be:41:33:00 Cause=Heartbeat Timeout Status:NA 2 Thu Sep 1 17:31:11 2011 AP's Interface:0(802.11b) Operation State Down: Base Radio MAC:00:22:be:41:33:00 Cause=Heartbeat Timeout Status:NA [Code]....
- 2 x WLC 5508 with about 80 - 120 access points (Aironet 3500) each - 7 x WLAN's with different security settings - 2 x ACS 5.3
On one WLAN we have the problem, that the students with their own laptops have to enter their AD username about 4-5 time, until they get a successfull 802.1x authentication. The WLAN has the following configuration:
- Hidden SSID - Only 802.11b/g - Interface assigned via AP Groups - WPA2 / AES with 802.1x or CCKM (here I could only allow 802.1x, the clients do not need fast secure roaming) - Authentication via ACS 5.3 and PEAP - for more details see screenshots below
Most of the time I can't see any 802.1x authentication attemps on the ACS View, but when there are entries, they are successfull. So in my opinion I think there has to be a problem on WLC side, but I don't know where to search further. We already deactivated the client load balancing in the WLAN, because at the beginning the customer wanted to activate that - but it was clear that there are a lot of clients which had to authenticate multiple times.I know there were some bugs in the 7.0 train, so I upgraded finaly to 7.0.235.0 to overcome this bug here: CSCty07036.To fix the other bug (CSCtt70290) I just disabled all the session timeouts on the different WLAN's.
my question regards to a pair of WLC 4402 with 7.0.98.0 software.Actual, our security policy does not really allow any peer-to-peer communication in a wireless LAN. Therefore we set the 'P2P Blocking Action' to drop, and the 'Broadcast Forwarding' feature to disabled (default).But now there is a special requirement for two mobile endpoints to communicate with each other, because one device controls the other.To test the communication, we first disabled P2P Blocking (without success) and further enabled Broadcast Forwarding to bring the communication up. Now it works, but the configuration disagrees with our policy.
1. Is there an alternative configuration as described possible, so that we do not violate the security policy? To allow only p2p connection between the two devices, ist should also be possible to drop any else by an ACL. But how to fix the problem with the broadcast, because of the needed ARP? My idea was to use a static ARP entry, but as far as i know, one of the both devices is not able for it.
2. Because, I did not find any detailed documentation: 2a. with enabled Broadcast Forwarding, the controller forwards all broadcast for any configured SSID, right? 2b. is the broadcast limited to the source VLAN/SSID? 2c. is the broadcast limited to an AP, to an WLC, or is it broadcasted to every AP on every WLC that has the relevant SSID?
we already have two new 5508 but not in an operational state now, because we plan to implement new 3600 APs.Do these WLCs offer more/another circumstances or possibilities?
I'm trying to connect to my wireless network using an android device with certificate but with no success.I'm using a WLC4402 7.0.235.3 SSID Security (WPA2 Auth802.1X + CCKM) [code]
Trying to implement HREAP over WAN between main and remote site. The WLC4402 is on main site. There will be a secondary DHCP at the remote site. Does the switch at the remote site any preparation?
I made a lot of tests during some days with a wlc4402 and everything was ok.
One day when I tried to reset the system I had a lot of errors (see attach) and could not go on. After changing the image the following output appeared: "RAM Disk Image Integrity Check Failed (Bad Magic Number) Hanging". Now I have no response from the controller.
