Cisco :: Requirements For VLAN Select Feature In 5508 WLC?
Jan 8, 2013
We implemented WLC 5508 software version 7.3, with 8 Aironet devices, most of them are AIR-LAP1131AG-E-K9, and two AIR-LAP1242AG-E-K9.I could really have benefits of VLAN select feature, but I noticed that it's not working like it should. Two interfaces are in Interface group, but from 45 clients only few of them has IP address from one subnet, others have from second sub.I see requirements for this to work is 32 MB of flash on LWAP devices..I only have 16 MB.. upgrade of flash on devices or something ?
The 5508 is running code 7.0.116.0. I have created a group interface for 3 subnets and assigned the group to the WLAN. Clients are getting IP addresses in a round robin fashion. The issue or downside to this is if the lease has not expired before the next time the station connects to the WLAN it consumes an address on another subnet instead of grabbing the unexpired lease IP address on it's previous VLAN. It seems that the WLC determines the VLAN in the interface group before the DHCP request from the client in case the client already received a DHCP address that has not expired. This can be problematic since we have seen some iPhones requesting an address every 20 minutes thus consuming an address on every subnet in the interface group. Other than setting a lease time extremely low what can be done to address this?
I am calculating Cisco 4500X power consumption requirements to select appropriate UPS systems. I have 4500X switch with dual power supplies.which value should I take for power consumption calculation, in data sheet it has two values: AC Power Max Rating: 750W System Power Consumption: 330W nominal/400W max
Which values should I take, to calculate UPS systems capacity? And also I am interesting when 4500x has two power supplies what is power consumption?
Q: If i m going to do a Bonjour Gateway deployment, do i still need the vlan select feature on the wism's or is enabling multicast enough?
Details of the Q: I m working with WISM s and WISM2;s, 1130 and 3602 ap;s. Cores are 6509-E's.
i m going to implement a Bonjour gateway (which is an Aerohive ap, no wifi enabled, its just a Bonjour gateway) This ap is connected with a trunk port (to a 6509-E) and has the wifi client vlans on the trunk as allowed vlans. It also has an allowed vlan for AppleTV;s which will be wired devices. The Aerohive gateway gets an ip address in every wifi subnet, so far so good.
I was thinking that if i enable multicast : - globally on the wisms, with mcast-mcast distribution - on the SVI's for the wifi client vlans - on te SVI's of the vlans for cisco aps - on the SVI for AppleTV - SVI for wism management - SVI for the Bonjour gateway
then do i still need vlan select? Maybe a stupid question, but i m not sure how to interpret some things in this document.
I have a dual 5508 controller /NCS deployment. I deployed my first clean air AP today, a 3502I.
The Clean Air feature does not seem to work, however. "No information is available because CleanAir is disabled or otherwise not available for this radio. If no information is available and CleanAir is enabled then you can try rebooting the AP XXXX".The thing is that CleanAir is enabled on this AP.
I bought a RVS4000 Router last week. I configured two VLAN's (beside of the default one), VLAN ID 120 and VLAN ID 130. I configured an IP in the LAN section for both of them (192.168.120.1 and 192.168.130.1).
I then configured port 1-3 to be in VLAN ID 120 (Untagged) and port 4 to be the Trunk (VLAN ID 120 Tagged and VLAN ID 130 Tagged). The port 4 I connected a Cisco SLM224G. There I configured these two VLAN's too, and configured the uplink port as Trunk as well. The two network seem to be properly switched: I have access to 130 Hosts directly on the VLAN ID 130, and the other VLAN ID 120, I have access on all hosts connected to that VLAN ID as well (both, on the switch and the three ports on the router). On Layer 3, the RVS4000 is configured to route between the VLAN's. But I cant ping hosts on the other network! I configured the Router to be the default gateway... I think the source of that problem is the next one:
I can't ping from the Routers Maintainance Page to a host connected on Port 1-3 of the Switch (which is configured as VLAN ID 120 untagged). I reseted the router, and tested this simple use case again: Created two VLAN's, defined Port 2 to be in one of them, setted the IP's properly (192.168.120.1 for the Router on that VLAN), but stil, I cant ping from the Router to Host on that VLAN (Router=>192.168.120.10)! The other way around works (Host=>192.168.120.1)
The Routers Configuration:
WAN: PPPoE (works) LAN: VLAN ID 1: 192.168.1.1 no DHCP VLAN ID 120: 192.168.120.1 no DHCP VLAN ID 130: 192.168.130.1 no DHCP
[code]....
Wiresharks shows me no ARP requests on that interface too... The product seems not to work porperly when I configure a port to be in a VLAN untagged, and try to ping to a host connected to that interface.
I have Firmware 3.1.0.0 (Website says 3.0.5.0 is the newest...?)
I am trying to set up a guest SSID which will be separate from other corp SSIDs. I have read about this auto-anchor feature and I have a basic idea. Here are some questions about the network design
1. Can Cisco 5508 with 7.2.111.3 code do NAT? I mean can I use the anchor controller also as a gateway to Internet or do I need another device such as FW or router to do the job?
2. I want the guests to get IP address in 192.168.0.0/24 range. On the anchor controller I will need an interface in this range, correct? However on the internal controller I won't need this interface. The guest ssid will be associated with the management interface on the internal controller, correct?
3. I want the guests to get IP address from general DHCP server. Does DHCP request have to come out of the new interface in the 192.168.0.0/24 range? However this interface will be connecting with the FW. It won't have connection back to the internal network to reach the DHCP server. The management interface will have the route to the DHCP server. Is it possible to use management interface for this SSID but still let traffic to pass through the Guest interface?
i have a WLC (5508) - trying to enable AP group vlans based on instructions from: url...however, my problem is that i don't have the 'ap group vlans feature enable' checkbox.
I was searching a lot , but I couldn't find any good example, how to configure DHCP server for our wireless clients on Cisco Autonomous AP. I'm looking for example how to configure Dot 11 radios and BVI interfaces.
I have no problem to configure DHCP server on BVI 1 and VLAN 1 ( native VLAN ) interfaces, but there is a problem with other BVI's and VLANs. Maybe this feature isn't supported? Maybe DHCP server feature is supported to work just with default BVI and native VLAN?
I am very interested in the new 7.3 feature HA.Also I can read that it is recommended to connect the two WLCs directly. How to use a L2-VLAN between them, in fact to bridge a distance between two data centres?
I was wondering if it is possible to do dynamic VLAN assignment on the Cisco Wireless Controller 5508 without using Cisco ACS but use Microsoft NPS server instead?
I have a 5508 controller at our headquarters and am installing some 3502 AP's at a remote branch. Unfortunatly, the remote branch has a different Vlan setup for some reason and the vlan that is used for the WLC (90) is designated for telephony at this branch. Can I put the AP's on a different VLAN (10) without having any issues? I will still use DHCP option 43 to point them back to the controller. Below are the configs for the WLC interfaces and what I am proposing for the AP interfaces:
I have a 5508 WLC that for whatever reason cant take any DNS settings, but I still need to get some filtering on the public hotspot side of my wireless network. Can I put the DNS settings on the router that the circuit terminates on? This is the same router that the public vlan is defined on, I'm just not sure if I can put DNS settings in place for just one vlan, and how that'd work.
I have a network setup as live-ssid. It is using the Interface for VLAN 14. All APs under the default-group AP Group obviously allows clients to DHCP an address from VLAN 14. This is working fine.
I created a new AP Group called 3rd Floor. This has the live-ssid setup, but instead of using the Interface for VLAN 14 it is setup for the Interface for VLAN 50. I have all the APs on this floor moved to the 3rd Floor AP Group.
The problem is that 95% of the clients on 3rd Floor are still picking up DHCP addresses from VLAN 14. I checked and all the clients are connected to the APs on the 3rd Floor. Only 4 Clients are getting an address from VLAN 50.
I'm not sure if something is configured wrong or not since some devices pick up the new VLAN and the rest don't. I've manually reboot the APs on the 3rd floor to see if that would fix it.
We have two WLC's 5508. Following are its interfaces & details:mgmt 10.49.5.251 on wlc1 & .252 on wlc2 access p 10.49.6.251 on wlc1 & .252 on wlc2 there is no AP manager interface seen on both wlc's nor configured. both wlc1 & wlc2 are connected each to two switch ports, configured as normal trunk link each.LAG is enabled on both WLC's.
Im configuring a WLC 5508 ( version 7 ) with h-reap local switching.All is working , yet i wonder if the vlan mapping can be done better.Currently i need to go into each Lightweight Access point , enable h-reap, then set the native vlan , with the final step to map the vlan. This needs to be done for each AP. In an environment of 100's of APs i would take forever. ( i thought one of the main points of the WLC is centralized management).
We created a VLAN interface and a WLAN on the wireless controller (5508) and using it for Guest Wireless (Web auth), can we use the same VLAN and WLAN s for Wired Guests also?
Local DHCP (via the 5508) is for the guest network while the management and voice use the Windows DHCP server.
My problem, Voice and guest work fine. I have two SSID's (one 802.1X and the other PSK) that use the management interface that will not get an IP. I have enabled dhcp proxy from the cli on the controller. I tried with the management VLAN tagged and untagged.
I have got a wireless project with WLC main office and have 10 sites where ap's are there and ap's getting registerd .we need 4 ssid in all branches same .
ssid guest ssid scanner ssid user vlan 600 main office for scanner 192.168.1.0 in branch vlan 600 for scanner but ip is 172.16.1.0
and bgp is running . And customer is asking me not to edit the ip range or vlan or create new vlan . but in wlc am not able to create branch network 172.16.1.0 range interface and vlan 600 as vlan 600 i already created for scanner main office 192.168.1.0 So is there a way to do that .
Temprarly one site i did like created vlan 610 in branch no ip . And in main office interface vlan 610 given another ip range . and i created interface in wlc . from branch i can connect the ssid and getting ip . But they dont want to create any aditional vlan or another network . Customer dont have a smartnet contract . They recently baught 2 wlc 5508 and 40 ap 1142.
In our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) - Mobility Group: Same configs at both ends SSID Anchor : Anchor SSID on local and local SSID on Anchor. AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
I have three 5508 WLCs, running code 7.0.98.0 supporting 100+ LWAPs in H-REAP mode. The LWAPs are servicing 2-3 WLANs each. Some are using central authentication and local switching, some are configured for central authentication and central switching. When the LWAPs fail from one WLC to another WLC, the LWAP's lose all of their VLAN mappings and pick up the VLAN of the management interface on the new WLC.
All WLANs are configured to use the management interface on the WLC and the VLAN mappings are configured per LWAP on the H-REAP properties tab. The WLAN ID numbers and all the WLAN settings are the same across all 3 WLC's. I have created AP groups on all 3 WLC's and the AP group config matches across the 3 WLCs.
I can get the LWAPs to keep their VLAN mapping by creating an interface on the WLC with the VLAN ID of the locally switched/remote site VLAN and then setting the interface for the WLAN to the new interface. However, then the WLAN doesn't work, because the centrally located WLC doesn't have the remote site VLAN. It also seems to keep the VLAN mapping if I create the locally switched/remote site VLAN interface on the WLC , and point the WLAN to the management interface. This shouldn't be a necessary step though... In H-REAP with local switching, the LWAPs aren't using the interface on the WLC.
I found a note in the 7.0 WLC config guide that explains why the VLANs are picking up the management interface VLAN, but that same note says the VLAN mappings can be changed per LWAP/WLAN!
From config guide: For hybrid-REAP access points, the interface mapping at the controller for WLANs that is configured for H-REAP Local Switching is inherited at the access point as the default VLAN tagging. This mapping can be easily changed per SSID, per hybrid-REAP access point
Using H-REAP and been able to get the LWAPs to keep the VLAN mapping when failing from one WLC to another?
I have 2 computers running Slackware 13.37 and each has a T10/100 ethernet card/port. I want to create an ethernet network between them to pass text and possibly backup. I have given them 192.168.2.1 and 192.168.2.2. I want to be able to cut the connection at will. If I recall correctly there are 2 types of LANs one is NFS and NIS. Which would be the best for this purpose and where can I find a stepwise approach to setting it up?
After upgrading to LMS3.2.1 I cant select devices in Netconfig. There seams to be a defect in the selection box:you have Task selection twice (left task-selector headlined with Device Selector) instead of device-selector left and task-select right.What can we do to can use netConfig?
I recently purchased a RV120W router and I am having a problem selecting n speed under the wireless settings.
If I select B/G/N-Mixed mode then when I go to save the change I get B/G/N-Mixed B/G/N-Mixed in red letters and it does not save. If I select N only then when I go to save it says in red letters N only N only.
It does not matter if I pick 20 only or 20/40. It does not matter if I enable or disable U-APSD. It does not matter if I use the LSB or USB side.
Firmware Version:1.0.3.10 :When I got the router it had an older firmware if I remember correctly, and it would let me change to n speed.
i have a Cisco 2801 router which is running ssl vpn, previously my ssl vpn is working, but when i reset the config to factory default and restore the working config, then i experienced this problem;
Here is my crypto config, here is the error:
CRYPT O_PKI: Can not select private key (key name)
webvpn gateway web vpn-gateway host name sslvpngtwy01 ssl trust point key name in service.
I just saw the AVC feature in WLC version 7.4.100.0 and wonder, if there is a possibility to select a AVC profile per user, based on it's RADIUS authentication via ACS.For example:
- A user in group teacher can access youtube on SSID A - A user in group student can not access youtube on SSID A
560km long pipeline, intermediate station at every 30 or 40 kms. Couple of Ip phones, 2 or 3 IP camera, and few control signls (IP system) will be connected at every stations. Do not expect heavy data. Which one may be the prefered economical solution can I use
1. Ethernet network (Switch with Optical SFP ports at every site) 2. SDH equipment at every site 3. DWDM equipment (if so lower end)
