Cisco :: WLC5505 7.2.103 No Clients Able To Connect
Jul 3, 2012
Basically, yesterday while hanging some 3602's going to a different controller, I started getting task reports of wireless phones not working. However, due to the area of complaint I mistakenly assumed it was due to me causing havoc in the area with AP replacements. Then the issues started to spread with Carts and Cow's and other various devices not able to connect until it started affecting me. I was not able to connect to any SSID at all, kind of nerve racking when you talking ICU/NICU area's in a hospital. Once I got to a wired device, my first thought was to move the AP's to a different controller to at least try and get things back up and then work on the controller to see what was going on. However, in trying to get the AP's to move, most of them wouldn't. In hind sight, I wish I had just shut off the etherchannel port on the 6500 that this wlc is on and force the AP's to move that way, but with people standing over me I ended up just rebooting the controller. Of course, once it came back up the AP's reattached to it but everything was working fine. I went ahead and moved the AP's off of it to another controller for now but am searching for answers. About to start digging into bug reports, but am concerned with this line of code causing the issue and worried about moving to 7.2.110.
View 4 Replies
ADVERTISEMENT
Jan 5, 2012
Once a client connects to my VPN (VPN Client 5) they can not see anything other than the outside interface. If I ping anything on the LAN for example I get a reply from the outside interface. I can not see any WAN either (even by IP) My LAN clients can see the clients within the VPN Pool. I would like all traffic to flow through the VPN. I have tried split tunneling to verify if the internet would work and local lan would stay connected. It does work but I was still unable to access anything on the remote netwok. I am not sure if I am missing a nat command or something simple.
The current setup is as follows. 881 Router with windows 2008 radius authentication. The client is authenticating and reciving an IP address from the local ip pool. Please see below for the running config.
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
set transform-set myset
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
View 12 Replies
View Related
Jun 18, 2012
I have a ASA5505 and it has a vpn set up. The VPN user connects using the Cisco VPN client. They can connect fine (the get an ip address from the ASA), but they can't ping the asa or any clients on the network. Here is the running config:
Result of the command: "show running-config"
: Saved
:
ASA Version 7.2(4)
!
hostname ASA
domain-name default.domain.invalid
[code].....
what I need to add to get the vpn client to be able to ping the router and clients?
View 3 Replies
View Related
Nov 5, 2012
We currently have an ASA 5520 communicating with 10 ASA 5510's, all on static outside addresses. I was asked to add 5 additional 5510's on dynamic address. All worked well in testing until it was decided that some of the dynamic clients needed to talk to each other.
My testing shows packets just dying in the 5520.
View 1 Replies
View Related
May 10, 2013
I just purchased a WAP 321 and followed the setup wizard. Its powered by a poe switch. The issue I have is no clients can connect to it. I updated the firmware. I reset to factory and tried setting it up manually till no one can connect. I dont understand what im doing wrong here. Unless its a bad unit. I will have about 10 to 15 clients connecting to it. Its the only ap in the building.
View 12 Replies
View Related
Jun 3, 2012
I configured the VPN on the ASA, I can not get a client to connect to the ASA
: Saved:ASA Version 7.2(2) !hostname domain-name enable passwordnamesddns update methodddns both!!interface Vlan1nameif insidesecurity-level 100ddns update hostname ddns update dhcp client update dnsip address 192.168.1.1
[Code].....
View 2 Replies
View Related
Sep 6, 2011
I bought 3 of the Aironet 1231g access points and cannot get any clients to connect to them. I have tried everything from an Iphone, Droid2, Win 7 and XP laptops with built in wireless G cards. All say that they cannot connect to the wireless network. I have two setup currently, one on Vlan 1 that I have configured the way I want with WPA2 enterprise. The other one is just one I setup while playing around.
View 4 Replies
View Related
Dec 13, 2011
Purchased an 887 my my home office. ADSL ATM0 and Dialer get an address from my ISP, have tried to configure NAT but none of my clients can browse the internet. I can't ping outside the network but I can ping clients internally as my clients are connected via a switch, which is plugged in before the 887. I can get access to the router via the Command Line and CP Express and Config Pro seems to work.
Building configuration...
Current configuration : 8900 bytes
!
! Last configuration change at 12:47:16 NewYork Wed Dec 14 2011 by elrooko
[Code].....
View 11 Replies
View Related
Feb 1, 2011
I have 4 desktops cat5 to Dlink DIR 615 router. All work fine. Any wireless clients, laptop or netbooks, see the desktop computers for a while then disconnect somehow. All machines can see the Internet through the router at all times. The desktops disappear from the laptop/netbooks but the wireless machines can be seen from the desktop computers but clicking on them gets 'Access Denied' message after a wait.3 desktops = XP, 1 98SE. All laptop/netbooks = XP
View 2 Replies
View Related
Oct 12, 2011
I want to know why all my wifi client connect only in G protocol, even if the wireless card supports N, even if all the AP in one of my buildings is AP3500. In the WCS config for my two WISM controller the 802.11a network status is disable, the 802.11n network status is enable and the 802.11b/g Network status is enable and 802.11g support is enable. even in that part of config the 802.11n is enable.
In the High throughput 802.11n section all the rates is check to be supported.
What config I'm missing to get my 802.11N client to get connected with this protocol and not on G protocol.
View 2 Replies
View Related
Jul 28, 2011
I have an ASA 5505 that has had a working configuration with several AnyConnect clients using dual authentication for weeks now. My normal process for adding new users has been to configure the user in both authentication databases and the onboard certificate authority, have the user connect to the outside IP of our firewall with IE, download the P12 cert after entering their OTP and then connecting once the cert's imported to download AnyConnect.
I had to add a new user a couple days ago and curiously IE (8) on their computer could not connect to the outside interface of our firewall, as if the laptop had no internet connectivity. I could telnet to port 443 from a command-line, and could even hit it with Firefox (which I ended up doing to download the P12 cert...). I can hit other SSL-enabled and standard websites from IE as well as Firefox. In addition, because AnyConnect seems to rely on the same mechanism to connect as IE does, AnyConnect can't connect either.
I then tested using a previously working laptop fully configured with AnyConnect and a certificate and now it can't connect. There are other previously working laptops that still work, which only makes the issue more clouded.
In watching the logs on the firewall, when one of these non-working computers attempts to connect they hit the firewall, a connection is opened and the SSL handshake is started, but it's never finished and the connection is torn down. Working computers complete the handshake as expected and a tunnel is opened.
I've checked IE forums for this issue and none of the fixes found therein seem to apply or work. Since this issue seems to only affect IE and AnyConnect's ability to connect to my firewall I have to assume the issue is there.
View 1 Replies
View Related
Dec 10, 2012
What's wrong with this config ? Clients can see the wireless ssid's but cant connect.
View 1 Replies
View Related
Jan 17, 2012
I have a computer (client) and I have connected to gateway and internet but I'm not connected to other clients.
View 3 Replies
View Related
Nov 4, 2012
I have a 4402 which is connected to a 4506 Switch int Gig 3/1 via a trunk port. The Managment and AP-manger interfaces are on vlan 6 [code] I have a 1142N AP also connected to the switch and it pulls a DHCP IP Address and configs etc and registers to the WLC. It too is on Vlan 6 and it is connected to the 4506 on int gig 4/33 which is an access port. [code] I am doing local authentication, so i have added users to the WLC.. My problem is that the first client that connected was able to get an IP address and connect to anything internal and external.I then connected another client on another laptop and that client could connect but not get an IP address, it just self assigned.When i look at the clients i can see the MAC address of both Clients on the WLC, but doing a show mac address-table dynamic i only see the MAC of the client that works properly. The client that doesnt get an IP has no entry in the 4506 switch.I am stumped, from what I understand, is that the 2nd clients traffic is being trunked to the WLC , hence it has the MAC address. But I dont know why its not getting a DHCP assigned IP address.
View 37 Replies
View Related
Aug 25, 2011
I am currently having some problems on our 5520 ASAs. The problem is the IPSec VPN clients not being able to connect. We have had an issue twice this week where this happened. Earlier in the week we had folks not able to sign in, but some folks who were connected already stayed connected. The ASAs had been up for 200+ days and no changes have been made to it recently. At that point I had to reload the ASAs so users could start signing back in to it. Today we had a similar issue, but I didn’t have to reload the ASAs. The issue‘resolved’ itself. The VPN clients are getting Error code: 433 and the ASAs are getting Reason: Peer Address Changed when this occurs.
ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz version 8.3.2.
View 5 Replies
View Related
Nov 15, 2011
I have a WAP4410n which has been configured with a single SSID since implementation several weeks ago with no issues. I am now trying to add a second SSID and not having any success. Originally the second SSID was not being assigned a MAC address and thus not being broadcasted. After upgrading firmware to 2.0.4.2 I now see a MAC address associated with second SSID and it is being seen by clients, but they still cannot connect. I reset the AP to default settings and reconfigured from scratch but still no luck. I have two of these APs, the other one is still at FW rev 2.0.1.0 and has same issue (it does have MAC address associated with second SSID so I didn't bother upgrading firmware yet).
I have tried a few different authetication options, including disabling authentication, to no avail. Question - I do not see an IP address associated with the second SSID - is that the problem and if so, how do I fix that?
View 1 Replies
View Related
Apr 9, 2013
I have a AP1240 Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.4(10b)JDA3, RELEASE SOFTWARE (fc1), and want to configuration WPA2 without using Radius.But my clients can not connecto to AP. On AP always display messages "%DOT11-7-AUTH_FAILED: Station 0026.6609.e55d Authentication failed"
Here is my configuration:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AC1P1F08
[code]......
View 10 Replies
View Related
Jul 6, 2012
I have a Netgear WNDR4500 running the stock firmware, acting as a router for my home. I also have 2 routers that are flashed with DD-WRT (Linksys WRT54G and Asus WL-520GU) running as client bridges. The Netgear is 192.168.1.1 and the other 2 client bridges are 192.168.1.2 and 192.168.10.3. The Netgear router is performing DHCP giving addresses from 192.168.10.100 to 192.168.10.254. I have numerous machines connected to the Netgear, wirelessly and wired, and numerous machines wired to each client bridge. All machines have IP addresses that are 192.168.10.100, 192.168.10.101, 192.168.10.102, etc... Everything is working fine, but I have one question: When I access the Netgear router, it shows the client bridges as clients, machines that are wired and wireless to the Netgear router are listed as clients, but the client list does not show any clients that are connected to the client bridges. I assumed that since the router is performing DHCP that all clients would show up.
View 2 Replies
View Related
Feb 5, 2013
I have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.i've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
View 15 Replies
View Related
Jun 2, 2013
I am using two AIR-CT2504-K9 controllers
Product Version.................................. 7.4.100.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 1.0.0
Firmware Version................................. PIC 16.0
and 20 access points AIR-CAP2602I-E-K9 Cisco IOS Software, C2600 Software Version 15.2(2)JA, RELEASE SOFTWARE (fc1) LWAPP image version 7.4.100.0
I created 3 SSID:
1. [WPA2][Auth(PSK)]
2. Web-Passthrough
3. [WPA2][Auth(PSK)]
Configuration on controllers is identical. High Availability is configured on all APs. First controller controls only those APs witch have SSIDs with [WPA2][Auth(PSK)], second controller is basically for APs with Web-Passthrough SSID. From the start I have problem, some clients who try to connect to SSID with PSK are dropped or can’t connect entirely, but when they go to the next AP they connect successfully. For example I have Android smartphone and Lenovo laptop, smartphone connects successfully but laptop fails connection to the same AP, but when I take it to other AP it connects successfully. Sometimes smartphones can’t connect too. When devise can’t connect to one SSID it can’t connect to other SSID either. Sometimes there are up to 20 clients tying to connect to the same AP.
When I look into logs, I get these two messages:
Jun 3 08:58:58 192.168.224.1 WLC1: *dot1xMsgTask: Jun 03 08:58:51.176: #DOT1X-4-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:456 Max EAPOL-key M1 retransmissions exceeded for client 7c:e9:d3:f4:74:4d
[Code].....
View 2 Replies
View Related
Aug 20, 2012
AP has static IP with 2 SSIDs setup, one for guest one for domain access(both have the same issue), tried with multiple devices, both win and MAC, all show "connected but with limited access", ipconfig on those devices, all show ip "169.254.X.X", but event log on AP indicates that "authentication has been completed sucessfully".
using RADIUS server for authentication. management VLAN ID "1", SSID VLAN ID "11"
View 5 Replies
View Related
Mar 14, 2011
I have an WRVS4400N configured as a WAN and Wireless router and can connect clients (PC's and laptops) wirelessly thru out the office. The clients that are farther away (10-15 meters and on another floor) connect at a very slow rate i.e. less than 10MBps. I have a WAP4410N configured as a repeater. Immediately after powering up it will allow connections to the 4400 and clients work fine for a 1-2 minutes, then the connections drop and I can no longer connect through the 4410. Nor can I ping the 4410 through the 4400 although right after the pwr cycle I am able to ping the 4410. After another pwr cycle the 4410 is available for another short period.I have attached some info on the configuration of the units and I also have the configuration files available.
View 4 Replies
View Related
Sep 27, 2012
i just installed a pix515e ( ios ver 6.2) in my network. and the vpn users can connect to it from the internet successfully but they aren't able to connect to any of the internal resources. some other informaion: i configured nating between the internal network (10.0.0.0/24) and the internet and another static nat policy between an internal resource through another public ip address on outside interface. but right now i need to let the vpn clients to connect to my internal resources.
View 5 Replies
View Related
Jun 12, 2012
I have a 5508 WLC and 40+ LAP1142N APs spread across 19 locations that allows staff to connect to our private network via wireless. I recently deployed about 40 new laptops all identical make and model HP ProBook 4530's and all have the same client setup for the wireless. Out of those 40 laptops I have 4 that will not connect to the private network. However, these same laptops will connect to my public, open wireless network without issue. In addition to the 4 that will not connect all the others will prompt twice for network authentication.Now, I have about 10 other laptops that are not the HP model and all connect without issue and without dual propt. I don't think this is a wireless network issue but could be some type of issue with this model of laptop.
View 8 Replies
View Related
May 29, 2013
While trying to connect to WiFi at remote sites APs, the connection is getting time out.User are getting error as 'Unable to connect to <WiFi-SSID>' The APs at corporate office are functioning properly and user are able to connect to the APs.
Wifi Controller: 2504 Software ver: 7.3.101.0
Authentication 802.1x
View 7 Replies
View Related
Jan 5, 2012
I am using the WAG-120 N as an AP and switch for 3 laptops and 2 desktops. Our department is assigned only one Static IP from our server, so only one pc can connect to the server and the internet. I use the first lan port of the Wag-120N as a WAN port and i assign the Static IP address there, along with the subnet, default gateway and DNS addresses. The connected clients are assigned then an ip address from the router's DHCP (192.168.1.10x), but cannot connect to the internet. How can i configure the router to allow the clients to connect?
View 9 Replies
View Related
Sep 27, 2011
Is it possible to establish the WDS-connection on 5GHz and connect Wireless-Clients on 2,4GHz with these Acces-Points?There are some threads concerning performance-issues in combination with WDS on 541 - any news on this with the actual software-release?
View 1 Replies
View Related
Dec 19, 2012
Region : Netherlands
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 3.13.23 Build 120820 Rel.73549n
ISP :
I recently purchased an TL-WDR3600. Setup was easy. Both wlan channels work perfectly. All clients can connect to the internet and access my lan connected NAS. I have some wlan devices which needs to be connected sometimes by http: port 80 and also by telnet or ssh. I can connect from a wlan device to a lan device. But NOT from a wlan to wlan or a lan to wlan. I allready diabled WMM and tried some other wlan settings, like disable one channel, changing the channel width etc.
My setup is : ADSL device -->(192.168.1.X dhcp) WAN TL-WDR3600 --> to LAN&WLAN (192.168.0.X dhcp and some LAN connected with static 0.200, 0.210)
View 6 Replies
View Related
Nov 3, 2010
I had a simple PPTP VPN server running behind my old DLink router. When I installed the E3000 the VPN clients could no longer connect. The port forwarding for PPTP is turned on and VPN passthrough is enabled. The PPTP server reported GRE47 checksum failed. The linksys chat tech was not beneficial. How to get a PPTP route to work?
View 5 Replies
View Related
Sep 16, 2011
I've just set up my E4200 and none of my wireless N clients connect at full speed. Irrespective of what wireless settings I use they all seem to connect at around half speed. My laptop for example insists on connecting at 144.4 Mbps though it supports 300 Mbps. Periodically it will connect at 300Mbps, but the next time the I reconnect or I make a settings change on the router (irrespective of what the change is) the speed drops back to 144.4. Clients that support 150Mbps connect a consistent 65Mbps.I'm running FW 1.0.02, though the problem existed with 1.0.01 (I hard reset before and after upgrade) and I've tried re-flasing the 1.0.02 firmware.Any combination of channel, width, mode and security type etc doesn't seem to influence the performance. Nor does distance (the client above is 3ft from the router).My previous router was located in exactly the same place as the E4200 and I had a solid full speed connection all over the house.
View 6 Replies
View Related
Aug 10, 2010
Can the access point AP541N connect to wireless clients with 802.11g/a simultaneously?
View 1 Replies
View Related
Feb 29, 2012
I have a strange issue on my ASA 5510 (8.4). I can't ping or connect to the VPN clients but the VPN clients can ping/connect to any inside resources. I have checked all the NAT extemtion entries.
View 3 Replies
View Related
Oct 1, 2012
(with certificate)------>ASA(with SSL VPN enabled)---------->ACSserver
Client authentificates on ASA via certificate, and after successful authentification I want to Authorize my clients on ACS with DACL association per client. ASA get username from CN-field in certificate, and sends to ACS, ACS respond to ASA authentification fail, password incorrect, and no DACL assign happends. How can I define in ACS that it should be only authorization process without any password, just username from certificate?
View 1 Replies
View Related
