When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
View 4 RepliesI'm trying to use 1142 APs with a 2504 Wireless Controller through a D-Link 48PT GBIT XSTACK SWITCH (DLI-DGS-3120-48PC/SI).At any rate, the 1142 AP joins with the wireless controller ONLY when I attach it directly to the controller. When connected directly to the controller the AP functions normally and all is well. When I attach it through the D-Link switch, the AP flashs green several times, indicating that it can't find the controller. I suspect that there's some setting on the D-Link switch that's preventing the AP from seeing the controller.
View 6 Replies View Relatedmy access point 1230 fail to join the controller. The image is C1200-k9w7-mx.123-8.JA2. I tried to reboot it but it does not join to controller. How do I initiate the discovery process again to make this AP to join? Should I convert it back to autonomous AP and then LWAPP process again? I can ping the AP from the controller and the AP is in the same VLAN with controller.
View 3 Replies View RelatedI have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
View 5 Replies View Relatedtrying to join an 1142 on a WLC_SRE version 7.4.
the AP can ping the controller and vice versa. In the controllers GUI: Monitor>Statisticc>AP join, I can find the mac of the AP that I am trying to get joined.
the details of this mac show:
Last error occurred: Lwapp discovery request rejected
last occurred error reason: Too many concurrent AP image downloads
Last Join Timestamp:
About every 20 minutes 12 of 300 APs keep rebooting. I have tried moving them to different controllers. I have tried downgrading the code and then upgrading the code. I have tried replacing the AP. I have tried swamping out cables. They are all connected to a 3750 stack but plugged into different switches in the stack. Here is the result that I could capture when I saw it disconnect from the controller. This is the output from the AP:
DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.40.212:5246
*Jul 28 14:33:19.595: %WIDS-5-DISABLED: IDS Signature is removed and disabled.
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.655: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[ code].....
I have removed the ip addresses for security reasons.
I have an Aironet 1142 access point.
Is it possible to direct it to a webfilter hardware firewall for internet access. For example the IP of the firewall with webfiltering capabilties would be 192.168.0.1
We are hoping to provide customer wifi web access but need to filter what they can access.
I have a 1142 that I purchased that needs to be set to factory defaults so that I can configure it. I do an escape at the boot sequence and I get to the
ap:
prompt, the reset instructions that Cisco provides says that I should rename the old config.txt and reboot and that I will then be able to start my reconfig. The problem is that I can't find a config.txt file in the flash space:
Directory of flash:/
2 -rwx 260 Jan 1 1970 00:04:28 +00:00 env_vars
3 -rwx 112947 Apr 1 2011 15:17:10 +00:00 event.log
5 drwx 128 Mar 1 2002 00:01:54 +00:00 c1140-rcvk9w8-mx
9 drwx 256 Apr 1 2011 14:30:32 +00:00 c1140-k9w8-mx.124-21a.JHB1
8 -rwx 5144 Mar 1 2002 00:00:27 +00:00 private-multiple-fs
I checked in the directories listed above and still found no config.txt.
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
LAB1#sh runBuilding configuration...
Current configuration : 2321 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname LAB1!logging rate-limit console 9enable secret 5 $1$9EWD$kxrbg8KxikRFypOieKiZh/!aaa new-model!!
[Code]....
I'm using the Express Security Set-up tab to configure an Aironet 1142 (stand-alone) access point with EAP.
Objective is to make it a RADIUS client and have laptops authenticate through this access point to a Windows 2008 NPS (Network Policy Server) using computer (machine) certificates - EAP-TLS.
When I select "EAP Authentication" under the "SSID Configuration" I was literally floored to see mention of WEP encryption (a security joke) and no possibility to prefer some variant of WPA (well, apparently not with EAP).
WPA2-Enterprise is what I've selected for "Authentication" and "AES" for encryption in Group Policy (so the laptop clients automatically connect to the access point).
WEP? I bought a Aironet 1142 access point for WEP encryption? How can I configure this securely?
These are currently configured settings as displayed under the "SSID Table" heading:
SSID - "MYSSID"
VLAN - none
Encryption - WEP Mandatory !!!
[Code].....
We have a Cisco aironet 1162N connected to a Wireless Controller (LIGHTWEIGHT mode), the device failed and it needs to be replaced.We have a Cisco aironet 1142N in stock available to use.Can we proceed with the change just with disconnect the failed AP (model: 1162N ) and connect the new one (model: 1142N)? Or there is any other task to be done before the change? since the WLC manages the configuration for each AP.
View 8 Replies View RelatedThe GUI times out after 60 seconds.
Since the the "exec-timeout" setting has a default of 10 minutes (if I'm not mistaken), I don't think I could change the timeout value with that command.
Under the "Association" tab of the GUI, there is an "Activity Timeout" subtab and settings for 5 device classes, all set at 60 seconds.
I would guess the setting in question can be configured here. Is the client station device class what I'm after?
We have 5 pcs Cisco Aironet 1142 Access Points without controller at the same building. SSID is same for all of them. Our problem is client connected via wireless disconnecting randomly and continues working after a few seconds. IOS versions are same for all of them you can find detailed information about versions and configurations below.
[code]....
I am tryign to set up an Aironet 1142, I have created a reserrvation in DHCP using the MAC address, and the reservation shows as active, but I cannot connect to the device with my browser.
View 1 Replies View RelatedAironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
I have the problem that the AP1130 can not join to WLC2504.
Console Messages of AP1130:
*Aug 14 09:34:54.029: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Aug 14 09:34:54.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.x.251 peer_port: 5246
[Code].....
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
View 3 Replies View RelatedWe have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.
View 1 Replies View Relatedupgrading 300 Aironet 1100 series i.e. 1121 to newly bought WLC.Problem is 1100 are using SSC cert that I must do " debug pm pki enable " on each of 300 AP upgrading to extract its key-hash then copy to Security>AAA>AP Policy and repeat for 300 times. It is the impossible task.What would you recommend us to do the any other methods to achive the same goal?
View 2 Replies View RelatedI've noticed that I've had to prime a lot of the 1142 devices. When attached to the network they not seem to find the controller. The subnet has the scope option and I have other 1142s working but recent ap's seem to not work unless primed.
View 3 Replies View Relatedi converted the C1310 to LAP using upgrade tool. but the AP is not able to join the controller i was not able to view SHA Key in upgrade tool, so i ran the "debug pm pki enable " on the controler to get it. i'm still not able to view SHA key.
here is the output of debug command
*spamApTask0: May 21 15:07:43.527: 88:43:e1:d1:fc:9e Received LWAPP JOIN REQUEST from AP 88:43:e1:d1:fc:9e to cc:ef:48:b3:23:ef on port '13'
*spamApTask0: May 21 15:07:43.549: sshpmGetIssuerHandles: locking ca cert table
[Code].....
Network environment: (well configured and working fine)
2 AIR-WLC2106-K9 - Software Version 7.0.235.0
2 AIR-WLC2112-K9 - Software Version 7.0.235.0
10 AIR-LAP1252AG-T-K9 - Software Version 7.0.235.0
10 AIR-LAP1131AG-A-K9 - Software Version 7.0.235.0
I am adding a Cisco AP c3502-I-K9 to network.
It does not join any of the controllers.
Led is cycling through green, red, and off - that means "discovery/join process in progress" - never ends.
As wireless network is doing fine, I had only added to dhcp server dhcpd-subnet.conf file the above configuration:
class "Cisco AP c3500" {
match if option vendor-class-identifier = "Cisco AP c3500";
option vendor-class-identifier "Cisco AP c3500";
[Code].....
When we were installing some new APs, were plugged in to ports that were not configured on the WLC management VLAN.
This is the illustration
WLC management VLAN is VLAN 80 Management VLAN of infrastructure (Switches routers) is VLAN 10
The APs were plugged in to VLAN 10 and they were not able to associate themselves with the controllers.
Through research, those APs were getting a wrong IP address,
I did the Mode button, pressed for 30 secs, but this did not fix the problem, i thought it was going to clean the flash and bring the AP back to factory default I do not believe this happened.
We also added the cisco-capwap-controller.localdomain to our DNS servers, and then I rebotted the APs and still no luck.
What fixed the issue is we had to go to the DHCP server, release the IP addresses and we found those based on the macs of the APs. What is we do not have the mac addresses?
Now that I have the DNS entry created, if I plug in an AP on the wrong VLAN port will I be able to see it?
I am trying to get one AP to join the 2106 controller, it did join once then never again!! Now all I get is:
*Jan 22 11:16:22.088: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[Code]....
I’m having a problem of joining new Aps( Ari-ap1242G-E-k9 ) to the following wireless LAN controller. WLC details as follows,
Model No - AIR-CT5508-K9
Software Version - 7.0.116.0
AP Model - ARI-AP1242G-E-K9
AP console logs attached in Error.jpg file
This is a new setup and has not worked yet. I have multiple 3602 APs and one 2504 Controller. I thought initially I could plug-in an AP into one of two POE Ports on the 2504. During debug mode I see that it has low power, was suprised that the 2504 switch can't fully power the AP? Is this correct?Anyways I have another POE switch that I am using with ample power. The configuration for my wireless is that it will be completely segmented off of my internal network as this is for guest access. So DNS servers are external so I cannot create host entries for the AP to discover the controller. With that being said I believe that is just one way for the discovery process to happen. I have my controller management interface and DHCP scope on the controller on the same subnet plugged into the same POE switch. The AP does seem to get a DHCP address and I can ping the controller from the AP. I cannot get any further then that. I will not join the controller and the radios get disabled. I get messages such as "discovery response from MWAR is rejected. I will post a debug log of the AP and its bootup process. This is new equipment so I would assume the firmware is somewhat up-to-date and the 3602 AP is somewhat the latest model.
View 3 Replies View Related1) AP was originally running a standalone image. I booted it into a so-called ROMMON or AP mode (ESC is the right key to make it boot into this mode).
I found a recovery image in its flash - c1140-rcvk9w8-mx. I made the AP boot from it by using "set" command and I see that it start booting using this recovery image. Here goes the question. Do all AP settings matter ? E.g. when I run "set" command from AP I see the following:
ap: set
?=
DEFAULT_ROUTER=10.0.0.1
Default_router=10.9.99.1
ENABLE_BREAK=yes
[Code].....
Iam having trouble to conect my 1121-AG AP`s to my 4404 WLC.
My WLC version is 7.0.116.0.
I can see he AP is getting an IP address from the controller(internal DHCP). But from some reason they can`t connect to the WLC. I have tried many things such as:
1)reset to default settings
2) move the AP to Autonumos mode and back to LWAPP mode -- didnt work.
1 of my AP 1121AG is working properly.
I try to configure an AP1131 as OfficeExtend but unfortunately I receive the following message from the debug command on the WLC5508: (Cisco Controller)
*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Discovery Request from XX.XX.XX.XX:14847
*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Join Priority Processing status =
[Code].....
we have WLC 4400, we have 40 APs with model no. AIR-LAP1131AG-N-K9 but we recenlty got an AP with model no. AIR-LAP1131AG-E-K9 which is unable to join WLC.
View 3 Replies View Relatedwe are running 5500-series WLC and AIR-LAP1131 and AIR-CAP3502 APs. Now we are trying to have new 1600-series AP's working with 5500WLCs. How to get this combo working.
WLC is running 7.4.100 sw version, and AP will join to controller but it won´t work.[code] I can´t find any kinf off document about invalid event 10 & state 5 combination erros message.
Looking for some training on the 2500 series controller and 1142 or 1040 AP's preferably.
View 10 Replies View RelatedI am not able to join 1042 wireless AP with 2106 controller, even i mention that controller ip is 192.168.200.5 it try to join with controller on 192.168.200.6 ip address always. following are the error logs i can see on console.
*Nov 30 19:50:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:20.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Nov 30 19:50:21.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:21.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.200.6
*Nov 30 19:50:21.436: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
[code]....