Cisco Wireless :: 1242AG / 2106 - Decrypt Errors Occurring In WLC Log
Dec 10, 2008
we see a strange message in our WLC logs, which occurs quite often (>10 times a day):Decrypt errors occurred for client [MAC-Adress] using WPA key on 802.11b/g interface of AP [MAC-Adress]The MAC-Adresses of the affected clients are varying as well as the APs reporting the error.The clients are Notebooks, Cisco IP-Phones and Nokia-DualBand-Phones.
Even more frequently we see the following message in the log:
%ETHOIP-3-PING_TRANSMIT_FAILED: ethoip_ping.c:227 send_eoip_ping: Failed to tx Ethernet over IP ping rc=5.
We use TKIP as Encryption and EAP-Fast as well as LEAP as Authentication (Cisco ACS).The WLC is an 2106, the APs are 1242AG. We don't recognize any problems placing calls or talking over these phones. It's just these messages in the log that concern me.
View 7 Replies
ADVERTISEMENT
Jun 13, 2010
I am getting error messages for clients:
11 Mon Jun 14 09:11:56 2010 Decrypt errors occurred for client 00:13:ce:54:57:3c using WPA key on 802.11b/g interface of AP 00:16:9c:91:97:c0 12 Mon Jun 14 09:11:56 2010 Decrypt errors occurred for client 00:16:6f:91:d8:60 using WPA2 key on 802.11b/g interface of AP 00:16:9c:91:97:c0
These are only occuring for clients that are disconnecting....
They can reconnect after a WLC reboot....
We have swapped APs.....
I have seen this error in other forums but it says not to worry about it. There has to be a connection between this and clients getting disconnected. We have anywhere between 10-50 clients on the system at any one time.Is this a client issue (nic firmware, version) or is this an error in the controller??
AIR-WLC2106-K9
IOS ver: 6.0.196.0
View 4 Replies
View Related
Feb 23, 2011
I am seeing a lot of the following showing up in the WLC trap log:
Decrypt errors occurred for client <CLIENT-MAC> using WPA2 key on 802.11b/g interface of AP 00:17:0f:81:ad:90
we are using WLC runninn 7.0.98 and ACS 4.0
View 2 Replies
View Related
Sep 13, 2011
I have a AIR-AP1121G-A-K9 running c1100-k9w7-tar.123-7.JA2 (Autonomous)We have monitoring setup with Orion NPM and we consistently see output errors, Transmit discards and big buffer errors The users at the site have not reporting any issues but was wondering how to prevent these or are these normal?What causes the output errors on Wireless Radio ? How to troubleshoot further ?
Radio0-802.11G
Total Output Errors 0 47749
Small Buffer Misses
4 misses
139 misses
[code]....
View 1 Replies
View Related
Sep 11, 2012
I´ve implemented 2 Cisco ISE v1.1 in HA to run MAB and 802.x Authentication / Authorization. Using Local ISE DB and Active Directory as an External Identity Source for wireless and wired users and devices. This was working fine 2 weeks ago after finishing installation.
My NAD devices are a Core SW 6500 for wired users (there are no access SW, just the Core for the whole network, its a small office) and a WLC 2405 for Wireless Users.[code].....
View 3 Replies
View Related
Dec 14, 2012
I have 2691 Router conencted to Internet and it is doing Nat.
This connects to 3550A Switch which has connection to 1811W Router.
I setup VPN between 1811W and 3550A.
3550A has connection to 2691 via ospf.
OSPF is running between 1811w and 3550A.
1811
1811w# sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
[Code]....
View 7 Replies
View Related
Feb 16, 2011
Getting this error on the data center 2581 (12.4(24)T) from a GRE/IPSEC tunnel, remote branch is 2811 running 12.4(25d)
%CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=
The tunnel has been up and working okay for months, nothing has changed on the config and the key is correct. Traffic is following but remote users are complaining of performance issues. A wireshark shows checksum errors and lots of packet resends. Remote ISP has checked the circuit and says its clean.The data centre router has quite a few tunnels but only 1 causing this issue. From the head end router -
sh crypto ips sa | b x.x.x.x
current_peer x.x.x.xport 500 PERMIT, flags={origin_is_acl,} #pkts encaps: 15129, #pkts encrypt: 15129, #pkts digest: 15129 #pkts decaps: 13346, #pkts decrypt: 13346, #pkts verify: 13346 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 0, #pkts compr. failed: 0 #pkts not decompressed: 0, #pkts decompress failed: 0 #send errors 1, #recv errors 1992
Can a VPN module go bad like this? I've tried disabling the branch onboard engine and using software but it doesn't work.
View 1 Replies
View Related
Mar 7, 2013
I have a problem in my IPSec tunnel. One of the routers (Cisco 861) doesn't encrypt the packets but does decrypt the incoming ones from the remote peer (RV042). In the access-list for the wan interface I deny the traffic between the subnets and in the vpn access-list I permit the traffic.
View 4 Replies
View Related
Dec 14, 2012
I have 2691 Router conencted to Internet and it is doing Nat. This connects to 3550A Switch which has connection to 1811W Router.
I setup VPN between 1811W and 3550A. 3550A has connection to 2691 via ospf.
OSPF is running between 1811w and 3550A.
1811
1811w# sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
[Code].....
View 5 Replies
View Related
Oct 7, 2012
On our conference floor, AP 1242AG already exist but I am going to add AP 3602i to increase wireless coverage. . Any issue or concern with this type of setting?
View 23 Replies
View Related
Apr 5, 2013
is this possible, i need to convert a 1242AG Autonomous back and forth this weekend to use for a quick project for testing. i need to do: take the AP into LWAPP mode (i know how to do this with the aironet utility) take the ap from LWAPP back into a AP mode so i can use it as my access point again. [code]
View 3 Replies
View Related
Sep 28, 2010
I need to bridge from our office to our shop that is around 800 feet away. Here are the Details
I need the 2.4 ghz antenna for client access (Iphones are not compatiable with 802.11a) The locations are 800 feet away but are line of sight. I need to use the 5ghz antenna for the bridge i have 2 aironet 1242ag's I have 2 2.4 ghz AIR-ANT3213 antennas (planned for client access) I have 2 2.4 ghz AIR-ANT2506 (maybe useless for this)
My problem is that the range of all the listed 5 ghz antennas. None that i can find will bridge 54mb over the 5ghz radio for greater than 170ft
The closest that i can find is AIR-ANT5195. If i put these on both sides and it is outdoors line of sight, will the best i can hope for is functioning and 6mb
Are there options on 5ghz that i am missing.
View 2 Replies
View Related
Mar 9, 2012
I am in the process of moving our office and part of the task involves relocating our existing wireless access points. They are all 1242AG's running the c1240-k9w7-mx.124-10b.JDA3 IOS. I would like to change the security on the access points to WPA 2 but that selection is not available. I think upgrading the IOS will solve this problem but I am not sure. So I guess I have two questions:
1) Does this Cisco model support WPA 2 ?
2) If so what IOS do I need to load to make WPA 2 available?
View 3 Replies
View Related
Nov 7, 2012
I need a temporary additional broadband connection at home and I was thinking about a bt openzone hotspot connection...
I have a cisco 1242AG access point which can do bridge mode. The BT openzone thing requires a username and password. Is it possible to connect the 1242 in bridge mode to bt openzone?
View 7 Replies
View Related
Jun 12, 2012
What would be the ramnifactions of using AIR-1242AG-A-K9 (g radios only: no b clients) and AIR-LAP1231G-AK9 (g radios: only no b clients) with AIR- ANT1728 (non diversity antennas) on the WLAN. Some of the APs 1242/ 1231 will be with in line of site of each other.
View 1 Replies
View Related
Nov 15, 2006
I am new to cisco products and I am trying to setup an aironet 1242ag. I have figured out the ip given to it but, cannot access it with a browser.
View 6 Replies
View Related
Apr 20, 2010
I have been trying to upgrade my WLC 2106, but it is stuck at rommon/grub mode.The steps are as follows
rommon #5> tftpdnldROMMON Variable Settings: ADDRESS=192.168.100.1 SERVER=192.168.100.10 GATEWAY=192.168.100.10 PORT=Ethernet0/0 VLAN=untagged IMAGE=AIR-WLC2100-K9-6-0-196-0.aes CONFIG=
[Code].....
View 4 Replies
View Related
Feb 28, 2013
My question is about the maximum possible transmitting power in a Cisco 1242AG-E-K9.I did an update of my AP on a new ios version and since then, the maximum power for me is limited to 17 dbm. I check this within the console and the "show controllers dot11radio0 | include Power:" command. I thought that I had 20dbm before the update, but unfortunately I can't proof this by myself because I have no AP left with the old firmware.
Is it possible that the upgrade did this? I read about the regulatory domains for the transmitting power. I live in Switzerland, so I thought I could use 100mW if I want to. I read it's not possible to use the 100mW at each speed but I think I should stull be able to select the 20dbm/100mW or am I missing something?
View 3 Replies
View Related
Oct 20, 2012
I have an issue with a loss of connectivity after 10-15 seconds. I have a Cisco WLC 2504 controlling a Cisco 1242AG AP. The following is the topology.
Wireless Client -> 1242AG (AP) -> Port 3 WLC 2504 -> Port 1 WLC 2504 goes to fa0/2 on 3560. Port fa0/1 goes to ASA5505 (Inside)
All devices are on VLAN 10 10.50.1.0/24. AP is getting DHCP just fine and is associating with the WLC just fine. I connect my laptop to it and it connects just fine.
I then ping the gateway (ASA) 10.50.1.1 or the layer 3 interface on the switch 10.50.1.7 and it is fine for about 10 seconds, then it just dies then comes back in a few minutes and then goes away again. I have looked for duplicate IP's and can find none in any arp table.
It I just ping the controller 10.50.1.20 it is completely stable. I have moved the WLC directly off the ASA5505, moved the switch port, changed cables and the problem follows. I have even moved the AP to be directly off the switch instead of the WLC and the problem still occurs.
View 9 Replies
View Related
Feb 25, 2013
I have an existing 1242AG AP in a remote location, I have full access to it. I have a new 1242AG that was ordered but the client forgot to order antennas for it. Is there a way I can find out the exact model of antennas that are connected to the in place AP at the remote location??
View 2 Replies
View Related
May 19, 2011
How can I configure the wireless not to be shown for users,but used by them? On a Cisco 1242AG I mean when someone do a wireless discovery not see my wireless name, but typing the name be able to connect it.
View 5 Replies
View Related
May 22, 2013
I have an AIR-LAP1242AG-A-K9, serial number FTX1623B0RX. I just need to know how old this unit is. (I haven't attached it to our Cisco account, so I can't open a TAC for it.)
Boot Version 12.4.13.0 IOS Version 12.4(23c)JA5Mini IOS Version 3.0.51.0
View 2 Replies
View Related
Jun 10, 2010
I have 2 1242AG APs setup with one SSID and no vlans configured. The APs are connected to a switch along with my DHCP server. Clients are able to connect to the SSID but are unable to get an IP from the server. Clients can plug into the switch and get an IP. If I configure a static IP on the wireless card, the client works fine.
Is there something I'm missing on the AP to allow DHCP requests to pass through? IPhelper?
Here is the AP info: AIR-AP1242AG-A-K9 12.4(21a)JA1
View 7 Replies
View Related
Mar 11, 2012
I have 1242AG. how many clients can be connected to this AP??
View 4 Replies
View Related
Nov 14, 2012
I'm having a little issue with some Cisco Aironet1242ag WAP's. I receive a call at least twice a month stating that some of the WAP's are not giving out internet connection. What I always do is go to my patch panel and disconnect those WAP's not working and connect them back again so they can power cycle. These WAP's are connected to a Cisco3750g. Once the WAP's boot up, the users can connect to the WAP and connect to the internet.
I don't know if these WAP's are filling up with some information that causes the access points to not connect to the WAN.
View 7 Replies
View Related
Mar 22, 2011
how I can find out what version of SSH that a cisco 2106 wireless LAN controller is using?Is there a CLI I can type to figure that out or do they only support one version?
View 1 Replies
View Related
Apr 10, 2012
We recently purchased a bundle of 3 1042N AP's with a 2106 WLC. I am able to get the controller on the network and am able to manage it through the https web gui. I am now trying to add one of the AP's to the controller and am getting an infinite loop on the AP upon bootup. I tried looking up the solution but could not find a good article that pertained to the problem I was having. One thing I did notice is the time on the AP is way offset, but when I do a clock set to change it to the actual date it doesnt stick on the next reload.
Here is the output:
using ÿÿÿÿ ddr static values from serial eeprom ddr init done
Running Normal Memtest...
Passed.
IOS Bootloader - Starting system.
FLASH CHIP: Numonyx P33
[Code].....
View 10 Replies
View Related
Jun 19, 2011
I hava installed a WLC 2106 with 4 1252 Aps. Some laptops has dual radio wireless card, but others has just 2.4 Ghz card.
I have one SSID with WPA2/AES and 802.11X authentication.
With the laptops with dual radio the speed is in 300 Mpbs, but when is single 2.4 radio the max speed is 70Mpbs
If i use a 1252 ap with autonomous IOS, SSID with WPA2-PSK/AES this laptops single in 2.4 works to 144 Mbps
is there a knowed issue about 802.11x in 2.4 Ghz or i need to make a different configuration to can work in 2.4 with a speed of 144 Mbps?
View 2 Replies
View Related
Jun 9, 2012
I got my final assignment from school, and my teacher asked me to configure 2 Access Points (1200 series) directly on a Wireless Controler (Cisco 2106). I can't ask my teacher for any questions, cause he doesn't know how to configure it also, THAT's why he's asking me to do it.I've learned a lot of things about the default static interfaces (the "management" and "ap_manager" interface), but i can't seem to fully understand how to configure it.I want to use the Internal DHCP server of the WLC. How I can get those 2 Access Points working on the WLC. I only seem to get DHCP issues.
This is what i've done:
- Leave the configuration of the "management" and the "ap_manager" default (172.16.1.30 and 172.16.1.30). Bound to port 1
- Made a new interface "AP1" with IP-Address 10.0.0.10 (/24), default gateway 10.0.0.1. Primary DHCP server: 172.167.1.30
- Made a new interface "AP2" with IP-Address 192.168.1.10 (/24), default gateway 192.168.1.1. Primary DHCP server: 172.167.1.30
- Made 2 DHCP scopes within the 192.168.1.0 and 10.0.0.0 networks.
For some reason, when i boot up both AP's, the won't get any DHCP address.
View 13 Replies
View Related
Mar 18, 2013
I had a 2106 running 4.x software. It was upgraded to 7.x but will not read the config. How to downgrade the software?
View 4 Replies
View Related
Dec 2, 2012
We have a 2106 that was configured by a former employee. No one left in the company is qualified to configure it. The wireless guest access used to work fine. We'd configure a guest user account. They would connect to the guest wireless, open a web browser and login. For some reason now there is no prompt for login. People can connect to it and get an IP address, but that's it. No login prompt or anything else from there.User Login Policies was set to 0 and I put it to 8. That didn't do anything. Under Web Auth > Web Login Page it's set to Internal (Default).
View 5 Replies
View Related
Jul 7, 2011
I setup a mini wireless LAN network lab with a not for resale 2106 wireless lan controller and a sales air-lap1242ag access point. I do not have a DHCP and DNS in my lab environment. I have configured the WLC with the basic configuration using the CLI wizard, i also configured the WLC as a DHCP server for clients that will be connecting to the APs associated to the controller.
I powered up the AP and connect the ethernet port directly to the controller, the controller issued an IP address to the AP, the AP downloaded a new operating system from the controller but failed to join the controller.
I check both debug message on the controller console and the trap messages on the controller's GUI and it say the AP could not download a configuration from the controller and it is beacuse of invalid license. Below is the trap message:
Configuration Phase Statistics Requests ReceivedResponses SentUnsuccessful Request ProcessedReason For Last Unsuccessful AttemptLast Successful Attempt TimeLast Unsuccessful Attempt TimeLast Error SummaryLast AP Message Decryption FailureLast AP Connection FailureLast Error Occurred Last Error Occurred ReasonLast Join Error Timestamp
Also, I tried to log into the GUI of the AP using the both the username and password ''Cisco'' but I cannot get into the device. I can only get in through the CLI. In the CLI, almost all the commands I enter gives an error the it is disabled. I don't know what to do any more, I want to know if the access point is faulty or i am not doing the right thing.
View 4 Replies
View Related
Mar 4, 2010
I have a WLC 2106 and 1242AG.it's a hotspot configuration.So in WLC, under controller tab, i have set my ap-manager ip, my management ip, my virtual ip (1.1.1.1) and my hotspot network range ip.I set also a DHCP range for the hotspot network.
In Wlans tab, i set my hotspot wlan, with no layer 2 security and for layer 3, i set none for layer 3 security and i use web policy authentication.I use local authentication and i created under security menu, under AAA tab, 3 local net users.
From pc number 1, i get ip from dhcp, and i have authentication web page, authentication is ok and i can surf on web.From pc number2, when user 1 from pc 1 is connected, i get ip from dhcp but i have not the authentication web page, i have not DNS resolution.when i try https:1.1.1.1/login.html, i have no answer.
And when user 1 is de-authenticated, the user 2 can surf on web.So only one user can surf at the same time. not good for a Hotspot.
View 12 Replies
View Related
