Cisco Wireless :: 1524 - Unable To Store Capwap Fragment From (mac Address)
Nov 8, 2011
The following messages are filling up my syslog.
*spamApTask0: Nov 09 15:59:29.071: %LOG-3-Q_IND: capwap_ac_reassembly.c:652 Unable to store capwap fragment from 88:f0:77:b6:fd:00.
*spamApTask3: Nov 09 15:59:27.616: %CAPWAP-3-REASSEM_SPACE: capwap_ac_reassembly.c:652 Unable to store capwap fragment from 88:f0:77:b6:fd:00.
What could be causing it? I am using 1524 APs in a Mesh environment with a WLC 5508 (7.0.116.0) which is connected to a H3C switched network.
The MAC addresses above are from my MAPs and I don't think I am getting it from the RAPs.
Someone already do a bridge configuration with 1524 AP? I read Cisco documentation, and is not very clear regarding configuration on switch side.I will do a Bridge in trunking mode, so i want to know what is the VLAN i need to set as native vlan on the switch trunk port.Do i need to set the management vlan as native VLAN?
I've got a 1524 ap and it wont join my 2540 WLC. The messages I see in the WLC is RADIUS authorization is pending for the AP. I've added the MAC address of the ap under AP Policies using MIC. I dont have a radius server either so not sure how to tackle this one.When I run debug capwap events enale under the wlc I see the following messages:Discarding discovery request in LWAPP from AP supporting CAPWAP.
Release 6 controller 9 Mesh APs. 1524 (2x 5G radios, 1x 2.4G) and 1522 (1x 5G radios, 1x 2.4G) Designed for 3 linear hops and then a split to the rest.
AP1 = Root AP linear to AP2 Linear to AP3 Linear to AP4 equidistant to AP5 and AP6
The rest are further away from AP4, but have visibility back to AP 4 The issue is after an event (say a power outage) at AP4.AP5 uses AP3 as it's parent.That's okay during the power failure, but when AP4 comes back up, I want to force AP5 to switch it's parent to AP4.You may ask why, if AP5 can reach AP3 okay, it's okay to leave it that way.
So you can see it's desireable now that AP5 uses AP4 as it's parent.Over time, the system might figure it out, but our limited experience shows it seems to stick to the way it is.To complicate matters, sometimes we've found that it doesn't seem to reconfigure when the channel number has changed so AP5 can reach AP3, but AP4 (1524) comes up with a different channel on it's downlink radio.So, how can we force a mesh topology reevaluation/change for either 1 AP or the whole bridge group?I thought changing the bridge speed from "auto" to 54M (on AP3 above, for example) might force the attached children to rethink it, but it didn't seem to work (maybe I needed to wait an hour?).I also thought tweaks to "Radio Performance Profile" for radio might work. (not sure what to change, or how long to wait for a result)reseting APs and hoping they come back in a better topology is painful and slow.
I use Mac OS and connect to a wireless network at work, along with two other PC computers running Windows 7.Recently when I connect to the network, the other two computers (which also run F-Secure) get a message stating "A suspiciously small Datagram Fragment was detected".I have recently updated to OS 10.8 Mountain Lion, which seems to be when these messages started appearing.if it is my computer, should it happen and/ or is it an issue?
I am looking for example of ACL to deny overlap fragments,i have 3 messages on a router 3845 , follow cisco documentation it might be an attack on a host the recommendation was to create an ACL to deny overlap,
.Jun 25 07:35:49.097: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 183.216.33.100 destined to xx.xx.205.102 .Jun 25 07:35:49.101: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 183.216.33.100 destined to xx.xx.205.102 .Jun 25 07:36:29.566: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 183.216.33.100 destined to xx.xx.205.102
We setup some new CAPWAP AP 3602E in the network and configure the DHCP server option 43 , but the WLCs still cannot detect the APs , Do you know if there any new way to troubleshooting?
I´m looking to a project where we want to start using Autonomous AP with possibility to change to controller based on near future.
Will Cisco Aironet 1040 Series Access Points allow us to change from IOS to CAPWAP when needed? I read some posts about the oposite process (CAPWAP to IOS) so I think it´s possible on both way. Can some one confirm this to me?
We have had several APs disassociating from our controllers. The alerts say, Message: Access Point 'AP-xxxxx' associated to controller '10.x.x.x' on port number '0'. Reason for association 'Dot11g Mode Change. I have read several posts that point out that you should have QoS implemented to prioritize the CAPWAP traffic. I'd like to know if someone has implemented QoS and whether it has been successful in stopping the APs from disassociating. And if it has been successful do you have any configuration examples for the ports attached to the AP and controller as well as the QoS configuration?
We have several sites with AP1142's and 3500's. We have 2 5508 controllers. We are broadcasting 2 SSIDs of which one is in HREAP mode and the other is in local mode. Each of our sites have MPLS circuits.
Here is an example I found on Cisco which I believe can be used for CAPWAP as long as you change the ports to 5246 & 5247 instead of 12222 & 12223.
Example Router Configurations # This section contains router configuration examples to be used as guides when addressing CS6 remarking or LWAPP control traffic load. # This example uses LWAPP APs on the 192.168.101.0/24 subnet, and two WLCs with ap-managers at 192.168.60.11, and 192.168.62.11. (code)
I have an 1142 running capwap c1140-k9w8-tar.124-23c.JA4 that I am wanting to convert to an Autonomous AP.However, the AP does not seem to have an archive exec command to tftp downoad an new IOS.Is there another procedure that should be used ?
I'm looking at the spec sheet comparing Cisco WLCs and I see that the 2504 has a bandwidth max of 500mbps. Just to be clear, not all of the traffic from the APs goes through the WLC does it? In this setup, the APs would be plugged into a PoE switch as well as the WLC. The only traffic to WLC would be the CAPWAP tunnel, CleanAir info, etc right? All other traffic should just be handeld at the switch right?Also, does the 2504 licencing include CleanAir in the price?
I have to prepare an 3600 Capwap AP for autonomous functionality!
The following image was downloaded: ap3g2-k9w7-tar.152-2.JA
The release notes say: Site-Survey Only Mode for 3600, 3500, and 1550 Access Points You can install Cisco IOS Release 15.2(2)JA on Cisco Aironet 3600 and 3500 Series access points and on 1550 series outdoor access points to perform site surveys. This release runs on these access points with limited functionality. You can manually adjust these settings on the site-survey access points:
• Channel on each radio • Transmit power on each radio • Enable and disable the radios • Manually set basic and supported transmit rates • Enable advertised cell power in beacons to client to enable DTPC for doing active surveys • Enable and disable SSID broadcast in beacons • Enable open authentication
My Question is: Where can i find a instruction for downgrading an AIR-CAP3602i to Autonomous 3600 AP? Is it complicate to get the AP running, or what do i need for "downgrading"?
I am trying to configure two AP-management interfaces to accept CAPWAP on different ports using the option "Enable Dynamic AP Management". One of them uses public ip address. However, I getting the message "Ignoring discovery request received on non-management interface ..." on this.
I have a wireless network running with Controller WISM2 and I also have a NCS.I want to know if there is any way to look of individual log of CAPWAP and LAPWAP Access Points. It is better if I can see it through NCS.
I am facing this particular issue while providing Cisco unified Wireless solution to the customer. We are having CAPWAP 1252 APs controlled by WLC.
Scenario: 50 persons sitting in a hall with closely packed chairs using wireless simultaneously. Wireless access provided by patch antenna at a height of 11m from the user. As one AP can server 25 users, 2 APs are placed with antenna directions facing the compact users. Each users gets very good signal from these two APs.
Whether there will be serious interference and client association issues in this scenario? once one AP associates 25 clients, whether other 25 clients associate completely to other AP?
I understand that Cisco *wants* the APs to be directly connected to the new 3850.I have a few questions. Unfortunately, I think I know the answers. I just want to confirm.
a. When MA/MC is enabled on the 3850, does the 3850 start intercepting *all* CAPWAP packets it sees (much like CDP)? Even non-Cisco CAPWAP packets?
b. If I have a WLC 5500 upstream from the 3850, would APs hanging off a downstream 2960 be able to register to the 5500 through the 3850 when the 3850 is NOT in MA/MC mode?
c. If I have a WLC 5500 upstream from the 3850, would APs hanging off a downstream 2960 be able to register to the 5500 through the 3850 when the 3850 IS in MA/MC mode?
What I'm afraid of is:
a. yes, yes b. yes c. no
From the Q&A page:Q. Does the Cisco Catalyst 3850 support indirectly connected access points?A. No. The Cisco Catalyst 3850 switch will always terminate the CAPWAP tunnel locally. Pass-through mode or indirectly connected access point is not supported at this time.
I would like to confirm if it is possible to downgrade AP 1042 from CAPWAP to autonomous? I want to buy the AP model AIR-LAP1042N-A-K9. But i don't sure if in the future it could support this feature.
Clarify some points with capwap implementation, does all data and control traffic tunneled back to the controller and switching packets to the specific vlan will be done by the controller? so if i have 5508 controller, its maximum throughput will be 8 gbps (local mode AP), provided i have done LAG on all its ports to the LAN switch?
Can I convert a standalone 1600 access point to a CAPWAP based AP when I choose to deploy a WLC later?Cant see any literature on cisco.com that is specific to the 1600 APs
My WRT54GS worked perfectly till 3days .. everything works perfectly it just that i cannot get connection to itunes store neither over wifi or on my pc .. when i disconnected my router and connect my pc directly to the modem .
I changed my wireless modem yesterday and i was unable to connect over wireless for one pc which has win xp sp2. It was unable to acquire ip address. Working fine when connected through wire. I checked the forums and tried this:
"Now Go to Start/Run and type inetcpl.cpl and press enter/Connections/LAN Settings. Make sure all the boxes are unchecked. Now go to Start/Run and type ncpa.cpl and press enter. Right click the Local Area connection/Properties scroll down to Internet Protocol (TCP-IP)/Properties. Make sure Obtain an IP Address and DNS Server Address Automatically are both checked. Now go to Start/Run and type CMD and press enter. IN the Command Prompt type ipconfig /release and press enter. the IP Address changes to 0.0.0.0 Now type ipconfig /flushdns and press enter. Now type ipconfig /renew. Now type ipconfig /all. "
I had configured a Cisco 5508 series WLC. The APs used are Cisco 3502 LAP. The APs are configured to use DHCP for this ip addresses.
We had configured the DHCP server on the 2 Windows AD server previously and the APs were not able to get an IP address when the WLC was rebooted. To isolate the cause, we configured the DHCP server on a cisco 6500 switch. When we reboot the WLC, most of the APs are not able to grab an IP address. We had to remove and reconfigure the DHCP pool on the cisco 6500 for the APs to capture the IP addresses.
My colleague had feedback that they gotten a message that the DHCP pool had been used up. We tried to do a "show ip DHCP pool" but the switch did not recognise the command. IOS version used is Version 12.2(50r)SYS2.
We had a problem with the wireless client getting ip addresses from the windows DHCP server previously but problem was resolved after we disabled the DHCP proxy on the WLC.
What we are curious is why was the DHCP pool fully used on the Cisco switch and how could we check the number of addresses used other than running "show ip dhcp binding" and doing a count of the IP addresses?
Also why did we have to disable the DHCP proxy on the cisco WLC for the wireless clients to be able to get an IP address from the windows DHCP server?
We seem to be facing a number of problems with the DHCP functions for the wireless setup.
I have not been able to connect to the wireless connection. I have had some trouble with this in the past when booting up, but usually I can manually select our wireless network on my own and it works fine. But since last week, I have not been able to connect at all. On the Wireless Connection Status, it showed Limited or No connectivity. I tried the repair button in the Wireless Network Connection Status Support tab, and that told me that I cannot connect because I could not renew my IP address.I have tried a few different things, such as doing an ipconfig /release and /renew. Schools coming up, and itd be nice to have internet access on the laptop as well as our desktop.
I recently setup a 2504 WLC that has two primary WLANs (internal and guest) which get their IP addresses from a central DHCP server using the local router's broadcast forwarding. Things seem to be working well for the internal wlan, but clients on the guest wlan don't seem to be getting IP addresses. If I give the client a static IP they are able to communicate across the wlan okay.
It is worth noting that I am using LAG between the controller and router and this guest wlan is really just a regular wlan (with PSK) that has an access-list applied to force it to the internet only. The access-list should be allowing dhcp requests through, but in any case, I removed the access-list and it made no difference.
Here is a debug client for a machine connected to the guest vlan (vlan 33). The internal wlan is on the 10.10.10.0/24 network (same as wired and same that the AP's are connected to) and the guest wlan is 10.33.0.0/16. I don't understand why I am seeing the dhcp request come from the internal vlan/ wlan first and it gets an IP address on this network. I then see a request on the guest wlan/vlan at which point it appears to get a valid IP address on the guest network (10.33.0.0), but the client never sees this. [code]
I have a Latitude D810. recently unable to get connection on wireless or wired. Lights are on on port plug.I can see the network, when I run troubleshooter on the Proset/Wireless Wifi Connection utility It says the wireless adaptor failed to get IP address and could be due to authentication failure with the network, incorrect wireless security passwords or because of DHCP server malfunction.I did the passwords, checked the router, all is ok there. My new computer works fine on this wireless network as well as my wired desktop. I suspect this happened as a result of a security change that windows XP or whatever security soft ware that's in there did, but cannot figure out how to undo or reset this.
I'm trying to connect my Xbox 360 to Live by bridging my computer's wireless connection. I've done this before for a friend in a different city and it worked fine, and I felt very proud of myself for doing so. However when I try to connect here, the modem won't assign my Xbox an IP address. I've been into ipconfig/all and tried to manually assign the same IP address to the Xbox but to no avail. Same deal with the alternate MAC address option.
To speed things along here's the readout from my ipconfig/all:
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:UsersSamsung>ipconfig/all
In our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) - Mobility Group: Same configs at both ends SSID Anchor : Anchor SSID on local and local SSID on Anchor. AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
I have a wrt54gs v7 and a wap54g v3.1. Both have latest firmware on them. I set the access point to act as a repeater and entered the mac address from the router (It said to use the lan mac address. is that right?). I have them set on same subnet with static ip addresses. They have same wireless ssid and password with one using channel 10 and the other using channel 2. I can receive an ip address from the router and connect to internet. I cannot get an ip address from the access point. I tried a static ip on the computer and it will connect, but I don't have internet. Am I missing something in the setup? Can this access point act as a repeater for this router?
