Cisco Wireless :: 2106 WLC - Failing To Console Into Device
Jun 6, 2013
I have been having problems with a 2106 WLC which seems to have developed a fault. I cannot console into the device (although I can console into the ap1131ag showing no fault with the RJ45 - 9 Pin) and the device is no longer showing up in any of the possible I.P ranges.
Its showing a power light and a status light on the front panel, the Ethernet ports light up like a Christmas tree when a device is connected and the power supply is putting out a solid 47.7v.
Has anyone experienced anything like this before and can anyone suggest anyway of breathing life back into it?
View 5 Replies
ADVERTISEMENT
Sep 26, 2011
I’m trying to configure EAP-Fast following the guide [URL].But when I try to download the certificate, I receive the follow message: “Error installing certificate.”At logs I see:
*TransferTask: Sep 27 14:00:09.479: %UPDATE-3-CERT_INST_FAIL: Failed to install Webauth certificate. rc = 1
*TransferTask: Sep 27 14:00:09.479: %SSHPM-3-KEYED_PEM_DECODE_FAILED: Cannot PEM decode private key
- Remembering I’m doing Device Certificate.
My environment is:
WLC 2106 Windows 2003 with AD and CA When I try to use line commands I can’t too.
View 2 Replies
View Related
Jan 10, 2013
I have upgraded to prime LMS 4.2.2 (from 4.0.1) and can not perform system or device upgrade. Using wireshark I can see why. it looks like LMS is trying to go to this old web [URL] to get software. I believe this was fixed years ago in bug CSCto46927.
Can I reapply bug fix CSCto46927 on 4.2.3 or is there another fix?
View 32 Replies
View Related
Jun 26, 2012
I was trying to add an Access Rule then Nat rule, they applied ok then i lost connection to my ASA 5510.I cant ping device ip, i cant connect via console , only can acess via Management port, i have pasted Running config. [code]
View 4 Replies
View Related
Apr 20, 2010
I have been trying to upgrade my WLC 2106, but it is stuck at rommon/grub mode.The steps are as follows
rommon #5> tftpdnldROMMON Variable Settings: ADDRESS=192.168.100.1 SERVER=192.168.100.10 GATEWAY=192.168.100.10 PORT=Ethernet0/0 VLAN=untagged IMAGE=AIR-WLC2100-K9-6-0-196-0.aes CONFIG=
[Code].....
View 4 Replies
View Related
Mar 22, 2011
how I can find out what version of SSH that a cisco 2106 wireless LAN controller is using?Is there a CLI I can type to figure that out or do they only support one version?
View 1 Replies
View Related
Apr 10, 2012
We recently purchased a bundle of 3 1042N AP's with a 2106 WLC. I am able to get the controller on the network and am able to manage it through the https web gui. I am now trying to add one of the AP's to the controller and am getting an infinite loop on the AP upon bootup. I tried looking up the solution but could not find a good article that pertained to the problem I was having. One thing I did notice is the time on the AP is way offset, but when I do a clock set to change it to the actual date it doesnt stick on the next reload.
Here is the output:
using ÿÿÿÿ ddr static values from serial eeprom ddr init done
Running Normal Memtest...
Passed.
IOS Bootloader - Starting system.
FLASH CHIP: Numonyx P33
[Code].....
View 10 Replies
View Related
Jun 19, 2011
I hava installed a WLC 2106 with 4 1252 Aps. Some laptops has dual radio wireless card, but others has just 2.4 Ghz card.
I have one SSID with WPA2/AES and 802.11X authentication.
With the laptops with dual radio the speed is in 300 Mpbs, but when is single 2.4 radio the max speed is 70Mpbs
If i use a 1252 ap with autonomous IOS, SSID with WPA2-PSK/AES this laptops single in 2.4 works to 144 Mbps
is there a knowed issue about 802.11x in 2.4 Ghz or i need to make a different configuration to can work in 2.4 with a speed of 144 Mbps?
View 2 Replies
View Related
Jun 9, 2012
I got my final assignment from school, and my teacher asked me to configure 2 Access Points (1200 series) directly on a Wireless Controler (Cisco 2106). I can't ask my teacher for any questions, cause he doesn't know how to configure it also, THAT's why he's asking me to do it.I've learned a lot of things about the default static interfaces (the "management" and "ap_manager" interface), but i can't seem to fully understand how to configure it.I want to use the Internal DHCP server of the WLC. How I can get those 2 Access Points working on the WLC. I only seem to get DHCP issues.
This is what i've done:
- Leave the configuration of the "management" and the "ap_manager" default (172.16.1.30 and 172.16.1.30). Bound to port 1
- Made a new interface "AP1" with IP-Address 10.0.0.10 (/24), default gateway 10.0.0.1. Primary DHCP server: 172.167.1.30
- Made a new interface "AP2" with IP-Address 192.168.1.10 (/24), default gateway 192.168.1.1. Primary DHCP server: 172.167.1.30
- Made 2 DHCP scopes within the 192.168.1.0 and 10.0.0.0 networks.
For some reason, when i boot up both AP's, the won't get any DHCP address.
View 13 Replies
View Related
Mar 18, 2013
I had a 2106 running 4.x software. It was upgraded to 7.x but will not read the config. How to downgrade the software?
View 4 Replies
View Related
Dec 2, 2012
We have a 2106 that was configured by a former employee. No one left in the company is qualified to configure it. The wireless guest access used to work fine. We'd configure a guest user account. They would connect to the guest wireless, open a web browser and login. For some reason now there is no prompt for login. People can connect to it and get an IP address, but that's it. No login prompt or anything else from there.User Login Policies was set to 0 and I put it to 8. That didn't do anything. Under Web Auth > Web Login Page it's set to Internal (Default).
View 5 Replies
View Related
Jul 7, 2011
I setup a mini wireless LAN network lab with a not for resale 2106 wireless lan controller and a sales air-lap1242ag access point. I do not have a DHCP and DNS in my lab environment. I have configured the WLC with the basic configuration using the CLI wizard, i also configured the WLC as a DHCP server for clients that will be connecting to the APs associated to the controller.
I powered up the AP and connect the ethernet port directly to the controller, the controller issued an IP address to the AP, the AP downloaded a new operating system from the controller but failed to join the controller.
I check both debug message on the controller console and the trap messages on the controller's GUI and it say the AP could not download a configuration from the controller and it is beacuse of invalid license. Below is the trap message:
Configuration Phase Statistics Requests ReceivedResponses SentUnsuccessful Request ProcessedReason For Last Unsuccessful AttemptLast Successful Attempt TimeLast Unsuccessful Attempt TimeLast Error SummaryLast AP Message Decryption FailureLast AP Connection FailureLast Error Occurred Last Error Occurred ReasonLast Join Error Timestamp
Also, I tried to log into the GUI of the AP using the both the username and password ''Cisco'' but I cannot get into the device. I can only get in through the CLI. In the CLI, almost all the commands I enter gives an error the it is disabled. I don't know what to do any more, I want to know if the access point is faulty or i am not doing the right thing.
View 4 Replies
View Related
Mar 4, 2010
I have a WLC 2106 and 1242AG.it's a hotspot configuration.So in WLC, under controller tab, i have set my ap-manager ip, my management ip, my virtual ip (1.1.1.1) and my hotspot network range ip.I set also a DHCP range for the hotspot network.
In Wlans tab, i set my hotspot wlan, with no layer 2 security and for layer 3, i set none for layer 3 security and i use web policy authentication.I use local authentication and i created under security menu, under AAA tab, 3 local net users.
From pc number 1, i get ip from dhcp, and i have authentication web page, authentication is ok and i can surf on web.From pc number2, when user 1 from pc 1 is connected, i get ip from dhcp but i have not the authentication web page, i have not DNS resolution.when i try https:1.1.1.1/login.html, i have no answer.
And when user 1 is de-authenticated, the user 2 can surf on web.So only one user can surf at the same time. not good for a Hotspot.
View 12 Replies
View Related
Jan 21, 2012
I am trying to get one AP to join the 2106 controller, it did join once then never again!! Now all I get is:
*Jan 22 11:16:22.088: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[Code]....
View 31 Replies
View Related
Oct 23, 2011
I have a problem with Cisco WLC 2106 (SW: 7.0.98.0) and LAP1262. The client roams to new AP, associates with the new AP and authentication (WPA2 with EAP-TLS) runs fine until WPA2 key exchange.
The first WPA2-Key-paket from AP (1 / 4) is sent twice. On a closer look at those packets with Wire shark, i've found out the first is encapsulated into a 11n-frame (A-MSDU). The resent frame isn't. This figure shows the first WPA-Key-packet:
The next figure shows the 2nd key-packet, without 11n-encapsulation: The problem, that occurs a very long roaming-time with about 5 seconds. As you can see on second figure, the second wpa-key is sent 5 seconds after the first.
Some details:
Client: Tablet PC with Intel 6230 agn
Controller: Cisco WLC 2106
AP: LAP 1262
Controller SW: 7.0.98.0
Encryption: WPA2-AES
Authentication: EAP-TLS
This problem occurs just on 5-GHz interface with 40 MHz channel bandwidth.
View 4 Replies
View Related
Oct 13, 2011
after an unplanned power outage the WLAN in our office has stopped routing. Clients can associate and get an IP address from the DHCP server on the controller but cannot get past the controller. A PC on the LAN can ping the default gateway of the SSID (dynamic interface) but cannot ping the client. Attached is a diagram of the setup. I am trying to find out how to add a default/static route via the L3 switch that the controller is connected to but am unable to do so either through the CLI or GUI. The controller (AIR-WLC2106-K9) is operating on ver 5.2.157.0.
View 5 Replies
View Related
Jul 6, 2011
I have a very basic WLAN setup with a 2106 controller and 3 (will be 4) 1140 APs.As part of securing the network I have been testing the rouge detection. The system has no trouble detecting and shutting down honeypots. I would like to also automatically shut down Rouge on Wire points. The system sees my test AP just fine. And I have it completely open (no security). But the system never detects that the rouge is on our network so no action is taken. I can connect just fine to the test AP with no encription using DHCP and communicate with everything on the network just fine.Is there some setting I am missing that allows the APs to detect that an AP is on wire?
View 2 Replies
View Related
Sep 10, 2012
Can I configure a mobility groups between 2106 Wireless LAN Controller and 5500 Wireless LAN Controllers?
View 8 Replies
View Related
Oct 17, 2011
I have a WLC 2106 with 3 APs. Everything works and users can connect, but the throughput seem to be lower than it should (it is around 8Mbps and should be around 30-50Mbps). And all speed and duplex has been accounted for.
I am trying to understand the stats that I see for the 802.11 MAC counters I under the Wireless APs.on the controller.
That screenshot is attached. I see high numbers for the following areas:
- Tx Failed Count
- RTS Failure Count
- FCS Error Count
what these mean and what could cause this? Maybe these are normal and not a concern.
View 1 Replies
View Related
Oct 15, 2008
basic question regarding the switchports on the rear of the 2106 controller. How do I configure them for use? I'm using port 1 as my uplink to a trunk port on an ASA and my network traffic to the management interface and guest vlans is all working as expected, but when I plug anything into any of the other ports, they get no addresses from my dhcp server (the ASA). I see nowhere to configure which vlan to tie the ports to or anything. I suppose I'm more used to a catalyst or ASA where I can just pick the ports and vlans (or trunks) I want to attach them to. [code] Again, all of the existing network functionality (private and guest network) is all functioning fine so I'm pretty confident I have the above configured correctly, I just cant make any progress on the WLC ports 2 - 8.
View 13 Replies
View Related
Apr 17, 2011
I have the following equipment
1 x AIR-WLC-2106-K9 (IOS = 6.0.199.4)
4 x AIR-LAP1131G-E-K9 (IOS = 12.4(21a)JHB1)
All configued ok with 2 SSID's associated to 2 VLANS all operates as expected.However every few 2 to 12 hours the WLC crashes, locks up.Unabale to contact via telnet or browser, will not respond to ping.The LAPs remain up but the WLANS go off air etcOnly a physical restart of the WLC will bring it back.
View 14 Replies
View Related
May 23, 2013
I am new to configuring WLC's. Our small business (5-15 wireless devices + 15ish wired) is trying to use a hand-me-down WLC and AP for our office wifi. We have a WLC 2106 directly connected to a 1231G-A-K9 via the WLC's port 8 POE. I am aware Cisco does not recommend this method, but we do not have a configurable switch at our disposal. We do not need separate VLAN's therefore I have left everything untagged. The AP has a static IP setup to allow communication to the WLC since it did not pull one from the WLC.
The AP is getting the correct network information and is showing up on the WLC monitoring page. I am able to connect to the new wireless network and able to ping between devices connected to the same AP. Now here is my question/issue. I cannot get communication from the WLC/AP to the rest of our network via an unconfigurable Netgear switch (FS605v3). After connecting an open switch port from the Netgear switch to port 4 on the WLC, I am lost. I tried giving port 4 on the WLC an address on the office network, but I receive an error stating "the IP information conflicts with another device".
Here is what I have setup on WLC
Virtual - 1.1.1.1
MNG IP-192.168.10.10
AP MNG Ip- 192.168.10.11
Subnet - /24
Gateway - 192.168.10.1
DHCP - 192.168.10.250
DNS - 192.168.10.250
Static Address on the AP's fa0-192.168.10.15
Attempted port 4 setup on WLC
VLAN identifier 0
IP- 192.168.10.25
Mask - /24
Gateway - 192.168.10.1
Port - 4
Our office network setup:
Subnet - /24
Gateway-192.168.10.1
DHCP - 192.168.10.250
DNS - 192.168.10.250
View 1 Replies
View Related
Jan 6, 2013
I have a question to migrate a customer from a 2106 controller to a 2504 controller. Can I use the configuration file with both controllers having the same version?
Or is there another way not having to do it again manually? The old configuration is OK, only the hardware is end of sale.
View 19 Replies
View Related
Mar 17, 2013
I'm using the 2106 in one environment with ROOT AP and MESH AP and when i put these in the Bridge mode, when one client connects to them it isn't working well, sometimes i can reach the client and sometimes not.
I tried it with an Access Point that connect with the ROOT AP or MESH AP and will do an ethernet bridging with another wired client (camera), what happens is very strange because sometimes i can reach the bridge client and sometimes i can reach the Access Point that is doing the bridge. I can't access the two clients at the same time. In this situation i lose the images from camera when i have access to the Access Point and when i get the images from camera i lost access with the Access Point.
When i put the ROOT AP in the H-REAP mode Local Switching with AP 1142 or AP1552, the clients connects well and the bridge mode in the another access point works without problem, when i put the H-REAP in Central Switching i have the same problem.
I'm using in the 2106 WLC the version 7.0.240.0.
View 11 Replies
View Related
May 18, 2012
I would like to get webauth bundle sample to create custom page for our AP controllers but I'm unable to find the sample .tar within the WCS itself.Some other WCS manuals has references in them that says there should be link to download sample from WCS but clearly 2106 hasn't got one.There's one in download section "webauth bundle 1.0.2.zip" but this is for registered partners and costumers, we are not registered as partners and cannot download the sample ourselves.
View 2 Replies
View Related
Apr 10, 2013
I am trying to lab something up and I believe I am doing something incorrectly. My management VLAN works fine, the AP on port 7 finds the controller fine, but my VLAN 80 doesn't seem to be mapped to port 2. I mapped a test WLAN to the VLAN, and setup a DHCP scope, and a client can get on the WLAN, acquire an IP address, etc. I thought I coudl then map that VLAN (80) to port 2 and have it go out a cable modem. Doesn't seem to be working that way, however.
View 3 Replies
View Related
Nov 29, 2012
I am not able to join 1042 wireless AP with 2106 controller, even i mention that controller ip is 192.168.200.5 it try to join with controller on 192.168.200.6 ip address always. following are the error logs i can see on console.
*Nov 30 19:50:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:20.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Nov 30 19:50:21.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:21.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.200.6
*Nov 30 19:50:21.436: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
[code]....
View 4 Replies
View Related
May 11, 2012
I have a Cisco WLC 2106 and I got 2 access points working, conected the controller (Aironet 1130AG), but I would like to know if I could connect a host or a laptop to the 2106 WLC.
I have a router conected to the WLC using the port 1, and the APs are in ports 7 and 8, but when I plug a pc in the port number 3, I do not get and IP from DHCP server, (DHCP is giving by the router). Im not sure if the 2106 WLC ports are for connect other network devices like a pc... I would like to know if there is a way to configure the controller to conect a host or a pc to the ethernet ports.
View 5 Replies
View Related
Dec 10, 2008
we see a strange message in our WLC logs, which occurs quite often (>10 times a day):Decrypt errors occurred for client [MAC-Adress] using WPA key on 802.11b/g interface of AP [MAC-Adress]The MAC-Adresses of the affected clients are varying as well as the APs reporting the error.The clients are Notebooks, Cisco IP-Phones and Nokia-DualBand-Phones.
Even more frequently we see the following message in the log:
%ETHOIP-3-PING_TRANSMIT_FAILED: ethoip_ping.c:227 send_eoip_ping: Failed to tx Ethernet over IP ping rc=5.
We use TKIP as Encryption and EAP-Fast as well as LEAP as Authentication (Cisco ACS).The WLC is an 2106, the APs are 1242AG. We don't recognize any problems placing calls or talking over these phones. It's just these messages in the log that concern me.
View 7 Replies
View Related
Jan 11, 2012
One of my customers asked me to configure a WLC 2106 and 2 LAP 1131AG (lightweight) for corporate/guest Wifi. Basically they want to implement a good wifi connection for internal use and a guest one with different QoS. The two lans should both have dhcp but they must bet kept segregated so that none from the Guest wifi can access corporate resources.
Since i've never configured a WLC from scrath i lightly supposed it would be quite straigh forward as routers and switches from Cisco.Unfortunately i was totally wrong.
I've downloaded the "Cisco Wireless LAN ControllerConfiguration Guide" (Soft.Release 6.0 June 2009) and after i red it i made up this workflow
for the configurations:
1) Configure Controller: (via serial)
- Set Management Interface parameters (IP- SM - Def GW - Dhcp server IP)
- Set Ap-Manager Interface parameters
- Virtual Interface parameters
- Set Admin Credentials
- Dhcp Configuration (internal and/or external)
2) Ap registration on the controller
- Configure vlan with dhcp request redirection to the dhcp server
3) Configure Wlan following customer's requests.
- Configure Wlan Auth for Corporate/Guest Wifi
- Configure QoS for both Wlans
Unfortunately i'm experiencing issue while trying joining the AP to the WLC.It appers that the IT guy of my customer tried to configure one of the Ap.In that Ap's flash i find files referring to a "mesh" configuration like: [code]
View 11 Replies
View Related
Mar 3, 2013
I've a WLC 2106 and it is running IOS version 7.0.240. I am trying to setup a wireless mesh and used the Ethernet bridge port on the MAP to extend the network. The wireless mesh works fine but I can not get the switch to work that is connected to the ethernet port on the MAP.I'm using two different Access points. I'm using a Air Cap 3502i as the RAP and a Air Lap1142N as the MAP.The switch port that is connected to the RAP and MAP is configured as the following:
switchport mode trunk
switchport trunk native vlan 2
switchport trunk allowed vlan 10,20,30,40
[code]....
The wireless mesh between the RAP and MAP works fine. I can connect a device to the MAP wirelessly and access the network with no problem but I can not get anything to work that connects to the switch that is connected to the MAP ethernet port.
View 2 Replies
View Related
Oct 20, 2011
I was handed a Cisco 2106 WLC and 6 AIR-LAP1131AG-A-K9 acess points a few days ago and was told to get it working. My problem is i have never worked with cisco products, so i have been stumbling setting this up. Here is what I did get working Web interface into the 2106 WLC I flashed the 2106 from version 4.x to 7.0.116.0 I get green connected lights on numbers where AP are plugged in I configured the ap-manager area to settings of
Port Number=6
Vlan Identifier=0
IP Address=10.0.0.254
Netmask=255.255.248.0
Gateway=10.0.0.1
Primary DHCP Server=10.0.0.18
[code]....
I have logged into the console port on both the WLC and AP but i do not understand how to see reports or enable reports on either device to see what is wrong. I read that the AP can be set to lightweight or anon mode but i do not know how to check to see what mode they are currently in.
View 1 Replies
View Related
Jul 8, 2012
I'm having little success migrating our older Aironet1231 to our new WLC 5508. The 1231 is currently registered as a LAP to a 4400 WLC and I'm in the process of moving away from this controller to the new one. I've pasted the output of the error messages I'm getting below. At this point, I'm stuck and not sure how to get around the "Failed to parse CAPWAP packet" error.
I'm getting these messages when I have:
debug pm pki enable
debug capwap errors enable
I initially got this error, but got passed it when I allowed SSC in the 5508 (Security -> AP Policies)
sshpmGetIssuerHandles: SSC is not allowed by config; bailing...
Now I'm getting these:
*sshpmLscTask: Jul 09 11:13:11.516: sshpmLscTask: LSC Task received a message 4
View 3 Replies
View Related
