i have configured wlc 2504 .in that i have configured two interfaces.one is guest, 2nd is internal user, the pblm when user try to connect with that contain ssid user not getting ip address,
i have connected only one link between core to wlc on port 1.for guest interface i used port 4.but no physical link.
Ok, so with my WLC2504 implementation, I use the 4 ports to physically segment my wireless networks. Here is my setup:
Port 1 (Management) - Internal IP so I can manage the WLC from our internal network (Untagged)
Port 2 - Connected to our core stack and tagged with VLAN 14
Port 1 and 2 are both connected to the same core stack
Port 3 - Connected to a RV016 Linksys which is connected to our fiber connection to the outside (Untagged) - External connection for laptops
Port 4 - Connected to a Linksys wireless router (with wireless disabled) (Untagged) - External connection for smartphones
The TAC engineer I talked to just told me that I can only have one untagged interface on the WLC. If they are physically connected to different switches, thus physically segmenting the network, should it matter?
The wireless works just fine. What I am having issues with is getting a client that is hard-wire connected to the RV016 to get a DHCP address from the WLC.
I have two ethernet cards (from same equipment) that arent acquiring IP Address after instalation of WLC 2504.I dont want (yet) to disable DHCP proxy on WLC.
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
[code].....
Cant we create a guest user login with more than 30 days lifetime? In the lifetime field we can enter maximum 99 but it only allows up to 30
View 5 Replies View RelatedWe are planning to setup a new WLAN using Cisco 2504 WLAN Controller and 1142N Access Point.Is it possible to create individual user accounts for the users those who all are connecting to this WLAN Network by using the 2504 WLAN Controller ?
View 11 Replies View RelatedI have a 2504 WLC and 1042 ap's. Everything worked great in my test enviroment (of course). Now when I want to deploy the wireless, the ap's are not getting and ip for the windows dhcp server.
I have option 43 configured in dhcp, sub option 241>ip address of the controller
I have my A record in dns, cisco-capwap-controller.
*Mar 1 00:03:17.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
*Mar 1 00:03:27.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:27.054: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 00:03:37.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:47.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:57.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:04:07.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
I am wondering if the folowing is a valid configuration:
WLC2504
AP2600
I need 3 SSID/VLAN, 1 for corporate devices, 1 for coporate smartphones, 1 for guest.
Port 1 on the 2504 should be used for management and corporate devices and connect to the corp network. Port 2 is for smartphones/guest and will be connected to a Cisco ASA 5515 that is connected to a second ISP.
Corp devices should get IP from an Windows DHCP. Smartphones/guest should get IP from the WLC. Is this possilbe? I read this in a document "To use the WLC as a dhcp, you need to enable DHCP proxy as it is required." Some how I am imagining that this will mess with the Windows DHCP. Is it better to use the ASA as DHCP for smartphones/guest?
My problem, in a nutshell, is that clients do not get an IP from an external DHCP server when connected to a guest VLAN.
My current setup is:
Native VLAN 1 (192.168.2.x)
2008 DHCP Servers
2504 WLC
[Code].....
The guest WLAN just uses WPA and a PSK and is set to interface vlan101 There rest of the 2504 config is default.
The ports that the WLC and APs are connected to are tagged on the correct VLANs. (is that even necessary for the AP now?)
Ive changed the interface config around a hundred times now with no luck. No matter what a client will not get an IP.
Could this be due to the 2504 and ASA both acting as DHCP relays? Ive tried setting the IP of the DHCP on the dynamic interface to many different things with no luck.
I have a Cisco Wlan Controller 2504 with 1042N AP (3-nos) every thing was working fine from past 2 months. Now i am getting a issue with clients which are connected to the wireless AP, they are not able to get an dhcp IP address from the 2960 Switch (DHCP Server). The clients are getting IP address as 0.0.0.0. [code]
View 36 Replies View RelatedI am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info.How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
All controllers are in version 7.2.111.3.C1 is a 5508, it is ou anchor controller.C2 is a 5508, it is a big site controller.C3 is a 2504, it is a small site controller. C2 and C3 are in the same mobility group than C1 (and all is up up in mobilty managment). When "DHCP Addr. Assignment" is enable on C1 : Clients on C2 received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C2 and all is working fine. Clients on C3 don't received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C3, so nothing work.
View 4 Replies View RelatedI am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info. How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
setup a DHCP server on a WLC 2504. I'll try to resume my configuration:
I have 2 networks: inside users (vlan 1) and external users (vlan)
My controller uses the port 1 to connect to the switch, which has a trunk with WLC.
I have two routers, one using vlan 1 (192.168.3.0/24) and one using vlan 10 (200.X.X.X). All ports to these routers are access ports on their respective vlans.
I have 2 SSID, one for inside, other to outside. Inside is working very well.
To the outside I created a DHCP escope and already set the IP of the management interface 192.168.3.119.
Managemente interface (vlan 1 inside): 192.168.3.119/24
Outside interface (vlan 10): 200.X.X.195 - Default gateway 200.X.X.X.193
I alredy checked the DHCP Proxy in Advanced option.
See the output of the debug client:
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
[Code].....
I have just setup a new WLC 2504 controller to manage a WiFi service that will span 6 geographic locations. The local networks at each location are on different subnets (all 192.168.x.x) and are linked up via IPSEC VPN links, and there is Active Directory spanning the sites, with DNS and DHCP servers running at each location.
I tested the WLC at our main office with a single AP, and it worked fine. The AP set itself up, and wireless devices connect with no probs. Great! Yesterday I headed out to one of our remote sites, and connected an AP to their network - and that seemed to work fine too. Within a few minutes I was able to see the WiFi network I'd setup, and my smartphone connected to it straight away (as I'd rpeviously connected at the main office), so I was pretty happy that all was working well.
This morning however I've had notification that wifi performance at the remote site isn't great. I've got someone to check their ip address, and I've found that their IP address and default gateway match the LAN at the main office where the WLC is based - NOT the LAN where the wireless client is. Obvioulsy this is not ideal!
(I guess I HAVE done something wrong!?). And how can I get wireless clients at remote sites to pick up an IP from the DHCP server at THEIR site?
I want to secure our WLAN via Web Authentication with our new Cisco 2504 WLC. But where do i find user activity logs?
View 2 Replies View Relateddoes the cisco wlc 2504 (software release 7.4) support QoS per-user bandwidth contracts ? I only can see the default QoS profiles (gold, platinum...) i can't see the per-user bandwidth contract to modify it. shoud it be activated ?
View 3 Replies View RelatedIs it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
I recently setup a 2504 WLC that has two primary WLANs (internal and guest) which get their IP addresses from a central DHCP server using the local router's broadcast forwarding. Things seem to be working well for the internal wlan, but clients on the guest wlan don't seem to be getting IP addresses. If I give the client a static IP they are able to communicate across the wlan okay.
It is worth noting that I am using LAG between the controller and router and this guest wlan is really just a regular wlan (with PSK) that has an access-list applied to force it to the internet only. The access-list should be allowing dhcp requests through, but in any case, I removed the access-list and it made no difference.
Here is a debug client for a machine connected to the guest vlan (vlan 33). The internal wlan is on the 10.10.10.0/24 network (same as wired and same that the AP's are connected to) and the guest wlan is 10.33.0.0/16. I don't understand why I am seeing the dhcp request come from the internal vlan/ wlan first and it gets an IP address on this network. I then see a request on the guest wlan/vlan at which point it appears to get a valid IP address on the guest network (10.33.0.0), but the client never sees this. [code]
I just get to hands-on on my new WLC 5508?
1) I'm using a single subnet eg 192.168.1.0/24 for my wireless clients and i'm assigning them via the DHCP server from the WLC. As the clients are however made up of laptops and scanners, i would like to assign a range from 50-150 for the laptops and 151-250 for the scanners for easier identification. But it seems that from the WLC DHCP menu i'm not able to do this unless i segment them into a different network with different gateways.
2) Is there anyway to change the WLC user accounts password too? I dont seems to be able to find the option unless i delete the account and re-create it with the new password.
I would like to authorize a friend in my house to access my wifi I was told to go to http://192.1.1 and enter the MAC address of my friend. However on the site I was unable to enter the information into the box - how can I authorize my friend to use my wifi?
View 1 Replies View RelatedI have installed about 2 days ago one Cisco WCS 2504 and 11 APs. Everything is doing well regarding to WEP authentication. But I have a Radius Server that is alson running with some issues on wireless:
- Unless I open network settings and click connect on that config I cannot obtain a valid IP Address;
- Roaming is not working also;
I have 5508 controller in my lab. I am working on a project to set up a public internet but with some condition.
- User should able to connect to the SSID without any authentication.
- Once user will connec to the SSID it should redirect to an external URL which indicates terms and condition and email address field.
- User should enter his/her email address in email addrss filed and click I accept button.
- Once that is done then he/she is allowed to access internet.
We are not sure how can we achive this as I do not know what should be the return value for WLC to allow that user to go through or what should be the settings on the WLC to redirect to the page.
I have seen a settings on web authentication for external URL but I guess it is only for username passwor or Radius authentication. While in this case I do not want to use any authentication just an accept buttor or Decline button and all good to go.
I have an intermittent issue getting a DHCP address when using a Cisco Wap 200. Sometimes i can get an address but most of the time my devices fail. This happens with / without WPA or WEP.
View 7 Replies View RelatedCurrently we're providing DHCP to wireless clients from a dhcp pool on a cisco 6500. Due to new requirements we need to move to windows 2008 dhcp and when I test this on an unused WLC (7.0.235.0) the client doesn't get an address.
When I do a packet capture on the client I see it requesting dhcp but not getting any response from the server. When I do a dhcp debug on the client I see the same (see attached file).
This seems to me to be a server issue but the same server is supplying addresses to wired clients.
Is it problem with iPads or LAP1141n?WLC 4404 and many 1142 and 1141, so other devices laptops, iphones, androind phone works as well.But iPad authorized, but can't get an ip address from dhcp server (dhcp not local on wlc, on windows machine) with coverage lap1141, but it get ip with coverage lap1142, and when i got it i roaming to lap1141 and it stays, if i off/on iPads can't get it again from lap1141.
View 14 Replies View RelatedMy cisco representative tells me that I am limited to 10 IP addresses for my 10 user license on an ASA 5505 even though the Cisco documentation specifically states that a 10 user license allows the maximum DHCP clients to 32 IP addresses.
I want to have 30 computers get IP addresses from the ASA, but don't need any but one or two to get outside the internal network. Is this possible with a 10 USER license.
My cisco representative tells me that I am limited to 10 IP addresses for my 10 user license on an ASA 5505 even though the Cisco documentation specifically states that a 10 user license allows the maximum DHCP clients to 32 IP addresses.
I want to have 30 computers get IP addresses from the ASA, but don't need any but one or two to get outside the internal network. Is this possible with a 10 USER license.
My WRVS4400N, V2.0.2.1CPU:STAR 9202.Doesn't allocate IP address on DHCP for anything but the Open SSID. All others, WEP, WPA, WPA2, nothing.I tried different clients, Intel Centrino wifi, Cisco, AG-CB21 same results.The config is std, I tried one VLAN for ALL SSID, I tried different VLANS, same.
View 0 Replies View RelatedThe wireless client can't get the DHCP address when I enable the On-MAC-Filter-failure, MAC Filtering and Web Auth. Client can get the DHCP address when I only enable the Web Auth in the same WLAN SSID. The WiSM verion is v7.0.235.0. [code]
View 1 Replies View RelatedI have a 1250 AP connected to an Switch Cisco 3750. We have a SSID(v lan 1 - native) which get an IP Address from our DHCP Server(located in a Windows 2003 server). I added a new SSID in VLAN 2 and I would like no to use the DHCP Server but to make the AP get an IP Address from the pool I created in the own AP (ip dhcp pool Guest) but every time I try to connect the new v lan, it doesn't get an ip address.
Follow the settings of the AP.
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
[Code]...
My 5508 WLC which runs version 7.4 is configured as a DHCP server for the AP management and here's my problem: My AP can get to the address, and can ping the address of the WLC management，But my AP prompts the following log： [code]
In the switch dhcp we can use to do the WLC option43 specified address, but in this case how the address specified WLC, the AP can be registered up?
I'm experimenting a strage issue with some AP1142 that prefer getting new IP from DHCP server rather than using the static ip already configured.
I've got more than a hundred of 1142 APs already conected to a 5508, all with static IP, all working fine for about a year.
As i installed 30 more AP, i enabled a dhcp scope on the controller to give IP to the new APs and when the new aps got registered i changed the configuration to static IP.
The problem comes when some of the older AP than have already static ip are gettig ip from dhcp scope.
If i look at my WCS, it reports that this APS are getting DHCP IP because they cannot reach the controller with their static ip. As this is impossible, because the static ip and the dhcp enable scope are in the same subnet in a layer 2 configuration and with the same gateway. (e.g: old AP 10.10.2.10/16; new AP(dhcp 10.10.3.10-50) 10.10.3.15/16; gw 10.10.254.1)
The problem comes when i disable the dhcp scope, all the older aps that got dchp ip from the wlc scope instead of using their staic configured ip are deregistered. If i reset every ap manually, from the swithc disabling PoE, they start to use the static ip and everything comes fine.
This is happening with about ten of fifteen APs from the 100 installed, that is the strange thing because this seem to be very random as the failing APs are installed in different building and connected to different switches.
As now i have disabled dhcp scope and all APs (old and new) have static ip everything is ok, but i will have to add some more APs shortly and every time i enable the dhcp scope on the wlc
The problem is WAP 610n not assigning IP address through DHCP; i have to add IP address mannualy.
just go through the details below:
In my network environment we are using :
CISCO Router 800 series; IP: 192.168.1.1
Domain server with DHCP server : 192.168.1.2
DHCP pool: 192.168.1.234 - 192.168.1.250
WAP IP : 192.168.1.236
WAP configuration :
configuration view : mannual
Wireless band : 2.4 Ghz
Network mode : mixed
channel width: 20 Mhz only
standard channel : auto
SSID broadcast : Disabled [ for security reason]
Security mode : WPA2 Personal
Encryption : TKIP/AES
Firmware : 1.0.01 build 94, Oct 26, 2009
Note: In status menu it is not showing any default gateway.
Encapsulation method in CISCO router : PPPoA [ as instructed by ISP]