We have had several APs disassociating from our controllers. The alerts say, Message: Access Point 'AP-xxxxx' associated to controller '10.x.x.x' on port number '0'. Reason for association 'Dot11g Mode Change. I have read several posts that point out that you should have QoS implemented to prioritize the CAPWAP traffic. I'd like to know if someone has implemented QoS and whether it has been successful in stopping the APs from disassociating. And if it has been successful do you have any configuration examples for the ports attached to the AP and controller as well as the QoS configuration?
We have several sites with AP1142's and 3500's. We have 2 5508 controllers. We are broadcasting 2 SSIDs of which one is in HREAP mode and the other is in local mode. Each of our sites have MPLS circuits.
Here is an example I found on Cisco which I believe can be used for CAPWAP as long as you change the ports to 5246 & 5247 instead of 12222 & 12223.
Example Router Configurations #
This section contains router configuration examples to be used as guides when addressing CS6 remarking or LWAPP control traffic load.
#
This example uses LWAPP APs on the 192.168.101.0/24 subnet, and two WLCs with ap-managers at 192.168.60.11, and 192.168.62.11. (code)
I am connecting two catalyst 3500 XL switches via fiber fx ports for layer 2 connectivity. Do I need to configure anything in the IOS or do I just plug in the fiber?
We setup some new CAPWAP AP 3602E in the network and configure the DHCP server option 43 , but the WLCs still cannot detect the APs , Do you know if there any new way to troubleshooting?
I´m looking to a project where we want to start using Autonomous AP with possibility to change to controller based on near future.
Will Cisco Aironet 1040 Series Access Points allow us to change from IOS to CAPWAP when needed? I read some posts about the oposite process (CAPWAP to IOS) so I think it´s possible on both way. Can some one confirm this to me?
I have an 1142 running capwap c1140-k9w8-tar.124-23c.JA4 that I am wanting to convert to an Autonomous AP.However, the AP does not seem to have an archive exec command to tftp downoad an new IOS.Is there another procedure that should be used ?
I'm looking at the spec sheet comparing Cisco WLCs and I see that the 2504 has a bandwidth max of 500mbps. Just to be clear, not all of the traffic from the APs goes through the WLC does it? In this setup, the APs would be plugged into a PoE switch as well as the WLC. The only traffic to WLC would be the CAPWAP tunnel, CleanAir info, etc right? All other traffic should just be handeld at the switch right?Also, does the 2504 licencing include CleanAir in the price?
I have to prepare an 3600 Capwap AP for autonomous functionality!
The following image was downloaded: ap3g2-k9w7-tar.152-2.JA
The release notes say: Site-Survey Only Mode for 3600, 3500, and 1550 Access Points You can install Cisco IOS Release 15.2(2)JA on Cisco Aironet 3600 and 3500 Series access points and on 1550 series outdoor access points to perform site surveys. This release runs on these access points with limited functionality. You can manually adjust these settings on the site-survey access points:
• Channel on each radio • Transmit power on each radio • Enable and disable the radios • Manually set basic and supported transmit rates • Enable advertised cell power in beacons to client to enable DTPC for doing active surveys • Enable and disable SSID broadcast in beacons • Enable open authentication
My Question is: Where can i find a instruction for downgrading an AIR-CAP3602i to Autonomous 3600 AP? Is it complicate to get the AP running, or what do i need for "downgrading"?
I am trying to configure two AP-management interfaces to accept CAPWAP on different ports using the option "Enable Dynamic AP Management". One of them uses public ip address. However, I getting the message "Ignoring discovery request received on non-management interface ..." on this.
I have a wireless network running with Controller WISM2 and I also have a NCS.I want to know if there is any way to look of individual log of CAPWAP and LAPWAP Access Points. It is better if I can see it through NCS.
I am facing this particular issue while providing Cisco unified Wireless solution to the customer. We are having CAPWAP 1252 APs controlled by WLC.
Scenario: 50 persons sitting in a hall with closely packed chairs using wireless simultaneously. Wireless access provided by patch antenna at a height of 11m from the user. As one AP can server 25 users, 2 APs are placed with antenna directions facing the compact users. Each users gets very good signal from these two APs.
Whether there will be serious interference and client association issues in this scenario? once one AP associates 25 clients, whether other 25 clients associate completely to other AP?
I understand that Cisco *wants* the APs to be directly connected to the new 3850.I have a few questions. Unfortunately, I think I know the answers. I just want to confirm.
a. When MA/MC is enabled on the 3850, does the 3850 start intercepting *all* CAPWAP packets it sees (much like CDP)? Even non-Cisco CAPWAP packets?
b. If I have a WLC 5500 upstream from the 3850, would APs hanging off a downstream 2960 be able to register to the 5500 through the 3850 when the 3850 is NOT in MA/MC mode?
c. If I have a WLC 5500 upstream from the 3850, would APs hanging off a downstream 2960 be able to register to the 5500 through the 3850 when the 3850 IS in MA/MC mode?
What I'm afraid of is:
a. yes, yes b. yes c. no
From the Q&A page:Q. Does the Cisco Catalyst 3850 support indirectly connected access points?A. No. The Cisco Catalyst 3850 switch will always terminate the CAPWAP tunnel locally. Pass-through mode or indirectly connected access point is not supported at this time.
I would like to confirm if it is possible to downgrade AP 1042 from CAPWAP to autonomous? I want to buy the AP model AIR-LAP1042N-A-K9. But i don't sure if in the future it could support this feature.
Clarify some points with capwap implementation, does all data and control traffic tunneled back to the controller and switching packets to the specific vlan will be done by the controller? so if i have 5508 controller, its maximum throughput will be 8 gbps (local mode AP), provided i have done LAG on all its ports to the LAN switch?
*spamApTask0: Nov 09 15:59:29.071: %LOG-3-Q_IND: capwap_ac_reassembly.c:652 Unable to store capwap fragment from 88:f0:77:b6:fd:00. *spamApTask3: Nov 09 15:59:27.616: %CAPWAP-3-REASSEM_SPACE: capwap_ac_reassembly.c:652 Unable to store capwap fragment from 88:f0:77:b6:fd:00.
What could be causing it? I am using 1524 APs in a Mesh environment with a WLC 5508 (7.0.116.0) which is connected to a H3C switched network.
The MAC addresses above are from my MAPs and I don't think I am getting it from the RAPs.
Can I convert a standalone 1600 access point to a CAPWAP based AP when I choose to deploy a WLC later?Cant see any literature on cisco.com that is specific to the 1600 APs
I am trying to config my wireless lan controller (WLC) 2106 to discover my new 3500 access points.I followed the example Cisco configuration doc.69719.I am using a Cisco 3760 switch to interconnect the AP and WLC.I set up DHCP in the switch. [code]
The problem am having is that my Users can get to the internet on the LAN but cannot get to the internet thro the WLAN. Below is the cisco equipment used to setup the WLAN and LAN. I dont have any clue as to why users cnnot get to the internet from the WLAN except the LAN.
ITEMS 1. CISCO CATALYST 2960-S Part Number: WS-C2960S-24PS-L 10 Part Number: CON-SNT-2960S2PS 10
So I'm going to bridge two Cisco AP's 1260 and 3500, which have an 880 router on each side.
(Currently I have a VPN set-up through the internet for the two locations to communicate) (Naturally they are currently in different subnets) Will absolutely change this and set up as one subnet. There is VLANs setup on each router (same VLANs)
VLAN 1
And
VLAN 10
Everything is configured on the Routers and AP's for these VLANs (works flawlessly over the VPN).
So now since I’m going to get rid of the VPN and set-up a bridge with two AP's, will having same VLANs across both routers be a problem? Will VLANs work OK through the bridge?
Besides using (IP helper address DHCP-IP) command on the non-root bridge side router to forward DHCP requests to the root bridge side router, Also I want to be able to route internet traffic on the non-root bridge side through the WAN port, and only route LAN traffic through the bridge..
We have couple of Cisco Aironet 3500 Series access points with the following P/N: "AIR-CAP3501E-A-K9", we have discovered that we need a wireless LAN controller to connect those new access points!, however, we do not have any wireless controller in our LAN.
We even tried to CLI through the console port but we could not set any static IP on it!, after reading on Cisco site we discover that this type of AP is called "Lightweight Access Point" LAP which handles all the management tasks to the controller!
So what shall we do! is it impossible to operate them without the controller?
how an AP 3500 get to be registered in a controller 5508??, so, i have seen a lot of information of wireles deployment guide but i haven't understood yet how the process or flow is for getting the AP to be registered in a controller 5508, what exactly basic configuration must be done in a controller for doing it?
I am building a BOM for a customer and I need to present cheaper options than 3500 or 3600 APs. I thought of these two models but I don't know what models of antennas to pick.1602 is a 3X3 MIMO with 3 antenna connectors. How many 2.4 GHz and how many 5.8 GHz antennas should I pick for each radio?2602 is a 3X4 MIMO with 4 antenna connectors. In this case I suppose there are 2 connectors per radio.
I currently have WLC 5508 and a few campuses with LAP 1142, each with 2-3 vlan. Now one of our campuses have a building thas is a bit far away and needs network (wired). We can't get fiber or TP-cable there in a good way. So the plan is to get two 1262 or 3500 with AIR-ANT5160NP-R antennas and get a wireless link working between the campus and the building. And then connect one of the AP's to a switch in the other building to provide it with wired network.
The problem is that I can't find information on how to do it. Should both APs be in autonomus mode? I probably only need to have 1 VLAN in the other building but I am not sure yet. Is there a problem with transfering several VLAN over the WLAN-link?
Just had some more 3500i installed,but 2 of these seem to be working, but there is no green LED when no connection, and when you conneect there is no blue led. The LEDs to change when rebooting the AP, just neve seen this before, is this a fault?
I have upgraded my 'old' Linksys router to a new Cisco 3500 and I can only connect to the new router via Wi-Fi... When I connect using hard-wire - the computer tells me I hve no connection! Same computer works just fine w/old router
We are deploying a new office and exploring the options for WLAN deployment. We were pretty impressed with 3500 series APs and that it supports CleanAir.However, we have decided to go for standalone AP deployment model now. As 3500 does not work in standalone mode, so we are looking for APs that can work in standalone mode ( and later can be converted to lightweight if needed). We can go for 1140 in that case. However, it would be better for us to know the main differences between features supported by 3500 lightweight AP and 1140 standalone AP. CleanAir looks like the main one. Are there other important ones as well?
Would like to check out some client side setting on Wireless 802.1x authenticaiton.
Network setup is using
- Cisco WLC 7.2 and AP3500, - ACS 5.3 - Microsoft Windows server 2008 hosting AD and CA services (same machine) - Client OS is Microsoft Window 7.
Authentication mehtod would use PEAP-MSChap V2 Combo.
My question :
01. In AD environment, should ACS 5.3 be part of the domain computer?
02. To have secure connectivity, IF the security policy force client to check "Validate server certificate", which certificate it is look for? Is it ACS's identity certifate, that require CA server to sign on the CSR?
03. Back to client side, should the client also need to import this certificate in trusted root certification authorities?
Or the client will trust ACS identity certificate against the root CA certificate store at client's trusted root certification authorities, where they have the identical issuer?
04. Extra question: If no CA environment, would it be sufficient simply export ACS self-signed certificate and import to client computer, and it's trusted?
I'd like to know your experience regarding how client count affects performance.
What I have seen in a university network, with a very high client densiity, using 3500 APs, is that around 55 clients ping reply time gets over 200 ms; around 60 users there's packet loss; then, as CC increases, somewhere between 60 - 70 the service gets totally lost. Off course, this depends on bandwidth consumption per user, interference, etc.
Also, I'd like to know what we could expect from 802.11ac regarding this topic. Is there any information on tests, or some estimation already published?
I have a customer who bought Cisco Aironet 3500 Series. Currently 4404 WISM Controllers are installed with 1142 Access-Points. The WLC-Version is 6.0.199.
Will the 3500 Series Access-Points work? (Of course without the spectrum intelligence feature)?
The Q&A says the following: Are there any concerns with supporting the new Cisco Aironet 3500 Series Access Points with the older Cisco 2000, 2100, 4100, or 4400 Series Wireless LAN Controllers?
I have a project where I need to connect two building using a wireless bridge.I cisco specialist told me to purchase two 3500 (AIR-CAP3502P-A-K9) access points and an external antennas.The problem I have is these access points will need something to control them. If the access points will be in separate buildings will I need a controller on either side of the bridge to get them to work?What other cisco AP device capable of 300Mps dual band that are autonomous and can bridge between two buildings that are a 50 yards apart?
