Cisco Wireless :: 4402 WLC / Android Clients Connecting But No Data Flow?
Jun 18, 2011
We have a controlled setup comprising of a 4402 WLC in our Data Centre and 1242AG LWAPs in our branches.The Wireless works well with a mixture of locally switched (h-reap) and centrally switched WLANs.I have a problem where Android devices don't seem to function as they should.I have been using an Android phone (HTC Desire, currently running 2.3.4 OS, but has been a persistant issue since 2.1) and it connects to my home wireless (and others) fine, but when connecting to the Wireless LAN at the office, it connects fine and gets assigned an IP address, but NO data flows. None, like there is no connection at all. I have just been using it on 3G. I figured it might have just been an issue with the hardware, so didn't bother too much.I have just purchase a new tablet (ASUS Transformer, Currently running 3.1 OS) and this does the same thing.I have tried publishing a new WLAN and have tried all types of encryption and authentication al the way down to open and still, no data flow. I have tried statically setting the IP details and still nothing.Interestingly, When I attended the last Cisco Live conference in Melbourne this year, I had my phone and it displayed the same behaviour on the Cisco supplied wireless, BUT, there was a second IPv6 enabled, when connected to that everything worked fine.
how to configure WRT54GC compact Router if the data should be configured to flow from PC1 through Switch to Router and then to PC2 back through Switch in the following configuration?
That's, the data flow is PC1 -> SW -> Router -> SW -> PC2. I think that Router has to have both routing of 10.14.40.1 & 10.14.50.1, but how should I configure the router?
I am really new to Cisco and having a hard time with my Cisco 2800 series.
I have two sites connected with each other Site A and Site B (Using the same Cisco 2800). Now site A can connect to site B on the Cisco and the internal network, but site B can only see the Cisco and not the internal network of site A. So all the traffic is coming in to site B but can't break out of site B. I have tried everything I can think of but again my knowledge of Cisco is not good at all.
I have a 4402 which is connected to a 4506 Switch int Gig 3/1 via a trunk port. The Managment and AP-manger interfaces are on vlan 6 [code] I have a 1142N AP also connected to the switch and it pulls a DHCP IP Address and configs etc and registers to the WLC. It too is on Vlan 6 and it is connected to the 4506 on int gig 4/33 which is an access port. [code] I am doing local authentication, so i have added users to the WLC.. My problem is that the first client that connected was able to get an IP address and connect to anything internal and external.I then connected another client on another laptop and that client could connect but not get an IP address, it just self assigned.When i look at the clients i can see the MAC address of both Clients on the WLC, but doing a show mac address-table dynamic i only see the MAC of the client that works properly. The client that doesnt get an IP has no entry in the 4506 switch.I am stumped, from what I understand, is that the 2nd clients traffic is being trunked to the WLC , hence it has the MAC address. But I dont know why its not getting a DHCP assigned IP address.
I have 2 4402 WLC's and a central office and was trying to configure an H-Reap Ap but now the entire wireless network is down. Clients arent getting IP's. I cant see anything that is wrong but things are not working like they should.
I have 2 computers in my room which between them i very frequently share files between. Wirelessly they were both connected to my home's router until recently the router was removed, but will be back soon.The problem though, was that with using the router, file sharing between those computers was slow, and with the router gone, I was lost because there was no movement of data between the computers whatsoever, I had no crossover cable, but plenty of regular ethernet cable. Than I remembered something about gigabit lan not needing crossovers(both of the computers being gigabit) and I connected them, and marveled at the new way to share files. And more by the exponential boost in speed(800kb/s to a grand 12mb/s{though I still think that is slow for gigabit.}). Obviously I've overcome a problem, but that's not where this story ends, it comes with another problem. When the router is reconnected to these computers, will the files still transfer through there new found direct connection? or will it attempt to go through the router, only allowing me to get the speeds I want when one of these computers isn't connected to the router?
I have a 4402 (version 7.0.235) working with 10 units of 1121 APs connected to it. The WLC is not configured to work in LAG mode. Physical portt #1 is connected to the Main Switch (trunk). I have 3 WLAN mapped to 3 Different VLAN and Everything (security and internal, external DHCP) is working swell...Now- I have connected Physical port #2 directly to an ADSL Router (giga port), Configured Port 2 as untaggedwith the proper IP details.I have configured this interface to receive DHCP from the ADSL Router and for some reason, Clients are not getting addresses.When I assign a Static address to my laptop I get internet access and all is nice. I tried configuring The WLC internal DHCP server (instead of the ADSL router) and that didn't work. It seems like a DHCP problem but I dont understand the source of the problem of think of the solution.When turning off the proxy settings I noticed that it worked. Is there anything to do with that? The problem was that after a while the other WLANs starting causing DHCP issues as well.
Cisco 2951 w/ HWIC-4ESW IOS 15.0(1)M5 #sh ip flow int Vlan533 ip flow ingress ip flow egress #
The SVI sends the flow data just fine, however I also continue to receive flow data from most other interfaces.
I have attached a screenshot of one of our netflow collectors indicating that many of the interfaces are sending flow data even though not configured to do so. We have two different netflow collectors, from different vendors and both confirm the same interfaces sending flow data.
Normally I wouldn't care and ignore it, however one of them uses a license limit by interface and is a bit problematic.
I've found that Android devices (smartphones for sure, and perhaps other devices, like Windows Vista/XP pc's with some Atheros wi-fi adapters) can't connect to our eduroam network (WPA2 Enterprise) if the Access Points (all from Cisco) also have open SSID's configured in it. Once I protect the open networks with, for instance, WPA-PSK, the Android devices immediatly get connected to the eduroam. Is there any fix that can be applied to the Access Points. Below there's a list fo AP models and IOS version we have running. I may mention that this problem doesn't occur with Access Points from other manufacturers like, for instance, Meru Networks.
In the AP's event log appears the folowing:
"Packet to client 0026.3778.081f reached max retries, removing the client"
The steps to mitigate the problem above were applied, but with no results.
PS: The Android versions may vary with the same symptom.
Device types: AP 1100; AP 1130; AP1140;AP1210;AP1250
I am having an issue with my Android Tablet running 4.1 (Jelly Bean). It is able to the SSID, but when I try to connect - it stays connecting and then says saved, and never connects, as it does not pick up an IP address. I updated the firmware on the Aironet 1140 due to my Windows 8 pc's not connecting as well, it solved my Windows 8 problem, just not my Android Tablet problem. My Ipads do work. Just any android device I connect.
I have an issue with a brand new E4200 router. My E4200 can connect no issue with the following devices: Ipad, AppleTV, Dell Laptop, Ibm Laptop. It is also wired connected to my home PC. Internet works fine and file sharing/network works good for all the above devices.
The problem is that My wife and I's Phone can not detect the wifi network and can not connect to it. The SSID broadcast is enabled on both frequencies (2.4 and 5). I have try configuring the network manually on both the Android phones..it does not work.. it records the data but keep sayng the network is out of range (although I'm right next to the router). I hva eplayed with various channels on both frequecies and played also with the MTU size.One of the Android phone is Garmin the other Acer Liquid...different brand running both Android 2.2...
Firmware on E4200 is 1.0.02 All settings reset to Auto/MIxed for now. WPA2 is enable with security key SSID is enabled on both frequency no MAC address filtering is setup
Both my phones can detect other networks and can connect fine to friends and family networks...So I suspect a compatibility problem between router an Android..I have contacted Linksys support twice with no avail. I have contacted both Acer and Garmin...they refer me to linksys
We have 2 WLCs, 4402 (main) and 5508 (backup). While we turn on both devices, 4402 have 10 APs, and 5508 have 10 APs as well. Total connected clients will be 120+, but when we turn off either 1 wlc, let's say only 4402 is power on, total 20 APs joined, but the total client will be 90+, never reach over 100 clients. The same happened on 5508, is there any maximum associated connection on WLC?
When on the management interface the clients can't get dhcp but the AP's can on the same vlan. I've tried enabling and disabling dhcp proxy, and using a remote dhcp server as well as the internal server. This same config works on the 4402 we're replacing with version 5.2.193 on it.
Recently (within the past 2 months) I've been having some issues with my 4402 wLAN controller.
The issue is thus:
1) New wireless clients (those without exsisting DHCP leases) are unable to properly connect to our wireless network.
2) Those same systems (and other systems) have no issue getting online via a wired connection (where available).
3) Devices like iPad, tablets, laptops partially connect but do not get a valid IP address.
Our config:
1) DHCP is handled by a seperate server (NOT the 4402 - it's DHCP setting is disabled)
2) Our wLan is not on a seperate network than our wired LAN
3) Wireless devices attempting to connect include iPads and laptops mostly.
4) We're a school with about 300 systems (primarily Windows XP machines).
5) 25 access points controlled by the 4402 (our only wLAN controller)
Important Notes:
1) No configuration changes have been made to DHCP or the 4402 device in a couple years.
2) 4402 Software Version = 4.0.217.0
The problem first showed up a bit over a month ago. I first thought the issue was DHCP server related , so I started there and didn't find any obvious issues. I did restart the DHCP server (which at that point had an uptime of somewhere over 700 days).
I then also checked the web interface of the 4402 to see what it was reporting. I noticed a somthing:A) As shown in the "WLAN_Issue_EDIT.png" the client count on the controller is showing 628 current clients. We don't have many devices in our entire campus.
I rebooted the controller after hours and that seemed to allievete the issue. Since then, the current client count hasn't ever gone above 60.
Now today I'm having the same issue regarding new clients getting IP addresses. The client count isn't real high on the WLAN controller and I don't see any other obvious issues. I'm torn between this being a DHCP issue or the controller issue (or a combination of the two).
The reason I don't think it's directly DHCP related is that all wired clients seem to be getting address fine.Plus, I've set my tablet device to a static address and it still cannot connect via wifi.
**Update** I've now rebooted the controller and the problem persists (at least on the nearby iPad - Will confirm other devices shortly).
have just set up a WLC 4402 as a Guest WLAN controller on the DMZ of our network. I have successfully managed to get our internal controllers to connect to it, with the exception of 1. it says the control path is up but the data path is down. the other 14 controllers worked fine, and in testing the last one was OK but it is now not working properly. the 2 controllers can ping each other but just won't create the data tunnel. there is a firewall in the middle but that has been set up to allow traffic between the 2 groups of controllers to be unrestricted.
the internal controllers are 4404's and all controllers are running the same version of code. 5.1.151.0.
We Have a WLC-4402 controller with LWAPPs and different VLANs and SSIDs. I've configured a Linksys WET200 to associate to one of the SSIDs.On the WLC I can see, that the WET200 is associated to one Wlan.Then I connect one computer with a static IP address and works fine.But when I connect a second one, everythiing goes down. It does not connect.I can only connect one computer to the WET200.Do I need other seetings on the WLC to allow pass traffic through the WET200?
The company I work for uses a Cisco ASA 5510 router. We currently have an IPsec VPN set up and useres connect through the Ciso VPN client using group authentication, then they are prompted for a username and password, and use the same username/password they log on to thier work computers with. Some of the users have recently got Samsung Galaxy 10.1 tablets and would like to connect to the VPN using those tablets, but I can't figure out how to get the tablets to work. I've tried the anyconnect app for the andriod market as well as creating a VPN connection from the Tablet's settings page, but no luck either way. Perhaps I'm not entering a setting right? Has any one had any luck getting andriod tablets to connect to a Cisoc VPN?
My wifi router is linksys WRT300N v1.1 At first my wifi works great with this devices . iphone 4s , ipod touch 4 , hp pavilion dv6 , dell inspirion 1545 . But it don't works with android devices I had a bunch of them samsung galaxy s3 , galaxy nexus , amazon kindle and more ...The android devices connect to wifi but wifi doesn't work for them in browsers I can't open pages there's appears <webpage not available> , but I can use skype on android devices.
question in regards to the deployment of a new WLC and new LAPs,I have configured and connected a 5508 WLC and 3500 series LAP.LAG is enabled in the WLC and successfully connected to the neighboring switch (using etherchannel) and to the network.
The port-channel port is set to trunk mode obviously and certain vlan ids are currently allowed (3-5)
The management interface has this IP address 192.168.5.250/24
I created a WLAN with WLAN ID 3, Interface set to Management and say SSID test1
I have connected a new LAP to the network, which switchport interface is set to access mode and assigned with vlan id 3. The LAP is able to join the WLC successfully with an IP address, such as, 192.168.3.100 (assigned via DHCP).
When I try connecting a mobile client to the wireless LAN, it can successfully detect and connect to the WLAN, created in the WLC (test1) however it gets an IP address by DHCP, in the 192.168.5.0/24 network, which is the IP range of the management interface's IP address.
What can I do to get the clients connecting on network 192.168.3.0/24? I thought this would be the case since I allocated the WLAN Id of 3 in the WLAN test1 configuration and since the LAP switchport is set to access mode with vlan ID 3.
I'm working on migrating autonomous WAPs to lightweight mode in a WLC 5508. Some of the older WAPs are being decommissioned at the same time.
One issue I have found is that after replacing an old WAP in autonomous mode with a new WAP (3502); some clients near the coverage of this new LWAPP are now connecting to another WAP in autonomous mode that has not been converted or replaced yet; but that is located quite far away from where these clients are, actually two floors down. Users on these clients have reported wifi dropouts, which is obvious due to the distance where the old WAP is. A workaround that seems to work is removing the wifi profiles in the client machines and recreating them again, which is not a good solution for all of the wifi profiles we have in place. At this point of time we still need to have the older WAPs until they are all replaced.
How can I get clients connecting to a LWAPP that is closer to their location? I'm wondering what causes those clients to look for an existing older WAP rather than connecting to the new LWAPP, which is broadcasting the same SSID closer to where they aree. Bear in mind that the new LWAPP is working fine and has live sessions working just fine.
I need Some information for Connecting my New Access point ( Cisco AIRLAP 1242AG) with WLC(4402) ControllerIn our network set up we have two WLC(4402) we needs to Connect this New Accesspoint To one of our WLC,My Access point is brand New. I need to Know what all i have to do inorder to connect this AP to the controller (from Acesspoint perspective & WLC perspective),I need to Know what I need to do in AP to connect to the Controller,Do i need to Assign Static IP Address forAP or after connecting to the switch it automatically gets ip from DHCP and regsiter with controller??
I recently purchased a E1550 that works fine until I tried adding an external USB HDD for storage. The drive is a Western Digital 500MB drive I used to use for backups. Had no issues setting up the share and was able to access it just fine. But a few hours after hooking it up, my wireless devices could no longer connect and I could not access the admin page to see what was wrong. The E1550 was still pingable and my wired devices could still access sites through the router. Cycling power to the router did not work. What did get things working again was removing the USB drive (which killed all wired connections as well) and then cycling power. The E1550 was fine after that.
I have Verizon FIOS in my house, but the ActionTec router is in the second floor and the signal is not strong enough in the basement (where my home theater is) to stream and watch internet movies.I understand I can use the same video signal cable (RG-6) to install a second router and connect either wireless or wired to the Xbox and PS3 I have in the basement, but I do not know how, and what router would do the trick
We are planning to purchase an ASA 5505 for a VPN solution for one of our offices. The office has 50-60 user at peak load who would be connecting over the S2S VPN to the datacenter.
From a hardware standpoint, can the ASA 5505 handle this load. The licence is for unlimitedf inside hosts but what is the actual limit on this platform?
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
------------------------------------------------------------------------------------------------------------------------- WORKING CONNECTION ------------------------------------------------------------------------------------------------------------------------- %ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device NAT-Traversal auto-detected NAT. %ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user %ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
I have 4 desktops cat5 to Dlink DIR 615 router. All work fine. Any wireless clients, laptop or netbooks, see the desktop computers for a while then disconnect somehow. All machines can see the Internet through the router at all times. The desktops disappear from the laptop/netbooks but the wireless machines can be seen from the desktop computers but clicking on them gets 'Access Denied' message after a wait.3 desktops = XP, 1 98SE. All laptop/netbooks = XP
The wifi connection is all good to go. Now , we have other companies besides us that also managed to tap to the wireless infrastructure, though they don't have the authentication cert, but it is exposed.So, would like to know how can we conta the wireless signal from overflow to another building? Any setting at the WLC that can be tweak? or check the radius to ensure that it didn't overflow?
I have a ASA5505 and it has a vpn set up. The VPN user connects using the Cisco VPN client. They can connect fine (the get an ip address from the ASA), but they can't ping the asa or any clients on the network. Here is the running config:
