one of our customers wants to update the firmware of a 5508 wlc, but always gets the following error message:
Error Message %UPDATE-3-INV_FILE_SIGN: Error! Invalid image signature!. Image may be corrupt.
but the same image works fine on another 5508.the update was downloaded via a smartnet for the wlc, on which the update works fine. does the customer has to download another image for the second controller, or should the image work on both wlc?
A customer wants to upgrade an IOS Base (cat4500-ipbasek9-mz.122-25.SG4.bin) of a WS-C4507R Cisco, for a IOS that have a enterprices functionalities.We install an IOS cat4500e-entservicesk9-mz.122-53.SG5.bin, but we had the following results:
config-register = 0x2102 Autobooting specified file using Variable BOOT ..... Current BOOT file is --- bootflash: cat4500e-entservicesk9-mz.122-53.SG5.bin
WLC 5508 v7.0.98 6-7 Autonomous upgraded to lightweight APs - 2 * 1231G while the rest are 1242AG 3 dynamic interfaces, 2 to Corp (diff VLANs) and 1 to Guest 4 WLANs binded to different interfaces 2 to the Corp interface Vlan X 1 to Guest 1 to Corp Vlan Y
DHCP for Corp is provided by their own Win DHCP server while controller is the DHCP server for Guest. Lease time is 1 day.
My problem now is, some clients, at random, loses their IP after being connected to the network. They get a 169.254.x.x. They connect to the Corp network OK, no browsing issues but after a while, they lose their IP address.
They can either wait for a while before getting an IP back or just simple renew their IP on their machine.
I've tried increasing the threshold values in the Local EAP to double its default values and also setting the WLAN session time out values to infinite. However, these 2 didn't work. I'm still having clients that occasionally lose their IPs at random.
I've also noted that this affects clients with WZC wireless drivers and not others e.g. Intel Proset.
computer was working fine a few days ago, all of the sudden not able to get online anymore at all,recieve error message 651 with dsl connection, and when trying to connect to wireless get an error message saying invalid ip adress configuration,
ipconfig/all reveals: C:Usersygydfre>ipconfig/all Windows IP Configuration Host Name . . . . . . . . . . . . : bygydfre-PC[code]......
I recently bought the E2500 Router and I am using the EA2500 Adapter with it . I have this set-up on 2 Desktop PC's . 1 Pc is working just fine with this set-up . The other keeps giving me an Error message of "Invalid Key Manual" . What does this mean ? The adapter is working because it does find the Router as a usable connection . It just isn't able to connect to it and keeps giving me the same Error message .
i just bought a 5508 wireless controller that was delivered yesterday .I powered it on yesterday and was able to make basic configurations of management interface ,time and zone settings.I was also able to get to the GUi and console after the configs and it was alright. When I got in this morning it ran for about 2 hours and all of a sudden starts shutting down after every % minutes and comes back again.
I have a 5508 WLC connected to 2950 Switch and the LAP 1262 connected to the same default VLAN. My AP's are able to join the controller since they are in the same broadcast domain but They are NOT able to download the image from WLC. When I am looking at the wireless TAB of WLC.. it says... Downloading Image.
what all needs to be done to make UP the APs. Also, Following is the error i am seeing at the AP.
*Apr 27 11:48:40.640: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.1.99:5246 *Apr 27 11:48:40.640: %CAPWAP-5-CHANGED: CAPWAP changed state to
I started a download to a 5508 to upgrade to 7.2.110, but the connection across a vpn is slow and taking too long. Can I cancel the download w/o corrupting the current image and/or setup?I don't see a cancel button anywhere in the gui and don't want do it unless the controller will handle an incomplete download correctly.
I did some testing in WLC in our company wireless network.However, after my 3 hours testing, I had tried to login WLC again by GUI and SSH. The admin username and password does not work any more. All Read only and Guest Account did not work as well.Is any one had this issue before? Is there a restriction for access to WCL per 3 hours or one day? By the way, I did not change any password.
I just turned on 2 Wirelless LAN Controllers 5508 and I am getting this message on both of them:
Loading primary image (Image not found)
** Unable to read "linux.pri.img" from ide 0:2 **
Loading backup image (Image not found)
** Unable to read "linux.bak.img" from ide 0:2 **
And it is taking me to the BootMenu. I selected option 4 to Clear Configuration and the controller seems to restart the system but I still get the same error. I checked the LEDs status and Sys is Amber and Alarm is OFF which according to the documentation is a System Crash.
i just deployed Cisco NAC version 4.8.1 Virtual Gateway OOB on a LAN envieronment and on a WLAN envieronment, it works fine for some users , they can authenticate via the agent or web page, and then they are redirected to the access vlan, But for some other users in LAN and WLAN , when they try to authenticate via agent or web page the following error appears:
Invalid switch configuration-OOB Error:OOB client "mac/ip" not found.
I tried to find some pattern for the users but it dont match any pattern.
When I access setup on an RV220W with Internet Explorer, Mozilla or Safari the following message always displays:
"There is a problem with this website's security certificate. The security certificate presented by this website was not issued by a trusted certificate authority. The security certificate presented by this website was issued for a different website's address."
I access the router by clicking on "Continue to this website (not recommended)."
This also happens anytime a URL filter is triggered by a client. I.e., clients do not see the "Blocked by Cisco Firewall" message unless they also click on the "Continue to this website (not recommended)." option.
Even worse, when I attempt to connect as a VPN, the SLLVPN applet gets java connection refused. This is why I bought this thing!
What do I need to do to fix all these certificate related errors?
Whenever I use the following command I get an invalid input error
ciscoasa#conf t ciscoasa (config) # crypto isakmp enable outside ciscoasa (config) #object network net-local ciscoasa (config-network) # subnet 192.168.101.0 255.255.255.0 ^ I have reset the firewall (cisco 5505) to factory default. The marker ^ is under the subnet
I am having the Cisco NAC enviroment (Software Version is 4.9.1) and OOB VG.
We are getting the below and attached Error while deploying on some machines.
"Invalid switch configuration-OOB Error:OOB client "mac/ip" not found."
Some users on same switches are working fine but some are not....
What would be the possibilities and any work around? other than keeping the port shudown for long time means that atleast 10 - 20 secs or more or a PC restart. Customer is not feeling comfortable with the current situation.
I have connected an ASA 5505 to an ADSL router that is able to assign the IP address and the also the DNS servers for the ISP for the outside interface. The ASA is loaded up with IOS "asa842-k8.bin"
I am using vpnclient with a hostname as oppose to an IP address to connect to a headend remote server. If I hardcode the DNS servers IPs in the "dns server-group DefaultDNS" I am able to resolve the hostname. If I then remove the IPs from the group and rely on the dhcp to assign them, when I try to resolve the name I have an error at the console "ERROR: % Invalid Hostname"
"The license is invalid." (Error code:2268435460) it happens with all versions tested on several PCs (Win2003 Server, WinXP). Already tried to reboot, edit the registry, etc but no luck. Using 3 dcs 2121?
At the moment I have a problem with a WLC. This WLC is not booting by the fact it does not have an image. In the past option 5 in the following menu was selected.
Now I received I message when I select option 6. Telling me that if I upgrade from an .aes image I will left the unit inoperable.
============================================================ Boot Loader Menu ============================================================ 1. Run primary image (Image not found) 2. Run backup image (Image not found) - Active 3. Change active boot image 4. Clear configuration 5. Format FLASH Drive 6. Manually update images
I am trying to apply WLAN template from NCS to two WLCs 5508 and I receive this message."Another WLAN with same SSID and either WPA1/ WPA2/ WPA1+WPA2 is enabled. Please change the Layer 2 security policy."The template has layer 2 security with WPA+WPA2 enable and 802.1x.I have other WLAN template with other name and other SSID with the same security policies with no problem to apply.
I am facing problem with an outdoor access point AIR-1522-K-E series which is unable to join a wirless lan controller 5508. The wireless AP is able to get IP address from dhcp server and discover the Wireless controller IP address. After this i see following status messeges on the console of AP.
*Aug 27 11:04:19.767: %CAPWAP-3-ERRORLOG: Go join a capwap controller *Aug 27 11:04:21.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.2.64.50 peer_port: 5246 *Aug 27 11:04:21.000: %CAPWAP-5-CHANGED: CAPWAP changed state to *Aug 27 11:04:21.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 10.2.64.50 peer_port: 5246 [Code]...
I have studied many guides but I can't find out if there is a down-side to setting the timeout this high.Could it result in slow roaming or re-authentication if there is a connection error? The customer have large areas with high client density and some outdoor areas with low client density.
i have a problem with 1552E to register with 5508 WLC, and always got "AAA authentication error” in the WLC log, while AAA is not enabled. so my question is , do i need to add the MAC address to the WLC MAC filter list even if i not enable the AAA server in the WLC.
The router(Cisco 857) appears to be boot, and operate normally.I have tried formating the flash, re-downloading and FTP uploading the image, and also tried the latest image c850-advsecurityk9-mz.124-15.T17.bin, but this warning message persists. [code]
We have recently purchased a Cisco ISR 2921, and on its docs it is written that this product has a License for IOS IPS Signature File, but on the product Flash Memory there is no IOS IPS Sig-File. and while i try to download the signature file from Cisco, it fails.
After reboot WLC , the switch port was err-disable , the cause is link flap after we reboot 3 times , the switch port link flap err-disable every time? We don't know why the WLC rebboot will cause it , it just normal action on device the WLC version is 7.4.100.0 link switch with access port , no port channel , no portfast.
we have two ASA5520-AIP40-K8 in our office and we purchase IPS service for one only, can we also update the signature of second device before purchasing additional IPS Services for second unit
I would like to ask whether SHA1 signature algorithm is available for FWSM. We use FWSM code version 3.2(22) in our production network where only MD5 signature algorithm is available. There is a need to upgrade to stronger algorithm SHA1. From my experience I know that this is possible on ASA firewalls running on 8.4. codes. Certificates generated on code 8.4. automatically use SHA1 with RSA Encryption.
Is it possible to have Signature algorithm SHA1 on FWSM? If so, in which code version?
hba-pf-a# sh crypto ca cert Certificate Status: Available Certificate Serial Number: caf44050 Certificate Usage: General Purpose Public Key Type: RSA (2048 bits) [Code] .....
I'm have upgraded our ASA5510's from 7.0.8 to 8.4.3 and now I just need to do the ASDM, but get this error? The bin file has been uploaded: [code] Device Manager image set, but not a valid image file disk0:/asdm-647.bin.
I had installed the aheros AR5B97 wireless network adapter in wondows 7, but it was not properly installed and the wireless service icon is not displayed in the network profiles.when i checked it in the device manager it showed a device status that:Windows cannot verify the digital signature for the drivers required for this device. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. (Code 52)
I have a new fresh 5508 release 7.0.98.0 When I try to download (I mean upload to the controller) a customized Webauth bundle in .tar format I have the following message error in the syslog :*TransferTask: Oct 29 12:56:08.894: %UPDATE-3-UNTAR_CMD_FAIL: updcode.c:2832 Error during untar of webauth bundle. Tar returned 256.
