Cisco Wireless :: 5508 WLC Management?
Apr 24, 2013
I have a 5508 deployed, what I'm trying to do is configure it so that it can be accessed with AD credentials, I'm not talking about accessing the wifi network, I'm talking about logging onto the controller itself for management purposes. We havea few people our team, and it would be alot easier if each of us could log into the controller with our own AD logins. Is there a link that can assist me in accomplishing this, I haven't been able to find one.
View 2 Replies
ADVERTISEMENT
Aug 16, 2012
I setup a WLC5508 with 2 SSIDs, one for guest traffic and another for internal users. They are in separate subnets and are routed out to the internet via 2 different isps, with the guest network going over a bonded t1 and the internal users going out the primary internet connection for the company. While this works as desired and we've verified that while on the guest network we're going out the right isp, we've encountered an issue with saturation of the bonded t1 pipe by guests. We'd like to find a way to limit a guest to a capped down/up stream if possible, with downstream being the most important. The infrastructure includes 3560 switches and AIR-CAP3502I-A-K9 access points.
View 1 Replies
View Related
Jul 3, 2012
I'm having an issue with the 5508 management port .. I can't seem to ping it from the switch connected to it .. ( the Show cdp command shows that the two can see each other .. but no ping is possible ! [code]
View 4 Replies
View Related
Jun 10, 2013
We faced one recent issue with WLC configuration behavior and explaining our observation and workaround we did.Requirement is to manage the WLC (5508 with 7.4 code) using two SNMP managers in different locations. Also these two Servers should use the same community string to manage WLC.
We were able to configure the SNMP community string for one server IP (to allow access) through GUIWhile trying to add another Server – IP with same community string – it didn’t allow As per the configuration guide, Controller can use only one IP address range to manage SNMP community. So we cannot configure the same community string to allow only two different server IP addresses [code] We currently configured the major subnet ( 10.x / 8 - two match both server addresses) and it works fineAlso when we tried 0.0.0.0 / 0.0.0.0 , it didn’t work (SNMP was failing)But this creates a security issue wherein anybody can poll the WLC.
View 1 Replies
View Related
Aug 1, 2010
I'm setting up a new 5508. I've used the config from a 4402, have successfully connected to the Service port to manage the device, but for some reason cannot connect to the Management interface. In this case, port 1.
The service port is connected to a Catalyst switch and grabbed an ip address (10.2.x.x subnet) no problem. I can access the 5508 via https using the SP. However, port 1 is connected to the same Catalyst switch, but on a different vlan (subnet 10.20.x.x). Both ends show that the interfaces are up, I can ping the interface from any other host on the network, but when I try to manage the device via https I cannot connect. We are using WCS and I cannot add the device from the WCS. About all I can do is ping that interface.
View 6 Replies
View Related
Sep 1, 2011
I have two 5508 and one WCS server, the controllers are in one mobility group.Now I have to change the management IP addresses on the controllers. What are the correct steps to do this?
View 9 Replies
View Related
Sep 3, 2012
I didn't design the job, but is pretty straight forward, except the following, the design has a single wlc 5508 with 2 physical connection between two non cisco switches. There are 2 initial WLANs to be created. I am ok with most of the wlc config execpt the following:
Now from my understanding of everything I have read recently, you can't use LAG on the 2 physical connections if they connect to 2 seperate switches, unless, although not offically supported, the 2 connections are on either 2 3750s in the same stack or a pair of 6500s running VSS. So I believe that in my case 2 seperate connections from the wlc to 2 non cisco switches will not work with LAG. Is my understanding of this correct?
Is there a way to maintain the 2 physical connections from the wlc to the 2 non cisco switches to maintain redundancy?The wlc will have a management interface obviously, but from what I have read, the 2 WLANs that are going to be created have to have their own interface on the WLC. Which I understand as the managment int and each of the 2 WLANs are on different subnets.
If I don't use a single uplink to one of the non cisco switches (either 1 or 2 physical connections) using LAG, it appears to me that each of the interfaces ( management, wlan1 and wlan2) need to have a physical connection from the WLC to the switch, with each interface mapped to a physical port on the WLC, so correct me please if I am wrong, but this would mean I need 3 physical connections between the wlc and the swtich?
View 3 Replies
View Related
Jan 16, 2013
After I've upgraded software to the v7.3 and applied AP-SSO it made imposible to access the controller's gui via Service-port. So we tried to access it by management-port, but there is some problem too. It is not working from another subnets. But default gateway on management vlan is set correctly and I even tried to turn of all acl's on switch. WLC is only accessible from the same network. But at the same time wlc is replying on ping fine.All other protocols cannot connect to the controller.
View 3 Replies
View Related
May 6, 2013
I have 2 x 5508 Wireless Controllers, 1 mgmt port on each as standard. I noticied something different between these controllers running the same code.I can bound a physical port to the mgmt interface on one controller but not the other (both interfaces are untagged)see below, this config appears on one controller but not the other? Is this something to do with the initial setup? How can I add Phyiscal information to the other controller mgmt interface, I cannot delete the mgmt interface. Physical InformationPort Number Backup Port Active Port Enable Dynamic AP Management?
View 2 Replies
View Related
Sep 25, 2012
I have a new 5508 that I am setting up. My first one from scratch.
Interfaces:
managment -> 10.10.10.10 ->dhcp 10.10.10.1
voice -> 10.10.7.1 ->dhcp 10.10.10.1
guest -> 192.168.1.2 ->dhcp 192.168.1.2
Local DHCP (via the 5508) is for the guest network while the management and voice use the Windows DHCP server.
My problem, Voice and guest work fine. I have two SSID's (one 802.1X and the other PSK) that use the management interface that will not get an IP. I have enabled dhcp proxy from the cli on the controller. I tried with the management VLAN tagged and untagged.
View 2 Replies
View Related
May 26, 2013
My 5508 WLC which runs version 7.4 is configured as a DHCP server for the AP management and here's my problem: My AP can get to the address, and can ping the address of the WLC management，But my AP prompts the following log： [code]
In the switch dhcp we can use to do the WLC option43 specified address, but in this case how the address specified WLC, the AP can be registered up?
View 9 Replies
View Related
Aug 20, 2009
I'm setting up a new 5508 WLC (the first wlc I have ever setup) and I have my WLAN setup with our existing WPA/TKIP ssid for transitioning our clients from our existing autonomous system to the wlc. I have selected PSK as the key mgmt and I can get the client's to connect for a few minutes but I keep seeing these errors:
Fri Aug 21 08:50:05 2009 Client Excluded: MACAddress:00:21:00:f9:dd:50 Base Radio MAC :00:23:eb:27:e3:b0 Slot: 1 User Name: unknown Ip Address: unknown Reason:802.1x Authentication failed 3 times. ReasonCode: 4
I don't have nor do I want 802.1x enabled. Is there something I need to disable either on the client or the controller?
View 20 Replies
View Related
Aug 4, 2011
I am trying to forward mgmt traffic from my WLC (5508) to the NNM server. The WLC it self comes in to the mgmt server, but i dont get any snmp traps/message from the Accespoints
Is there some configuration I have to do ?
I have checked the community strings,trap receiver etc, but the WLC is showing up in the mgmt server so i think those parameters should be ok.
View 4 Replies
View Related
Jan 2, 2012
I'm trying to verify some behaviors I'm seeing with my 5508 controller setup, I've zero experience with this hardware and clueless on the best practices. With that said... out of the box I ran through the AutoInstall process.
I gave my service port an IP address on my subnet, 10.10.8.0/24 vlan 100 and gave the management interface the ip address 10.10.30.5/24 vlan 130
From my host I can ping the management interace 10.10.30.5 and the interface gateway 10.10.30.1
I cannot connect to the controller via 10.10.30.5 either through the web GUI or telnet
I can connect to the controller via 10.10.8.200 both through the web interface and telnet
while connected to the service port, I can ping the management port IP but I cannot ping the 10.10.30.1 gateway.
We have attached two test 3502I AP's and they found the controller and pulled correct ip addresses, clients can authenticate and access network resources as well as the Internet so for the most part, things are working but it concerns me that the management interface can't ping its own gateway.
View 8 Replies
View Related
Apr 3, 2013
I configure IP address on the management interface port 1 of 5508 controller when i connect it direct to my laptop i can't ping or access controller from my laptop even i connect through layer 2 switch still i can't not.
IP Address of management interface : 10.21.0.50
Laptop IP Address : 10.21.0,51
View 13 Replies
View Related
Aug 30, 2011
I've got a new 5508 wireless lan controller and can ping the ip address of the management interface, but can't access the GUI at the management interface's ip address. I can access the GUI on the service-port interface. No static routes in the controller; trunk appears to be set up correctly.
View 5 Replies
View Related
Feb 15, 2012
I'm configuring a 2500 series WLC to test some wireless configuration changes we'd like to make on our 5500's that are currently in prodcution.
The 2500 and the 5800's interfaces are configured as a LAG.
One of the primary goals of these configuration changes is to move the LAPs from their current VLAN (the same subnet as our primary WLAN) to two separate VLANs. Were choosing to move the LAPs to 2 APs based on the WLC best practices document's suggestion to limit the number of LAPs per vlan to 60-100. We've had several issues in the past with LAPs failing to join with their static IPs, releasing them and then joining with DHCP addresses.
LAP's will be on separate vlans using subnets 10.10.10.0/25 and 10.10.10.128/25. WLC management interface is in the 10.10.1.0/25 subnet.
Should we continue using static IPs for the LAPs or DHCP?
What subnet should the AP management interface be on?
Is it possible to have mutiple AP management interfaces with LAG?
View 4 Replies
View Related
Feb 13, 2011
I have a DIR 655 hardware A2 Firmware 1.35NA. It has been working Great. Yesterday, 2/13/11, I tried to login on a hard wired ethernet connection. I looks like I'm not an administrator and shows minimal info. If I click on any thing it logs me off. From a wireless connection it works like it should, but it is hard to do firmware upgrades, system saves, and restores. I reset the router to factory settings and disconnected it from everything, but it still works the same (not right). I got a restore to work, barely. Is this a new feather? Now what do I do?
View 11 Replies
View Related
Nov 20, 2012
I mistakenly mis-configured "Management ACL mode" on my AP541N.
Administration>Administration Access Control>Managment ACL Mode
I set this to "Enabled", the problem is I only entered 1 IP address, and that IP address is the SAME IP as the AP's own internal interface. I was not thinking and entered that IP out of habit when I meant to enter my workstation's IP. The FW does not have a safeguard against this.
So, as you can see, this is a big problem, because now I have completely cut off all access (That I can think of) to the router. I can never access the AP as that IP because if I set my workstation to that IP, 1) There will be an address conflict, 2) My computer won't route traffic to the AP out its NIC because it recognizes that IP as itself.
View 2 Replies
View Related
Apr 18, 2013
we have two AP541n APs that were clustered togehter. They are powered using PoE. The other day I discovered one of them wasn't working properly. I couldn't log into it from the web interface so I unplugged it and plugged it back in from the PoE switch. That didn't work. Since then I have taken it off the network and have tried to reset it and I still can't access it. I've tried connecting to it from the default IP, which according to the admin guide is 192.168.10.10, and that doesn't work. I have tried using Telnet and SSH to connect to it using the default IP and the static IP we had set for it. I have set up a little linksys router and plugged the AP and a laptop into it in hopes it might get DHCP, but that hasn't worked either. I have also noticed the WLAN 2.4G and WLAN 5G lights are not coming on. The PWR, SPEED, and LAN lights all come on. The DIAG light comes on when it's furst plugged in and then turns off. Right now it is not plugged into PoE so that light is off too. We had both APs plugged into an ESW-520 that was plugged into a UC560 which had recently been updated to the latest firmware: 8.6.1. The short story is I don't have any connectivity to my AP541n, even after being reset. No wireless, no Web GUI, no ping, nothing. Has this thing become a large paperweight?
View 2 Replies
View Related
Mar 29, 2012
I do have problems with remote management of a Wireless Accespoint WAP200.The WAP200 is connected to a router RVS4000 and works well..There are several nodes in the LAN, all static IP, all forwarded in the RVS4000..All nodes can be managed in the LAN as well as from outside..Exept the WAP200, from inside in LAN no problem, but from outside gives a 404 return.I build other similar LAN's, but the same, no connection.
View 8 Replies
View Related
May 10, 2012
We are installing a 2504 with management on VLAN2. The management port is on interface 1 which is attached to a layer 3 3750. From other VLANs in the network we cannot manage the 2504 controller with the web manager. We are running the latest code, 7.2.103.0, since we are using 3600 APs. We have a TAC case open, but spent 3 hrs with them and they can't figure out the problem. TAC did some debugging and saw that the 2504 is ARPing for the address of the PC on the other VLAN instead of sending the packet to its default gateway. How to get success with the management interface on a VLAN and managing the controller from another VLAN?
View 2 Replies
View Related
May 13, 2013
I'd like to know if WAP121 can be centrally managed by WLC, such as CT5508.
If WAP121 cannot be centrally managed by WLC, is there any way to minimize operation work to manage WAP121?
View 2 Replies
View Related
Apr 24, 2011
I currently have two 541N access-points slightly overlapping eaching other and my clients appear to connect to the further AP most often. They are setup in a cluster, but that appears to just provide configuration synchronization. Short of purchasing a wireless controller which would appear to be overkill, is there any way to manage client connections between the two AP's?
View 4 Replies
View Related
Dec 20, 2011
We are looking at putting in a solution at a hotel for Free Guest WiFI.The solution would cover 4 floors and about 120 rooms and some open areas .In short the hardware would look as follows
-2500 controller
-1142LAP
-2960 PoE switch
-878 Adsl router for internet connectivity (20Mbps/1Mbps internet ADSL feed)
One of the concerns raised by the client is that they would like to make sure that no single user could eat up too much bandwidth creating problems for the rest of the users . Can the above KIT or something similar achieve this objective? As far as I can think of we would require a Proxy server .
View 6 Replies
View Related
Mar 20, 2011
We have just bought 4 WAP4410N. These units will be handling wireless network at the edge of our network, only allowing for Internet access.We will be creating two SSID's, one for employees and another for guests, with different wireless password rotation policies, intended to be changed automatically by an application using SSH.Is it possible in any way to create another SSH user just for this purpose? I do feel unconfortable using the management user for this (call it paranoia!). The same with having SSH accessible from the wireless end. Any way I can tweak sshd and having it persist between reboots? Also, another issue is that we have the AP's configured for e-mailing the log however we don't receive it. Connectivity and sending has been tested with snmpc on console and everything seems to be OK.
View 8 Replies
View Related
Feb 29, 2012
It seems like the 4-ports switch in the 2504 can only one port can be used for management VLAN at a time ? I need all 4 ports to be untagged in the managment VLAN.
View 7 Replies
View Related
Sep 25, 2012
is it possible to Manage the 2504 Controller over a separate Interface. Exmaple: Port 1 is used as controller management interface (untagged) - AP's are connected to the same VLAN Port 1 is used for Guest Traffic (VLAN 3 tagged) Port 2 should be used to manage the WLAN Controller from the internal LAN. (tested with untagged, tagged, same issue)
with this Setup it is possible to ping the Port 2 IP-Address from the internal LAN but if you try to connect to the controller, the Browser shows "Site not reachable".
I also enabled "Management via Wireless" but without success. I also tried to add the "management" VLAN as tagged on the management Interface with the same effect, the controller is not manageable from the internal LAN. On 5508 WLAN Controller i have an similar setup, but with LAG Port enabled. There this works.
The only interface were i can manage the WLAN controller is from the management Interface.
View 1 Replies
View Related
Nov 8, 2010
I just managed to get hold of an old second hand WAP4410N from a friend who got it for work but never really had the time to get it working. I powered it up and performed a 30/30/30 reset to get rid of anything he may have done to it but now I'm struggling to get to the management page. The power light is steady and the ethernet light shows activity but I can't seem to find it on any IPs. I've tried both hooking it into a router and setting up a laptop with an IP of 192.168.1.2, subnet mask of 255.255.255.0 and gateway of 192.168.1.245 and I still have no luck. I'll fiddle with it more tomorrow but it'll probably just involve messing around with more settings and resetting it again, nothing of any real structure. Is there any way of forcing a new firmware onto it over the MAC address or something, for example?
View 3 Replies
View Related
Jul 14, 2012
we are using wism 4404 code 4.2 , we are using this old code becuase of 1250 mesh APs, now when a user connect to our network and he is using intel proset software he can see details of our AP, like mac, type and AP ip address 9 which in this case it the controllers ip address) is there a way we can prevent the ap from showing it?...we will be doing an upgrade to 7.0.230 soon. will the upgrade takes care of this problem or there is a way to fix it.
View 5 Replies
View Related
Oct 19, 2011
I have got a 3502 setup and functioning in Office Extend mode. I have found one issue though. I have to set the checkbox on the my Management Interface to Enable NAT Address and put the external address in the box. Once this occurs no internal APs can join the controller.
Need setting this up with a single controller behind a router and not having to set the NAT Address for the Management interface? Should I setup a second interface on the controller to be for external management?
View 9 Replies
View Related
Sep 12, 2012
Is there any management software available to manage 5 or so AP541N running across a WAN. Eg we have a couple of VAP's setup on each access point 1 for staff and 1 for guests. I would like to be able to change all the WPA Personal guest access password centrally rather than having to log onto each box and edit it manually.
View 3 Replies
View Related
Feb 26, 2013
I have a WAP321 I am trying to set up. It's connected to gi1/23 and the switch system mode is set to router. The rest of the network works just fine.I have an SG500-28p and the port. [code] On the WAP321 wizard, configured IP address on my management vlan and also configured the default SSID on that vlan. That works. (I plan to remove that one) Then I add the two SSIDs for vlan 20 and 22 (private and public access) and I can't associate to either of the two additional SSIDs. I haven't configured any other settings beyond the wizard and adding the other two SSIDs. I do want cisco mobile ios (jabber) to work on the private network and also do have a couple spa525g2s that need to connect wireless.
View 1 Replies
View Related
