Cisco Wireless :: 6500 / Association Request From P2P Client Process?
Dec 4, 2012
I'm trying to do some basic troubleshooting on our WiSMS. Some clients on a working network are unable to connect in the afternoons, debugging the client on the wism shows this message:
*apfMsConnTask_2: Dec 05 14:23:44.018: Association request from the P2P Client Process P2P Ie and Upadte CB
It keeps repeating with the Task_X changing.What does that mean?We have two controllers in our 6500's running this software ver. 7.3.101.0
View 9 Replies
ADVERTISEMENT
Mar 7, 2013
I have a wireless network infrastructure that is controlled by two WLC 5508s, Prime NCS and ISE. I have two networks for my users, an employee network and a student network. I started publishing the information for these networks via a group policy and the settings are identical, with the exception to the SSID.
My employees can logon to the employee network with no problems. I can walk up to any laptop, regardless if I have logged on to it before or not, and logon with no issues. ISE correctly profiles my account and authorizes me for the right profile. My students however are another story. Laptops that are designated for student use have the wireless network in their network list, and at the logon it shows that it will attempt to connect to the STUDENTS network. When I enter in a student username and password, it begins to login but then gives an error that says:
'There are currently no logon servers available to process the logon request'
The students cannot login at all. I can use my domain admin or my account and login to one of the units with no problem, even if I haven't logged onto the unit before with that account.
I don't know if this is an ISE issue or some other type of issue. I'm leaning towards ISE being the issue, since its what is passing authentication through to the domain. I have my students all in groups and I have those groups added to ISE, just like I have my employees added.
View 2 Replies
View Related
Sep 16, 2012
It is a Customer requirement to send 802.11 client association/disassociation logs to the Syslog server in a Unified Wireless system. (AIR-CT5508 + LAP1142) [code] Unfortunately I didn't find such logs even in Msg Log with the severity level set to debugging.I was able to do client assoc/disassoc logging with SNMP trap + trap receiver software, BUT is there any way to do this with Syslog?
View 1 Replies
View Related
Jan 29, 2013
I have been noticing in my trap logs that there are an excessive amount of Client Association/Authentication Failures. I cannot figure out why. I have a Cisco 5508 WLC with 81 AP's (1131ag, 1142abgn, 1262N) models. The wireless devices are on a Windows Domain and use 802.1x EAP authentication, authenticating the user and computer info with a RADIUS Server. I look at the logs and all it can tell me is Reason:Unspecified ReasonCode:1. I read that the Reason Code is due to "Client associated but no longer authorized" but to be honest I am not sure what that means.
View 9 Replies
View Related
Feb 21, 2013
I am running WLC 5508 and WCS version 7.0.98. We are noticing with some of our handheld devices that have Sychip Wireless cards that they constantly have issues communicating. The error I see on the WCS side is shown below:
Client '00:0b:6c:2f:d0:32 (0.0.0.0)' failed to associate with interface '802.11b/g' of AP 'HO-BRSales'. The reason code is '0(null)'.
View 11 Replies
View Related
Mar 19, 2013
document which explians normal booting sequence in a 6500 Switch running IOS. What I am looking for is in which order the image is loaded in SUP, RP, SP etc
View 1 Replies
View Related
Apr 15, 2013
We are looking to upgrade the version of IOS on the 6500s this evening and in preparation i've dowloaded the image to sup-bootdisk. However when trying to update the boot path as follows I see the following error: [code] Why are we seeing this message when the router is not doing anything with ISSU?
View 3 Replies
View Related
Oct 24, 2012
The switch 6500-E is frequently crashing whenever the pm scp process reach 100% .I got it under the command "remote command switch show proce cpu".How to solve the problem. I opened the TAC and the engineer says to upgrade the image12.2(18) sxf.Is there any other work around that would avoid to reimage the switch and reloading.
View 1 Replies
View Related
Jan 11, 2012
We are cutting over from 6500 IOS to Nexus 7000 and have hit "Maximum ospf feature instance limit reached." as we configured up the 7 existing ospf processes - the limit is 4. These existing processes are for various vrf contexts we have. I see you can run multiple vrf contexts under one process - but how does that work in a mixed environment where the ospf neighbours are still ios 6500s? They still expect to see different ospf process id per vrf.
View 2 Replies
View Related
Jun 29, 2012
I want to know what is this process used for on a catalyst 6500 ? we have got following message in the crash file, probably due to CSCsv77354
Jun 30 16:06:47.099 UAE: %SYS-6-STACKLOW: Stack for process ACE HAPI running low, 0/6000
View 3 Replies
View Related
Apr 18, 2012
we are using Cisco 6509-E VSS mode [12.2(33)SXI] ipbase image and facing high cpu utilization. In show process cpu output it is showing some "ios-base" process consuming cpu. I attached show cpu output
View 1 Replies
View Related
Nov 30, 2012
we have configured SSh on our primary and secondry core switch , SSH is working on primary Switch but we are unabme to access secondry Core switch through SSH .
Error are as under :
ov 28 09:14:15.380: SSH1: starting SSH control process
ov 28 09:14:15.380: SSH1: sent protocol version id SSH-2.0-Cisco-1.25
ov 28 09:14:15.396: SSH1: protocol version id is - SSH-2.0-PuTTY_Release_0.62
ov 28 09:14:15.396: SSH2 1: send: len 280 (includes padlen 4)
ov 28 09:14:15.400: SSH2 1: SSH2_MSG_KEXINIT sent
[code]...
View 1 Replies
View Related
Feb 22, 2013
Version 12.2(33)SXI
int vlan 1
description client vlan
ip vrf forwarding A
ip address 10.1.1.1 255.255.255.0
standby 129 ip 10.1.1.2
standby 129 timers 1 4
standby 129 priority 105
standby 129 preempt
ip helper-address 10.1.2.20
[code]....
dhcp requests are not making it to the dhcp server SAME VRF (ip helper-addres is not doing anything.....)extended vrf traceroutes on udp 67 sourced from vlan2 are fine
I am expecting udp unicast packets on port 67 "giaddr" relay packets on the DHCP server generated and sourced by the relay on Vlan1
eg. Mar 1 01:59:06.731: DHCPD: setting giaddr to 10.1.1.1
This exact setup works in our preprod environment with the same code.Only difference is we run Distributed etherchannel on the 6500's where this doesnt work.
Wireshark on the client I can see the requests being sent Going to check it with debug ip dhcp server to check the relay logs out of production hours.
I have seen so many people say it IS and ISN'T supported on this version of the code.e.g. [URL]
I am aware the helper-adddress should inherit the vrf of the interface ip helper-address vrf command is not supported.The fact it works in the PP environment.... could this be due to the Distributed EtherChanel difference? or just some bug....
View 2 Replies
View Related
Dec 5, 2012
We will be converting two 6500s to VSS. Each chassis has a Sup2T module, fwsm, 6908-10G blade, wism1 blades and two or three 6748-SFP blades. I was wondering how long the conversion process takes? If I remember correctly at the 2012 networkers lab it took maybe 10 minutes while using Sup720s. The instructor mentioned that with Sup2Ts it would convert a lot faster.
View 3 Replies
View Related
Apr 30, 2013
I'm using the cisco 837 router as my VPN server. I get connected using Cisco VPN Client Version 5. But when I ping the router ip, i get request timed out. Here is my configuration :
Building configuration...
Current configuration : 3704 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
[Code]...
View 7 Replies
View Related
Dec 15, 2011
I have a situation where a specific unit on my network is booting using BOOTP.The unit is connected to a stack of two Cat3750X switches running IOS 12.2(55)SE1. The server and client is on the same VLAN on the same physical switch, so it is purely L2 between the server and client. The BOOTP server is a computer running a specific software connected to the switch. There is no DHCP server on the switch. IP-helper is not configured on the switch.
If I do a monitor-session on the client port I can see the BOOTP request packet enter the switch, however this packet is never flooded out of any ports in the switch, so the BOOTP server never receives the request. I have tested the server and client in a cheap dumb switch and there it is working just fine. Regular DHCP requests are flooded correctly.It apprs the there is something in the clients BOOTP request that is not correct, since the Cisco switch apparently discards the packet.
Are there any BOOTP gurus that can have a look on the attached (Wireshark) BOOTP client request and perhaps determine if it is infact malformed? Why the switch is not flooding the packet. What is the meaning of the BOOTP broadcast flag in a client boot request?
View 7 Replies
View Related
Feb 21, 2011
We find ourselves in a difficult situation with the Cisco VPN Client version 5.0.07.0290 where it keeps giving us an
"Error 42: Unable to create certificate enrollment request"
When we attempt to use the Online enrollment method to create and enroll a new certificate. There is no additional information in the VPN client logs where we have set 3-High for all logs. In addition, Wire shark does not show any packets sent from the machine running the client to the Cisco 3825 router which runs the Cisco CA.
To create and enroll a certificate we do the following:
1. Click on the Enroll button to show the Certificate Enrollment dialog
2. Select Online
3. Select <New> for Certificate Authority
4. Enter http://192.168.120.1 as CA URL (note, 192.168.120.1 is the IP of the Cisco 3825)
5. Click Next to display the dialog where we can enter certificate details
6. Enter details in all fields except IP Address and Domain
7. Click Enroll which shows a dialog with the Error 42 ... message in it.
If we attempt to create a request by using the File method, all works fine, that is, the client creates a file with the enrollment request. The fact that the client does not send any messages to the Cisco CA leads us to believe that we have a problem on the client machine. However, the client does not write any information in the logs, so it is a bit hard to fix the problem. I can provide additional configuration information if required for both the client and the Cisco CA. Note that we have not modified any client configuration. Basically, we installed the client on a Windows 7 64bit machine and attempted the steps listed above.
View 2 Replies
View Related
Oct 31, 2012
Currently we're providing DHCP to wireless clients from a dhcp pool on a cisco 6500. Due to new requirements we need to move to windows 2008 dhcp and when I test this on an unused WLC (7.0.235.0) the client doesn't get an address.
When I do a packet capture on the client I see it requesting dhcp but not getting any response from the server. When I do a dhcp debug on the client I see the same (see attached file).
This seems to me to be a server issue but the same server is supplying addresses to wired clients.
View 3 Replies
View Related
Oct 9, 2012
I have two core switches - 4506E, and i noticed there are frequent cpu spikes on both of the cores switches. As its spikes intermitendly i couldnt able to anlyze the issue. I need inputs on the following,
1) Is there any Free CPU process monitoring tools to identify which process is spiking ?
2) Troubleshooting techniques to identify the issue.
View 1 Replies
View Related
Oct 21, 2010
Had some problems with the association of the MSE with the WCS.Licenses already loaded context aware and WCS-PLUSThe two machines are within the same network segment WCS (10.16.0.28) and MSE (10.16.0.89), including IP connectivity exists and which tests ping.When I do a / etc / init.d / mse status throws me the following error:
root@xxxxx# /etc/init.d/msed statusSTATUS:MSE Platform is up, getting the statusUnable to get MSE status. Error: (400)Bad RequestRetrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status. Retrying status fetch -Unable to get MSE status.
[code]......
View 3 Replies
View Related
Dec 6, 2010
Has used the "Planned AP association" feature in WCS 7 planning mode? I haven't been able to find any documentation on it, but I was hoping that it allowed you to map your planning AP's and locations to freshly deployed AP's and place them on the floorplan when doing a synchronize, but I can't get it to complete successfully.
View 3 Replies
View Related
Sep 19, 2012
I just upgraded a 1812w from 15.1 to 15.2 and did NOT change any configs/passwords or anything else.
My WiFi Clients are not able to associate any more. Failure is:
Sep 20 13:59:19.384: %DOT11-7-AUTH_FAILED: Station 0001.0203.0405 Authentication failed
I can't find either a WLAN-configuration guide for 15.2.
relevant config:
dot11 ssid wlan2
vlan 2
max-associations 16
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii 0 password2(code)
View 6 Replies
View Related
Apr 18, 2012
Our client has MPLS connected all sites. Each site has a router connected to MPLS via serial interface, and connected to the switch (6500) via ethernet interface. There is QoS applied on the serial interface for outbound.
It appears there are lots of inbound traffic coming to the site, and the client applied QoS on outbound.What I learned that after the packet are marked by the CPE, the ingree Provider Edge Router (PER)uses these marking to map flows to various Label Switched Paths (LSPs) providing differentiated treatment accross the network. Then at egree, the PER applies queuing policying based on the CPEs orginal DSCP markings to properly allocate bandwidth on the egrees link during congestion. My guess we really don't need to have inbound policy applied in the serial interface on the router, am I correct?
The serial interface has 1.5 MB, and the goal is we want to have 1 MB for cirtical apps, and 0.5 MB for download/upload internet access. If we apply this policy on the switch, A) should I apply it on the VLAN interface or the port connected to the router?
View 6 Replies
View Related
May 21, 2013
-WLC 2504
-AP1602
-SW 7.4.100.0
We have 22 x AP1602.5 of them show up in the WLC with Controller Association Latency of around 1 minute and 10 seconds.The other 17 all have latency around 10 seconds.
1. What are possibile causes for high value of association latency?
2. Could high-value association latency be an indication of badly working wifi for data traffic?
View 1 Replies
View Related
Sep 17, 2012
In our current Setup we have one WLC 4404 with 100 Access point license, now we have bought 3 number of 5508 WLC each supporting 100 Access point. Our plan is to Migrate all the Access point assosiation from 4404 to 5508. [code]
View 4 Replies
View Related
Dec 11, 2012
Windows association failed because Windows did not receive any response from the wireless router or access point. This is the message I have just got out of the blue from my laptop. it is showing that there is excellent strength... And I am also on my iPad connected to this connection.
View 1 Replies
View Related
Oct 28, 2012
Can't connect a sony vaio laptop to the internet.Says wireless association failed due to an unknown reason. My other laptop connects just fine though
View 2 Replies
View Related
Apr 11, 2012
Quick question about the association web interface tab on a 1140. I have noticed that the Device Type shows as "unknown" and the Name shows as "NONE."
View 1 Replies
View Related
Apr 22, 2012
Whats the difference between a transform set and a security association? I understand that in the transform set you have to state AH or ESP, but why do you also have to choose a HMAC and an ecryption algorithm? Didnt we just configure that with isakmp? Also what is the point in selecting an encryption algorithm in isakmp if were using AH?
View 3 Replies
View Related
Sep 15, 2010
We have a 5508 WLC with a few WAP's (1131's and 1242's). Our wireless clients use certificate base authentication against our AD (i.e. both computer cert and user cert are required). However, from time to time I see clients being associated but not authenticated as reported by the WLC. Could it be possible, as some literatures indicate that a client can only be "associated" after it's successfully authenticated? Perhaps I'm not quite clear about the concept.
View 7 Replies
View Related
Jan 3, 2012
Is there an association between fiber type, wavelength and distance? I mean are there single-mode fiber cables, which are more suited for 1550nm wavelength and have poor performance when wavelength is for example 1310nm? Are there fiber cables which support only some narrow wavelength range? In addition, how is such behavior called in physics?
View 1 Replies
View Related
Nov 21, 2012
I have a new Toshiba Portege. It successfully connects to 2 wifi connections but will not connect to a third (my home). I have other laptops connected successfully to my home network right now. So, the problem is specific to this machine and this network.
When I run an Intel diagnostic tool (Intel� PROSet/Wireless WiFi Connection Utility) I get a failure at the "association test". [Trying to figure out how to post a screen shot. I'll post it when I do.
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz, Intel64 Family 6 Model 58 Stepping 9
[Code].....
View 6 Replies
View Related
May 20, 2012
I'm using aironet 1210, 1130, 1100, 1040 autonomous mode, in a University campus network with thousands of daily user.We're using RADIUS authentication and AES/WPA2.In the past, there were some major issues with traffic (broadcast / multicast) in the wireless networks, that would spread all around the campus causing excessive processing at the access-points.To solve the problem we decided to implement access list at the radio interface to drop all the unwanted traffic. [code]
I'm pretty sure this is caused by the ACL (I've tested removing the ACL and the issue never occurred) but I can't just get ride of it.
Any alternative way to drop broadcasts?
View 6 Replies
View Related
