I can't find any information that the AP1231G-A-K9 AP is supported in a 5508 Controller Based environment with Prime NCS.Could one of the experts confirm or deny?
View 1 Replies
We are trying to navigate the waters in choosing between a in-house, controller-based, wireless network solution or a cloud-based solution. We have been presented with the usual suspects in cloud-based (Aerohive, Meracki, etc) and with Cisco (5500) and Aruba on the other side. We are a multi-campus organization with approx. 200 APs.Any hard reasons why go with a controller-based vs. cloud-based solution? If we must keep the conversation limited to Cisco, why go Meracki over Cisco's WLC solutions or vise versa?
View 1 Replies View RelatedI'm looking into a way of routing users internet connection based on their username or group in a windows environment. Currently there's two ISP connections with their own proxy server. I want a user to be fully redirected to one of the ISPs based on who they are. I was hoping via IE proxy settings, this can be accomplished, but it looks like the primary ISP connection, is still getting most of the connections/routing.
View 1 Replies View RelatedI have problem with subnet based groups in Cisco Prime LMS 4.1.
Admin > System > Group Management > Device
I've been following examples made in this article with no luck:[URL]
Quote:
Understanding Subnet Based Groups #
The Subnet based groups use the following name format:
#
Subnet -- Subnet Mask.
I have to install a wireless mesh network shortly using Cisco 1552 APs. This will be controller based using 5508 controllers. The controllers currently have some 1262 APs configured in a mesh and bridging configuration so happy that it all basically works. My question is - what is the "config mesh range' command doing on the controller ( or setting the Range(RootAP to MeshAP) setting on the controller mesh GUI. The default setting is 12000feet and I have left it at default at present. Just interested in what this is used for - I assume it alters the mesh protocol parameters somehow ( or the RF parameters perhaps ) as it suggests in the guide that mesh APs will reboot following this command being changed.
View 4 Replies View RelatedI have to make a design for 150 sites, the large sites (40) will be controller based designs.But for the small sites (110) contains 3 APs, which will not have a controller onsite. (or should it be ??)Besides the overall management , which features do I miss if it is controller based or standalone APs.Like CleanAir , etc.
View 2 Replies View RelatedHow do I change 1310 Autonomous AP to a Controller based AP for 5508 WLC?
View 6 Replies View RelatedI have initially configured 2504 controller with necessary parameters. & we have LAP1131AG access Points. we have connected 2 Nos. of access points in network. we are getting Both AP connected with controller,Whenver i am trying to connect with this wireless network though SSID( currently, open authentication), laptop's not connecting with it. it shown error that " Windows was unable to connect to SSIDname "
View 4 Replies View RelatedWhen performing an audit from NCS Prime 1.3 on our 5508 controllers (500 lic) we are getting mismatch messages from many of our 3602i AP's that say the following...
(Type)Configuration Name Audit Status Attribute Prime Infrastructure Value Controller Value
(AP APname, Interface) 802.11a/n Mismatch Spectrum Intelligence true false
These AP's are not configured as Spectrum Intelligence on the controllers, rather as local. It seems that NCS believes that they are supposed to be SI. We have refreshed the config from controller many times but this does not change. The 5508's run v.7.2.111.3 Is there a change I can make on NCS or otherwise to make this mismatch go away? Is this a bug? It is not causing any problems (that we can see) but as most would rather not have these mismatches.
I have an AIR-AP1131AG-E-K9 running as root AP with three SSID's (mbssid), all WPA-2 PSK, IOS 12.4(25d)JA Now I would like to use an AIR-AP1231G-E-K9 as repeater for one of the SSID's (all three are AFAIK not possible), IOS 12.3.8-JEE(ED) So only one SSID is used.
I use exactly the same shared secrets and security settings on both devices, on the repeater the SSID is designated as infrastructure-ssid.Unfortunately I have the problem that the repeater AP cannot associate with the root AP.I have verified that aironet extensions are enabled, same security settings are used and checked many sites on the net which describe how to configure a repeater AP. Is there any incompatibility between these two APs? I have two of the AIR-AP1231-G-E-K9 APs available, do I need to use the same models?
Version 12.3 I currently have an open authenication customer network, I would like to add a second securt ssid for my sales department, is this possible, how do I do this, the more specific the better .
View 1 Replies View RelatedDoes WLC 2504 works with AIR-AP1231G-E-K9 and with AIR-BR1310G-E-K9 after I upgraded form AP to LAP the AP ?
View 4 Replies View RelatedI am trying to add an AP (1231G) with autonomous code (Version 12.3(8)JEC2) to WCS (v7.0.172.0). I recieved the following error:
Failed to add device to WCS Reason: Unified AP with same MacAddress already exists in WCS. Remove Unified AP first.
Does the Cisco vWLC support the cisco AIR-AP1231G-A-K9 platform?
View 4 Replies View RelatedBelow is he output from debug radius authentication from my AP.
I can see request is forwarding from AP to radius but Radius is not sending any response.Not sure why its not responding.
I also did not under stand few out outputs also
no sg in radius-timers and
RADIUS/DECODE: parse response no app start; FAIL
what does it mean.
I restarted radius server , changed secret key but no luck.
019639: May 1 16:15:08.727: RADIUS: User-Name [1] 32 "host/3KYGRH1.idcap.intdata.com"
019640: May 1 16:15:08.727: RADIUS: Framed-MTU [12] 6 1400
019641: May 1 16:15:08.727: RADIUS: Called-Station-Id [30] 16 "0012.01d6.f691"
[Code]...
I'm having the following issue with a couple of 1231's.
Some overall config info first:
This is a small office with 2x Catalyst 2950 (24-port, no PoE) switches and 4 AP1231G (autonomous). The APs get PoE from a PWRINJ3 each. The injectors are powered by the AP power supplies. Injectors and power supplies are mounted in the patch closet.
The 2 switches are connected together over 4 ports (20-23 on each switch), these ports are set to 1Q Trunk mode.
The APs are connected to the switches, 2 to each switch, on port 1-2. These ports again are configured as 1Q Trunk.
APs are connected to the switch as follows:
[switch] <- patch cable-> [injector] <- patch cable -> [patch panel] <- static cabling -> [outlet] <- patch cable -> [AP]
All this has been working without problems for a number of years.
A few weeks back, AP2 did not restart after a power cut (everything else did). All LEDs are off, port on switch has no LEDs lit. I did not get around to investigating this furtehr until last week. I unmounted (failed) AP2, took it to the spot where (working) AP3 hangs, and plugged it to the cable of AP3. AP2 came to life immediately. I unplugged it and plugged AP3 back in, which restarted immediately.
So I suspect a power supply issue on AP2. I took the injector and power supply that fed AP2 out of the patch closet. When connecting AP2 directly to the power supply, it came to life immediately. So I figure the injector is defective.
On the same day, I notice AP4 is also dead (again all LEDs off, no idea how long, could have been that day or could have been a few days - it has definitely been working after the power cut that appeared to have killed AP2).
So I order 2 new PWRINJ3s and for good measure 2 new power supplies. Later that day, I took the injector and power supply that fed AP4 out of the patch closet. When I try this combination (AP4, injector4 and P/S4), and connect it to a different wall outlet (and therefore a different port -16 - on the switch) IT WORKS! Should have triggered questions, but did not immediately.
Last Thursday I got the new injectors and power supplies. So I take one of each, hook them upto AP2 at my desk, and AP2 starts up. So I mount new injector2 and new P/S2 in the patch closet, put AP2 back in its place, connect all the cables - NOTHING. AP2 does not start. The "power" LED on the injecvtor lights up green, the "device status" LED remains off. I take AP2, new injector2 and new P/S2 to my desk, hook them upto a wall outlet (connected to switch port 17). AP2 starts immediately.
Meanwhile AP3 has (also) stopped working (no LEDs on at all). As far as I can tell, it stopped working after I briefly disconnected (and reconnected) the patch cable between injector3 and the patch panel in the patch closet. The LEDs on switch port 1 are off.
I have since tried to power cycle both switches (took power off both, waited a while, poewerd both back on). No change.
PS: the APs ran firmware 12.3(8)-JA until recently. AP1, AP3 and AP4 were upgraded to 12.3(8)-JEE after the the power cut that took AP2 out. THis is when I found out AP2 was dead. AP2 was still on 12.3(8)-JA. It was upgraded to 12.3(8)-JEE last week when it was on direct power on my desk.
I am trying now to deploy the setup that works on some APs and doesn't work on others.
For example, on an AIR-AP1231G-A-K9, the following setup works:
!
version 12.3
no service pad
service timestamps debug datetime msec
[Code].....
iam currently trying to replace AP1231G-E-K9 with new equipment / Cisco AP next generation maybe?The problem is that the system, that is going to use the AP is using aironet 350 PCMCIA adapter with LEAP. If in fact we are going to use a new Cisco AP, will the new generation work with Aironet 350 Adapter and support LEAP?
View 2 Replies View RelatedWe have this access point AIR-AP1231G-A-K9 for mobile users. current version is c1200-k9w7-mx.123-7.JA4. Sometimes users are able to associate but not getting IP address from dhcp. It shows 0.0.0.0 for the particular client.
View 2 Replies View RelatedI have AP AIR-AP1231G-E-K9 with iOS c1200-k9w7-tar.123-7.JA2 and I want to convert it to Lightweight Mode with iOS image c1200-rcvk9w8 tar.124-21a.JA2. First of all, is it possible? Because I tried to convert from tftp server command (archive download-sw /overwrite /reload tftp://ipaddress/image.tar) and I cannot see in the controller. (controller and aps are in the same network)
View 11 Replies View RelatedI'm currently running CiscoWorks LMS 4.0.1 on Windows 2003 under VMware and just got upgrade licensing for Prime Infrastructure 1.2. I am assuming that I will need to upgrade the current server to Prime LMS 4.2 in order to ensure that data migration to Prime Infrastructure goes well. I am planning to follow Cisco's recommendation to run Prime LMS and Prime Infrastructure in parallel for a time and migrate individual functions.
My real question is about Syslog handling. All of the managed devices are currently sending Syslog data to LMS. As a last step in the migration, is it possible to change the IP address of the Prime Infrastructure server to replace the Prime LMS server so that the Prime Infrastructure server will just start getting all the Syslog data, or do I need to go change hundreds of managed devices to point to a new address?
What is the relation between: cisco NCScisco Prime LMSCisco Prime infrastructure.As i orderd a Cisco Prime infrastructure from a Cisco Partner and what i got is :
x2 cisco NCS appliances
x1 DVD cisco prime infrastructure
x1 DVD Cisco prime 4.2
I have two dinasour APs that I need to fix. They are configured in bridge mode to bridge a few VLANs between two sites. Right now the management IP on BVI 3 interface doesn't work. Does it have to be on BVI1 for it to work? When I say "work" I mean I am able to ping it and use SNMP to monitor it.
View 1 Replies View Relatedloading a new bin file onto a Cisco wirless access point ,the access point i have found is only in rommon stage
Access point model is : ap1231g-e-k9.
Here is what I am attempting to do.
1. I have a 1042N AP configured as a Workgroup-Bridge attaching to a Lightweight Access Point.
2. LWAPP AP is on a 5508 series Controller.
3. I have MAC Authentication configured through an Ciso ACS box running 5.2 code. And that portion is working.
4. I want to lock this WGB down even further with a second layer of security. I am thinking WPA2 -AES.
Need securing a wireless environment in a hotel? The SSID has to be broadcast of course but how can we protect guests from man in the middle attacks, etc.? Currently the environment is all AP1200s with no hardware upgrades in the near future. There is also a 2811 router in place but nothing else. We would love to be able to force users to authenticate with a password in order to get out to the Internet as well.
View 2 Replies View RelatedI am looking to slowly migrate some of our wireless devices (Aironet 1231 and 1232's) to the Wireless N spec - 1260's.I currently have four AP locations that I want to upgrade first before anywhere else. At the minute, these four AP's work on the 2.4Ghz G band.
how the new 1260's will work in the mixed environment. I believe I will need to purchase the 1262 (which is the dual band version) so that I can operate the AP in both the 2.4Ghz G band range and the 5Ghz N range at the same time, is this correct?If I was to purchase the 1261 (which is the single band version), will I only be able to operate in either th 2.4Ghz or 5Ghz, but not at the same time?
For the mixed environment, would you suggest the dual band version? Can I place the same SSID on multiple Radios if this is the case? Following example: Say I have the SSID called 'Company' - this at the minute is operating on the G band 2.4Ghz range. If I was to purcahse the dual band 1262, could I put this SSID on both the G radio and the N radio? Would clients with an N adapter automatically connect to the 5Ghz range (N Radio) and legacy G and B adapters automatically connect to the 2.4Ghz (G Radio)?
We have the following BYOD environment:
WLC 5508 (7.4.100.0)Cisco Identity Services EngineVersion : 1.1.2.145 Patch Version : 3
During BOYD implementation we faced some problems with Android devices:
1) The Netwrok Setup Assistant (NSA) download process corrupts during the self-provisioning process (captured on 4.1.1 and 4.2.2 version)
2) If NSA is already installed, the network setup process (downloading profile, certificate) stops at last step: connecting to network, meanwhile the connection itself successfully establishes. This bug is captured on 4.2.2 version, 4.1.1 is ok.
Google ACL is configured according to TrustSec docs and permits all traffic to google networks 173.194.0.0/16 and 74.125.0.0/16.
I recently setup our small office network using the following setup:
Cablemodem <--> router <--> 1231AP(role root bridge with wireless clients) <-> 1231AP(role non-root bridge with wireless clients)Code on both APs: 12.3(8)JEE.Office network generally has less than 3 wireless clients connected at any one time to either AP. AP's are a mere 50' apart; clients are all less than 30' from either AP; they all show excellent signal and connected at 54mbps signaling rates.
All is/has been working very well & very stable with the exception of speed. We have business class service from RR, approx 25mbps dl, 2mbps ul. Any hardwired client to the router switch ports are able to download at speeds averaging 23mbps. Any wireless client connected to either AP is never able to exceed download speeds of 5mbps. With no other wireless clients connected except my one test client, I was not able to exceed 5mbps throughput from either AP that I connected to.
I can confirm that the ethernet connection between the router and root bridge is up at 100mbps-FD and not showing any errors: [code]
Are these very slow thoughput speeds normal of this hardware combination?I did much searching/googling and found claims that by eliminating TKIP it almost doubles the actual wireless speeds our clients can obtain.
I know that the 3600 series APs are not supported on the 4404 WLC. However, would the following scenario be supported? I would like to use the 4404 (software rel. 7.0) as a guest anchor with a 5508 (software release 7.2) as the foreign controller supporting series 3600 APs. I ask because the APs do not need to join the guest anchor.
View 7 Replies View RelatedIf we have a mixed environment of 4400 and 5500 controllers will the office extend features still work or will we have to run a seperate wireless domain from the 5508 for the aps that we need office extend on?
View 2 Replies View RelatedWe have a customer that have 2 5508 as primary and backup controller and a 4400 as an anchor controller. We plan to upgrade the 5508 to 7.3.112.0 and the 4400 is already 7.0.116.0. Will there be any issue if the anchor controller is not the same code as the foreign controller? Do I also have to upgrade the acnhor controller to 7.0.240.0?
View 2 Replies View RelatedI am looking to configure a wired and wireless guest network. I have industrial barcode scanners that connect to one SSID and then there is the business network on the office SSID (no vlan seperation for these devices just different SSIDs). There is not really a need to seperate the business network from the scanners in any case. However, there are needs for a guest network and this needs to be seperated. At the bare minumum I would like to have the wireless guest network. Here is what I have: 2125 Wireless LAN controller managing 18 LAPs (1 indoor and 17 outdoors)Cisco Cat 2950 switches (2 x 24 port and soon to be replaced with 2 x 48 port 2960's with 802.1x capability) Sonicwall TZ210 firewallOne existing wired and trunked vlan for PLC infrastructure. One ESXi hosting Windows server guests (soon to be 2 with vMotion) The reason for the wired guest access network is tp prevent anyone from plugging into the wall jack in the office with thier home laptops or anyone else from being on the same subnet as our domain machines. Granted they would be unathenticaed but there would be no layer 2 seperation and that is what I think would be best.
How would I go about doing this on the wireless controller without an anchor controller just using my existing hardware? I would like to have the Guest SSID only availible in the front office. Is it possible to offer a guest network while still servicing the business network SSID on the same access point? Then might I be able to have the guest network be treated as it should at the controller? However this might present another issue altogether as the guest traffic will be over the same wire as the business SSID until it hits the controller for management.
