Cisco Wireless :: AIR-LAP521G-E-K9 Is Not Joining WLC4402-12
Oct 1, 2012
info regarding my LAP521 access points that are refusing to join the WLC4402-12.This is my first lightweight access point implementation and I have 3 LAP521's and 1 AIR-CAP3502I-E-K9 access points on my network.They are meant to pick up ip address from external dhcp server and then join the WLC but only the 3502i joins successfuly while the 521's get dhcp address but do not join the WLC. From the logs, I can see that the WLC is discovered by the 521's and even get a response message from the controller but they are still unable to join as shown in the screenshot below.My WLC is running software version 7.0.230.0 and the 521's are running an lwapp image version 4.2.61.8. [code]
View 3 Replies
ADVERTISEMENT
Apr 18, 2012
I try to use EAP-TTLS on one of my wireless networks and the 802.1x authentification fails at this moment:
*Dot1x_NW_MsgTask_0: Apr 19 16:04:52.800: 00:16:cb:66:29:bc Processing Access-Accept for mobile 00:16:cb:06:09:bc
*Dot1x_NW_MsgTask_0: Apr 19 16:04:52.801: %APF-6-RADIUS_OVERRIDE_DISABLED: apf_ms_radius_override.c:204 Radius overrides disabled, ignoring source 2
*Dot1x_NW_MsgTask_0: Apr 19 16:04:52.801: 00:16:cb:66:29:bc Resetting web acl from 255 to 255
*Dot1x_NW_MsgTask_0: Apr 19 16:04:52.802: 00:16:cb:66:29:bc apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason 20, reasonCode 2
where I can find what are deleteReason 20 and reasonCode 2?
View 23 Replies
View Related
Dec 6, 2012
We have 2 AIR-WLC4402-K9 devices at a remote location that will both drop their network connections some undetermined time after a reboot. We cannot reach them via telnet, SSH or HTTP. In fact, we cannot even ping them once they drop connection. The only cure we've found so far is to power-cycle the controllers. The controllers are in separate rooms and connected to separate switches. We've confirmed the links are configured as trunks and have the correct speed/duplex settings. I tried updating the IOS & boot loader on one of them but that had no effect on the problem.
View 19 Replies
View Related
Apr 25, 2011
today i upgraded our WLC4402 from 7.0.98.0 to 7.0.116.0. After the upgrade (also bootloader upgrade) the Aironet 1142 AP's do not joint the controller anymore. Error in log:*spamReceiveTask: Apr 26 11:30:46.301: %CAPWAP-3-DISC_INTF_ERR2: capwap_ac_sm.c:1468 Ignoring Primary discovery request received on a wrong VLAN (21) on interface (29) from AP ec:c8:82:ab:ed:00 Nothing changed in infrastructure. AP's are in VLAN 21, AP-Manager interface is in VLAN 21. Ap-Manager, Management Interface and Dynamic Interfaces are in PortChannel (LAG) = Interface 29.
View 8 Replies
View Related
Dec 5, 2011
has WiFi controller WLC4402 mac address table and can I show it somehow?
View 1 Replies
View Related
Mar 12, 2013
I have a Cisco 4402 WLC running version 4.2.112.0 controlling 20+ AIR-LAP1242AG-E-K9 access points running IOS 12.4 (10b). I'm trying to setup an additional AP as MESH. When I try to change the mode from local to bridge, on what will be the rootAP, I get a message stating that bridging is not support on this unit.
View 4 Replies
View Related
Mar 2, 2013
Is there is is any posibility to run WLC4402 and 104x family in H-REAP mode.
View 8 Replies
View Related
Feb 14, 2012
I have one WLC 4402 & arround 29 Access point (1130) in our enterprise network. Wireless users LAN segment is diffrent from wired users.Wireless users like Laptop users, Mobile users & ipad users which are connetced with this wireless & using enterprise network.
Presently we are using WEP mode for security key. This WEP key are week & can be cracked easily. so security point of view i want to put strong encription mode.Presently i do not have any radius server.I found there are some modes are available Like WPA, WPA2 with PSK etc.
will there any problem with wireless users to access application after changing the mode? Which mode will be stronger & could not be crack. Could we achieve without radius server or not?
View 24 Replies
View Related
Sep 1, 2011
Our costumers has implemented 2 AIR-WLC4402-50-K9 with Software Release 7.0.98.0, the wireless infrastructure consist in 2 Root-Mesh-LAP and 8 Mesh connect over-the-air to deploy outdoor coverage.
All the LAP are Aironet 1520 Series Mesh Access Points with equipped with 3 antennas for 2.4GHz and 1 antenna for 5GHz (backhaul).For one year all seems to be ok, yesterday after a power outage of one Mesh-Root-LAP, 5 Mesh-Lap continues reload each 10-12 minutes, on the WLC Log you can see event like a reboot from AP Console, on the LAP console i can capture this event before the reload:
Log on LAP Mesh
%DOT11-6-GEN_ERROR: Error on Dot11Radio0 - Not Beaconing for too long - Current 0 Last 0
%SYS-5-RELOAD: Reload requested by Dot11 driver. Reload Reason:
Radio Not Beaconing for too long ....
LWAPP-5-CHANGED: CAPWAP changed state to DOWN
AP1780-Mesh uptime is 11 hours, 10 minutes
System returned to ROM by power spike
%DOT11-6-GEN_ERROR: Error on Dot11Radio0 - Not Beaconing for too long - Current 0 Last 0%SYS-5-RELOAD: Reload requested by Dot11 driver. Reload Reason:Radio Not Beaconing for too long ....*Sep 1 16:05:43.399: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
What does it mean? That the beacon signal trasmitted from Root-Mesh-LAP cannot reach the Mesh-Lap and so the Mesh-LAP force a reload?Where we should search the cause? In the power instability or in a interference on the 5GHz radio interface?
On one of mesh Lap I found a strange reason for a releoad:AP1780-Mesh uptime is 11 hours, 10 minutesSystem returned to ROM by power spike
Log on WLC
Log System Time Trap
0 Thu Sep 1 17:31:11 2011 AP Disassociated. Base Radio MAC:00:22:be:41:33:00
1 Thu Sep 1 17:31:11 2011 AP's Interface:1(802.11a) Operation State Down: Base Radio MAC:00:22:be:41:33:00 Cause=Heartbeat Timeout Status:NA
2 Thu Sep 1 17:31:11 2011 AP's Interface:0(802.11b) Operation State Down: Base Radio MAC:00:22:be:41:33:00 Cause=Heartbeat Timeout Status:NA
[Code]....
View 7 Replies
View Related
Jun 6, 2012
my question regards to a pair of WLC 4402 with 7.0.98.0 software.Actual, our security policy does not really allow any peer-to-peer communication in a wireless LAN. Therefore we set the 'P2P Blocking Action' to drop, and the 'Broadcast Forwarding' feature to disabled (default).But now there is a special requirement for two mobile endpoints to communicate with each other, because one device controls the other.To test the communication, we first disabled P2P Blocking (without success) and further enabled Broadcast Forwarding to bring the communication up. Now it works, but the configuration disagrees with our policy.
1. Is there an alternative configuration as described possible, so that we do not violate the security policy? To allow only p2p connection between the two devices, ist should also be possible to drop any else by an ACL. But how to fix the problem with the broadcast, because of the needed ARP? My idea was to use a static ARP entry, but as far as i know, one of the both devices is not able for it.
2. Because, I did not find any detailed documentation:
2a. with enabled Broadcast Forwarding, the controller forwards all broadcast for any configured SSID, right?
2b. is the broadcast limited to the source VLAN/SSID?
2c. is the broadcast limited to an AP, to an WLC, or is it broadcasted to every AP on every WLC that has the relevant SSID?
we already have two new 5508 but not in an operational state now, because we plan to implement new 3600 APs.Do these WLCs offer more/another circumstances or possibilities?
View 1 Replies
View Related
Jan 2, 2013
I'm trying to connect to my wireless network using an android device with certificate but with no success.I'm using a WLC4402 7.0.235.3 SSID Security (WPA2 Auth802.1X + CCKM) [code]
View 7 Replies
View Related
Jun 21, 2007
I made a lot of tests during some days with a wlc4402 and everything was ok.
One day when I tried to reset the system I had a lot of errors (see attach) and could not go on. After changing the image the following output appeared: "RAM Disk Image Integrity Check Failed (Bad Magic Number) Hanging". Now I have no response from the controller.
View 4 Replies
View Related
Sep 18, 2011
I have AIR-WLC4402-50-K9 WLC i that current IOS is 7.0.98.218 and i upgraded with 7.0.116.0 IOS but after upgrading and reboot the WLC from 15 access point 3 access point are not coming up and 12 are coing up and working fine (4 1142 and 11 1131 series access point) 3 which are not coimg is 1131 series access point. when i login with console to 3 access point its rebooting 2 times and coming on ap: prompt.
In between that i reloaded the WLC one more time because from 15 acess point only 4 aceess point are came up and i also cleck the show boot on wlc its output is 7.0.116.0 (default) 7.0.98.218 (active) so i reload the wlc and checked out of 15 acess point now 12 acess point are up and still 3 are not. And i also checked the output of show boot command its 7.0.116.0 (default)(active) 7.0.98.218
So i things its because of when 2nd time i reload the wlc the remaining 3 access point are getting.
View 1 Replies
View Related
Mar 1, 2012
I have an issue with my primary WLC AIR-WLC4402-50-K9 running version 7.0.220. After a reboot of the WLC only one AP can join, all others are rejected. After waiting a few hours (about 3) all APs can join the WLC. What I have done is a software upgrade (from 6.0.199.4) on both primary wlc (wlc with the issue) and backup. Following procedure:
1. Reboot primary wlc so that APs failover to backup (succeeded with no issue).
2. Upgarde software on primary wlc
3. To failback all APs from backup to primary I reboot all APs, so that they join again their primary wlc.
A reboot of the first AP was fine, It joined the primary wlc, get new software downloaded, rebootet, joined wlc successful again. Then rebooting the next AP. But this one then does not join the primary wlc for several hours. But it is also not falling back to the backup wlc as the primary is up and reachable. I tried a reboot with the next AP, but same behavior. I was waiting then until both APs were joining the primary wlc again. This happened after around 3 hours. After that I have rebootet all other APs on the backup wlc also. All was fine they immediately joined the primary without any issue. There are no log messages during the time when the WLC does not allow APs to join.. I had similar behaviour last year with version 6 when I rebooted the device. So I dont think this is software related. Also I dont think it's a configuration issue as 1) I have another WLC that uses the same backup controller and this one has the same configuration but works fine also after a reboot. 2) why doesn't it work after a reboot for a few hours, but then all is fine without any config change. After a few hours all is fine for months (until the next reboot).
View 5 Replies
View Related
May 10, 2012
We are using WLC4402 for our Aironet 1240AG access points. The clients are connecting to the access points and are authenticating to the RADIUS server. I am seeing the logs in Server 2008 but they are being rejected due to Network Policy on the NPS server.
Where do I see the Authentication Type on the WLC4400 or the 1240's? In order for the clients (authenticated via Active Directory user) I have to set the Authentication in the NPS Connection Request Policy to "Allow clients to connect without negotiating an authentication method".
I do not have a certificate on the server and my method options are MS-CHAP-v2, MS-CHAP, CHAP, PAP, SPAP, and allow without negotiating. This RADIUS server was moved from Server 2003 IAS to Server 2008 NPS and there were no issues in Server 2003 IAS. I have all authentication methods allowed and it still gives me the error below. Only when I check "Allow clients to connect without negotiating an authentication method" it allows the authentication to proceed.
Client Machine:
Security ID: NULL SID Account Name: Fully Qualified Account Name: OS-Version:
Called Station Identifier: 00-17-a2-87-54-00: SSID NAME
Calling Station Identifier: 00-41-96-b6-e3-27
NAS:
NAS IPv4 Address: 192.168.90.24
NAS IPv6 Address: -
[code]...
Reason: The user attempted to use an authentication method that is not enabled on the matching network policy.
View 2 Replies
View Related
Jul 1, 2012
Customer has got a 2 x 1552AP that wont join a WLC.
This is the debugs from the WLC. Customer cant console to AP to capture as its up in the roof so not easily accessible. why the AP wont join? Date/Time are fine on the WLC as is the region.
*spamReceiveTask: Jun 28 13:45:26.612: 2c:3f:38:be:23:c0 DTLS connection not found, creating new connection for 172:16:2:1 (57918) 172:16:0:1 (5246)
*spamReceiveTask: Jun 28 13:45:27.243: 2c:3f:38:be:23:c0 DTLS Session established server (172.16.0.1:5246), client (172.16.2.1:57918)
[Code]....
View 2 Replies
View Related
May 12, 2012
There are a total of 25 Cisco 3502 APs installed. 24 APs were discovered except for 1 AP. I run SH CDP NE on the switch and the AP was discovered by the switch but it does not have an IP address. On the output of the SH CDP NE DE, I noticed that on the AP that is not joining, the Platform is "cisco AIR-SAP3502E-E-K9" while the APs that joined the WLC, the Platform is "cisco AIR-CAP3502E-E-K9". The software versions are also different but this could be because the WLC already upgraded the IOS when the APs joined.Why is the Platform "SAP3502E" for the AP that did not join.
View 9 Replies
View Related
Apr 17, 2013
I had problems joining a 1131AG AP to a "new" 5508 WLC with 7.4.100.0 running. This AP has been connected to a, for me unknown controller for years. Now the customer wants to move this AP to a newer 5508 controller with 7.4.100.0 We [URL] could not get this AP to the controller connected. Now I have this AP on my desk. I have a 5508 (7.4.100.0) as well. I connected the AP to the same network as the WLC Management -> AP did not connect, tried to download the "new" IOS but didn't seem to work, same as already in the old tread. So I tried to login to the AP, but it seemed to have a for me unknown Account / Password.
-> I did a reset of the AP by pressing the mode button (about 2-3 sec.) during Power on (not connected to the network). Now I could log on to the AP. I deleted six crashinfos and connected the AP back to the network.
Now the AP joined the controller.
Does a "unknown" Password prevent the AP to join to a other WLC?
The AP hat 15740928 bytes total (6409728 bytes free) space on the Flash: was this enough for the new image? 15740928 bytes total (7798272 bytes free) after deleting the crashinfos
The customer has more AP's that has to join the new controller, would be nice that we don't have to reset all APs.
View 3 Replies
View Related
Mar 19, 2012
After a wireless network interruption, one of MAP 1522 it's not joining to WLC .
(Cisco Controller) >show ap join stats detailed 00:08:30:bb:53:20
Discovery phase statistics
- Discovery requests received.............................. 7
- Successful discovery responses sent...................... 5
[Code]....
View 1 Replies
View Related
Apr 8, 2013
For some reason some AP will not join the WLC. (WISMII)I have several hundrede AP online, but still a few offline
This fails:
FRH-R06-L226-UX-G#sh cdp nei gi2/0/41 detail
-------------------------
Device ID: AP5057.a8a1.c632
Entry address(es):
[Code]...
View 3 Replies
View Related
Dec 14, 2011
We've just replaced some 1240 LAPs with 20 x 3502i.
Seem to have a problem, most of the 14 * 3502i have regersted on the network and working, 6 arent connecting and log below. I've replaced one of the AP with a differnt one, same model and batch and this works.
WISMs on 7.0.98.0
Scirpt
*Mar 1 00:15:16.015: %CAPWAP-5-CHANGED: CAPWAP changed state to
[Code].....
View 11 Replies
View Related
Apr 2, 2013
My customer has an 1131AG AP, andhas Problems with joining to the controller. I did a debug and have the following output. The WLC (5508) shows the AP with Primary SW version as 3.0.51.0. this Release does not showup in any compat matrix! It seems to start downloading the software. after a while it stops with the bolded output, twice the same Bytecount!?
*spamApTask0: Apr 03 09:55:59.998: 68:ef:bd:94:e7:9c 5179392 Bytes Transferred to AP 68:ef:bd:94:e7:9c
*spamApTask0: Apr 03 09:56:00.097: 68:ef:bd:94:e7:9c Received LWAPP
[Code].....
View 22 Replies
View Related
May 9, 2012
i have 1240 series access points which is not joining controller 5500 series. [code]
View 12 Replies
View Related
Aug 7, 2011
I am trying to join my 1130AG-E-K9 AP to my 2016 WLC, but it is stuck in a boot loop and will not connect to the controller. [code] I found some details here: url... but I'm not sure what it means that I have a 'SSC AP'. I am not local to this AP, though I do have a console connection to it-what do I need to do to get it working again? It just continually goes through this error and reboots every 30 seconds or so, so it's useless at the moment.
View 3 Replies
View Related
Jun 13, 2013
I am performing a new install of a WLC 5760 and 3602i APs. I have limited experience in setting up WLCs. I am hitting a brick wall in getting the AP to join my WLC. My primary document has been this deployment guide:url...I have also sifted through many of the relevant portions of these guides: url...
I went through the setup wizard and followed the instructions in Ch. 2 to the letter (or at least I think I did). I have DHCP options 43 and 60 configured per the 3600 series Getting Started Guide.I believe my AP discovery process is sound because I see activity when I power on the AP and perform debug capwap ap all from the WLC. I have highlighted lines that I think are relevant. I have attempted to find the answer on my own by searching the Internet for these phrases. [code]
View 1 Replies
View Related
Jul 28, 2011
I upgraded a controller yesterday 5508 it went from a low code version 6.x to 6.0.196.0 then to 7.0.116.0. However although all the access points joined code 6.0.196.0 they refused to join 7.0.116.0. The aps are all 1242s.
The country codes etc were all fine so I do not understand what was going on.
*spamApTask0: Jun 26 16:07:44.734: 00:3a:99:db:f3:20 Discovery Request from 10.0.0.183:55065
*spamApTask0: Jun 26 16:07:44.734: 00:3a:99:db:f3:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 25, joined Aps =0*spamApTask0: Jun 26 16:07:44.735: 00:3a:99:db:f3:20 Discovery Response sent to 10.0.0.183:55065
[code] ......
View 5 Replies
View Related
May 12, 2013
A customer of mine has a centralized 2504 WLC with 7.2 code running. They have 1142N APs deployed locally as well as in remote sites (3) in FlexConnect mode. For no apparent reason last Thursday all the remote APs disassociated with the controller and could not rejoin. All the local APs remained up and unaffected.No changes to the WLAN, LAN, Firewall or MPLS WAN occured to cause this.The customer opened a TAC case and their determination was that ports 5246-5247 were not getting thru. When the customer engaged me this morning I had him run a packet capture on the Sonicwall firewall to prove out if the CAPWAP signals were leaving and returning across the WAN. Sure enough we can see this bi-directional traffic (pic attached). Also, I had the MPLS provider run a trace at the far end and they see the same traffic leave the remote site. And then an odd thing happened; one of the APs at one of the remote sites all of a sudden Joined the controller. So I tried rebooting the AP that is located in the same office, and it fails to Join. When I look on the controller under AP Join statistics, the last activity shows the controller receiving a Discovery Request and response is sent, but no further Config Request and response or Join Request and response.
View 8 Replies
View Related
Nov 5, 2012
We have 3 5508 WLCs (A, B, & C) and several LAPs (1140, 3500, 3600). The APs learn the controllers IP addresses through DHCP Option 43. When we setup a new site we put the IP address of the controller we want the AP to join first. Lately, I've noticed that regardless of which WLC IP I put first when I setup Option 43 the LAPs are always joining a particular controller.
View 6 Replies
View Related
Jun 17, 2012
I am trying to deploy several AIR-CAP3502E-E-K9 access points from a cisco 5508 wire lan contoller running ver 7 code. However iam having difficulty registering the access points with the WLC. The wlc is connect to a 3650 switch, and each access point is connected to a 2960 switch. A bad update was not allowing the access points to get their correct firmware.
View 7 Replies
View Related
Mar 6, 2012
LAP join process: 70:ca:9b:25:5b:9d -> AP MAC10.10.1.30 -> DNS
View 8 Replies
View Related
Dec 11, 2012
I have some remote 1142s that I converted to LAP last night. They are not joing a WLC, but I they are online and I can ping them. Telnet or SSH is disabled by default (WHY???). What can I do to figure out why these access points are not joining the controller?
View 17 Replies
View Related
Jul 6, 2012
I am trying to configure new 5508wireless controller, AP 1042N model access points are able to receive DHCP IP address from Controller, but not able to join them.
View 11 Replies
View Related
Dec 6, 2012
I am tryign to join my first AP to the 5508 and am gettign this error int he logs.
*Dec 07 10:42:31.067: %DTL-3-NPUARP_ADD_FAILED: dtl_arp.c:2280 Unable to add an ARP entry for 0:0.0.0 to the network processor. entry does not exist
The management Interface is on the the same vlan as the AP , both untagged ports. the AP gets an ip address from my dhcp server.
View 10 Replies
View Related
