We have a Cisco aironet 1162N connected to a Wireless Controller (LIGHTWEIGHT mode), the device failed and it needs to be replaced.We have a Cisco aironet 1142N in stock available to use.Can we proceed with the change just with disconnect the failed AP (model: 1162N ) and connect the new one (model: 1142N)? Or there is any other task to be done before the change? since the WLC manages the configuration for each AP.
View 8 RepliesI am tryign to set up an Aironet 1142, I have created a reserrvation in DHCP using the MAC address, and the reservation shows as active, but I cannot connect to the device with my browser.
View 1 Replies View RelatedAbout every 20 minutes 12 of 300 APs keep rebooting. I have tried moving them to different controllers. I have tried downgrading the code and then upgrading the code. I have tried replacing the AP. I have tried swamping out cables. They are all connected to a 3750 stack but plugged into different switches in the stack. Here is the result that I could capture when I saw it disconnect from the controller. This is the output from the AP:
DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.40.212:5246
*Jul 28 14:33:19.595: %WIDS-5-DISABLED: IDS Signature is removed and disabled.
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.655: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[ code].....
I have removed the ip addresses for security reasons.
When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
View 4 Replies View RelatedI have an Aironet 1142 access point.
Is it possible to direct it to a webfilter hardware firewall for internet access. For example the IP of the firewall with webfiltering capabilties would be 192.168.0.1
We are hoping to provide customer wifi web access but need to filter what they can access.
I have a 1142 that I purchased that needs to be set to factory defaults so that I can configure it. I do an escape at the boot sequence and I get to the
ap:
prompt, the reset instructions that Cisco provides says that I should rename the old config.txt and reboot and that I will then be able to start my reconfig. The problem is that I can't find a config.txt file in the flash space:
Directory of flash:/
2 -rwx 260 Jan 1 1970 00:04:28 +00:00 env_vars
3 -rwx 112947 Apr 1 2011 15:17:10 +00:00 event.log
5 drwx 128 Mar 1 2002 00:01:54 +00:00 c1140-rcvk9w8-mx
9 drwx 256 Apr 1 2011 14:30:32 +00:00 c1140-k9w8-mx.124-21a.JHB1
8 -rwx 5144 Mar 1 2002 00:00:27 +00:00 private-multiple-fs
I checked in the directories listed above and still found no config.txt.
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
LAB1#sh runBuilding configuration...
Current configuration : 2321 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname LAB1!logging rate-limit console 9enable secret 5 $1$9EWD$kxrbg8KxikRFypOieKiZh/!aaa new-model!!
[Code]....
I'm using the Express Security Set-up tab to configure an Aironet 1142 (stand-alone) access point with EAP.
Objective is to make it a RADIUS client and have laptops authenticate through this access point to a Windows 2008 NPS (Network Policy Server) using computer (machine) certificates - EAP-TLS.
When I select "EAP Authentication" under the "SSID Configuration" I was literally floored to see mention of WEP encryption (a security joke) and no possibility to prefer some variant of WPA (well, apparently not with EAP).
WPA2-Enterprise is what I've selected for "Authentication" and "AES" for encryption in Group Policy (so the laptop clients automatically connect to the access point).
WEP? I bought a Aironet 1142 access point for WEP encryption? How can I configure this securely?
These are currently configured settings as displayed under the "SSID Table" heading:
SSID - "MYSSID"
VLAN - none
Encryption - WEP Mandatory !!!
[Code].....
The GUI times out after 60 seconds.
Since the the "exec-timeout" setting has a default of 10 minutes (if I'm not mistaken), I don't think I could change the timeout value with that command.
Under the "Association" tab of the GUI, there is an "Activity Timeout" subtab and settings for 5 device classes, all set at 60 seconds.
I would guess the setting in question can be configured here. Is the client station device class what I'm after?
We have 5 pcs Cisco Aironet 1142 Access Points without controller at the same building. SSID is same for all of them. Our problem is client connected via wireless disconnecting randomly and continues working after a few seconds. IOS versions are same for all of them you can find detailed information about versions and configurations below.
[code]....
Aironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
View 3 Replies View RelatedWe have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.
View 1 Replies View RelatedI have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
View 5 Replies View RelatedI'm attempting to update the software on three aironet 1100 from System Software Filename:c1100-k9w7-tar.122-13.JA2 System Software Version:12.2(13)JA2 Bootloader Version:12.2(8)JA To the latest release or the 12.3x family and it fails."the software upgrade was interrupted and was not able to be completed" I also disabled the Radio braodcast?
View 1 Replies View RelatedAfter upgrading from a 1231 autonomous to an 1142 autonomous AP some machines can no longer authenticate. AP logs show authentication failure and access reject coming from the Radius server. Radius server shows authentication failures but no specific reason. Using the same account on another machine works fine. Machine settings have been verified and if we go back to the 1231 all users authenticate fine. Below are the configs:
OLD AP:
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
[code]...
I wonder if there is a way to rename an existing SSID on aironet 1142 without destroying/recreating. I tried downloading configuration/ changing name/ re-uploading however that didn't have desired effect. There doesn't seem to be a way via web-GUI.
View 3 Replies View RelatedFirst, my configuration, (then the problem down below):
I have an Aironet 1142 with multiple SSIDs [mapped to V LANs] connected to Gi1/0/2 on a 2960 switch in a user-accessible area. This switch is up linked to another 2960 switch in a wiring closet, and the Microsoft NPS server is connected to the wiring closet 2960.
Aironet -- 2960 [user area] --- 2960 [closet] -- NPS RADIUS
I have the user-area 2960 configured as an authenticator switch for dot1x, and port Gi1/0/2 is authenticating the Aironet via MAB to RADIUS. RADIUS is sending VSA device-traffic-class=switch to the 2960. The closet-2960 has no special 802.1x configuration, nor is it an authenticator switch; it just has a manually-configured trunk port to the user-area 2960 [for now; I'm trying to take this one step at a time!].
The user-area 2960 correctly converts port Gi1/0/1 to a trunk port when the Aironet is authenticated [via MAB]. The Aironet boots up, the port is opened, I can ping the Aironet on the native V LAN, and all is well [so it seems]. The Aironet dot11Radio is configured for two SSIDs and mapped to V LANs, which are being spanned via STP thru the user-area 2960 and the closet-2960. STP is correct and verified on all switches.
I have DHCP snooping configured on the user-area 2960 but only for V LAN 1 [but NOT the wireless user V LANs], the trunk port to the closet 2960 is a trusted port. Hosts on the wired ports on the user-area 2960 are able to get DHCP IPs. On the Aironet, "show dot11 associations" shows hosts on the SSIDs are getting DHCP addresses. Again, I am *NOT* running dhcp snooping on wireless SSID V LANs [i read elsewhere that can cause problems as users roam between Aironets].
I do have CISP configured on the user-area 2960. I do not have CISP configured on the closet-2960 [best I can tell, that's not required at this stage, but I could be wrong]. Despite the alleged documentation, I could not get the Aironet to use a dot1x credentials profile to authenticate to NPS/RADIUS as an 802.1x supplicant, which is why I resorted to MAB for this exercise. The Aironet simply would not run dot1x [best I could tell]. The documentation and configuration didn't seem complex, so I was quite confused.
I have upgraded the Aironet to the latest 12.4(25d)JA2 software, and the 2960 is at 12.2(55)SE7 [i saw 12.2(58) has some issues, but I'm willing to be persuaded otherwise, based on sound advice]. Ok, now the problem:
Users on the guest wireless SSID (V lan 20) say they cannot connect. Yep, classic. V LAN 20 is trunk and spanned to all the sufficient places. The Aironet shows users in the associations list for that SSID with IP addresses from the DHCP server! DHCP snooping is not configured on that V LAN. I read another support forum post saying CISP and MAB could cause problems with "disappearing" ARP entries. I appear to have that problem. However, the user on the Staff wireless (V LAN 10) has full access. Am I running into a problem with "multi- host" authentication config? Via tcpdump on my firewall, I see nothing but broadcast and multicast traffic coming from a host on VLAN 20. What puzzles me is how I do see *SOME* traffic from a V LAN 20 host on this SSID, but no uni cast traffic!
Since you're going to ask, here is my port config for this AP on the 2960 authenticator switch in the user-area, and the AAA config pieces:
#sh run br | in ip dhcp
ip dhcp snooping vlan 1
no ip dhcp snooping information option
ip dhcp snooping database flash:dhcp_snoop.txt
ip dhcp snooping
[code]......
I have a newly purchased Aironet 3502i that I would like to configure on my network. I am new to Cisco networking in general, and would like to know how to configure the device to operate without a WLAN Controller.
View 4 Replies View Relatedhow the CDP device sensor probe works with ISE ?What I am trying to do, is to identify different Cisco Wireless Access Point models (i.e. LAP 1142) with ISE.Since the APs do speak CDP (I can see the AP devices on the switch), this should be possible with the CDP device sensor on the switch, shouldn't it I have done the following so far: Configured the switch to talk to ISE via radius accounting: [code] Should this config make the switch send CDP information about connected devices to the ISE (via radius accounting) ?How do the device sensors work ?
View 6 Replies View RelatedI have a problem downloading software and device updates for LMS 4.0.1.
In the psu.log I get the following:
[ Mon Nov 26 12:51:51 CET 2012 ] INFO [SwUpdateAction : getUpdatesFromCCO] : Validated Cisco.com credentials..
[ Mon Nov 26 12:51:51 CET 2012 ] INFO [SecurityHandler : getCSProxyHost] : No
[Code].....
I want to set-up a HA for ASA5510. I wanted to design the network to achieve HA. I am attaching the present set-up of the network. At present, I have 2 ISPs connections terminating in ASA5510. The configuration is done for failover in ASA5510.I have another ASA5510 and want to use it for HA. I needed to know the design for the set-up. I want a stateless failover since the amount of traffic is less. I don't have any ISP routers in the present network. I suppose I need 2 routers for HA and couple of switches. One more question is that, as there are SSL VPN users, is there any way for the users to not get disconnected when one device fails.
View 5 Replies View RelatedI have Cisco AP 1142 standalone and I want this one to operate with WLC.
I have searched in Google, they said I need to upgrade AP1142.
I don't know how to upgrade it.
i have a problem using my usb to serial cable connection, i can connect to one router on my work, but i can't connect to AP 1142, (i have tested also con AP 1231).i have a laptop running windows 7 64 bits, before i use a win xp 32 bits, and i didn't have problems.i am using putty, and have installed tera term 4.74 but the same.connection details, 9600, 8, 1, N, N.
View 5 Replies View RelatedI can't get connectivity from laptop to AP using cross over or straight through cable to do a tftp transfer from tftp server on laptop to ap.
I held the mode button on ap and powered on to get to rommon. The ap has no ios so it goes to rommon anyway. ap light is blinking red.
ap: set
DEFAULT_ROUTER=10.0.0.1
IP_ADDR=10.0.0.1
NETMASK=255.255.255.224
[Code].....
After AP is booted it shows the following message and cannot able to join in WLC:
*Mar 1 07:13:37.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.71.16 peer_port: 5246
*Mar 1 07:13:37.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
[Code].....
I just converted AP 1142 to LAP using the image "c1140-rcvk9w8-tar.124-21a.JA2.tar".
The WLC is a 5500 with 2 NIC : one on 192.168.0/24, one on a specific vlan 10.20/16
The main management interface is on 192.168/24 but we defined as management the interface on the 10.20/16 network.
For the access points, we use ports on a native VLAN on 10.20/16 with other available VLANS which are used for the wlan networks
We have 1152 APs which work fine on this config but that needed to be registered on the 192.168/24 network, then we moved them in their VLAN 10/20/16 and they work fine.
We also have 1142 APs which have been upgraded to LAP. These AP do not work with our architecture. They register correctly on the 192.168/24 network, but do not give access to the wlan VLANs. If they are moved in the 10.20/16 network, they don't register to the WLC (message : Timed out while waiting for ECHO repsonse from the AP). The AP do not get an IP.
is there a restriction with VALNs on these AP ? or is something false ?
I have an 1142 AP that I am unable to set back to factory defaults.Here is what I have done so far:
- boot AP while holding down the mode button
- ap: delete flash:private-multiple-fs
- yes
- ap: boot
- when the AP boots fully I try and enter any lwap ap commands and get "ERROR!!! Command is disabled"
- the AP name and password were reset to defaults but I am unable to get the IP address cleared.
I've also tried "clear lwapp private-config" and get an error saying the command is disabled.
I need to convert some 1142 APs to lightweight mode. They will connect to controllers running 7.3.101.0. I noticed there's two options of Lightweight IOS code available c1140-k9w8-tar.152-2.JA.tar and c1140-rcvk9w8-tar.152-2.JA.tar. Whats the difference between the two versions of code?
View 4 Replies View RelatedWhen we take a look at the internal antennas on the 1142 AP, we notice the 5ghz pointed all the same way, but for the 2.4ghz we can see each offset by 45/120 degrees. It was my understanding that all antennas are omnidirectionals on the 1142, why are those 2.4ghz antennas not all pointed the same way? onfiguration advantage and that each antenna is indeed omnicadirectional? Example, if I shut just one antenna off, do I lose a sector (120degree)?
View 5 Replies View RelatedI recently purchased another 1142 AP to expand out our current wireless infrastructure, my question is, what exactly needs to be done for this to work so that users can roam freely and auto-connect to the closet AP with the best connection without getting disconnected?
I have set all the settings the exact same on the new AP to match the existing AP. (How to save the configs into a file would be great, I am not sure how to do that)... But anyhow, before I launch it, I would like to be sure I am correct so I do not bring down the existing network. Of course, the only difference between the 2 are the IP addresses. AP1 is 192.168.2.2 and AP2 is 192.168.2.3
All computers are using Linksys Wireless-N cards.
The last three new APs I have received from our supplier (official Cisco 1142 LAPs) have all successfully connected to our 4400 series WLCs but are all reporting as being in an Operational Status of 'Down' ie their A/B/G/N radios are not broadcasting even though the APs are all in an enabled state. Furthermore, there is no steady green light showing on the APs - there is no light showing whatsoever (although they were displaying the familiar red-orange-green lights while they were pulling down the IOS images from the WLCs).
The only strange thing I have noticed is that in the AP config screen, the ‘Mini IOS version’ is shown as being v7.3.x. The other – working APs – we have of the 1142 series show v3.x. I know that controller code v7.2 and above only work with the newer 5500 and 7500 series WLCs. Could this be the issue and have any of you seen this issue previously? I am running WLC code v7.0.230.0.
that cisco ap 1142 will support WLC2506 or not .
View 2 Replies View Related