City A is the data center with 2 WLC (CT2504-K9) and a number of AP. City B is a branch with MPLS between A and B. Right now the APs at City B has joined the controller. Users at B is getting ip's assigned from DHCP at City A. How do I configure the WLC so users can get ip's assigned from DHCP server present at B. Option 43 is enabled.
View 2 RepliesI've got a new CT2504 controller with software version 7.0.220.0 Regarding to [URL]I've tried to configure the internal DHCP on a dynamic-interface, but this is not possible:(Cisco Controller) >config interface dhcp dynamic-interface vlan401 primary 172.16.x.3 vlan401 Interface IP can not be used as internal DHCP server IP It works, if I use another IP (aka DHCP server) in the same subnet or in another subnet. It works also for the management interface.
(Cisco Controller) >show interface detailed management
Interface Name................................... management
MAC Address...................................... d0:c2:82:xx:xx:xx
IP Address....................................... 10.2.x.135
IP Netmask....................................... 255.255.255.240
IP Gateway....................................... 10.2.x.129
[code].....
I have DHCP server running in windows 2003. Presently its unable to provide Ip address for VPN clients who connect remotely. What I should do / reconfigure in DHCP, so that the DHCP server provides address for VPN clients.
View 4 Replies View RelatedI am having trouble getting DHCP working for a site connected using Flex Connect. Here is my setup. I have a single 5508 Controller at one site using the 10.3.0.0 network. All AP's at that site are in local mode and use the local DHCP server, 10.3.0.2. Everything works fine there. Each site uses a different SSID as well.
At my second site, 10.4.0.0, all AP's there connect back to the controller at the site above and are in Flex Connect mode. The AP's work fine and the clients work fine there but they get an IP address on teh 10.3.0.0 instead of the 10.4.0.0 network. If i setup the SSID at this site to override the DHCP server settings and tell it to use 10.4.0.2, which is our local DHCP server, the clients don't get an address at all.Is this simply a matter of setting an IP Helper address on the router where the WLC is located or is there more to it than that?
I have wlc AIR-CT2504-K9. After save config and power down, wlc cannot start. In console I see:
WLCNG Boot Loader Version 1.0.16 (Built on Feb 28 2011 at 13:14:54 by cisco)
Board Revision 0.0 (SN: PSZ163201YR, Type: AIR-CT2504-K9) (P)
Verifying boot loader integrity... OK.
OCTEON CN5230C-SCP pass 2.0, Core clock: 750 MHz, DDR clock: 330 MHz (660 Mhz da ta rate)
CPU Cores: 4
[Code].....
I have 8 2504 controllers and each needs to have a minimum of 20 MAC addresses added. I would rather not add them one at a time but I don't see any features that allow for an import. Any way to do the import?
View 2 Replies View RelatedWe have 1 WLC + 17 AP's on our main site and thats working fine... we just buyed a new AP for a new site of us. Its the same domain, same ip range nothing special at all... Somehow the AP on the site keeps rebooting and the users getting nervous of it there
Specs:
WLC: AIR-CT2504-K9
Software Version: 7.2.110.0
AP:AIR-LAP1042N-E-K9
Software version: 7.2.110.0
[code]....
AIR-CT2504-25-K9 will support AIR LAP1142N-E-K9
View 3 Replies View RelatedWe have 6 aironet 1140's throughout the office I have them all configed as one ssid but I would like the DHCP to come from our Windows server. Right now I have set them up with ip dhcp pools. So what is the secret to get them to send dhcp requests to the Windows server?
View 3 Replies View RelatedI have to configure DHCP on Aironet 1100 WAP so wireless client will get IP address through WAP. I tried all the option mentioned in Document but nothing is working.
View 1 Replies View RelatedI know this question was asked many times, but I'm still not able to finalize my configuration on 871w. LAN part works fine, but wireless clients do not get DHCP IP. here is the config:
Building configuration...
Current configuration : 2092 bytes
!
version 12.4
no service pad
service timestamps debug date time m sec
service timestamps log date time m sec
no service password-encryption
!
[ code ].....
I'd like to have LAN and WLAN clients in same 192.168.1.0 sub net.
Is it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
I configured a 2504 controller with two LWAPP Access Points, and I'm using two SSID's on the same controller, the problem is when the user tries to switch between SSID's he gets an error message saying that the other network is unavailable but if he disconnects from the first network and then connects to the other it works fine !.
View 5 Replies View Relatedsome computers is connecting to AP that is farthest, But there are two APS closer and the signal gets too low, the computer only connects to the closest AP if I disconnect and reconnect.I have 2 controllers series 2500 model AIR-CT2504-K9.
View 5 Replies View RelatedOn the WLC I've set DHCP address pool, everything seems fine after ap download image -> reboot -> hit "Enter" to start blar blar blar... however, after a few second the WLC will initial upgrade image again and again. it's like a non-stop process.
Attached is the start up message, as you can see, i captured it after the ap successfully boot up, and WLC initial another cycle of image upgrade.
btw, my network is flat, WLC & AP all in the same network.
*Nov 3 06:28:30.788: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
examining image...!
extracting info (292 bytes)
[Code].....
I have bought 2504 LAN Controller and my old 1142 wants to configure to accept that Controller instead of old controller. These APs and controllers in far away site and before I go there I want to figure out how can I do following.
1. How can I configure old 1142(Previously connected with another LAN Controller) to accept New 2504 Controller instead of old controller ?
2. What are the concerns do I need to consider?
tell me when is available for order the High Availability for AIR-CT2504, like:
AIR-CT7510-HA-K9 Cisco 7500 Series High Availability Wireless Controller
AIR-CT5508-HA-K9 Cisco 5508 Series Wireless Controller for High Availability
I've just been tasked with setting up 19 AIR-CT2504 WLCs with AIR-CAP3502E APs. The primary objective is to maximize throughput from clients uploading LARGE files over the air.
I need to make sure I config HT 802.11n properly with no support for legacy clients in the 5Ghz band.
I have inherited a site where the builders have installed a 2504 controller with 8 access points. Unfortunately they have not created an ap-manager interface when they did the set up. Is there any way I can do this via GUI or command line without going back to defaults?
View 7 Replies View RelatedI have AIR-CT2504-5-K9, with 5 access point license support. I buy capacity adder license LIC-CT2504-5A for add 5 access points more. When i try download licence file from tftp server on WLC system i see message "License 1 Failed 1" on WLC. TFTP server message downloading OK.
View 4 Replies View Relatedi have AIR-CT2504-5-K9, with 5 access point license support. I buy capacity adder license LIC-CT2504-5A for add 5 access points more. When i try download licence file from tftp server on WLC system i see message "License 1 Failed 1" on WLC. TFTP server message downloading OK.
View 7 Replies View RelatedI am using two AIR-CT2504-K9 controllers
Product Version.................................. 7.4.100.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 1.0.0
Firmware Version................................. PIC 16.0
and 20 access points AIR-CAP2602I-E-K9 Cisco IOS Software, C2600 Software Version 15.2(2)JA, RELEASE SOFTWARE (fc1) LWAPP image version 7.4.100.0
I created 3 SSID:
1. [WPA2][Auth(PSK)]
2. Web-Passthrough
3. [WPA2][Auth(PSK)]
Configuration on controllers is identical. High Availability is configured on all APs. First controller controls only those APs witch have SSIDs with [WPA2][Auth(PSK)], second controller is basically for APs with Web-Passthrough SSID. From the start I have problem, some clients who try to connect to SSID with PSK are dropped or can’t connect entirely, but when they go to the next AP they connect successfully. For example I have Android smartphone and Lenovo laptop, smartphone connects successfully but laptop fails connection to the same AP, but when I take it to other AP it connects successfully. Sometimes smartphones can’t connect too. When devise can’t connect to one SSID it can’t connect to other SSID either. Sometimes there are up to 20 clients tying to connect to the same AP.
When I look into logs, I get these two messages:
Jun 3 08:58:58 192.168.224.1 WLC1: *dot1xMsgTask: Jun 03 08:58:51.176: #DOT1X-4-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:456 Max EAPOL-key M1 retransmissions exceeded for client 7c:e9:d3:f4:74:4d
[Code].....
I'm experimenting a strage issue with some AP1142 that prefer getting new IP from DHCP server rather than using the static ip already configured.
I've got more than a hundred of 1142 APs already conected to a 5508, all with static IP, all working fine for about a year.
As i installed 30 more AP, i enabled a dhcp scope on the controller to give IP to the new APs and when the new aps got registered i changed the configuration to static IP.
The problem comes when some of the older AP than have already static ip are gettig ip from dhcp scope.
If i look at my WCS, it reports that this APS are getting DHCP IP because they cannot reach the controller with their static ip. As this is impossible, because the static ip and the dhcp enable scope are in the same subnet in a layer 2 configuration and with the same gateway. (e.g: old AP 10.10.2.10/16; new AP(dhcp 10.10.3.10-50) 10.10.3.15/16; gw 10.10.254.1)
The problem comes when i disable the dhcp scope, all the older aps that got dchp ip from the wlc scope instead of using their staic configured ip are deregistered. If i reset every ap manually, from the swithc disabling PoE, they start to use the static ip and everything comes fine.
This is happening with about ten of fifteen APs from the 100 installed, that is the strange thing because this seem to be very random as the failing APs are installed in different building and connected to different switches.
As now i have disabled dhcp scope and all APs (old and new) have static ip everything is ok, but i will have to add some more APs shortly and every time i enable the dhcp scope on the wlc
We have just installed our first CT2504.After install I have found a dramatic drop in signal strength compared to the wireless survey result obtained.All of our site surveys include real world testing using an AP, in this case a AP1041N.In doubt I retested a section using an AP1041N in the same location as one of the recently deployed LAP1041N.
In the same location a LAP1041N has between -10 and -20dbi difference in SNR compared to the test AP1041N.For example locations that tested with -60dbi using an AP1041N have little to no coverage using the LAP1041N installed.This applies irrespective of the WLC automatic control over Tx power or manually setting the LAP TX to the highest level.
I have a CT2504 at a customer site which does not load the captive portal page correctly nor will it load via HTTP as opposed to HTTPS.So for starters I did what I do with all my CT2504's (which work fine), I configured my Guest network to authenticate via the default captive portal. I then disabled HTTPS and SSH and enabled HTTP managment followed by rebooting the controller. On boot, logging into the WLC management GUI is automatically presented via HTTP as expected.However when clients access the Guest network they are redirected to the Web Authorisation via HTTPS instead of HTTP?In addtion to the above the captive portal page does not display correctly.The preview via the controller works fine, but the client is presented with a page with broken links to the images i.e. the blue strip at the top and the Cisco logo on the right.
View 3 Replies View RelatedI´m trying to connect them to my WLAN, for throubleshoot I create a new WLAN with WPA2-TKIP and a PSK, the devices didin´t connect to the WLAN.I also change the security to WPA2-AES with TKIP, it didn´t work too.
My best choice was to disable every security configuration in order to began the throubleshooting from zero, but even with no Layer 2 and 3 security, the devices didn´t connect to my Test WLAN.
I´m using a AIR-CT2504-K9 WLC with two AIR-CAP3502I-A-K9 AP, all the PCs and other brand cellphones and tablets work well.
Also I have a SOHO router on the office, and the IPad connect without a problem with that WLAN, but I need them to connect to my Cisco AP.
I am configuring IPSec Remote Access VPN on a ASA 5505. There are one external interface and one internal interface configured on the device. Internal interface connected to subnet 192.168.1.0/24.en VPN client get connected, I would like to assign the IP from some subnet(for example 192.168.2.0/24) other than the current internel subnet (192.168.1.0/24), but the VPN client can still access to 192.168.1.0/24. Is there a way to do this?
View 2 Replies View RelatedI am currently running an ASA5540 version 8.3(2). I have multiple remove vpn users currently working on this server. Lately, I have had issues with people getting booted or not being able to route anywhere and it appears to be cause they keep fighting for the same IP address using the local pool, so I decided to attempt to do DHCP instead (I have no idea why it keeps overlapping IPs, we have tons in the pool and they keep fighting for the same one). This just started about a month ago, we are only using maybe 3-5 IPs out of the /24 block. The only thing that has changed was we have hired more people, but we have separate groups for corporate vs operations team.
So, I setup the dhcp-network-scope for the subnet and the dhcp-server under the policies. I see the request going to the server, but it seems to be putting the ASA MAC into the Client Hardware Address field of the DHCP header. I have attached the PCAP from the ASA showing this.
What is the difference between wireless zero configuration and wireless PAN DHCP server?
View 1 Replies View Relatedwhy I am not able to receive an IP address on remote access VPN connection while I can get an IP address on local DHCP pool?I am trying to setup remote access VPN with ASA 5510. It works with local dhcp pool but doesn't seem to work when I tried using an existing DHCP server. It is being tested in an internal network as follows:
!
ASA Version 8.2(5)
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 10.6.0.12 255.255.254.0
[code]....
why I am not able to receive an IP address on remote access VPN connection while I can get an IP address on local DHCP pool?
I am trying to setup remote access VPN with ASA 5510. It works with local dhcp pool but doesn't seem to work when I tried using an existing DHCP server. It is being tested in an internal network as follows:
!
ASA Version 8.2(5)
!
interface Ethernet0/1
[Code]....
The network scheme is this one, I have Lightweight APs distributed and a pair of WLC 5508 centralized. We use a pair or SSID for all the branches, concretely Voice and Data.
All the branches has a local DHCP Win2k3 Server, and APs get its IP address correctly from the local DHCP, but the wireless clients obtains the IP address from the centralized DHCP Server, because all the DHCP traffic go through LWAPP/ CAP WAP tunnel to WLC.
I want that the clients get its IP address from the branch DHCP, i have reading and i think that we need to use H-REAP with local switching configuration and the correct vlan mapping in local switch and H-REAP for it works that we want. Is it correct? Is possible that the client obtain the IP address for the local/branch DHCP Server instead of the Local DHCP?
i have configure a remote access ipsec vpn in asa5510 and it is working fine when i configure local dhcp address pool assignment. but not working in dhcp-server
below is my configuration
tunnel-group test type remote-accesstunnel-group test general-attributes default-group-policy test dhcp-server 10.1.1.200tunnel-group test ipsec-attributes pre-shared-key *
group-policy test internalgroup-policy test attributes dhcp-network-scope 192.168.135.0 ipsec-udp enable ipsec-udp-port 10000
---snapshot Ping test to DHCP-Server 10.1.1.200----
ciscoasa# ping 10.1.1.200Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.1.1.200, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
the DHCP server is working when i assign ip address to the LAN network.