I have a pair of WLC 5508's. I am installing 7.4.100 on them and they are properly licensed. I am looking to preconfigure these and ship them to our site. My questions are:
1) How much configuration do I need to setup on the secondary controller (ie. same SSID, interaces, ap group, etc...)?
2) Do I need to configure Mobility groups for this HA Cluster?
Is there anyway to configure a 5508 via the SFP ports? Or do you have to use the service port for autoinstall or NCS auto provisioning? It looks like it grabs a DHCP address but it doesn't seem to like telnet,ssh ,HTTP or HTTPS.
View 2 Replies View RelatedI have Cisco 5508 Wlan Controller Software version 7.2.103.0 and I have Cisco AIR-CAP3602I-E-K9 Lightweight Access Points network and its working fine now I want to configure the Repeater in this network. Because there is one area we cannot layout the cable. How to add the repeater and how to configure the repeater in wlan controller network.
Do i need the change the software of Wlan Controller to support Mesh Network or this version 7.2.103.0 can support the repeater because for 1 access point i dont want to upgrade the version.
I have configured EAP-FAST local authentication on a 5508 running 7.0.116.0. I am trying to connect using a motorola/symbol MC3090. In the handheld, It appears to be failing due to receiving no PAC. On the 5508, it just looks like a timeout. Are the PACs created on the 5508 automatically, or do I need to generate one?
View 1 Replies View RelatedI would like to know if microsoft 2008 server RADIUS server could be use for authentication on Cosco 5508 instead of Cisco ACS.
View 4 Replies View RelatedConfiguring HP switches for Flexconnect. I am not sure if or not its doable? Access Points are 2600 and 3600 with 5508 as a controller. Idea is to keep the branch traffic local but the switches are HP.
View 3 Replies View RelatedDoes anyone know if it is possible to use an 5508 WLC running version 7.0.116.0 as a DNS box? Was not able to find anything in the config guide.
View 2 Replies View RelatedAt the main site, I have 3 5508 WLCs each part of a mobility group (wlcMain-MG). In NCS, under "System/Mobility Groups" for each controller, I see each controller listed as "local" with the other Controllers listed with the group name "wlcMain-MG". None of the SSIDs are "anchored".
I have a new site with a 2500 series WLC that I would like to push out 2 SSIDs. This site contains two customers. One customer is the Main customer with the second customer leasing space.
I have the Cust2 WLAN at the remote site set to have traffic egress out of a local interface on the 2500 WLC (this traffic is then tunnelled back to their Main location via an ASA which houses the DHCP scope for that vlan). I can connect to this SSID, obtain an IP Address off the ASA and am tunnelling without issue.
For the Cust1 WLAN at the remote site, I would like to broadcast an SSID from the Main location on those same APs which are registered to the 2500. It is my understanding, that I anchor the SSID at the Main site and identically configure the SSID at the remote site. This will allow the end user to authenticate to the RADIUS server at the Main site and be placed upon the correct vlan (we are using DOT1x and dynamic vlans).
For my test, I am starting simple. I have created a test WLAN with no authentication. At the main site, on 5508 WLC3, I have created the test WLAN, and placed the interface into a low security vlan (call it VLAN-low). I have anchored this test WLAN to that controller. At the remote site, I have created the same WLAN (but placed it into the management interface for now - the VLAN-low does not exist at the remote site) and configured that WLAN to anchor back to the WLC3 at the main site. I am unable to obtain an IP address from the remote site. I have placed the remote site WLC in the wlcMain-MG as well. How close does the code need to be on the controllers - the 5508s are at 7.0.116.0 and the 2500 is at 7.0.220.0? What could I be missing?
How to configure ssh in all access points ( cisco 3500 Access points ) under wlc 5508 ?
View 3 Replies View RelatedI'm using two cisco 1242 AG access points to configure WDS feature. I've named the accesspoints as AP1(acts as WDS) and AP2. Since I've only two accesspoints, I've configured the AP1 to act both as a WDS and as a regular accesspoints.Further I'm using the local radius server within the AP1 to authenticate both clients and infrastructure accesspoints. And both APs are connected to a router (which act as a dhcp server) via a unmanageble switch and both accesspoints are getting registered with WDS.But the issue is when I tried to connect to the configured SSID, it promts me a "authentication window" but after entering the configured username and password, i'm not getting authenticated by the AP.
I've attached the configurations of both APs to for your reference and I've used the following cisco document as a guideline to crate the WDS. [code]
I've created two configurations. One for the router side and one for the AP point side. However, I am having trouble getting the internal AP to bridge to the router properly. It is my understanding that the Wlan-GigabitEthernet is the internal interface connecting to the AP and the BVI1 together. I can't ping any ip address on the router side from the ap and the radio is active and we can see it but it seems that it doesn't give an ip address. [code] Is it a VLan issue or an ip issue but I could use a second opinion. I've included both configurations.
View 1 Replies View RelatedI have an access point 1310. I want to add to the WLC as an access point. It have been configured with IP address correctly and the radio interface is up. I need to add it to the WLC as CAPWAP.
View 5 Replies View RelatedNeed to configure Cisco 1142 N access Point togetherwith the Cisco Switch . I have a POE Switch 4510 and Cisco 1142 N Cisco AP . I have one management vlan 5 & User VLAN for WIFI VLAN 10 . The problem is when i make the POE port which is connected to the AP as trunk port means : [code]I am not able to ping the management IP allotted from VLAN 5 . However when i make it as access i am able to ping the managament IP . But for both the VLANs to work it should be in trunk mode & in cisco i can either assign the port as access or trunk .Post this i would configure the 1142 N with Cisco SG300-10P POE Switch . I guess if issue with my 4510 gets resolved the same way i can configure SG300-10P as well .
View 6 Replies View RelatedI have a Cisco Aironet 1130 Series setup as a Root AP and a Cisco Aironet 1200 Series Access Point setup as a Repeater. However i cannot get this to work. I can connect fine to the Root AP but not to the Repeater.
I receive the folloiwng error on the Repeater AP.
'*Mar 1 00:00:24.887: %DOT11-4-CANT_ASSOC: Interface Dot11Radio0, cannot associate: No Response'
The Root access point is connected to a Cisco router (192.168.168.1) which is the gateway to outside and is also acting as a dhcp server.
Both SSID's and authentication/encryption match.
Im using the the below mac-address for Authenticating the Repeater to the Root with the parent 1 command. Should i be using the mac address of dot11radio 0 of the Root AP??
AP_Root#sh interfaces dot11Radio 0Dot11Radio0 is up, line protocol is up Hardware is 802.11G Radio, address is 001b.2b69.6ca0 (bia 001b.2b69.6ca0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255
I'm trying to ensure I have wireless coverage in my entire house and having extreme difficulty getting all machines to play nicelyWireless modem router #1 (downstairs in my house) is connected to the ADSL line and has the following config:IP Address = 192.168.1.1 DHCP on DHCP pool 192.168.1.3-192.168.1.100 Subnet = 255.255.255.0 Wifi channel = 1 Wireless router #2 (upstairs) is connected by ethernet cable to Wireless modem router #1 and has the following config:IP Address = 192.168.1.2 DHCP off Subnet = 255.255.255.0 Wifi channel = 11 Different SSID and encryption key to Wireless modem router #1 With this configuration, I can connect to the internet via both routers and all seems to be well. Except... having established a connection through either one, my machines will only make a pretend connection with the other one. By "pretend", I mean that the (Windows) machine says it has an excellent connection to the router but can only see machines on the LAN - it cannot get to the internet even though other machines are connected through the same router to the internet.
For example, if I'm sitting next to the downstairs router and establish a connection with it, all is well. Then I move upstairs and my machine switches to the upstairs router. Signal strength will be reported as "Excellent" and I'll be able to connect to the local NAS or printer but no external devices or sites.I have tried having the same SSID and wireless configuration on both but the result was the same.Today I read the suggestion to enable the DHCP server on the 2nd router but to set it to distribute a different non-overlapping IP range (i.e. router 1 can have a pool of 192.168.1.3-192.168.1.50, and router 2 can have a pool of 192.168.1.51-192.168.1.99)
I know that you shouldn't update router firmware from a wireless connection. The other day, somebody told me that you shouldn't configure a router(such as changing passwords, channels, etc) from a wireless connection. I change my router settings from a wireless connection all the time.
View 1 Replies View RelatedGot road runner already get internet with wifi router, but want to set up password protection for internet access. the wifi is default now.
View 1 Replies View RelatedI have currently Ciso4404 WLC installed which is in vlan4001 with the 172.16.10.0/24 subnet
I have bought Cisco 5508 WLC recently as AP count is increased... Can I install it in same vlan and subnet? If yes what would be the setting for APs to join... If no how can I configure it with other vlan and subnet..
I am attempting to configure two Aironet 1040 series wireless access points for the first time and am having some difficulty. This office does not have a RADIUS server so I would like to set them up to use WPA2 with a pre-shared key. However just how this is accomplished is not immediately apparent. I have attempted using both the command line interface and the web interface, but I get errors in both places. It doesn't seem like it is all that difficult, we're just talking about a few lines in the configuration file.
This is what I have so far:
Current configuration : 1684 bytes
!
version 12.4
no service pad
[Code].....
good docs for configuring a 1260 autonomous AP?
View 1 Replies View RelatedI’m configuring a Cisco 1142n AP in autonomous mode. The networking part is successfully working, multiple VLANs, SSIDs etc. I would like to configure one of my wireless networks to work with WAP2-PSK and the other with WPA-PSK.I’m confused as to what encryption to set on each radio and the ciphers to use on the SSID for each vlan to enable the best possible security. I’m not using a RADIUS sever in my network .point me in the right direction with the right CLI commands?
View 12 Replies View RelatedI am having trouble to configure the wireless on the Cisco C887VA-W-E-K router.I managed to get the DSL working using cable, but cant seem to connect to the router when i use Wireless. I can see the SSID and when i double click on it i get the Network Key promo. I input the network key, the router seems to try and connect me but then it fails, its as if the router cannot give me an IP address even though i have DHCP configured on the router. Maybe the AP and The router arent linked up?
I have configured many wireless devices in the past, but this new model is different, it seems Cisco have changed their router infrastructure and separated the router from the AP.From the router i can ping the AP IP address and i have the latest IOS - C800-Universal-mz.SPA.151-4.M4
Here is a copy of the config
ROUTER CONFIG:
Building configuration...
Current configuration : 3681 bytes
!
! Last configuration change at 14:11:43 UTC Mon Jun 18 2012
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
[code]....
I bought 6 air-lap1042n-a-k9 for our business. They are mounted. I bought a Cisco POE switch for them. I hooked them up and realized they needed a Wireless LAN Controller. I have never dealt with these before. From my research, I need to buy AIR-WLC2106-K9.Can I just connect my POE switch to the LAN Controller to configure all 6 access points that are connected to the POE switch?
View 6 Replies View Relatedbrought 2nd hsnd pda and then a wireless card to access internet. Have tried everything but can't get connection to work. Card flashes, pda flashes but no connection.
View 1 Replies View RelatedI'm reading up on H-REAP in the Deploying and troubleshooting Cisco Wireless LAN Controllers book (Chapter 13) and I would like some clarification on the except below.:"Also notice that, as part of the WLAN configuration, no mention was made of choosing and interface for the WLAN. Unless you will have APs in local mode servicing a WLAN configured for local switching in conjunction with H-REAP APs, the controller interface is irrelevant because the controller will not bridge the client traffic on the network.The H-REAP performs that function. Even if you will not be using any local mode APs, you must choose an interface to be associated with your WLAN. In this case, you could use the management interface or create a quarantine VLAN interface, for example if you do not want client traffic to be bridged by the controller if the client traffic is no longer locally switched."Our corporate office has 2 5508 controllers and 150+ APs in local mode. I'm preparing to deploy a couple of H-REAP APs to a remote site to test. Is this saying you have to choose an interface when creating a WLAN, but if the WLAN will only be used by H-REAP APs w/ local switching it does not matter which interface is used when creating the WLAN. If there are APs in local mode using the same WLAN, the interface the WLAN associates with needs to be on the same subnet as the devices connecting the the WLAN?
View 3 Replies View RelatedI recently purchased a Ciso 1200 Series WAP and I want to bridge this to my existing Cisco Wireless Router So I can extend my coverage. I have done some research but keep coming up short as to where I need to start. Note*(I do not want a physical connection to the WAP, I simply want to be able to bridge the connection from my existing Wireless router to my WAP.
View 1 Replies View RelatedWe have recently installed Cisco for our wireless solution. We are an education and are looking to let staff and pupils bring their own devices. The route that we are planning to take to let them join the school's WiFi is to implement a RADIUS server so that they can authenticate with their Active Directory username and password. I have tried to test the solution but so far without any success. I am using a Windows Server 2008 R2 as my NPS server, I have setup the Cisco controller as per below:
Security Tab | RADIUS | Authentication - I added my windows server there and the preshared key, the Network User and Management is ticket and the server responds to a ping command,In the WLANs Tab, I selected my test WLAN and under Security | AAA Servers I selected the RADIUS server that I configured in the Security TabI then try to logon to my test WLAN and on the Cisco WLAN controller I get the following error: AAA Authentication Failure for UserName:test User Type: WLAN USER
Before trying to tinker with policies on the Windows Server I was wondering if the RADIUS is correctly setup on the Controller or have I missed something obvious?
I am currently working on a project where I need to design a complete wireless solution for a huge building. I performed the wireless rf survey by configuring the wap's to broadcast a SSID and walked around gathering rf coverage data. When configuring the test WAP's i did not join them to a lan controller ( AIR-WLC4402-50-K9 ) but simply created a static ip and ssid to broadcast but modified the internal antenna gain to +128 to change the direction of the broadcast. There are two other ap's already joined to the lan controller on a guest network (configured by another contractor) but when I go into the lan controller web gui I do not see anywhere that allows me to modify antenna gain on the individual WAPs. Also, once the waps join the lan controller they dont seem to be accessible via web. How I can I modify gain per wap?
View 14 Replies View RelatedI have 2 APs, Cisco Aironet 1040, and 2504 WLC.Is it possible to configure guest access (Guest SSID/VLAN and Corporative SSID/VLAN) without dedicated guest WLC in DMZ?
View 4 Replies View RelatedI have an existing setup consisting of:
Windows Server - doing DHCP for private wired/wireless
Cisco 1141 Autonomous WAP with only private wireless access.
ASA 5505 (with very basic licensing)
HP switch
The customer wants to have guest WiFi.
The guest WiFi is going out to the internet via a seperate VLAN/interface on the ASA. Can the 1141 do DHCP for the guest WiFi? Or do I need to do it via the ASA?
I have a AP541N connected to a UC560. We are currently configured for Wireless Voice and Data. We have added a Guest VLAN, but don't see where in CCA to secure the VLAN from accessing the other other two default VLANs.
Additional Info: AP541N-K9-1.7(2)UC560 15.0(1)XA2, RELEASE SOFTWARE (fc2)CCA 3.0
a customer has bought a new AP 3500 with external antennas and he would like use his old antenna AIR-ANT2485P-R.
We have the option to configure the antenna parameter in WLC under Wireless > Access Points > Radios > 802.11a/n or 802.11b/g/n for external antenna and and using only port A.
But if we enable only one port (Example: port A) we will get a warning message: Need to have at least both dual mode antennas (antennas A and B) enabled
Is it not possible to use an antenna like ANT2485P-N together with an Access Point like 3502E?
I'm considering purchasing the "Cisco Linksys - E1200 Wireless-N Router with 4-Port Ethernet Switch". Before I do, however, I want to know how to configure it as a wireless bridge to my existing wireless network.I have a hardware device with only an ethernet connection (no wireless option avaialble). I want to connect the device to a wireless router / access point, in this case it would be the e1200, and then connect to my existing wireless network. The e1200 would be acting like a client of the existing network.I found this article but Step 8 is causing concern. I do not want a wired connection. The two routers must connect wirelessly.
View 8 Replies View Related