We have two controllers 7510 with the same config (SSID, Mobility Groups, etc)... All APs now was joined in wlc01... If we try to one o more APs join to another controller.. it's is not possible and debug show this . [code]
View 1 Repliesi converted the C1310 to LAP using upgrade tool. but the AP is not able to join the controller i was not able to view SHA Key in upgrade tool, so i ran the "debug pm pki enable " on the controler to get it. i'm still not able to view SHA key.
here is the output of debug command
*spamApTask0: May 21 15:07:43.527: 88:43:e1:d1:fc:9e Received LWAPP JOIN REQUEST from AP 88:43:e1:d1:fc:9e to cc:ef:48:b3:23:ef on port '13'
*spamApTask0: May 21 15:07:43.549: sshpmGetIssuerHandles: locking ca cert table
[Code].....
Network environment: (well configured and working fine)
2 AIR-WLC2106-K9 - Software Version 7.0.235.0
2 AIR-WLC2112-K9 - Software Version 7.0.235.0
10 AIR-LAP1252AG-T-K9 - Software Version 7.0.235.0
10 AIR-LAP1131AG-A-K9 - Software Version 7.0.235.0
I am adding a Cisco AP c3502-I-K9 to network.
It does not join any of the controllers.
Led is cycling through green, red, and off - that means "discovery/join process in progress" - never ends.
As wireless network is doing fine, I had only added to dhcp server dhcpd-subnet.conf file the above configuration:
class "Cisco AP c3500" {
match if option vendor-class-identifier = "Cisco AP c3500";
option vendor-class-identifier "Cisco AP c3500";
[Code].....
When we were installing some new APs, were plugged in to ports that were not configured on the WLC management VLAN.
This is the illustration
WLC management VLAN is VLAN 80 Management VLAN of infrastructure (Switches routers) is VLAN 10
The APs were plugged in to VLAN 10 and they were not able to associate themselves with the controllers.
Through research, those APs were getting a wrong IP address,
I did the Mode button, pressed for 30 secs, but this did not fix the problem, i thought it was going to clean the flash and bring the AP back to factory default I do not believe this happened.
We also added the cisco-capwap-controller.localdomain to our DNS servers, and then I rebotted the APs and still no luck.
What fixed the issue is we had to go to the DHCP server, release the IP addresses and we found those based on the macs of the APs. What is we do not have the mac addresses?
Now that I have the DNS entry created, if I plug in an AP on the wrong VLAN port will I be able to see it?
I am trying to get one AP to join the 2106 controller, it did join once then never again!! Now all I get is:
*Jan 22 11:16:22.088: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[Code]....
I’m having a problem of joining new Aps( Ari-ap1242G-E-k9 ) to the following wireless LAN controller. WLC details as follows,
Model No - AIR-CT5508-K9
Software Version - 7.0.116.0
AP Model - ARI-AP1242G-E-K9
AP console logs attached in Error.jpg file
When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
View 4 Replies View RelatedThis is a new setup and has not worked yet. I have multiple 3602 APs and one 2504 Controller. I thought initially I could plug-in an AP into one of two POE Ports on the 2504. During debug mode I see that it has low power, was suprised that the 2504 switch can't fully power the AP? Is this correct?Anyways I have another POE switch that I am using with ample power. The configuration for my wireless is that it will be completely segmented off of my internal network as this is for guest access. So DNS servers are external so I cannot create host entries for the AP to discover the controller. With that being said I believe that is just one way for the discovery process to happen. I have my controller management interface and DHCP scope on the controller on the same subnet plugged into the same POE switch. The AP does seem to get a DHCP address and I can ping the controller from the AP. I cannot get any further then that. I will not join the controller and the radios get disabled. I get messages such as "discovery response from MWAR is rejected. I will post a debug log of the AP and its bootup process. This is new equipment so I would assume the firmware is somewhat up-to-date and the 3602 AP is somewhat the latest model.
View 3 Replies View Related1) AP was originally running a standalone image. I booted it into a so-called ROMMON or AP mode (ESC is the right key to make it boot into this mode).
I found a recovery image in its flash - c1140-rcvk9w8-mx. I made the AP boot from it by using "set" command and I see that it start booting using this recovery image. Here goes the question. Do all AP settings matter ? E.g. when I run "set" command from AP I see the following:
ap: set
?=
DEFAULT_ROUTER=10.0.0.1
Default_router=10.9.99.1
ENABLE_BREAK=yes
[Code].....
my access point 1230 fail to join the controller. The image is C1200-k9w7-mx.123-8.JA2. I tried to reboot it but it does not join to controller. How do I initiate the discovery process again to make this AP to join? Should I convert it back to autonomous AP and then LWAPP process again? I can ping the AP from the controller and the AP is in the same VLAN with controller.
View 3 Replies View RelatedIam having trouble to conect my 1121-AG AP`s to my 4404 WLC.
My WLC version is 7.0.116.0.
I can see he AP is getting an IP address from the controller(internal DHCP). But from some reason they can`t connect to the WLC. I have tried many things such as:
1)reset to default settings
2) move the AP to Autonumos mode and back to LWAPP mode -- didnt work.
1 of my AP 1121AG is working properly.
I try to configure an AP1131 as OfficeExtend but unfortunately I receive the following message from the debug command on the WLC5508: (Cisco Controller)
*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Discovery Request from XX.XX.XX.XX:14847
*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Join Priority Processing status =
[Code].....
we have WLC 4400, we have 40 APs with model no. AIR-LAP1131AG-N-K9 but we recenlty got an AP with model no. AIR-LAP1131AG-E-K9 which is unable to join WLC.
View 3 Replies View Relatedwe are running 5500-series WLC and AIR-LAP1131 and AIR-CAP3502 APs. Now we are trying to have new 1600-series AP's working with 5500WLCs. How to get this combo working.
WLC is running 7.4.100 sw version, and AP will join to controller but it won´t work.[code] I can´t find any kinf off document about invalid event 10 & state 5 combination erros message.
I'm trying to use 1142 APs with a 2504 Wireless Controller through a D-Link 48PT GBIT XSTACK SWITCH (DLI-DGS-3120-48PC/SI).At any rate, the 1142 AP joins with the wireless controller ONLY when I attach it directly to the controller. When connected directly to the controller the AP functions normally and all is well. When I attach it through the D-Link switch, the AP flashs green several times, indicating that it can't find the controller. I suspect that there's some setting on the D-Link switch that's preventing the AP from seeing the controller.
View 6 Replies View RelatedI am not able to join 1042 wireless AP with 2106 controller, even i mention that controller ip is 192.168.200.5 it try to join with controller on 192.168.200.6 ip address always. following are the error logs i can see on console.
*Nov 30 19:50:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:20.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Nov 30 19:50:21.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:21.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.200.6
*Nov 30 19:50:21.436: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
[code]....
i have configured cisco LAP1240 in H-Reap Mode for multiple branch offices with Local switching and central authentication. one of the branch's AP does not join the controller in HQ while the others are all ok. i have firewall only in HQ, i did priming first for all APs like let them join the controller and configure controller IP in high availbility, and H-Reap config and assign SSID to map with the branch local vlan. when i faced this issue first time i brought back ap and configure a static IP address for AP than recheck them again but the problem still same. since i have only one firewall in the network and also other branches joined the controller through that firewall and no issues.
View 3 Replies View Relatedoutput are here
*Mar 1 01:28:21.018: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 1 01:28:21.022: %LWAPP-3-CLIENTERRORLOG: bsnSetCurrentBHRate : fail to set
radio control and data rate
*Mar 1 01:28:21.179: %CDP_PD-2-POWER_LOW: All radios disabled - AC_ADAPTOR (00
00.0000.0000)
*Mar 1 01:28:21.984: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
ernet0, changed state to up
*Mar 1 01:28:34.341: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigne
d DHCP address 192.168.10.244, mask 255.255.255.0, hostname AP2c54.2d0d.c3c4
Have a controller based depolyment with (2) 5508s and an 1121 ACS appliance running 5.1 code. Controllers are setup identically and we are radius authenticating users to AD via the ACS. Everything works great on the primary controller, but when I test failover to the secondary controller, my authentication fails and I get the following error message in my ACS logs:
12126 EAP-FAST cryptobinding verification passed
12147 Machine Authentication is disabled
12161 Cannot provision Authorization PAC when the stateless session resume is disabled
12106 EAP-FAST authentication phase finished successfully
11503 Prepared EAP-Success
We have two 7510 WLC's and a bunch of AP's. I want to make sure I understand the license impact of what we are trying to do. Our AP's will not be up at all times and it's impossible to know when these AP's will be connected and booted up. They may be on for 2 days and then off for a month before booting up again. The question I have is once an AP registers to a WLC, is that license 'locked' and used regardless of whether the AP is up or not?
View 3 Replies View Relatedi'am trying to configure an AP1121g on my controller wlc5508 7.2 but i'am facing a compatibility issue.
View 5 Replies View RelatedI am attemtping to install new ssl certs on our 5.3 cluster. I was able to generate the CSR on the Primary host. When I attempt to generate the csr on the secondary host, I receive the following error:
This System Failure occurred: Error while remotely calling Primary to create: com.cisco.nm.acs.im.certificate.CertificateRequest Object{ request=[B@144cead, privateKey=null, encryptedPrivateKeyPassword=[B@5ce155, certificateSubject=CN=xxxx.xxxxxx.net, keyLength=2048, digest=SHA1, timeStamp=null, friendlyName=null, guid=[B@1cd99ca, description=null, name=xxxx.xxxx.net, version=0, id=0}. Your changes have not been saved.Click OK to return to the list page.
Both hosts are running identical versions:
Cisco ACS VERSION INFORMATION
-----------------------------
Version : 5.3.0.40
Internal Build ID : B.839
I try to join an ACS v. 5.3 to the domain. For my acs in Location A, I can join without problems using my account. When I try to join the ACS in location B to the same domain with the same account, it doesnt work.I looked at the debug log files for the ad client, and noticed, that the ACS in location B goes to a certain Domain Controller. However, I would have expected the ACS to contact another DC, which is located on the same location as the ACS ... this doesnt happen.
My question: How does the ACS determine what DC to contact ? Is it possible to force the AC to join by connecting a certain DC ?
My laptop's wifi is just working fine with TP Link but I'm unable to connect internet via wifi on my iPhone 3G. My iPhone's wifi just works fine in my office. Is there any solution available?
iPhone 3G 8MB
iOS 4.2.1
Modem Firmware: 06.15.00
Router: TP LINK TL-MR3220
Firmware Version: 3.13.12 Build 120524 Rel.60134n
Is there additional setting for iPhone?
I'm having a problem with a cisco bridge WET200 we have a medical equipment whit fixed IP and it has to connect to a wireless network ... and for that I set up the wireless network ... in this bridge but the equipment is not communicating with the gateway, with nothing!WLC always appears the following error:
WiSM-slot9-1) >debug client XX:XX:XX:XX:XX:XX
(WiSM-slot9-1) >*apfReceiveTask: May 23 12:03:27.953: XX:XX:XX:XX:XX:XX Deleting mobile on AP XX:XX:XX:XX:XX:XX(0)
*apfMsConnTask_0: May 23 12:04:11.109: XX:XX:XX:XX:XX:XX Adding mobile on LWAPP AP XX:XX:XX:XX:XX:XX(0)
*apfMsConnTask_0: May 23 12:04:11.109: XX:XX:XX:XX:XX:XX Association received from mobile on AP XX:XX:XX:XX:XX:XX
*apfMsConnTask_0: May 23 12:04:11.109: XX:XX:XX:XX:XX:XX 0.0.0.0 START (0) Changing ACL 'Guest' (ACL ID 0) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1393)
*apfMsConnTask_0: May 23 12:04:11.109: XX:XX:XX:XX:XX:XX Applying site-specific IPv6 override for station XX:XX:XX:XX:XX:XX - vapId 5, site 'default-group', interface
[code]....
i have test command config network ip-mac-binding disable but It does not connect....when I do the troubleshooting mac-client, the system always shows authentication error even though it is okay configured?
I'm having a problem with a cisco bridge WET200.we have a medical equipment whit fixed IP and it has to connect to a wireless network ... and for that I set up the wireless network ... in this bridge [code] but the equipment is not communicating with the gateway, with nothing!
when I do the troubleshooting mac-client, the system always shows authentication error even though it is okay configured
This is what the Log shows when I try adding a 4404 to NCS
[2012-09-11 12:37:04,199] [ICE Service[ 1]Thread: 7] [inventory] [INFO ] - Complete inventory for deviceid 11020009 at Tue Sep 11 12:37:04 EST 2012. Total time taken to collect inventory in milliseconds = 1304
[2012-09-11 13:48:41,707] [http-443-10] [inventory] [INFO ] - Device with id 11020010 is managed state now, initial inventory collection started
[2012-09-11 13:48:41,768] [http-443-10] [inventory] [INFO ] - Initial inventory collection completed for device with id 11020010 without exception
[2012-09-11 13:48:41,822] [ICE Service[ 1]Thread: 8] [inventory] [INFO ] - Enter collect inventory for deviceid 11020010 at Tue Sep 11 13:48:41 EST 2012
[2012-09-11 13:48:41,960] [ICE Service[ 1]Thread: 8] [inventory] [INFO ] - Called InventoryCollectorEngineXdeImpl.call()for device ID = 11020010.
[2012-09-11 13:48:42,045] [ICE Service[ 1]Thread: 8] [inventory] [INFO ] - Invoking FeatureRunner [returned result: mib2-bootstrap] for MNE collection of device: 11020010)
[2012-09-11 13:48:42,159] [ICE Service[ 1]Thread: 8] [inventory] [ERROR] - 192.168.12.77 No matching device profile found.......
[code]....
I Have an issue about AP Group.On my scenario, I have one Flex WLC 7510 using software version 7.0.220, And all APs are 1131.I have some sites with H-Reap, where H-Reap is configured properly.The Access Points are set with AP Group. AP Group is configured properly too. Each AP Group was configured for one site and was configured 2 SSIDs in each AP Group. All sites has 2 differents SSIDs.During some basic tests, in one site with 9 APs, I saw:
1. When the Access Points are registred on WLC, all APs are working fine. All APs has its 2 SSID added on slot 0 (radio 0)
2. If I disable the link between WLC and Access Points, 7 Access Points delete SSIDs on your AP Groups and replace it with 16 SSIDs (SSIDs on Default Group configured on WLC)
i have currently a 2504 WLC and some 1602i AP's.Basically so far i have configured the WLC as per the guidelines on the startup and now i want to join the AP's (which i haven't managed to do yet) and the setup the wireless network.I can get the AP to join and pickup an ip address and that is it. It comes up with different error messages from the WLC, and through hyper terminal, none of which i understand but the main jist is the following:
*spamApTask4: Feb 19 15:05:56.171: #CAPWAP-3-DECODE_ERR: capwap_ac_sm.c:3844 Error decoding Join request from AP 6c:20:56:0e:23:e0
AND
0Tue Feb 19 15:06:19 2013AP with MAC 6c:20:56:0e:23:e0 (AIR-CAP1602I-E-K9 ) is unknown.
AND
I am facing problem with an outdoor access point AIR-1522-K-E series which is unable to join a wirless lan controller 5508. The wireless AP is able to get IP address from dhcp server and discover the Wireless controller IP address. After this i see following status messeges on the console of AP.
*Aug 27 11:04:19.767: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Aug 27 11:04:21.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.2.64.50 peer_port: 5246
*Aug 27 11:04:21.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Aug 27 11:04:21.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 10.2.64.50 peer_port: 5246
[Code]...
I have a cisco router 2951 and this is the message that apear on the console:
ERROR: DDR controller 1 data training time out during initialization! Stop.
What does it mean?
I'm starting to see an error creep up that I havn't seen since 2003/2004 on my brand new 5508 controllers. I'm recieving the following from my WCS: Receive Multicast Queue is full on Controller and then on the controller itself RX Multicast Queue Full. I understand this used to be due to a large influx of ARP requests or CDP packets on older controllers but, this was supposed to be fixed in an update many years ago.
Has seen this on their 5508's. These were advertised as having the horsepower to handle our user loads which arn't really that high at 300 users at any given time max.
so i can not connect to net on my desktop but my wifi works fine, the error is the realtek PCIe FE family controller (code 31) i have tried updating the drivers but nothing i have verizion fios.
View 2 Replies View Related