Cisco Wireless :: How To Modify RADIUS Servers On 4402 Controller
Jul 20, 2010
I have several controllers, including a 4402 running 6.0.188.0 software and I need to modify the Radius servers that it uses. Currently I have three servers listed;
1 - 10.246.194.16
2 - 10.200.31.78
3 - 10.247.50.56
I would like to delete server 1 which is being retired and replace it with a new server 1. I suspect, once i get servwe 1 deleted, the server 1 option would become available when I create a new server. I went into the controller and disabled server one, but every time I try and delete it, I get the "Server in use either on a specific WLAN or Mesh Radius Server Configuration" error. I can't find anywhere this server is still in service and being used, either by a WLAN or a Mesh. I've tried several different variances to modify this. What I hope to avoid is the need to reset the controller. I have a total of seven controllers that I need to make this modification to, and It will be ugly if I have to reboot these units. Hospital mission critical stuff.
View 4 Replies
ADVERTISEMENT
Feb 12, 2012
I have a Cisco 4402-25 WLC with the below information that is having an interesting issue. When you log into the GUI interface with the local account and click on WIRELESS, then choose a accesspoint it brings up a menu where you have three buttons below for the following options (Hardware Reset - Reset AP Now), (Set to Factory Defaults - Clear All Config), and (Set to Factory Defaults - Clear Config Except Static IP). The problem I am having is we access all of our WLC's using Radius and when you enter your AD username and password and go to bounce a access point the GUI interface is missing the buttons, they however appear fine when logged in with the local account.
System Information
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.0.220.0
RTOS Version..................................... 7.0.220.0
Bootloader Version............................... 4.0.206.0
Emergency Image Version.......................... 5.2.157.0
View 2 Replies
View Related
Jun 30, 2010
We Have a WLC-4402 controller with LWAPPs and different VLANs and SSIDs. I've configured a Linksys WET200 to associate to one of the SSIDs.On the WLC I can see, that the WET200 is associated to one Wlan.Then I connect one computer with a static IP address and works fine.But when I connect a second one, everythiing goes down. It does not connect.I can only connect one computer to the WET200.Do I need other seetings on the WLC to allow pass traffic through the WET200?
View 4 Replies
View Related
Jul 20, 2008
how to password recovery Wireless LAN Controller 4402
View 3 Replies
View Related
Mar 11, 2012
I am running 5508 wireless controllers. I pass along another agency's WLAN across my wireless network that is anchored to their older 4402 controller.
I wish to run the new 3600 series APs and am planning on migrating to NCS and the new 7.2 code.
I know that the older 4400 series controllers will not handle the newer 7.1 or 7.2 code. However, i still wish to maintain this anchor relatiosnhip with the older 4402 controller. I need to know if this will work or not.
View 2 Replies
View Related
Apr 11, 2012
1) AP was originally running a standalone image. I booted it into a so-called ROMMON or AP mode (ESC is the right key to make it boot into this mode).
I found a recovery image in its flash - c1140-rcvk9w8-mx. I made the AP boot from it by using "set" command and I see that it start booting using this recovery image. Here goes the question. Do all AP settings matter ? E.g. when I run "set" command from AP I see the following:
ap: set
?=
DEFAULT_ROUTER=10.0.0.1
Default_router=10.9.99.1
ENABLE_BREAK=yes
[Code].....
View 27 Replies
View Related
Oct 6, 2012
I'd like to replace my 4402 Wireless controller with a new 5508. I have migrated the exact configuration from my 4404 controller to the 5508 and they are both running the same version of code. I'm worried that if I replace the 4402 with the 5508 controller, the Access Points will not rejoin to the new controller or they will join but will have lost their configuration e.g. AP Name/location etc etc. AP models registered to the existing controller are 1131, 1142 and 3502. I am also using Cisco WCS.
As long as the new controller has the exact same configuration, is it possible to replace the 4404 with the 5508? Will the existing Access Points join the new controller? Is there any other configuration required? I have read about doing this using mobility groups however would rather not if possible.
View 2 Replies
View Related
Oct 16, 2012
I have a wireless printer on an internal wireless network. I have a laptop connected wirelessly on the same internal network. When both devices are connected to the same network I cannot connect to the printer. If I change my laptop over to the guest wireless or to a wired lan, I can see the printer. I vendor stated that within the 4402 wireless controller there is a setting to allow wifi to wifi connections on the same internal network. I am trying to figure out what that setting is called and where I might look for the setting within the wireless controller.
View 1 Replies
View Related
Jan 27, 2013
I have a 4402-12-k9 controller and I need to upgrade to 25 APs Can I buy a 12 or 25 license upgrade to this controller?
View 7 Replies
View Related
Oct 30, 2012
My client has on cisco 4402 controller running with 48 AP on this. Client requires to add another 25 AP but licence on the current controller is not supported client bought another controller 5508 with 25 AP.
I have been tasked to installe 5508 with conjestion of 4402. I have make the software version on both of them as below
AIR-CT5500-K9-7-0-235-3.aes
AIR-WLC4400-K9-7-0-235-3.aes
To match the same IOS version on both the controller. I have following challenges with me.
- 5508 will registered 25 AP while .. 4408 will continue with 48 AP.
- 5508 is going to be in DC and it will be directly connected to firewall as default gateway for guest SSID. 4402 is going to be on another building.
- How can I make sure that Users connected to AP registered with 4402 will have the same deafult gateway as 5508. Thre is no layer 2 connectivity between this two controllers.
- There is no romaing going to happen between this two controller as both are two different locations and user will leave one location will disconnect and it joines bak when it reach to another controller.
- Is there any way to configure 5508 as master and 4402 as slave kind of connections?
View 1 Replies
View Related
Oct 8, 2012
Is it possible to set an Aironet 1232AG-A-K9 as a repeater while still using a 4402 controller? I have some wireless security cameras in our parking lots that I need to extend wireless to and I have a handful of 1232 points that I am not using. I have some omni antennas and a yagi directional that I was planning on using.Everything I am reading talks about configuring the AP while in automous mode, not while running the lightweight image.
View 2 Replies
View Related
Apr 18, 2013
I have 10 Access-Point model 1131 AG are new AP.
When I connect the access-Point to the network, the AP associate only one time but i go to wireless for see the AP, i can see downloading of IOS, but the ios is 3.0.59, the ap don not nothing. I can not change any parameters.
View 4 Replies
View Related
Mar 1, 2012
I am in the midst of trying to update the controller firmware of a cisco wireless lan contoller 4402, and having some issues getting the file to transfer to the controller. i am currently running verison 5.0.148 on the controller and attempting to upgrade to the latest version of 7.0.230 and for whatever reason it continues to not transfer. I have tried all 3 methods of cli, gui and using wcs software. all the no avail , I have tried tftp32 and 3cdaemon with the same results.
The error that i am getting from 3cdaemon is got socket timeout aborting code 10054, failing at 66MB transfered. I increased the timeouts both on the wlc and the tftp client to no avail
the error i get on the wlc is Code file transfer failed - Error while writing output file
View 5 Replies
View Related
Mar 15, 2013
I have 3 WLC 4402 controller connected to an ACS Server and Cisco 1252G AP. Previously the wireless networks works fine but for two weeks now most of the clients experiencing reauthentication frequently, Some experience it every 5 mins even if they are browsing or idle and not moving. I've check the session time out settings in the wlc and it was configured for 30 mins as default. I have around 900 student clients connecting every day.
View 4 Replies
View Related
Apr 8, 2008
I am trying to setup a guest vlan. I set up an interface for the guest vlan on my 4402 controller. I assigned the guest vlan interface an IP of 192.168.2.10 with a 24 bit subnet mask.
This vlan will go to my DMZ where there is no DHCP server so I need to setup the internal DHCP server. I created a new scope but I'm having trouble with what to put in the Network field for the DHCP scope. The pool addresses are 192.168.2.100-200. with a 24 bit subnet mask.
Every time I try to apply the configuration I get an "error in setting DHCP scope network and netmask".
I've tried using:
192.168.2.10
192.168.2.255
192.168.2.254
as entries for the Network setting but no go. The docs say to enter the IP address used by the management interface with subnet mask applied.
I was assuming they meant the interface for the guest vlan.
View 3 Replies
View Related
Aug 3, 2011
we use wlc 4402 (Software Version 7.0.98.0) and want to allow only several wlan nic vendors to connect to a wlan ssid.According to this, is it possible to configure MAC Filtering with wildcards, e.g. aa:bb:cc:* ?
View 1 Replies
View Related
Jun 5, 2012
We have Cisco 4402 Wireless Lan Controller with Software Version 3.2.171.6 and we want to upgrade it to latest version.
What is the latest version to upgrade the WLC?
Also since WLC is running on very lower version is it possible to upgrade to the latest version directly or we have to move it step by step to upgrade this to latest version?
View 3 Replies
View Related
Jan 17, 2012
We have upgraded to latest IOS but observed this box is hitting a bug which was resolved in the earlier releases but not seen in 4402.
Is this related to hardware issue or a software bug only.
CSCtg94715
CSCtk83586
CSCso90721
Error! Software watchdog on task dot11b expired! Reaper Reset: Task "dot11b" missed software watchdogError! Software watchdog on task apfMsConnTask_0 expired! Reaper Reset: Task "apfMsConnTask_0" missed software watchdogError! Software watchdog on task apfReceiveTask expired! Reaper Reset: Task "apfReceiveTask" missed software watchdogError! Software watchdog on task radiusTransportThread expired! Reaper Reset: Task "radiusTransportThread" missed software watchdogError! Software watchdog on task ccxL2RoamTask expired! Reaper Reset: Task "ccxL2RoamTask" missed software watchdogError! Software watchdog on task dot1xMsgTask expired! Reaper Reset: Task "dot1xMsgTask" missed software watchdogError! Software watchdog on task spamReceiveTask expired! Reaper Reset: Task "spamReceiveTask" missed software watchdogError! Software watchdog on task dtlArpTask expired! Reaper Reset: Task "dtlArpTask" missed software watchdogReaper is kickin' into high gear Task dtlArpTask is consuming 0% CPU! (0% user, 0% system) Frame 0: 0x10004708: sighup_handler+84
************************************************************
* Start Cisco Crash Handler Serv *
************************************************************
Sys Name: HJ_Wireless_Controller
Model: AIR-WLC4402-50-K9
[code].....
View 2 Replies
View Related
Oct 2, 2012
I have 4 Cisco AP541N access points in a a cluster, and everything has been working great. We have been directed by our parent company to change our wireless to utilize RADIUS authentication with our wireless. I have been able to take an AP541N as a standalone (not clustered) and configure it to their standards, configure the 2 RADIUS servers they use with the RADIUS keys I was given for this access point, and everything works great with it. I was able to get them to setup their RADIUS server (which I have no access to) to allow authentication from the 3 other access points now, but they all have different RADIUS keys. I'm finding that when they are clustered they all seem to share the same RADIUS key, but I need them to have different ones.
So the question is, can I cluster 4 AP541N access points together, but allow each one to have it's own unique RADIUS key?
If not, then I think I'll either need to get the RADIUS admins to make them all the same key (which is not likely), or I'll have to uncluster them.
View 1 Replies
View Related
Sep 15, 2010
Recently we've been receiving the following log entries on our WLC 4402. Unfortunately Cisco's documentation is less than useful as to what this message means or what could be causing it. [code]
View 9 Replies
View Related
Nov 6, 2012
We currently have all of our foreign AP controllers on software version 7.0.116. This consists of a mixture of 4400 and 5508 WLC's. Our guest anchor is a 4402 on version 7.0.116. We are replacing the guest anchor with a 5508. We are also upgrading our 5508 wireless controllers to version 7.2 to support the 3600 series AP's. My question is what is the recommeded code that the anchor controller should be on? Should it also be upgraded to 7.2? If we upgrade the anchor controller to version 7.2, will this affect anchoring to 4400 series foreign controllers still on7.0.116?
View 9 Replies
View Related
Feb 26, 2013
We are currently looking to upgrade (re-design) our wireless network at our college. Any experience going from a local, controller-based wireless network to a cloud-based controller? If so, what have you found the pros and cons to be?
If you thought about going to a “cloud solution”, what stopped you?
We are currently running wireless at our 3 primary campus locations, and looking to add it to our 3 satellite locations. We use 4402 WLCs at our primary locations with a mix of 1140 and 1240 APs.
View 5 Replies
View Related
Jul 3, 2007
I follow step by step the link bellow to configure web-auth with external RADIUS server but I receive a error on console debug of the WLC "Returning AAA Error No Server (-7) for mobile"My Radius Server is fine, because I can authenticate on WLC Web page with RADIUS user. WLC 4402 version 4.1.171.0 [URL]
View 2 Replies
View Related
Feb 16, 2012
I am setting up a WIFI network with a Cisco 5508 controller. I want to configure a first WIFI network (WIFI1) that will authenticate my business laptop based on the AD computer accounts and will access my corporate network.I want to setup a second WIFI network (WIFI2) that will authenticate my phones and tablets devices with AD user accounts and will be on a separate vlan with only access to the Internet.I created 2 policies on the Radius server : one that authenticate computers coming from wireless and a second one authenticating users coming from wireless.
if a user manually creates the WIFI1 network on his phone and enter his AD username, he is going to have access to the corporate network. I would like to be able to say that when a request is coming from WIFI1, only the policy for authenticating wireless devices with computer accounts will apply and the second policy authenticating user wouldn't apply.
View 1 Replies
View Related
Dec 3, 2012
We have recently installed Cisco for our wireless solution. We are an education and are looking to let staff and pupils bring their own devices. The route that we are planning to take to let them join the school's WiFi is to implement a RADIUS server so that they can authenticate with their Active Directory username and password. I have tried to test the solution but so far without any success. I am using a Windows Server 2008 R2 as my NPS server, I have setup the Cisco controller as per below:
Security Tab | RADIUS | Authentication - I added my windows server there and the preshared key, the Network User and Management is ticket and the server responds to a ping command,In the WLANs Tab, I selected my test WLAN and under Security | AAA Servers I selected the RADIUS server that I configured in the Security TabI then try to logon to my test WLAN and on the Cisco WLAN controller I get the following error: AAA Authentication Failure for UserName:test User Type: WLAN USER
Before trying to tinker with policies on the Windows Server I was wondering if the RADIUS is correctly setup on the Controller or have I missed something obvious?
View 6 Replies
View Related
May 8, 2012
I have cisco 4402 Wireless LAN Controller with Cisco Access Point (AIR-LAP1252G-E-K9), everything is running smoothly.How come i use my Access Points without Wireless LAN Controller, is there any possibility then which AP model would be suitable?
View 2 Replies
View Related
Jul 4, 2011
I am currently running a Cisco 4402 Lan controller, I have a Wlan that is running unsecured and i wanted to add a simple web policy log in, so i set up an NPS server on a local DC. I have the two talking . when i go to login at the web login page I get the Error Login Error. When i look at the NPS logs it says: "Network Policy Server granted full access to a user because the host met the defined health policy" . So it has to be in my Cisco set up somewhere seems pretty simple
View 2 Replies
View Related
Jan 14, 2013
Recently (within the past 2 months) I've been having some issues with my 4402 wLAN controller.
The issue is thus:
1) New wireless clients (those without exsisting DHCP leases) are unable to properly connect to our wireless network.
2) Those same systems (and other systems) have no issue getting online via a wired connection (where available).
3) Devices like iPad, tablets, laptops partially connect but do not get a valid IP address.
Our config:
1) DHCP is handled by a seperate server (NOT the 4402 - it's DHCP setting is disabled)
2) Our wLan is not on a seperate network than our wired LAN
3) Wireless devices attempting to connect include iPads and laptops mostly.
4) We're a school with about 300 systems (primarily Windows XP machines).
5) 25 access points controlled by the 4402 (our only wLAN controller)
Important Notes:
1) No configuration changes have been made to DHCP or the 4402 device in a couple years.
2) 4402 Software Version = 4.0.217.0
The problem first showed up a bit over a month ago. I first thought the issue was DHCP server related , so I started there and didn't find any obvious issues. I did restart the DHCP server (which at that point had an uptime of somewhere over 700 days).
I then also checked the web interface of the 4402 to see what it was reporting. I noticed a somthing:A) As shown in the "WLAN_Issue_EDIT.png" the client count on the controller is showing 628 current clients. We don't have many devices in our entire campus.
I rebooted the controller after hours and that seemed to allievete the issue. Since then, the current client count hasn't ever gone above 60.
Now today I'm having the same issue regarding new clients getting IP addresses. The client count isn't real high on the WLAN controller and I don't see any other obvious issues. I'm torn between this being a DHCP issue or the controller issue (or a combination of the two).
The reason I don't think it's directly DHCP related is that all wired clients seem to be getting address fine.Plus, I've set my tablet device to a static address and it still cannot connect via wifi.
**Update** I've now rebooted the controller and the problem persists (at least on the nearby iPad - Will confirm other devices shortly).
View 12 Replies
View Related
May 16, 2011
I am enabling our wireless controllers to use 802.1x authentication for our wireless clients. Both computer and user are provided with certificate from CA server.I have 9 APs and 2 controllers installed in my infrastucture, one of the controllers is working fine with setting specified above but the other one is not.Both has same configuration and both seems identical with same model and IOS.
View 3 Replies
View Related
May 29, 2013
I have a Cisco 4402 Wireless LAN Controller and 4 x AIR-LAP1131AG-A-K9 access points.We run a combination of [WPA +WPA2]Auth(802.1x) as well as [WPA2]Auth(PSK), most people have their own login credentials...The primary client devices are MacBooks and iPhones, with some Windows and other mobile manufacturer being the minority.
The Issue I have one user (using a recent MacBook Air, latest OS, using Auth(802.1X) ), that keeps getting disconnected for no apparent reason, the user account has been setup exactly the same as every other user and his laptop doesn't have this issue when connected to other WiFi networks.It's worth noting: I noticed this particular user has a lot of "Decrypt Failed" (currently 213) associated with his MAC address, no other user on our network has a single "Decrypt Failed" associated with their MAC...
View 4 Replies
View Related
Apr 3, 2012
I have 2 4402 WLC running 7.x.x.x code. I also have some 1510 Mesh- L WAPs that require an old version of code. I need 4.1.192.22M for those. Is it possible to bring up a 3rd controller running this old code with the other 2 4402's running modern code? What will break? I know that anchoring and mobility might get messed up. What are the other caveats?
View 2 Replies
View Related
Jan 21, 2013
I have RADIUS servers configured to authenticate administrative users and authorize them at a low level. This is working well. I also have a local level-15 user in case all of my RADIUS servers time out and someone needs to change something. This also works well. The issue I'm having is that a low-level user can log on using the RADIUS severs, then issue the "login" command and enter the local level-15 user's credentials and then operate at level 15.
I do not want the local account to work at all, except in the case that all RADIUS servers are unavailable. What I've described above works around this. How to disable the "login" command or force it to try RADIUS servers first? This is for ASA 8.2
View 4 Replies
View Related
Mar 29, 2012
What is the maximum number of supported RADIUS servers on the Flex 7500 Cloud Controller?
View 2 Replies
View Related
