I am trying to set up a Wireless network a WLC hosted on an SRE module in a 2911 router. I think i have most of my bases covered but there is still one problem.
My LAP1131AG AP's won't join the controller, on the AP im am seeing this:
Translating "CISCO-LWAPP-CONTROLLER.test.local"...domain server (192.168.250.10) [OK]
[Code].....
But to my knowledge an LWAP AP schould be able to join a CAPWAP WLC
i have an AIR-LAP1131AG-A-K9 fresh from the box an was trying to register it to vWLC.I have them both on the same VLAN and these logs are showing on my WLC: [code]
The funny thing i have noticed is that both the WLC and the AP cannot PING each other.
we have WLC 4400, we have 40 APs with model no. AIR-LAP1131AG-N-K9 but we recenlty got an AP with model no. AIR-LAP1131AG-E-K9 which is unable to join WLC.
View 3 Replies View RelatedWCS is reporting few AP's are not associated with it. While troubleshooting, AP conneceted switch interface shows UP/UP and show power inline output gives IEEE PD instead of AIR-LAP1131AG-E-K, after doing a shut/no shut on AP connected interface. Later after sometime AP comes up.
View 5 Replies View Relatedis it possible to shut down the LED on the AP LAP1131AG?
View 12 Replies View RelatedI have a WLC 4402 with many APs connected. Most of the APs are LAP1121 and LAP1131 and are working using 802.11b/g. I tried activating 802.11a but for some reason its not working. I see under the Monitor tab that the AP's "802.11a" interface is "down". I have enabled the radio under the "Wireless" tab. Under all the "WLAN" I have enabled all the radios but still not working. 802.11a" interface is still "down".
The AP Model is AIR-LAP1131AG-E-K9 meaning "ESTI" regulation. Under "Country" I "checked" IL.
I've a 2106 WLC and the software is upgrade to 7.0.220.0. There are 3 APs with external power adapter work normally on it. Here is the problem: There is another AP with external power adapter has join the the WLC successfully. But it can not enable the radio 802.11b. Following is the error message on CLI
(Cisco Controller) config>802.11b enable AP001d.a1ef.b5f4 Cisco AP has not enough in-line power to enable radio
Since few days the WLC 2100 series controller and 3x LAP1131AG are getting disconnected and the controller gets offline via the local ip address. At that point I have to reboot. To get anywhere and after I connect wirelessly to the AP before I know it it disconnects. It worked for 3 years straight no fuss. And now nothing. I reconfigured the WLC 10times and no diffference.
[code]....
Does any body know what is the maximum of simultaneous connections that the AIR-LAP1131AG-E-K9 access point supports?
View 2 Replies View RelatedI would like to return the cisco AIR-LAP1131AG-E-K9 to autonomous AP for it to function without WCS.
Sometimes it returns checksums error although the ios is valid.
I have a AIR-LAP1131AG-A-K9 this Ap is registered but, i cant enabling admin status on interface B/g, when select option throws a error. "Error in Enabling Admin Status"
View 4 Replies View RelatedI have a customer whom has six LAP1131AG-K9 but no controller and they are interested in one of the new 2500 series, specifically a AIR-CT2504-5-K9 with a 5 AP add-on license to bring total AP capacity to 10. I can't determine clearly if this controller will work for these older AP's prior to them making the jump to 802.11n via the 3500 or 3600 series, looking to the community to confirm.
View 3 Replies View RelatedI brought a LAP1131AG, only later found out that it can only be used with a controller.Is there any way I could change the firmware to make it a normall Access Point?
View 5 Replies View RelatedWe have about 70 AIR-1131AG-A-K9 APs that were installed about 5 years ago. The controller we use is a 4404 WLC, with software 4.1.171.0. This provides us our wireless network. We use Cisco switches as access, distribution, and core switches.
We have two guest networks, one for visiting physicians and another for patients and their guests. Each of these guest networks use a 4402 WLC as an anchor controller, with software 4.1.171.0. They use the same APs as our business network.
According to my understanding of the guest networks is that a tunnel (I don't know if it is encrypted or or encapsulated) is created between the APs/Guest WLAN to the anchor controllers, so this guest traffic is isolated from our business traffic. Futhermore, these guest controllers connect directly to our firewall, which only allows them access to the Internet, and not our Internal LAN.
Our Problem
=========================
Well, we've been having problems with our wireless system, specifcally with patient guest access. It has gotten bad enough that they are looking to replace the Cisco APs on the south side of the hospital. We've been told that "you can get better guest access at McDonalds" : ( . I think part of our problem is that our controller code is so very old and we are have a our patient guest network open and "restrict" the number of clients attached to it by limiting our DHCP scope. The biggest complaint we get regarding the patient/guest wireless is people saying "I can't connect to the wireless", which we almost always identify as an issue caused by us running our of DHCP leases (we have about 200). These DHCP lease are used quickly, by an devices that comes into range that is set to automatically connect to any network that is in range. A lot of our staff is connected to our patient guest network and don't even realize it.
We are interested in Meraki APs because they are magaged using a cloud controller (we won't have the added expense of another controller) and they seem really easy to manage. Our biggest concern regarding Mearki is security. They make use of NAT, a Layer 3 firewall, and LAN isolation (a firewall rule that only allows clients Internet access) in each AP as a means of isolating the guest traffic from the business traffic. Does this seem like a secure way to accomplish this or are the Layer 2 tunnels that Cisco and from what I've been told recently Aruba and Juniper make use of a more secure approach?
We've been working with a Meraki vendor, who also happens to sell Aruba and Juniper wireless networks. It seems like don't suggest Meraki if we are concerned with security. They said they are good for situations where you have many geographically seperated sites. They suggested we use Juniper and Aruba, specifically because they use Layer 2 tunnels and that they used technologies like clear air (APs self adjust channels and power, which Meraki claims to do too). I thought that, hey does Cisco that too, why wouldn't we just go with Cisco if those are your selling points for Juniper and Aruba?
I have 10 AIR-LAP1131AG-A-K9 connected to a 4402 controller. I have a couple of questions:
- When I go into CONFIGURE/ACCESS POINT, one of the AP's has the message "**Configuration is different on the Device**". How do I connect directly to the device to check the settings? I tried to telnet but that didn't work.
- Are these access points capable of acting as a DHCP server? If so, where can I check this setting? I have workstations that are unable to pull an IP address from my DHCP server running on a Windows server. I want to make sure the AP's and/or the controller are not the issue. The clients see the SSID and the signal is strong, but when they connect they get limited network connectivity message and the IP addr is 169.254.97.123 (which is wrong).
At one of our locations we are experiencing some problems getting connected to our wireless networks.
It is possible to sit right next to an AP (AIR-LAP1131AG) and only have limited access to the network.
I have attached a snapshot from inSSID from the wireless networks in the area. All of them are broadcasted by our controller and I can´t figure out how it is possible to see SSIDs in other channels than the ones in the 2.4GHz band (11-14)?
I am new to Cisco wireless solution and would like to ask how to add the AP to the WLC properly. All Cisco 1041 and Cisco 2500 WLC are new. I connect those AP and WLC to the switch without any VLAN tag and the AP can gain the IP address from our DHCP correctly. However, the AP 1041 could not join the WLC successfully.
WLC: Cisco 2500
IP Address: 192.168.1.225
version: 7.4.100.0
Our offcie use WLC2100 Series controller with AIR-LAP1031 and successfully join and running. Now i am trying to replace one ap with AIR-LAP1041N and join with WLC, but i can't and below the error message generate:
[code]....
WLC software 7.2.103.0
1. first problem: AP1252 can´t join on WLC. MAC was add on mac filter properly.
170Mon Apr 9 15:37:32 2012Mesh Node '2c:3f:38:be:53:ef' failed to join controller, MAC address not in MAC filter list.171Mon Apr 9 15:37:32 2012AAA Authentication Failure for UserName:2c3f38be53e0 User Type: WLAN USER172Mon Apr 9 15:37:32 2012Coverage hole pre alarm for client[1] 40:a6:d9:ef:87:68 on 802.11b/g interface of AP 2c:3f:38:bf:0c:80 (AP2c3f.38bf.0c80). Hist: 46 7 5 4 2 1 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0173Mon Apr 9 15:37:32 2012Coverage hole pre alarm for client[1] 8c:7b:9d:05:a0:67 on 802.11b/g interface of AP 2c:3f:38:bf:0c:80 (AP2c3f.38bf.0c80). Hist: 50 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0174Mon Apr 9 15:37:30
[code]....
Several APs can´t join on WLC and all are added on MAC filter, but they are showing this messages.
2 . Second problem.: Operational Status = UNKNOWN
Some Access Point are in UNKNOWN status. I tried but I can´t do the reboot. I can access Web config the APs using WLC, but when I applied the reset, it wasn´t working properly.
I'm new in installing WIFI, I have WLC 2504 using 7.4.100.0. I have AP 1600 (AIR-CAP1602E-E-K9)
I installed the WLC and AP in a cisco poe switch, wlc and ap are in the same subnet and can ping ap from WLC, but the AP cannot join the wlc. i have this error message
(Cisco Controller) >show ap join stats detailed 00:06:f6:d6:03:f0
Sync phase statistics
- Time at sync request received............................ Not applicable
- Time at sync completed................................... Not applicable
I have converted ap 1131 from autonomous to lwapp successfully by using upgrade utility tool but the AP does not join the WLC 2106. I can see it as a neighbor on the switch with no IP address.
View 19 Replies View RelatedMy WLC running 6.0.182.0 suddenly could not accept more than 47 APs! Ihave a 1240 trying to join but failed with no obvious reason (no special errors in debugging).
I unplugged one of the joined and the first one joined!! I replugged the second one but could not join!! I unplugged the first one and replugged the second one: the second joined the controller but the first could not associate again!
I have a 4400 WLC for 100APs running the 7.0.98.0software version. Now, only 48 APs are joined, and the WLC dont accept new joins. The log below are from my WLC but appear for all others APs:
%LOG-6-Q_IND: spam_lrad.c:1440 Discarding discovery request in LWAPP from AP 00:3a:98:ae:e3:f0 supporting CAPWAP%LWAPP-6-CAPWAP_SUPP_VER: spam_lrad.c:1440 Discarding discovery request in LWAPP from AP 00:3a:98:ae:e3:f0 supporting CAPWAP%CAPWAP-3-TX_ERR: capwap_ac_sm.c:1966 Failed to transmit discovery response to AP 00:3a:98:ae:e3:f0%CAPWAP-3-ENCODE_ERR: capwap_ac_sm.c:2269 Failed to encode Discovery (code)
We have two cisco 1262 AP and a 4402 WLC, the AP cannot join the WLC. The AP gets the address from dchp
I cannot ping the AP address from the WLC, but i can ping the default gateway and other VLAN addresses.
I already read the info on the this link : [URL] Still our AP cannot join the WLC no matter what i have tried.
Setup
- VLAN setup on a Cisco 3560 48 port poe Switch
- tunk configured btwn the Gi Interface and the Management physical port
- WLC mode is configured for Layer 3
- AP Manager and Management are in the same Subnet
- Option 43 is configured for the with the AP Manager's IP address
- Opotion 60 is also configured with AP Manager's IP address
- the port connected to the APs are in the AP Manager VLAN
I have a problem in join my ap1130ag in my wlc 2504 i activate dhcp internel (172.19.1.50 ----> 172.19.1.60) in wlc and this wlc affected address for ap1130ag (172.19.1.51) wlc and ap1130ag is connected with switch 2960 (port 17,18) this port the switche is configured in trunk mod allowed all vlan then my wlc not detected ap1130ag?
View 4 Replies View Relatedi converted the C1310 to LAP using upgrade tool. but the AP is not able to join the controller i was not able to view SHA Key in upgrade tool, so i ran the "debug pm pki enable " on the controler to get it. i'm still not able to view SHA key.
here is the output of debug command
*spamApTask0: May 21 15:07:43.527: 88:43:e1:d1:fc:9e Received LWAPP JOIN REQUEST from AP 88:43:e1:d1:fc:9e to cc:ef:48:b3:23:ef on port '13'
*spamApTask0: May 21 15:07:43.549: sshpmGetIssuerHandles: locking ca cert table
[Code].....
I have some LAP1242 which by mistake were bought for Mesh. I am trying to convert them to LWAPP so what I did first was to convert them to Stand Alone then to LWAPP but I cannot get the AP to join the WLC and sends several error logs.
I attached some logs taken from AP and WLC so that you can figure out what's going on.
I wonder if I have to remove anything from flash either on SA or LWAPP mode (I know that in some cases you have to delete privete-config in order to avoid the AP taken previous configurations). By the way I think I had never seen this c1240-k9w8-mx.124-25e.JA2 on an AP IOS before, I wonder if it has to do with the mesh thing.
I have a cisco AIR-LAP1262N-A-K9 and AIR-LAP1142N-A-K9, and i would like to join to Cisco WLC2106 (software version 7.0.98.0)My ap 1262N have 3 antennas externals with 7dbi of ganancy,Is possible to do it?
View 1 Replies View RelatedI have WLC 2504 and AP3502I . AP can not join wireless controller .
*May 24 16:33:51.871: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*May 24 16:33:51.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 10.80.90.99 peer_port: 5246
[code].....
I have a cisco 5508 WLC and 40 cisco 360021 APs.I configured the WLC and assign the management interface IP and also configured a DHCP pool on my Cisco 4507 core switch wit option 43.But the problem that the APs connot join the WLC.
View 31 Replies View RelatedI'd WLC 2100 series and 9 access point LAP1142N .8 LAP1142N can work fine and join a capwap controller is ok but only one LAP1142 is can not . Part of LAP is AIR-LAP1142N-A-K9
Apr 2 10:52:42.284: LWAPP_CLIENT_EVENT: spamResolveStaticGateway - gateway found
*Apr 2 10:52:42.284: LWAPP_CLIENT_EVENT: spamResolveStaticGateway - gateway found
*Apr 2 10:52:42.284: LWAPP_CLIENT_EVENT: Dropping discovery in LWAPP. This AP model is not supported by LWAPP WLC.
*Apr 2 10:52:42.284: status of voice_diag_test from WLC is false
*Apr 2 10:52:52.284: %CAPWAP-3-ERRORLOG: Go join a capwap controller
[code]....
We have two cisco 1262 AP and a 4402 WLC, the AP cannot join the WLC.
The AP gets the address from dchp
I cannot ping the AP address from the WLC, but i can ping the default gateway and other VLAN addresses.
I already read the info on the this link : [URL]
Still our AP cannot join the WLC no matter what i have tried.
Setup
- VLAN setup on a Cisco 3560 48 port poe Switch
- tunk configured btwn the Gi Interface and the Management physical port
- WLC mode is configured for Layer 3
- AP Manager and Management are in the same Subnet
- Option 43 is configured for the with the AP Manager's IP address
- Opotion 60 is also configured with AP Manager's IP address
- the port connected to the APs are in the AP Manager VLAN
I have configured a 1552, that is wired to network, as "Bridge" then "RootAP".
After reboot, I can see a MAP trying to join the network, in the "simple" logs of the controller :
"Mon May 6 17:29:43 2013 Mesh Node '04:da:d2:1f:4d:6f' failed to join controller, MAC address not in MAC filter list."
As I have done for the RAP, I enter this MAC address in the MAC Filtering area under Security tab. But this action doesn't solve the problem, I continue to see this message in the controller logs !
If I open a SSH session on the RAP, I can see this block of debug messages repeat all the time :
*May 6 15:29:33.163: %MESH-6-ADJ_VIDB_LINK: Mesh neighbor 04da.d21f.4d6f VIDB Virtual-Dot11Radio0 dot1x control
*May 6 15:29:33.167: %LINK-6-UPDOWN: Interface Virtual-Dot11Radio0, changed state to up
*May 6 15:29:34.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Dot11Radio0, changed state to up
*May 6 15:29:43.223: %MESH-6-LINK_UPDOWN: Mesh station 04da.d21f.4d6f link Down
*May 6 15:29:43.423: %MESH-6-ADJ_VIDB_LINK: Mesh neighbor 04da.d21f.4d6f VIDB Virtual-Dot11Radio0 going
When I take a look into detailled debug messages of the controller I can see this :
*spamReceiveTask: May 06 17:30:44.364: #LWAPP-6-RADIUS_AUTHORIZATION: spam_radius.c:242 The system could not send join reply, AP authorization failed; AP:04:da:d2:1f:4d:6f
I don't know why the system talks about dot1x or Radius Authorization, and if this is the source of my problems. On a other hand, I can see in the debug messages that there is a 2 hours lag time between controller (correct time) and RAP (incorrect, I suppose it synchronize with the controller?)