we have coonection between c3750 and wlc 5508 and it shows that mac address flaps between two interfaces of c3750. [code] two ports are trunking and one port is for management purposes and the other port is for the all other vlans. But it shows that it flaps always. And i think WLC uses one mac address for all device and not for port specific and that causes problem.
View 6 RepliesI have setup LAG for one of our 5508 controllers and have connected 4 of the 8 ethernet ports to a 4507 switch. After configuring 2 port channels on the switch we are receiving a host flapping error between the port channels and it seems to be causing a serious slowdown on the switch. When I shutdown one of the port channels the error goes away and traffic returns to normal. I have the same configuration at other locations with the only difference being the switches used are 3750G-12S and I do not see the host flapping error. It appears to only be a problem with modular switches.
One other thing of note: I read a Cisco white paper on LAG and it suggested creating the port channels over 2 different modules. For example, put ports G4/24 and G5/24 in port channel 1 and G4/25 and G5/25 in port channel 2. I tried this but I still got the host flapping error.
I am getting following error in Cisco 6509 switch.BUt there is no impact in the switch.
: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 694 is flapping between port Te8/1 and port Te7/1
29:33.959: %MAC_MOVE-SP-4-NOTIF: Host 0000.0c07.ac01 in vlan 269 is flapping between port Te7/1 and port Te8/1
[Code].....
We have c3750s running NAC 4.8. Occassionally, a workstation will flap between the untrusted and trusted vlans. We updated the NIC drivers on the workstation, we verified SNMP was functioning correctly on the switch, and we allowed the phones to act as the pass-through between the workstation and the switch. What could cause the workstation IP Address to not redirect to a TRUSTED VLAN from the NAC_UNTRUST VLAN? All updates have been downloaded to the workstation.
View 1 Replies View RelatedWe are deploying the ISE MAC address authentication by-pass (mab) feature in our network as an alternative to port security on the switch port. Works well except for certain devices e.g. printers, snmp modules, and Unix/Linux Operating systems which can range from 5-10 minutes to never in authentication/opening the port.
View 2 Replies View RelatedIs there any way to Mirror a CISCO C3750 Switch Port Taffic to a remote Host IP Address?I know Port Mirror (SPAN/RSPAN) can copy one Interface Packet to another Interface. But I am looking for a way to miror Switch Port Packets to a remote Host (having Public IP Address and running Wirehark). Is it possible?
View 9 Replies View RelatedI have configured 5508 with multiple APs but clients on the internal SSID aren't getting an IP address. I have the IP helper address configured and I have also disabled DHCP proxy on the controller.
I get the following from the client debug, I don't know what the below mac address is, it's not one my APs or the clients, I am not seeing this mac address on the controller at all but it shows up in the debug.
type = Airespace AP - Learn IP address
on AP 6c:9c:ed:87:23:c0
*Dot1x_NW_MsgTask_0: Nov 25 16:14:17.579: 08:11:96:20:94:28 Entering Backend
[Code].....
I am using 2 anchor controllers 5508 as DHCP server. Anchor controller A is primary and anchor controller B is secondary. From time to time, client will complain "duplicate IP address error" when they try to connect guest wireless.First question: both anchor controller should have a recorder of IP address which is assigned to each PC, right?Second question: is there any way this type of issue can be avoided?
View 3 Replies View RelatedWe got a question about our WLC 5508 single controller deployment with 14 access points without a VLAN configuration.
When our clients connect to the wifi, we cannot see any ip address of them in the client details page. It shows everytime the ip address 0.0.0.0. The clients are configured with a static ip.
I had configured a Cisco 5508 series WLC. The APs used are Cisco 3502 LAP. The APs are configured to use DHCP for this ip addresses.
We had configured the DHCP server on the 2 Windows AD server previously and the APs were not able to get an IP address when the WLC was rebooted. To isolate the cause, we configured the DHCP server on a cisco 6500 switch. When we reboot the WLC, most of the APs are not able to grab an IP address. We had to remove and reconfigure the DHCP pool on the cisco 6500 for the APs to capture the IP addresses.
My colleague had feedback that they gotten a message that the DHCP pool had been used up. We tried to do a "show ip DHCP pool" but the switch did not recognise the command. IOS version used is Version 12.2(50r)SYS2.
We had a problem with the wireless client getting ip addresses from the windows DHCP server previously but problem was resolved after we disabled the DHCP proxy on the WLC.
What we are curious is why was the DHCP pool fully used on the Cisco switch and how could we check the number of addresses used other than running "show ip dhcp binding" and doing a count of the IP addresses?
Also why did we have to disable the DHCP proxy on the cisco WLC for the wireless clients to be able to get an IP address from the windows DHCP server?
We seem to be facing a number of problems with the DHCP functions for the wireless setup.
My 5508 WLC which runs version 7.4 is configured as a DHCP server for the AP management and here's my problem: My AP can get to the address, and can ping the address of the WLC management，But my AP prompts the following log： [code]
In the switch dhcp we can use to do the WLC option43 specified address, but in this case how the address specified WLC, the AP can be registered up?
We have a 5508 with 7.4.100.0 vor Internal APs and OEAPs. till now every thing is ok. Now we have to connect an AP (local) in a remote office, connected to the WLC by a VPN Tunnel. The problem is that the AP in the remote office uses the NAT Address to connect to the WLC, so the traffic goes over the Internet, not trough the VPN Tunnel. On the controller I have the following setting:
AP Discovery - NAT IP Only ................. Disabled
On the AP:
AP Link Latency.................................. Disabled
How to force the AP to use the internal IP Address of the WLC?
I have a wireless 5508 with license base to 50 aps, i use a deployment flex connect. I already registered all my access points, I use web authentication to authenticate users guest, and the service dhcp is in the central site.
My issue is the users in each remote site, can not get an ip address by dhcp from the central site, they can authenticate in the guest ssid, but any users can not get an ip. The request is passing by the wan in this way
Central Site DHCP - Router WAN - Remote Site - Users with notebooks. I use flex connect central deployment (all the traffic consulting to the wlc) .
perhaps i should use local deploy? The wireless is in the central site.
I have a 5508 controller, just upgraded from 6.0.182 to 7.0.98.0. Also LAG was switched off directly after upgrade.
Since the upgrade none of the 1142 LAPs are associating with the controller. I can see they are being issued IPs by the internal DHCP but putting a console cable and watching I am getting:
Not in Bound state.
*May 4 11:41:17.759: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*May 4 11:41:17.759: %CAPWAP-5-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
One Ap prior to the upgrade was on a static IP and that connected through without any problem, (it was an 1131 though, but I dont think that is the issue...)
Just inserted a new 5508 WLC into the network. We current have 3 4404 WLCs, and there was a need to duplicate, as much as possible, the configurations on the 4404s, and the design. The 5508 came online as expected. We moved a few access points over to it. The APs got the correct address range. The clients are expected to get addresses in the same scope range as the APs. However, the clients are receiving addresses in the management IP scope.I know there are two "not a good way to do it" in here. Why is the management address range in the DHCP scope, and why are the clients using the same scope as the APs. We are going to change that. For now, the AP and client in the same range has been going on since we rolled out wireless in 2006.The 8 ports on the 5508 are configured for LAG. There is no dedicated port for management. They tell me not to do that on a 5508.
View 8 Replies View RelatedI have a situation where a user needs more than one office extend AP in his home. My office extend controller is a 5508 running 7.0.220.0. Are there any issues NATing multiple OE APs to a single address? My initial lab results indicate that each of the AP's associate with the controller and establish a DTLS tunnel. I see the SSIDs get pushed to the AP and then it seems to restart the process never being fully operational. Is there a workaround that will allow me to run mutliple OE APs?
View 12 Replies View RelatedI setup a guest wired network on the WLC 5508 with 7.2.110. A postage machine can only be setup for static IP address over guest wired network. Is any one how to get it configure on the WLC 5508?
View 3 Replies View RelatedI have 2 units Cisco WLC 5508 running software version 7.0.220 with 70 over units Cisco AP 1262N and 1242AG. Some of wireless clients having problem to get the correct IP address from the DHCP server. There are 2 units of Microsoft DHCP. Both DHCP server ip have been configured on the Interface at the WLC. The core switch also being configured with ip helper. I've attached the debug output of one of the wireless client during the problem.
View 12 Replies View RelatedI have a new wireless configuration on a 5508 WLC. the controller is licensed for 12 AP's. I have plugged 8 AP's into the wireless vlan and 6 out of 8 come up with IP address and connect to the controller, broadcast two configured SSID's all seems good with them, but i have two AP's that do not get IP addresses. they are in the correct vlan i can plug a laptop into the group of ports in the val and get an IP address. So it seems to be just the AP's that don't. if i look at the consol of the AP it says: Waiting for PHY to auto negotiate . then it say timed out and continues to "boot with errors" then it continues to complain that it has no ip address. I have rebooted a few times and changed ports, and patch cables.
View 3 Replies View RelatedIn our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest
Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) -
Mobility Group: Same configs at both ends
SSID Anchor : Anchor SSID on local and local SSID on Anchor.
AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
I have 5508 controller in my lab. I am working on a project to set up a public internet but with some condition.
- User should able to connect to the SSID without any authentication.
- Once user will connec to the SSID it should redirect to an external URL which indicates terms and condition and email address field.
- User should enter his/her email address in email addrss filed and click I accept button.
- Once that is done then he/she is allowed to access internet.
We are not sure how can we achive this as I do not know what should be the return value for WLC to allow that user to go through or what should be the settings on the WLC to redirect to the page.
I have seen a settings on web authentication for external URL but I guess it is only for username passwor or Radius authentication. While in this case I do not want to use any authentication just an accept buttor or Decline button and all good to go.
We're running two 5508 WLCs running 7.0.235.3 pushing out 7 WLANs. They are both live. Each WLC is connected to the same stack of 3750G running 12.2(44)SE6 via Etherchannels.I'm getting tons of MAC flapping errors similar to this:9373213: Feb 19 10:53:54.564 CST: %SW_MATM-4-MACFLAP_NOTIF: Host 843a.4b3c.4cec in vlan 752 is flapping between port Po12 and port Po11Each portchannel consists of ports on each of the two switches in the 3750 stack. Only VLAN 752 shows the flapping activity. LAG is enabled on the each of the WLCs. The portchannel and interface configs are identical, minus the channel-group command of course.Maybe completely unrelated....looking at CDP neighbors from the switch is incorrect:
WLC1 Gig 2/0/44 157 H AIR-CT550 Gig 0/0/1
WLC1 Gig 1/0/21 157 H AIR-CT550 Gig 0/0/2
WLC1 Gig 1/0/20 157 H AIR-CT550 Gig 0/0/3
[code].....
Right now I have a lab setup with a couple of these AP's.They are both doing DHCP to get their IP address from a 5508.How do I set a static IP address on the AP?
View 5 Replies View RelatedI have multiple wireless access points plugged into a 3560X. When the wireless clients begin roaming they cause duplicate MAC enteries to be created and this causes the switch ports to flap. Is there a way to configure the switch to either ignore the duplicate MAC enteries on the switchports that have been connected to the APs or is there a way to have the ARP tables update and resolve the conflicting MAC enteries with out causing the switchport to flap?
View 3 Replies View RelatedI would like to share one problem with WLC 5508 . we added a new virtual interface on the WLC. One new SSID is associated with this interface.
We created a ACL for this interface to restrict the access via WIFI to certian services. It´s not correct that everything works fine because the change were not applied. [code]
The changes of the ACL are applied on the fly, but for reason we don´t know, the clients don´t get a DHCP IP-Address (after changing the ACL) until the Controller is rebooted.
l have implemented mac filtering auth on my wireless network, l have 2 WLC ( 1 WLC 5508 and 1 WLC 4402, and I wonder if you can migrate the mac address database of a WLC to another and how can l do this.
View 4 Replies View RelatedI've got a new 5508 wireless lan controller and can ping the ip address of the management interface, but can't access the GUI at the management interface's ip address. I can access the GUI on the service-port interface. No static routes in the controller; trunk appears to be set up correctly.
View 5 Replies View RelatedI have a strange behavior between a WLC 5508 (version 7.0.116.0) and NEXUS7010.
WLC
The WLC is configured in DHCP Bridging Mode (it sends DHCP requests without change)
Nexus
The VLAN interface is configured as follows
interface Vlan501
ip access-group acl-int-vlan501-in-1 in
no ip redirects
ip address 10.12.56.4/21
ip ospf network broadcast
ip router ospf 100 area 10.23.0.0
hsrp 51
Clients can not obtain an IP address intermittently. If I deactivates the ACL when the problem appears(when the client can not obtain an IP@) the probleme is resolved
Note: Before the WLC was connected to Catalyst 6500 and worked properly for 2 years (with same configuration)
I saw this note about differences between DHCP relay on the NEXUS7000/NXOS an Ip helper one the 6500/IOS URL. Do you think the problem may come from the DHCP relay or ACL on the NEXUS.
We are having an issue with BGP flapping peer. We have a ASR1002 as Route Reflector and it work fine with all peers except with 2 peers.
View 3 Replies View RelatedI have a new Cisco 819 router wtih Verizon 3G built in. I want to use this router to provide 3G backup Internet access for a customer kiosk. The 3G is perfectly stable when I use it as a primary, static routed connection. When I use a floating static route, the link goes up and down constantly. The 3G link works for a about 20- 30 seconds, then goes to reset, down, then dials up and reconnects.
View 2 Replies View RelatedI am having an issue get an EZVPN working between a 2811 server and a SR520 client. The symptoms are the SR520 makes multiple connection attempts to the 2811. It appears that sometimes these connections are successful and the SR520 is assigned an IP address but then the tunnel will be dropped and a new session will be started. I've attached scrubed configs for both the 2811 and the SR520. One other note, when connecting to the 2811 with a software VPN client, there are no problems, so I think the problem is with the SR520. On the other hand, the SR520 wasn't having any problems until we switched our VPN server from a UC520 to the 2811.
View 3 Replies View RelatedI am trying to determine a problem with flapping interface on a router not showing up in log buffer if Cisco IOS. I've included the config on the switch that pertains to the logging and can't seem to figure what is going on. The SNMP trap is being sent to our Central Management trap server and that is reporting the interface flapping but the flap doesn't show up in the log messages.
hstir1#sh int desc | inc 8/33
Gi8/33 up up
hstir1#sh int desc | inc 8/33
Gi8/33 down down
[code].....
I have two Cisco 888-K9 setup on a 4 wire private line about 2-3 km apart one configurated as CO and the other as a CPE. During config and testing the SHDSL connection was completely stable although this was only over about 300m of CAT5e. Now the devices are installed the in field I'm finding the connection constantly comes up and down every minute or so which leads me to suspect noise or line quality is the issue. How to debug this and tweak the setting to improve stability? Config from the CO & CPE attached along with DSL controller output from active and non active connection on the CO.
View 2 Replies View Related