I am trying to setup SSO between my primary and secondary 5508 controller, and it doesn't appear to be working. I lose connection to both devices after the reboot and then have to console in and disable redundancy manually to regain connectivity. Is there something special required for this to work that isn't apparent?
View 4 RepliesTacacs not working for 3 new 5508 WLC's...working fine for 6 old 4400 WLC's.
Before 7.116 code upgrade...I remember 5508 was working on and off and now they are not.
Same configs on SW, WLC and ACS.
Debug on WLC gives..below message when Tacacs is attempted..
*aaaQueueReader: Oct 25 09:20:41.700: tplus_processAuthRequest: memory alloc failed for tplus
Not sure why statistics show zero...?? Radius is working for users.
(wlc03) >show tacacs auth statistics
Authentication Servers:
Server Index..................................... 1
Server Address................................... 10.3.121.21
Msg Round Trip Time.............................. 0 (msec)
First Requests................................... 0
Retry Requests................................... 0
Accept Responses................................. 0
Reject Responses................................. 0
[ Code].....
We had cisco 5508 with 6.0.182.0All 1041 and 1310 worked fine with 5508. Then we upgraded controller to 7.2.110.0.
1041 still worked, but 1310 - no.
Error: Sep 14 14:11:19.248: %LWAPP-5-CHANGED: CAPWAP changed state to DISCOVERY
I have a new 5508 that I am setting up. My first one from scratch.
Interfaces:
managment -> 10.10.10.10 ->dhcp 10.10.10.1
voice -> 10.10.7.1 ->dhcp 10.10.10.1
guest -> 192.168.1.2 ->dhcp 192.168.1.2
Local DHCP (via the 5508) is for the guest network while the management and voice use the Windows DHCP server.
My problem, Voice and guest work fine. I have two SSID's (one 802.1X and the other PSK) that use the management interface that will not get an IP. I have enabled dhcp proxy from the cli on the controller. I tried with the management VLAN tagged and untagged.
My understanding is that for fully WLC 5508 integration with ISE 1.1.2, it needs Version 7.2.103.0. Question is if customer has 5508 with either 7.0.230 or 7.0.98, and ISE 1.1.2, can AAA part work? what part will not work, any potential issue if they don't upgrade 5508 to 7.2.103?
View 2 Replies View RelatedIf we have a mixed environment of 4400 and 5500 controllers will the office extend features still work or will we have to run a seperate wireless domain from the 5508 for the aps that we need office extend on?
View 2 Replies View RelatedI am beginning to get many emails from users who have recently upgraded to OS6 and saying now they cannot connect to our open access wireless network. We use a separate server that users must agree to a user agreement page and they say they get it, but after agreeing, it goes blank and they cannot connect. I am using mostly Cisco 3502's with the 5508 controller using 7.0.112.0 IOS version. Nobody in our IT department has yet to test OS6 yet.
View 9 Replies View RelatedI have implemented a Guest WLAN solution as per the recommended design from Cisco. We have two internal WiSM2 controllers providing services for Internal secure SSIDs. Both these controllers are members of a Mobility and RF management group.
Two 5508 controllers have been installed in our DMZ for resilience and have been placed into a separate Mobility group. All controllers (internal and external) have been linked together as mobility neighbours in a full mesh and a new SSID for Web Guest traffic has been anchored to the controllers in the DMZ.
Web page authentication works perfectly fine, but I cannot for the life of me get the MAC filtering override to work, i.e. if a MAC address is present, do not redirect to the splash page for web auth. I know I can get around this by just creating two separate SSIDs. But the business is used to just having the one SSID for all guest traffic. Is this a known limitation when anchoring SSIDs to controllers in the DMZ ?
I have implemented a Guest WLAN solution as per the recommended design from Cisco. We have two internal WiSM2 controllers providing services for Internal secure SSIDs. Both these controllers are members of a Mobility and RF management group.
Two 5508 controllers have been installed in our DMZ for resilience and have been placed into a separate Mobility group. All controllers (internal and external) have been linked together as mobility neighbours in a full mesh and a new SSID for Web Guest traffic has been anchored to the controllers in the DMZ.
Web page authentication works perfectly fine, but I cannot for the life of me get the MAC filtering override to work, i.e. if a MAC address is present, do not redirect to the splash page for web auth.
I just installed a WLC 5508, running 7.4 code. I can not seem to get the Airplay to work with apple TVs. The iPads and Airplay are on the same wireless network. What can I do to get it to work? Is there any documentation on how to get Airplay to work?
View 1 Replies View RelatedI have a 5508 controller running 7.4.100 and have a WLAN where I have radius configured. On my controller the client machine I'm using appears but the radius authentication doesn't appear to be working. Is there anything on the controller I can do to verify that the request is even being sent to my Microsoft IAS server? The log on the server doesn't show any requests from the controller so my early days guess is the controller isn't actually sending it.
View 3 Replies View RelatedAny deign guide for getting the Braford Network Manager working on a Cisco 5508 controller.
View 1 Replies View Relatedoutput are here
*Mar 1 01:28:21.018: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 1 01:28:21.022: %LWAPP-3-CLIENTERRORLOG: bsnSetCurrentBHRate : fail to set
radio control and data rate
*Mar 1 01:28:21.179: %CDP_PD-2-POWER_LOW: All radios disabled - AC_ADAPTOR (00
00.0000.0000)
*Mar 1 01:28:21.984: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
ernet0, changed state to up
*Mar 1 01:28:34.341: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigne
d DHCP address 192.168.10.244, mask 255.255.255.0, hostname AP2c54.2d0d.c3c4
I have a WLC 5508, AIR-LAP1142N APs and a SSID for students to connect to who bring their own device. I am still testing this and it has not been rolled out but I am running into some serious issues with joining the network. I am authenticating them through a RADIUS server (2008 R2). Problem: many of them cannot connect because they are lacking the certificate.
1. What is a good setup for authentication in a BYOD environment
2. If my setup is good what can I do to allow kids to use their computers on the wireless either without the certificate (which I know is unlikely) or what do I need to have them do to connect. I am hoping it does not involve hard wiring and getting the certificate from the server.
have a Cisco 5508 controller (version 6.0.199.4) that when I enable global multicast mode it will work for an hour or two and then it will kill the network. All internet both wired and wireless, access to server everything dead. I then have to directly connect to the service port and disable the global multicast mode. Then two reasons for enabling it are Docs2Go and LanSchool both require multicast to be enabled. I have it enabled on our wired network and it works OK there. ted.
View 10 Replies View RelatedI just turned on 2 Wirelless LAN Controllers 5508 and I am getting this message on both of them:
Loading primary image (Image not found)
** Unable to read "linux.pri.img" from ide 0:2 **
Loading backup image (Image not found)
** Unable to read "linux.bak.img" from ide 0:2 **
And it is taking me to the BootMenu. I selected option 4 to Clear Configuration and the controller seems to restart the system but I still get the same error. I checked the LEDs status and Sys is Amber and Alarm is OFF which according to the documentation is a System Crash.
I have a WLC5508 with around 70 AP's (LAP1042N) connecting over an MPLS WAN network. WLC and AP's are running 7.4.100
From time to time I have an AP which disassociates from the WLC with the logging beneath. This is a problem with the AP, or is this due to network saturation between the AP and the WLC ?
And if so, should I change the default retransmit values ?
I am planning to upgrade WLC from 7.2.103.0 to 7.2.110.0 due to some bug, but I wanted to know if it is compatible with WCS - 7.0.240.0 and NAC Guest server version 2.1.0, I am made some search but I couldn't get to proper conclusion.
View 8 Replies View RelatedI have a wlc 5508 running version 7.0.116.0 that I need to uppgrade to use the CAP2602I AP. I understand that I need to upgrade it to version 7.0.240 before 7.4.100 to avoid loosing HREAP VLAN mappings, and I have also read that i need to install the FUS image [URL]. In what order should this be done? Shlod the FUS image be installed before new firmware ore after firmware or after 7.0.240 but before 7.4?
View 1 Replies View Relatedsince few weeks i configure my APs on the new WLC5508, and then, the lights are off on the AP, is it normal? however they seems to work fine. What does this light means? FW version: 7.0.22,Is it important?
View 2 Replies View RelatedIn order to enbale HA SSO on our two 5008 WLC's, I plan to upgrade them to 7.3 / 7.4 (currently 7.2)Right now 7.3.112.0 is the latest release. We do not have any 1600 series AP's, which requires 7.4.any reason going for 7.4 directly..or not going for it?
View 5 Replies View RelatedI've just gotten in two new 5508 controllers that have come preinstalled with code version 7.0.116.0. My issue is that when I go to downgrade these to 7.0.98.218 I get an error after the Image version check is passed stating the following:ERROR: Incompatible SW image. ERROR: Please install the Data Payload Encryption licensed image.I've tried multiple times to no avail, I've also gone as far as installing the LDPE image of 7.0.116.0 thinking it needed that before downgrading but it still didn't work.
View 5 Replies View RelatedI am planing to upgrade 2 of my 5508 series WLC from 7.0.116 to version 7.2.111.3. I understand that legacy AP's are no longer supported. Is the upgrade straight-forward just like other code upgrades?
View 19 Replies View RelatedWe have two WLC 5508 and i want to know if it is possible to get an accesspoint ( eg. 1131) to connect to a controller over internet, without VPN-connection. I have read documents about HREAP but that needs, if I understands it correcly, a VPN tunnel or a dedicated WAN-link. I know that ARUBA has this function, but I cant find it with CISCO.
View 2 Replies View RelatedI am very interested in the new 7.3 feature HA.Also I can read that it is recommended to connect the two WLCs directly. How to use a L2-VLAN between them, in fact to bridge a distance between two data centres?
View 3 Replies View RelatedI have a Controller 5508, CAP 3501E.I have a problem, all client who connect in 802.11n connect only in Bn and not in Gn.When I diseable the n, the same client connect in 802.11g.
View 4 Replies View RelatedWLC 5508 product version: 6.0.199.4
AP: AIR-LAP1142N-S-K9
The connection can reach up to 144Mbps when using WPA2 with AES (Layer 2 security), WMM allowed (QOS). But when I use 802.1X (Layer 2 security), can only reach up to 54Mbps. Any special setting when using 802.1X to reach 144Mbps? Or do I need to upgrade?
We have WLC 5508 installed in our premises to which 80 1242AG APs are connected. Few days ago, all the APs all of a sudden disconnected from Controller and rejoined after 12 to 15 hours. when we try to investigate, there was regulatory domain conflict occur. But we didn't understand that those APs were configured with the same config before. How come they got diconnected and now rejoined without changing any configration in WLC?
Logs for both AP and WLC has been attahched here.
I've got a deployment of 1142N APs using a pair of 5508 controllers running 7.3.101.0. We're in the United States and the country is set to "US". I've added the UNII-2 channels to Auto-RF on the controllers via "config advanced 802.11a channel add 100" and so forth. According to the output of "
show advanced 802.11a channel", I've enabled every 5 GHz channel that's legal for use in the US:
802.11a 5 GHz Auto-RF Channel List
Allowed Channel List......................... 36,40,44,48,52,56,60,64,100, 104,108,112,116,132,136,140, 149,153,157,161,165
My confusion comes because the automatic assignment of 5 GHz channels is heavily biased toward just a few of them, with most of the available space being ignored. Here are the 5 GHz channel assignments from a large, single-story building with 31 APs:
(qty 2) 36
(qty 6) 40
(qty 5) 44
[ code].....
A total of nine channels are used (two of them only once) while twelve other channels are ignored completely. Many of these APs are close enough to hear one another, so assigning seven of them to ch. 48 makes no sense.
Looking at my campus as a whole, I've got numerous APs using channels 36, 40, 44, 48, 149, 153, 157, 161, and 165. I've got at least one each using channels 52, 56, 60, 64, 112, 116, and 132. Nothing at all is on 100, 104, 108, 136, and 140. I am using 20 MHz wide channels, between, so all are independent.
Can anyone shed light on A) why my distribution is so heavily skewed toward the first nine channels, and B) how I can learn whether certain channels are being avoided due to the presence of radar, etc, on the frequency? I'd like to take full advantage of 5 GHz by having as little channel re-use as possible.
I have a pair of WLC 5508's. I am installing 7.4.100 on them and they are properly licensed. I am looking to preconfigure these and ship them to our site. My questions are:
1) How much configuration do I need to setup on the secondary controller (ie. same SSID, interaces, ap group, etc...)?
2) Do I need to configure Mobility groups for this HA Cluster?
I have a question on Wireless AP's. We have 2 controllers, a 5508 that supports 50 AP's and a 4402 that supports 25 AP's. I have mutable AP"s but the one that I'm having a problem with is an AIR-CAP3502I-A-K9.
On the 4402 I'm running IOS AIR WLC4400-K9-7-0-230-0
On the 5508 I'm running IOS AIR-CT5500-K9-7-2-103-0
My problem is when i move a AP from the 5508 to the 4402 everything seems to work, the new IOS is downloaded to the AP and it restarts and shows up in the Wireless tab and users can hook up through it to the controller and all seems to work. The problem is that the LED light on the AO goes out once the load is finished and does not come back on. If I put it back toe the 5508, after it reloads the IOS the light comes back on and works, green or blue as the case may be. If i move it back to the 4402 it doesn't work after the load is finished.
Today my wlc 5508 crash. after trying to get access via sp. It doesn't responds. so i rebooted. in the sh tech i saw this message which i guess indicates the RC of the failure.
Start Cisco Crash Handler Serv
Sys Name: usa-5354-wlc-02
Model: AIR-CT5508-K9
Version: 7.0.98.0
[code]...
Analysis of Failure: Software was stopped by the reaper for the following reason:
Reaper Reset: Task "locpRxServerTask" missed software watchdog
I have a 5508 deployed, what I'm trying to do is configure it so that it can be accessed with AD credentials, I'm not talking about accessing the wifi network, I'm talking about logging onto the controller itself for management purposes. We havea few people our team, and it would be alot easier if each of us could log into the controller with our own AD logins. Is there a link that can assist me in accomplishing this, I haven't been able to find one.
View 2 Replies View Related