Cisco Wireless :: WLC 2106 / Download Vendor Device Certificate?
Sep 26, 2011
I’m trying to configure EAP-Fast following the guide [URL].But when I try to download the certificate, I receive the follow message: “Error installing certificate.”At logs I see:
*TransferTask: Sep 27 14:00:09.479: %UPDATE-3-CERT_INST_FAIL: Failed to install Webauth certificate. rc = 1
*TransferTask: Sep 27 14:00:09.479: %SSHPM-3-KEYED_PEM_DECODE_FAILED: Cannot PEM decode private key
- Remembering I’m doing Device Certificate.
My environment is:
WLC 2106 Windows 2003 with AD and CA When I try to use line commands I can’t too.
View 2 Replies
ADVERTISEMENT
Jun 6, 2013
I have been having problems with a 2106 WLC which seems to have developed a fault. I cannot console into the device (although I can console into the ap1131ag showing no fault with the RJ45 - 9 Pin) and the device is no longer showing up in any of the possible I.P ranges.
Its showing a power light and a status light on the front panel, the Ethernet ports light up like a Christmas tree when a device is connected and the power supply is putting out a solid 47.7v.
Has anyone experienced anything like this before and can anyone suggest anyway of breathing life back into it?
View 5 Replies
View Related
Jan 2, 2013
I'm trying to connect to my wireless network using an android device with certificate but with no success.I'm using a WLC4402 7.0.235.3 SSID Security (WPA2 Auth802.1X + CCKM) [code]
View 7 Replies
View Related
Oct 23, 2012
Having troubles loading a certificate in System security/802.1X Supplicant. I tried to upload *.car and *.msc certificates, but the device aborted the upload at each attempt.
View 2 Replies
View Related
Nov 18, 2012
Region : Italy
Model : TD-W8960N
Hardware Version : V4
Firmware Version : 67406
ISP :
I have problem on router td-w8960n v4 internet speed download is limited a 4 mb in device android e ios wifi connected for test i use application speedtest.net on ipad 3 and samsung galaxy s
View 2 Replies
View Related
Dec 9, 2012
We are doing a study on our public WiFi to identfy client connections based on wireless Vendor. about 40-50% of the clients wireless Vendors are "unknown". Is there a way to update the list of Vendor mac-addresses in WCS?
View 5 Replies
View Related
Nov 25, 2012
I have a problem downloading software and device updates for LMS 4.0.1.
In the psu.log I get the following:
[ Mon Nov 26 12:51:51 CET 2012 ] INFO [SwUpdateAction : getUpdatesFromCCO] : Validated Cisco.com credentials..
[ Mon Nov 26 12:51:51 CET 2012 ] INFO [SecurityHandler : getCSProxyHost] : No
[Code].....
View 2 Replies
View Related
Jun 30, 2012
Dell Inspiron n5110 Bluetooth peripheral device driver for download?
View 1 Replies
View Related
Jan 30, 2012
There is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example:
%ASA-3-717009: Certificate validation failed. Certificate date is out-of-range, serial number: (...)
I would like to know if there is an opportunity to view user's certificate expiry date beforehand, say, 3 days before?
View 3 Replies
View Related
Oct 19, 2012
i am working on ISE 1.1.1, surprisingly i couldn't found certificate authority certifiate at certificate operation anymore.
would it be the change on GUI? So now where i can import the CA certificate to ISE?
View 5 Replies
View Related
Jun 20, 2012
Our ASA is a 5580 version 8.1(2) and is the L2L VPN peer for a handful of remote offices including a L2L VPN with a vendor who will provide a service for these remote offices. I have two questions/issues:We will need to provide this vendor access to the remote office network(s) only on port 9100 (printing to specific printers at these offices). I know there is an issue with L2L VPNs ability to see each other but if there is a global command allowing all to see each other that would be bad as we have others and don’t want all to see each other.The remote offices are using CIDR 172.20.0.0/16 so each one is assigned for example 172.20.3 the next office is 172.20.4 and so on. For the crypto map access list for this vendor can we use 172.20.0.0/16 or do we need to specify each individual network?
View 3 Replies
View Related
Apr 20, 2010
I have been trying to upgrade my WLC 2106, but it is stuck at rommon/grub mode.The steps are as follows
rommon #5> tftpdnldROMMON Variable Settings: ADDRESS=192.168.100.1 SERVER=192.168.100.10 GATEWAY=192.168.100.10 PORT=Ethernet0/0 VLAN=untagged IMAGE=AIR-WLC2100-K9-6-0-196-0.aes CONFIG=
[Code].....
View 4 Replies
View Related
Oct 26, 2011
I have cisco3750 (core), 3550,3548, 2960, HP Procurve 2510 series, Extreme e250 series swiches running in my network. Now all are running by default. How can I deploy rstp here? Or which is the best loopdetection protocol is best here ? I have aroung 40 vlans . (not looking for PVST )
View 9 Replies
View Related
Oct 4, 2011
Just finishing up a small install of a 5508 controller and WCS.Approx 30 AP's across 2 buildings.2 WLANS - 1 prod wpa2 and 1 guest which is completely open to internet only.Our security group is asking if there is a way to determine who is accessing the Prod WLAN. Currently it is setup to work with eap and the users AD account which is working well.I noticed under the client tab in WCS that there is a Vendor name and it shows me intel and even RIM when someone with their Blackberry is connected. BUT when we connect via an IPAD it show "unknown" as vendor name. Is there a way to get the IPAD to register under the vendor name ?
View 1 Replies
View Related
Apr 2, 2012
I am trying to give a vendor VPN access so that they can remotely monitor and diagnose their installed heating and cooling equipment. I dont know where to start and I apologize in advance for my ignorance. I am technically savvy but i have no Cisco knowledge base.
It is a PIX 506e firewall with PIX v6.3.
View 1 Replies
View Related
Mar 22, 2011
how I can find out what version of SSH that a cisco 2106 wireless LAN controller is using?Is there a CLI I can type to figure that out or do they only support one version?
View 1 Replies
View Related
Apr 10, 2012
We recently purchased a bundle of 3 1042N AP's with a 2106 WLC. I am able to get the controller on the network and am able to manage it through the https web gui. I am now trying to add one of the AP's to the controller and am getting an infinite loop on the AP upon bootup. I tried looking up the solution but could not find a good article that pertained to the problem I was having. One thing I did notice is the time on the AP is way offset, but when I do a clock set to change it to the actual date it doesnt stick on the next reload.
Here is the output:
using ÿÿÿÿ ddr static values from serial eeprom ddr init done
Running Normal Memtest...
Passed.
IOS Bootloader - Starting system.
FLASH CHIP: Numonyx P33
[Code].....
View 10 Replies
View Related
Jun 19, 2011
I hava installed a WLC 2106 with 4 1252 Aps. Some laptops has dual radio wireless card, but others has just 2.4 Ghz card.
I have one SSID with WPA2/AES and 802.11X authentication.
With the laptops with dual radio the speed is in 300 Mpbs, but when is single 2.4 radio the max speed is 70Mpbs
If i use a 1252 ap with autonomous IOS, SSID with WPA2-PSK/AES this laptops single in 2.4 works to 144 Mbps
is there a knowed issue about 802.11x in 2.4 Ghz or i need to make a different configuration to can work in 2.4 with a speed of 144 Mbps?
View 2 Replies
View Related
Jun 9, 2012
I got my final assignment from school, and my teacher asked me to configure 2 Access Points (1200 series) directly on a Wireless Controler (Cisco 2106). I can't ask my teacher for any questions, cause he doesn't know how to configure it also, THAT's why he's asking me to do it.I've learned a lot of things about the default static interfaces (the "management" and "ap_manager" interface), but i can't seem to fully understand how to configure it.I want to use the Internal DHCP server of the WLC. How I can get those 2 Access Points working on the WLC. I only seem to get DHCP issues.
This is what i've done:
- Leave the configuration of the "management" and the "ap_manager" default (172.16.1.30 and 172.16.1.30). Bound to port 1
- Made a new interface "AP1" with IP-Address 10.0.0.10 (/24), default gateway 10.0.0.1. Primary DHCP server: 172.167.1.30
- Made a new interface "AP2" with IP-Address 192.168.1.10 (/24), default gateway 192.168.1.1. Primary DHCP server: 172.167.1.30
- Made 2 DHCP scopes within the 192.168.1.0 and 10.0.0.0 networks.
For some reason, when i boot up both AP's, the won't get any DHCP address.
View 13 Replies
View Related
Mar 18, 2013
I had a 2106 running 4.x software. It was upgraded to 7.x but will not read the config. How to downgrade the software?
View 4 Replies
View Related
Dec 2, 2012
We have a 2106 that was configured by a former employee. No one left in the company is qualified to configure it. The wireless guest access used to work fine. We'd configure a guest user account. They would connect to the guest wireless, open a web browser and login. For some reason now there is no prompt for login. People can connect to it and get an IP address, but that's it. No login prompt or anything else from there.User Login Policies was set to 0 and I put it to 8. That didn't do anything. Under Web Auth > Web Login Page it's set to Internal (Default).
View 5 Replies
View Related
Jul 7, 2011
I setup a mini wireless LAN network lab with a not for resale 2106 wireless lan controller and a sales air-lap1242ag access point. I do not have a DHCP and DNS in my lab environment. I have configured the WLC with the basic configuration using the CLI wizard, i also configured the WLC as a DHCP server for clients that will be connecting to the APs associated to the controller.
I powered up the AP and connect the ethernet port directly to the controller, the controller issued an IP address to the AP, the AP downloaded a new operating system from the controller but failed to join the controller.
I check both debug message on the controller console and the trap messages on the controller's GUI and it say the AP could not download a configuration from the controller and it is beacuse of invalid license. Below is the trap message:
Configuration Phase Statistics Requests ReceivedResponses SentUnsuccessful Request ProcessedReason For Last Unsuccessful AttemptLast Successful Attempt TimeLast Unsuccessful Attempt TimeLast Error SummaryLast AP Message Decryption FailureLast AP Connection FailureLast Error Occurred Last Error Occurred ReasonLast Join Error Timestamp
Also, I tried to log into the GUI of the AP using the both the username and password ''Cisco'' but I cannot get into the device. I can only get in through the CLI. In the CLI, almost all the commands I enter gives an error the it is disabled. I don't know what to do any more, I want to know if the access point is faulty or i am not doing the right thing.
View 4 Replies
View Related
Mar 4, 2010
I have a WLC 2106 and 1242AG.it's a hotspot configuration.So in WLC, under controller tab, i have set my ap-manager ip, my management ip, my virtual ip (1.1.1.1) and my hotspot network range ip.I set also a DHCP range for the hotspot network.
In Wlans tab, i set my hotspot wlan, with no layer 2 security and for layer 3, i set none for layer 3 security and i use web policy authentication.I use local authentication and i created under security menu, under AAA tab, 3 local net users.
From pc number 1, i get ip from dhcp, and i have authentication web page, authentication is ok and i can surf on web.From pc number2, when user 1 from pc 1 is connected, i get ip from dhcp but i have not the authentication web page, i have not DNS resolution.when i try https:1.1.1.1/login.html, i have no answer.
And when user 1 is de-authenticated, the user 2 can surf on web.So only one user can surf at the same time. not good for a Hotspot.
View 12 Replies
View Related
Jan 21, 2012
I am trying to get one AP to join the 2106 controller, it did join once then never again!! Now all I get is:
*Jan 22 11:16:22.088: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[Code]....
View 31 Replies
View Related
Oct 23, 2011
I have a problem with Cisco WLC 2106 (SW: 7.0.98.0) and LAP1262. The client roams to new AP, associates with the new AP and authentication (WPA2 with EAP-TLS) runs fine until WPA2 key exchange.
The first WPA2-Key-paket from AP (1 / 4) is sent twice. On a closer look at those packets with Wire shark, i've found out the first is encapsulated into a 11n-frame (A-MSDU). The resent frame isn't. This figure shows the first WPA-Key-packet:
The next figure shows the 2nd key-packet, without 11n-encapsulation: The problem, that occurs a very long roaming-time with about 5 seconds. As you can see on second figure, the second wpa-key is sent 5 seconds after the first.
Some details:
Client: Tablet PC with Intel 6230 agn
Controller: Cisco WLC 2106
AP: LAP 1262
Controller SW: 7.0.98.0
Encryption: WPA2-AES
Authentication: EAP-TLS
This problem occurs just on 5-GHz interface with 40 MHz channel bandwidth.
View 4 Replies
View Related
Feb 3, 2013
We have a 7609 in production network and I am trying to find out the SFP vendor plugged in module WS-X6724-SFP."show inventory raw" gives me the SN but not the vendor name. "show hw-module subslot 1/1" shows The indicated slot/subslot number is empty. Any commands which can show the SFP vendor?
View 1 Replies
View Related
Dec 25, 2012
We have a L2L VPN with a vendor and our outbound traffic (our local network is 192.168.0.0) NATs over one of our public IP addresses x.x.x.164 to their public IP address 128.x.x.x. In the beginning all our traffic was outbound (port 23) to the vendor and now we need to allow inbound from the vendor to specific 192.168 addresses on our network using port 9100. I’m uncertain as to what I should do to allow their inbound traffic to these IP addresses since we are NATing our entire network over one IP address. Note, the .164 public IP is also used to NAT to other vendors we have L2L VPN with. The VPN terminates to our ASA 5580 version 8.2.
View 5 Replies
View Related
Feb 21, 2005
I'm using Cisco ACS 3.3 for RADIUS. How to do I make Vendor-Specific attribute available? (Attribute number 26, format: OctetString) The online help makes reference to it, but does not tell you how to make it available.
View 9 Replies
View Related
Oct 13, 2011
after an unplanned power outage the WLAN in our office has stopped routing. Clients can associate and get an IP address from the DHCP server on the controller but cannot get past the controller. A PC on the LAN can ping the default gateway of the SSID (dynamic interface) but cannot ping the client. Attached is a diagram of the setup. I am trying to find out how to add a default/static route via the L3 switch that the controller is connected to but am unable to do so either through the CLI or GUI. The controller (AIR-WLC2106-K9) is operating on ver 5.2.157.0.
View 5 Replies
View Related
Jul 6, 2011
I have a very basic WLAN setup with a 2106 controller and 3 (will be 4) 1140 APs.As part of securing the network I have been testing the rouge detection. The system has no trouble detecting and shutting down honeypots. I would like to also automatically shut down Rouge on Wire points. The system sees my test AP just fine. And I have it completely open (no security). But the system never detects that the rouge is on our network so no action is taken. I can connect just fine to the test AP with no encription using DHCP and communicate with everything on the network just fine.Is there some setting I am missing that allows the APs to detect that an AP is on wire?
View 2 Replies
View Related
Sep 10, 2012
Can I configure a mobility groups between 2106 Wireless LAN Controller and 5500 Wireless LAN Controllers?
View 8 Replies
View Related
Oct 17, 2011
I have a WLC 2106 with 3 APs. Everything works and users can connect, but the throughput seem to be lower than it should (it is around 8Mbps and should be around 30-50Mbps). And all speed and duplex has been accounted for.
I am trying to understand the stats that I see for the 802.11 MAC counters I under the Wireless APs.on the controller.
That screenshot is attached. I see high numbers for the following areas:
- Tx Failed Count
- RTS Failure Count
- FCS Error Count
what these mean and what could cause this? Maybe these are normal and not a concern.
View 1 Replies
View Related
Oct 15, 2008
basic question regarding the switchports on the rear of the 2106 controller. How do I configure them for use? I'm using port 1 as my uplink to a trunk port on an ASA and my network traffic to the management interface and guest vlans is all working as expected, but when I plug anything into any of the other ports, they get no addresses from my dhcp server (the ASA). I see nowhere to configure which vlan to tie the ports to or anything. I suppose I'm more used to a catalyst or ASA where I can just pick the ports and vlans (or trunks) I want to attach them to. [code] Again, all of the existing network functionality (private and guest network) is all functioning fine so I'm pretty confident I have the above configured correctly, I just cant make any progress on the WLC ports 2 - 8.
View 13 Replies
View Related
