Cisco Wireless :: WLC 5508 - Get Clients Connecting On Network 192.168.3.0/24?
Aug 6, 2012
question in regards to the deployment of a new WLC and new LAPs,I have configured and connected a 5508 WLC and 3500 series LAP.LAG is enabled in the WLC and successfully connected to the neighboring switch (using etherchannel) and to the network.
The port-channel port is set to trunk mode obviously and certain vlan ids are currently allowed (3-5)
The management interface has this IP address 192.168.5.250/24
I created a WLAN with WLAN ID 3, Interface set to Management and say SSID test1
I have connected a new LAP to the network, which switchport interface is set to access mode and assigned with vlan id 3. The LAP is able to join the WLC successfully with an IP address, such as, 192.168.3.100 (assigned via DHCP).
When I try connecting a mobile client to the wireless LAN, it can successfully detect and connect to the WLAN, created in the WLC (test1) however it gets an IP address by DHCP, in the 192.168.5.0/24 network, which is the IP range of the management interface's IP address.
What can I do to get the clients connecting on network 192.168.3.0/24? I thought this would be the case since I allocated the WLAN Id of 3 in the WLAN test1 configuration and since the LAP switchport is set to access mode with vlan ID 3.
View 3 Replies
ADVERTISEMENT
Aug 26, 2012
I'm working on migrating autonomous WAPs to lightweight mode in a WLC 5508. Some of the older WAPs are being decommissioned at the same time.
One issue I have found is that after replacing an old WAP in autonomous mode with a new WAP (3502); some clients near the coverage of this new LWAPP are now connecting to another WAP in autonomous mode that has not been converted or replaced yet; but that is located quite far away from where these clients are, actually two floors down. Users on these clients have reported wifi dropouts, which is obvious due to the distance where the old WAP is. A workaround that seems to work is removing the wifi profiles in the client machines and recreating them again, which is not a good solution for all of the wifi profiles we have in place. At this point of time we still need to have the older WAPs until they are all replaced.
How can I get clients connecting to a LWAPP that is closer to their location? I'm wondering what causes those clients to look for an existing older WAP rather than connecting to the new LWAPP, which is broadcasting the same SSID closer to where they aree. Bear in mind that the new LWAPP is working fine and has live sessions working just fine.
View 5 Replies
View Related
Jun 12, 2012
I have a 5508 WLC and 40+ LAP1142N APs spread across 19 locations that allows staff to connect to our private network via wireless. I recently deployed about 40 new laptops all identical make and model HP ProBook 4530's and all have the same client setup for the wireless. Out of those 40 laptops I have 4 that will not connect to the private network. However, these same laptops will connect to my public, open wireless network without issue. In addition to the 4 that will not connect all the others will prompt twice for network authentication.Now, I have about 10 other laptops that are not the HP model and all connect without issue and without dual propt. I don't think this is a wireless network issue but could be some type of issue with this model of laptop.
View 8 Replies
View Related
Nov 23, 2011
I have configured 5508 with multiple APs but clients on the internal SSID aren't getting an IP address. I have the IP helper address configured and I have also disabled DHCP proxy on the controller.
I get the following from the client debug, I don't know what the below mac address is, it's not one my APs or the clients, I am not seeing this mac address on the controller at all but it shows up in the debug.
type = Airespace AP - Learn IP address
on AP 6c:9c:ed:87:23:c0
*Dot1x_NW_MsgTask_0: Nov 25 16:14:17.579: 08:11:96:20:94:28 Entering Backend
[Code].....
View 5 Replies
View Related
Jan 22, 2012
I'm having a problem with my clients dropping the network connection constantly throughout the campus. I am using a Cisco 5508 controller and the APs are LAP1141N. At first I thought it was a roaming issue but I tested with only 1 AP and the problem persisted, I can tell you that we don't have interference problems and that our old linksys APs used to work without flaws.
View 1 Replies
View Related
May 1, 2013
I have a 5508 WLC with CAP3502i APs connected to it. I upgreaded the code to the newest 7.2.115.1 code. I am having trouble with laptops that are not physically moving but are moving their connection from AP to AP in the same area. This is in a school and causing a problem with a testing program they are using becuse they drop 2 or 3 pings in the process. I do have the area heavily saturated with AP but that is because of the amount of clients we have connecting to them. There is 8 classrooms in a hallway with 24 laptops in each classroom. Each classroom has an 3502i ap in it. The laptop can be connected to an AP with great signal and move to another AP that still has a good signal but not as great. I don't understand why if I get 4 bars and connected at 144mps it would move to a new AP. These are Lenovo laptos and i have updated their wireless card drivers and set the roaming agressiviness to low but it still happens.
View 3 Replies
View Related
Nov 8, 2012
I have a WLC 5508 with half a dozen LAPs (AIR-CAP3502I-E-K9).They have been working but sometimes clients detect conectivity problems with the wlan.Here is the message log I can obtain from the controller:
View 1 Replies
View Related
Jan 22, 2013
I have a WLC 5508 in my datacenter, and 1142s configured with FlexConnect at a remote site.Two issues:Some APs 'die' from time to time where I cannot ping them anymore and they do not service any clients. I can reset them from the WLC after which they work again. I have some clients in the building (same area) who lose connectivity from time to time and are unable to reconnect to the wireless. I am seeing errors that the gateway cannot be found or there is not a valid IP. restarting the AP closest to the clients fixes the issue. I have replaced the AP and connected to a different port on the switch.
View 6 Replies
View Related
Apr 14, 2013
We have deployed a WLC 5508 w/ SW version 6.0.199.4, 1142 AP's & open authentication w/ MAC filtering. Clients are randomly getting dropped with "Limited Access" shown in Win 7. In this state, the client machine is unable to ping the gateway and sometimes lose their DHCP assigned IP as well. A manual disconnect/re-connect to the SSID is required everytime.I ran a debug on one the clients stuck in the "Limited Access" state (debug client xx:xx:xx:xx):
*Apr 15 16:59:23.205: e0:91:53:60:1f:e4 Adding mobile on LWAPP AP 3c:ce:73:c5:1e:b0(0)
*Apr 15 16:59:23.205: e0:91:53:60:1f:e4 Scheduling deletion of Mobile Station: (callerId: 23) in 5 seconds
*Apr 15 16:59:23.205: e0:91:53:60:1f:e4 apfProcessProbeReq (apf_80211.c:4722) Changing state for mobile e0:91:53:60:1f:e4 on AP 3c:ce:73:c5:1e:b0 from Idle to Probe
[code]....
View 7 Replies
View Related
May 16, 2012
We got a question about our WLC 5508 single controller deployment with 14 access points without a VLAN configuration.
When our clients connect to the wifi, we cannot see any ip address of them in the client details page. It shows everytime the ip address 0.0.0.0. The clients are configured with a static ip.
View 8 Replies
View Related
Apr 16, 2013
We have a Cisco 5508 controller with 1142 LWAP's running version 7.4.100.We have several Dell laptops which will not associate to the access point UNLESS you stand directly underneath it, power off the wireless, turn it back on then eventually the PC will associate to the AP.Once the PC is associated to the AP and user is authenticated then all is well.
Have tried updating the wireless drivers downloaded from both Dell or INTEL. This does not happen to all of our laptops. However, without making any changes to the WLC or the PC's, we have begun to expirence this problem with laptop which previously did not have this issue.
View 4 Replies
View Related
Mar 18, 2013
For WLC 5508 software version 7.0.235.0, which command is needed to get the WLC send syslog messages everytime a wireless client associate and desassociate?
View 2 Replies
View Related
Jan 15, 2013
Just inserted a new 5508 WLC into the network. We current have 3 4404 WLCs, and there was a need to duplicate, as much as possible, the configurations on the 4404s, and the design. The 5508 came online as expected. We moved a few access points over to it. The APs got the correct address range. The clients are expected to get addresses in the same scope range as the APs. However, the clients are receiving addresses in the management IP scope.I know there are two "not a good way to do it" in here. Why is the management address range in the DHCP scope, and why are the clients using the same scope as the APs. We are going to change that. For now, the AP and client in the same range has been going on since we rolled out wireless in 2006.The 8 ports on the 5508 are configured for LAG. There is no dedicated port for management. They tell me not to do that on a 5508.
View 8 Replies
View Related
Jul 10, 2011
which is the maximum number of simultaneous wired guest clients on a 5508? And in a 2112 controller?
Wired clients count as wireless clients??
What about anchoring limitations, what is the effect of wired guest clients on the anchor controller?
View 2 Replies
View Related
Jun 18, 2011
We have a controlled setup comprising of a 4402 WLC in our Data Centre and 1242AG LWAPs in our branches.The Wireless works well with a mixture of locally switched (h-reap) and centrally switched WLANs.I have a problem where Android devices don't seem to function as they should.I have been using an Android phone (HTC Desire, currently running 2.3.4 OS, but has been a persistant issue since 2.1) and it connects to my home wireless (and others) fine, but when connecting to the Wireless LAN at the office, it connects fine and gets assigned an IP address, but NO data flows. None, like there is no connection at all. I have just been using it on 3G. I figured it might have just been an issue with the hardware, so didn't bother too much.I have just purchase a new tablet (ASUS Transformer, Currently running 3.1 OS) and this does the same thing.I have tried publishing a new WLAN and have tried all types of encryption and authentication al the way down to open and still, no data flow. I have tried statically setting the IP details and still nothing.Interestingly, When I attended the last Cisco Live conference in Melbourne this year, I had my phone and it displayed the same behaviour on the Cisco supplied wireless, BUT, there was a second IPv6 enabled, when connected to that everything worked fine.
View 2 Replies
View Related
Jun 18, 2012
I have a ASA5505 and it has a vpn set up. The VPN user connects using the Cisco VPN client. They can connect fine (the get an ip address from the ASA), but they can't ping the asa or any clients on the network. Here is the running config:
Result of the command: "show running-config"
: Saved
:
ASA Version 7.2(4)
!
hostname ASA
domain-name default.domain.invalid
[code].....
what I need to add to get the vpn client to be able to ping the router and clients?
View 3 Replies
View Related
Sep 22, 2011
I recently purchased a E1550 that works fine until I tried adding an external USB HDD for storage. The drive is a Western Digital 500MB drive I used to use for backups. Had no issues setting up the share and was able to access it just fine. But a few hours after hooking it up, my wireless devices could no longer connect and I could not access the admin page to see what was wrong. The E1550 was still pingable and my wired devices could still access sites through the router. Cycling power to the router did not work. What did get things working again was removing the USB drive (which killed all wired connections as well) and then cycling power. The E1550 was fine after that.
View 2 Replies
View Related
Jun 22, 2011
We have 2 WLCs, 4402 (main) and 5508 (backup). While we turn on both devices, 4402 have 10 APs, and 5508 have 10 APs as well. Total connected clients will be 120+, but when we turn off either 1 wlc, let's say only 4402 is power on, total 20 APs joined, but the total client will be 90+, never reach over 100 clients. The same happened on 5508, is there any maximum associated connection on WLC?
View 1 Replies
View Related
Nov 17, 2011
Need implementation of an OID to view the number of connected clients per Access-Point? I am using a 5508 WLC.
View 4 Replies
View Related
May 2, 2012
I am having problems connecting an 891w to a WLC, is it possible to have to separate vlans, one for the Lan ports and another for the AP module.
I do not want the AP part of the 891w in autonomous mode. The WAN port of the router will be connected to a DSL type service.
Is there a guide or something to get a 891W to connect to the WLC?
I would like to have users on a data vlan (vlan1) connecting to the network like a normal router, then the AP module to connect to the WLC via a different IP probably vlan 2
On the WLC itself i do not see any attempts in the logging.
View 10 Replies
View Related
Feb 14, 2011
I have a network setup as live-ssid. It is using the Interface for VLAN 14. All APs under the default-group AP Group obviously allows clients to DHCP an address from VLAN 14. This is working fine.
I created a new AP Group called 3rd Floor. This has the live-ssid setup, but instead of using the Interface for VLAN 14 it is setup for the Interface for VLAN 50. I have all the APs on this floor moved to the 3rd Floor AP Group.
The problem is that 95% of the clients on 3rd Floor are still picking up DHCP addresses from VLAN 14. I checked and all the clients are connected to the APs on the 3rd Floor. Only 4 Clients are getting an address from VLAN 50.
I'm not sure if something is configured wrong or not since some devices pick up the new VLAN and the rest don't. I've manually reboot the APs on the 3rd floor to see if that would fix it.
View 2 Replies
View Related
Mar 29, 2012
I would like to share one problem with WLC 5508 . we added a new virtual interface on the WLC. One new SSID is associated with this interface.
We created a ACL for this interface to restrict the access via WIFI to certian services. It´s not correct that everything works fine because the change were not applied. [code]
The changes of the ACL are applied on the fly, but for reason we don´t know, the clients don´t get a DHCP IP-Address (after changing the ACL) until the Controller is rebooted.
View 2 Replies
View Related
Feb 21, 2012
I work on a college campus that has thousands of students a day accessing our wireless network. We have broadcast SSID that the students use to connect to the internet. The students usually have more than one WiFi enable device on them and their laptops and phones both take an IP address, but they are only using the laptop to authenticate while the phone is associted, but not authenticated. In the meantime, I have several thousand IPs being used by their phones/iPods etc. Is there a way to revoke the DHCP lease if the client does not authenticate within a specified time frame (i.e. 10 minutes)?
View 3 Replies
View Related
Aug 6, 2012
I have a wlc 5508 and I'd like to setup a network for visitors. They will connect to the WLAN, enter a password and then automatically get redirected to an external website. I understand the wlc 5508 supports this but I'm struggling to find out how to set this up I assume this can be done without having to customise webauth bundles?
View 2 Replies
View Related
Nov 18, 2012
recently we have purchased Reflection - an AirPlay mirroring software. Basically install Reflection in the laptop and you can view the screen of the iPad or iPhone via wireless network. we have tested in home wireless network no problem, but when connect to the cisco network, the iPad didn't recognize the REFLECTION installed in the laptop.
we are running WLC 5508, WLAP AP-1331AG, we can ping from laptop to the iPad laptop and ipad can access network without any issue. there is no any application port has been blocked between the client via wifi extra details for REFLECTION: [URL]
View 4 Replies
View Related
Jun 2, 2013
We have a 5508 with 7.4.100.0 vor Internal APs and OEAPs. till now every thing is ok. Now we have to connect an AP (local) in a remote office, connected to the WLC by a VPN Tunnel. The problem is that the AP in the remote office uses the NAT Address to connect to the WLC, so the traffic goes over the Internet, not trough the VPN Tunnel. On the controller I have the following setting:
AP Discovery - NAT IP Only ................. Disabled
On the AP:
AP Link Latency.................................. Disabled
How to force the AP to use the internal IP Address of the WLC?
View 7 Replies
View Related
Apr 19, 2012
i don't know any thing about connecting clients to servers & it's methods & requirements
View 7 Replies
View Related
Sep 12, 2012
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
View 1 Replies
View Related
Jan 22, 2013
I have a strange behavior between a WLC 5508 (version 7.0.116.0) and NEXUS7010.
WLC
The WLC is configured in DHCP Bridging Mode (it sends DHCP requests without change)
Nexus
The VLAN interface is configured as follows
interface Vlan501
ip access-group acl-int-vlan501-in-1 in
no ip redirects
ip address 10.12.56.4/21
ip ospf network broadcast
ip router ospf 100 area 10.23.0.0
hsrp 51
Clients can not obtain an IP address intermittently. If I deactivates the ACL when the problem appears(when the client can not obtain an IP@) the probleme is resolved
Note: Before the WLC was connected to Catalyst 6500 and worked properly for 2 years (with same configuration)
I saw this note about differences between DHCP relay on the NEXUS7000/NXOS an Ip helper one the 6500/IOS URL. Do you think the problem may come from the DHCP relay or ACL on the NEXUS.
View 2 Replies
View Related
Mar 26, 2013
We are deploying BYOD with Cisco ISE 1.1.2 and WLC (5508) using 802.1x authentication.Windows clients cannot connect to 802.1x SSID with the following error on ISE:Authentication failed : 12321 PEAP failed SSL/TLS handshake because the client rejected the ISE local-certificate
The client doesn't have preconfigured wifi profile or root certificate installed.The concept of BYOD suppose that you can connect your device without any installed certificates and preconfigured wifi-profiles.
The problem is that Windows 7 supplicant does not send TLS alert in pop up window, when connecting to 802.1x SSID.If this alert is seen, than you can accept it and proceed the connection. After that you will be asked to install ROOT-cert, get your own cert and etc.So, the question is: how to make the windows supplicant to show the pop-up window with TLS alert?
p.s. the attached file shows the example of pop up TLS-alert window
View 6 Replies
View Related
Feb 8, 2011
I have setup an AnyConnect Connection Profile on my ASA 5520.
We have some remote support software which the helpdesk use to connect to PC's remotley and torubleshoot.
I cannot connect to this software using the assigned IP address of the client even though it works fine with our old Nortel VPN.
If I hit the IP address the packet gets all the way to the ASA and seems to disappear.
I have setup an IP v4 access list on the connection profile which allows any/any access b ut still no joy.
View 1 Replies
View Related
Feb 1, 2011
I have 4 desktops cat5 to Dlink DIR 615 router. All work fine. Any wireless clients, laptop or netbooks, see the desktop computers for a while then disconnect somehow. All machines can see the Internet through the router at all times. The desktops disappear from the laptop/netbooks but the wireless machines can be seen from the desktop computers but clicking on them gets 'Access Denied' message after a wait.3 desktops = XP, 1 98SE. All laptop/netbooks = XP
View 2 Replies
View Related
Feb 8, 2012
On every floor there are 10 rooms which can have multiple clients (laptops, ipads, smart phones) so let's say 50 clients.how to set up whole thing so the users in every room have decent speed for surfing and watching videos online
[code]...
View 5 Replies
View Related
