521 WLC
The access point 521 is compatible with the wireless lan controller 4400?
Not to my knowledge. Read the release notes for each version of code that can be run on a 4400 series controller. In the first couple of paragraphs the supported APs are listed. The most recent release notes for code train 5.0.148.0 supports these APs:
Cisco Aironet 1100, 1130, 1200, 1240, 1250, and 1300 Series Lightweight Access Points
The release notes can be found here:
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn501480.html#wp118503
In addition, the title of the most recent release notes for the 521 access point specify that it is an autonomous AP, indicating it would not be supported on a lightweight controller, and I doubt it is convertable to LWAPP.
<------Document Title---------------------->
Release Notes for Cisco 521 Wireless Express Autonomous Access Point for Cisco IOS Release 12.4(3g)JX1
Regards,
Scott
Similar Messages
-
Can't get 1532i to associate to 5508 WLC running 7.6.130.0
Greetings,
I've got 20 or so APs on a 5508 WLC. Most of the APs are 1242, one is 3602. I'm now trying to get a 1532i to associate to the 5508 and it's not happening. This is the first 1532 on this controller.
Also, I got this 1532 AP from a sister site and they had it configured as Autonomous in wgb mode, so I had to do the Autonomous to Unified Conversion. This conversion appeared to go successfully. But now the AP won't associate to my controller.
Thanks
Following is what happens from the AP's console :
AP78da.6e59.e58a#reload
Proceed with reload? [confirm]
Writing out the event log to flash:/event.log ...
Write of event.log done
*Oct 28 20:27:37.151: %SYS-5-RELOAD: Reload requested by Cisco on console. Reload Reason: Reload.
*Oct 28 20:27:37.155: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
*Oct 28 20:27:39.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
*Oct 28 20:27:40.039: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
System Bootstrap, Version U-Boot 1.1.4-gf5ee82b1-dirty Corfu , RELEASE SOFTWARE
Build Date: Oct 17 2013 - 18:08:55
corfu - Scorpion 1.0
DRAM: 256 MB
Now running in RAM - U-Boot at: 8ffbc000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x14
flash size 1MB, sector count = 256
Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
Ath Nand ID[8ffee17c]: 2c:f1:80:95:02
ONFI MICRON MT29F1G08ABADAWP
Micron NAND 128MiB 3,3V 8-bit [128MB]
size = 128MB
Hit any key to stop autoboot: 0
boot_method is set to IOS_BOOT, boot IOS bootloader in NOR flash
Loading .text @ 0x84000000 (207840 bytes)
Loading .rodata @ 0x84032be0 (39008 bytes)
Loading .data @ 0x8403c440 (3264 bytes)
Loading .data.rel.local @ 0x8403d100 (1084 bytes)
Loading .data.rel @ 0x8403d53c (124 bytes)
Loading .data.rel.ro @ 0x8403d5b8 (960 bytes)
Clearing .bss @ 0x8403d980 (161116 bytes)
Clearing .scommon @ 0x84064edc (56 bytes)
## Starting application at 0x84000000 ...
IOS Secondary Bootloader - Starting system.HW Test Status(0)
Ath Nand ID: 95:80:f1:2c:00
Using driver version 1 for media type 2
Valid buffers 146
total146 146
success found all blocks
start end 65 85
found in range
high low end 2728 2089 85
Xmodem file system is available.
mifs[0]: 15 files, 5 directories
mifs[0]: Total bytes : 131334144
mifs[0]: Bytes used : 7966720
mifs[0]: Bytes available : 123367424
mifs[0]: mifs fsck took 0 seconds.
Base Ethernet MAC address: 78:da:6e:59:e5:8a
Setup MAC....
Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
Ethernet speed is 100 Mb - FULL duplex
Scorpion ----> F1 PHY *
: cfg1 0xf cfg2 0x7115
Loading "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6"...##########################################################################################################################################################################################################################################################################################################################################################################
File "flash:/ap1g3-k9w8-mx.152-4.JB6/ap1g3-k9w8-mx.152-4.JB6" uncompressed and installed, entry point: 0x60080000
executing...
Stop MAC.
Starting IOS...
cp0 timer begin value is set as 1000
prid= 19750
Starts main.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Fri 22-Aug-14 11:03 by prod_rel_team
Initializing flashfs...
Ath Nand ID: 95:80:F1:2C:00
Using driver version 1 for media type 2
Valid buffers 146
total146 146
success found all blocks
start end 65 85
found in range
high low end 2728 2089 85
mifs[4]: 15 files, 5 directories
mifs[4]: Total bytes : 131334144
mifs[4]: Bytes used : 7966720
mifs[4]: Bytes available : 123367424
mifs[4]: mifs fsck took 2 seconds.
mifs[4]: Initialization complete.
...done Initializing flashfs.
:pci_init_board:521 *** Warning *** : PCIe1 WLAN Module not found !!!
pci_rc2_init_board:570 PCIE Controller Init Bus Master Enable
:pci_rc2_init_board:593 PCIe2 WLAN Module Found !!!
soap_pci_subsys_init:706 Bus Master/Mem Enable on pci_write side
soap_pci_subsys_init(713): PCI vendor ID: 0x168C ret:0
soap_pci_subsys_init(715): PCI device ID: 0x33 ret:0
Scorpion ----> F1 PHY *
Waiting for PHY auto negotiation to complete...Port 0 Negogiation success.
Disabling 802.3az feature on port 0
sgmii cal value = 0xE
Disabling 802.3az feature on port 1.
SGMII setup done, status is 0x2
Radio0 present 9550 9000 0 0 0 0
Rate table has 282 entries (12 legacy/96 11n/174 11ac)
Radio1 present 9590 9000 0 0 B2000000 1
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco AIR-CAP1532I-A-K9 (MIPS74k) processor (revision 27) with 204800K/57344K bytes of memory.
Processor board ID FTX1813201L
MIPS74k CPU at 700MHz, revision number 0x0000
Last reset from power-on
LWAPP image version 7.6.100.0
2 Gigabit Ethernet interfaces
2 802.11 Radios
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 78:DA:6E:59:E5:8A
Part Number : 74-11942-01
PCA Assembly Number : 000-00000-00
PCA Revision Number :
PCB Serial Number : FOC180951ZR
Top Assembly Part Number : 000-00000-00
Top Assembly Serial Number : FTX1813201L
Top Revision Number : 23
Product/Model Number : AIR-CAP1532I-A-K9
% Please define a domain-name first.
Press RETURN to get started!
*Mar 1 00:00:09.895: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (11)mips74k_config_radio_pci(302): PCI CMD write: 0x356
*Mar 1 00:00:14.391: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to upEnterprise mode: 0x44000000
*Mar 1 00:00:14.895: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (2)
*Mar 1 00:00:14.971: ath_load_ctl_pwr_tbl() dot11radio 2G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO2.bin version# 3.0
*Mar 1 00:00:15.419: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (2)
*Mar 1 00:00:15.419: ath_load_ctl_pwr_tbl() dot11radio 5G loading CTL binary flash:/ap1g3-k9w8-mx.152-4.JB6/CO5.bin version# 3.4
*Mar 1 00:00:15.699: CDP_PD: Power Source: 4-pair Power Injector
*Mar 1 00:00:15.723: AP Mesh platform identified (backhaul config:0x2, access:0xF)
*Mar 1 00:00:15.735: Starting Ethernet promiscuous mode
*Mar 1 00:00:15.735: Skipping Ethernet bridge initializaion
*Mar 1 00:00:16.431: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
*Mar 1 00:00:18.363: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Fri 22-Aug-14 11:03 by prod_rel_team
*Mar 1 00:00:18.363: %SNMP-5-COLDSTART: SNMP agent on host AP78da.6e59.e58a is undergoing a cold start
*Mar 1 00:00:18.399: %MESH-6-BVI_CREATED: Mesh BVI1 interface created
*Mar 1 00:00:18.399: ath_ACIF_set_distance: Retrieved existing timeout value: 25us for distance: 0km
*Mar 1 00:00:18.399: ath_ACIF_set_distance: Setting new timeout value: 45us for distance: 3km
*Mar 1 00:00:18.399: %CDP_PD-4-POWER_OK: Full power - HIGH_POWER inline power source
*Mar 1 00:00:18.619: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar 1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:00:18.619: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
*Mar 1 00:00:18.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:20.399: %LINK-6-UPDOWN: Interface BVI1, changed state to down
*Mar 1 00:00:37.015: Logging LWAPP message to 255.255.255.255.
*Mar 1 00:00:37.027: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:00:38.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:00:38.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar 1 00:00:39.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar 1 00:00:39.067: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar 1 00:00:40.023: %MESH-6-ADJACENCY_STATE_MACHINE_STARTED: Mesh adjacency state machine started
*Mar 1 00:00:40.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Mar 1 00:01:13.531: Mesh setting the ethernet port 0 state to 2
*Mar 1 00:01:13.531: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar 1 00:01:15.531: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar 1 00:01:16.531: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:01:18.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Mar 1 00:01:18.651: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:01:19.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:01:19.671: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:01:20.671: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar 1 00:01:28.643: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar 1 00:01:28.759: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.132.120.85, mask 255.255.255.0, hostname AP78da.6e59.e58a
*Mar 1 00:01:28.759: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar 1 00:01:33.791: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Mar 1 00:01:33.855: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
Translating "CISCO-CAPWAP-CONTROLLER.americas.mittalco.com"...domain server (10.132.250.250) [OK]
*Mar 1 00:01:33.867: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:01:34.855: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:01:34.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:01:34.915: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:01:35.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar 1 00:01:44.855: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 28 20:29:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
*Oct 28 20:29:44.495: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
*Oct 28 20:29:44.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
*Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Oct 28 20:29:44.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
*Oct 28 20:29:49.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
*Oct 28 20:30:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.132.249.5:5246
*Oct 28 20:30:44.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Oct 28 20:30:44.095: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Oct 28 20:30:44.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Oct 28 20:30:45.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Oct 28 20:30:45.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Oct 28 20:30:46.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Oct 28 20:30:54.095: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 28 20:30:52.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.132.249.5 peer_port: 5246
*Oct 28 20:30:52.499: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.132.249.5 peer_port: 5246
*Oct 28 20:30:52.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5
*Oct 28 20:30:52.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Oct 28 20:30:52.503: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.132.249.5
*Oct 28 20:30:57.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.132.249.5You have to add the MAC address of the 1530 to the WLC mac filter list before the AP will join. Here is a link that explains it.
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1530/quick/guide/ap1532qsg.html#pgfId-45801
Scott -
Difference between 1131AG & 521 APs for 2.4G
Hi,
If I only need 2.4G support what is the difference?
Why does Cisco not show 521 model AP on this page,
http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html
Thanks, MHThe 521 model is designed to work in small office/home office environments with the 500 series wireless controller. If you're going to have a deployment of more than a few APs, or want scalability and more advanced feature/functionality, then you should go with the 1131AG hanging off of a small controller like the 2100 series, or the WLC-NM module for an Integrated Services Router like the 2800 series. If you're not interested in controller based (LWAP) technology and just want a stand alone AP, than go with an autonamous 1131AG. Just make sure to specify the part numbers correctly when ordering (AP for autonamous, LAP for controller based).
-
My customer has a 526 WLC installed in a guest Pavilion. It is supporting 5 521 Access Points. Yesterday the customer wanted to know if there was a way that they could from the WLC shut down access to the Wireless Network. They have a group in and DO NOT want their employees to have the ability to connect to wireless.
ThanksCreate a LobbyAdministrator account.
Management -> Local Management User -> New
Fill in the blanks and when you reach User Access Mode, choose "LobbyAdministrator".
Log out and HTML back but use the LobbyAdministrator account.
From here, you can create/delete users for your hotspots. The user account you'll create is a "time bomb" with a maximum life of 30 days. If you want to create a permanent account follow my intial instructions but choose "ReadWrite" instead of LobbyAdministrator.
Does this help? -
Config RADIUS on WLC 5508 - Problems comunication with NPS Server
Hi,
I'm facing some problems when configuring RADIUS auth with a NPS Windows Server.
My WLAN interface is in a different vlan than the management interface, is that a problem?
I want this wlan to be on a different vlan from the management. When i use wlan interface in the same vlan the RADIUS works without problems. But in different vlans is not working.
The NPS server as 2 NICs, 1 for the wireless vlan, and another for the management vlan.
the logs from the WLC shows this, but i have difficulties interpreting all this data:
*apfMsConnTask_0: Dec 29 12:49:14.636: Association request from the P2P Client Process P2P Ie and Upadte CB
*apfMsConnTask_5: Dec 29 12:49:36.607: 3c:c2:43:94:3e:bc Adding mobile on LWAPP AP d4:d7:48:45:fb:20(0)
*apfMsConnTask_5: Dec 29 12:49:36.607: 3c:c2:43:94:3e:bc Association received from mobile on AP d4:d7:48:45:fb:20
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1709)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1876)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Applying site-specific Local Bridging override for station 3c:c2:43:94:3e:bc - vapId 9, site 'XXX', interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Applying Local Bridging Interface Policy for station 3c:c2:43:94:3e:bc - vlan 900, interface id 16, interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Applying site-specific override for station 3c:c2:43:94:3e:bc - vapId 9, site 'XXX', interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1709)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1876)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc STA - rates (8): 130 132 139 12 18 150 24 36 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Processing RSN IE type 48, length 20 for mobile 3c:c2:43:94:3e:bc
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Received RSN IE with 0 PMKIDs from mobile 3c:c2:43:94:3e:bc
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Initializing policy
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 START (0) Change state to AUTHCHECK (2) last state AUTHCHECK (2)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) DHCP required on AP d4:d7:48:45:fb:20 vapId 9 apVapId 8for this client
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 29 12:49:36.608: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:d7:48:45:fb:20 vapId 9 apVapId 8 flex-acl-name:
*apfMsConnTask_5: Dec 29 12:49:36.609: 3c:c2:43:94:3e:bc apfMsAssoStateInc
*apfMsConnTask_5: Dec 29 12:49:36.609: 3c:c2:43:94:3e:bc apfPemAddUser2 (apf_policy.c:270) Changing state for mobile 3c:c2:43:94:3e:bc on AP d4:d7:48:45:fb:20 from Idle to Associated
*apfMsConnTask_5: Dec 29 12:49:36.609: 3c:c2:43:94:3e:bc Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Dec 29 12:49:36.609: 3c:c2:43:94:3e:bc Sending Assoc Response to station on BSSID d4:d7:48:45:fb:20 (status 0) ApVapId 8 Slot 0
*apfMsConnTask_5: Dec 29 12:49:36.609: 3c:c2:43:94:3e:bc apfProcessAssocReq (apf_80211.c:6309) Changing state for mobile 3c:c2:43:94:3e:bc on AP d4:d7:48:45:fb:20 from Associated to Associated
*dot1xMsgTask: Dec 29 12:49:36.611: 3c:c2:43:94:3e:bc Station 3c:c2:43:94:3e:bc setting dot1x reauth timeout = 0
*dot1xMsgTask: Dec 29 12:49:36.611: 3c:c2:43:94:3e:bc Stopping reauth timeout for 3c:c2:43:94:3e:bc
*dot1xMsgTask: Dec 29 12:49:36.611: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Connecting state
*dot1xMsgTask: Dec 29 12:49:36.611: 3c:c2:43:94:3e:bc Sending EAP-Request/Identity to mobile 3c:c2:43:94:3e:bc (EAP Id 1)
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.684: 3c:c2:43:94:3e:bc Received EAPOL START from mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.684: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Connecting state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.684: 3c:c2:43:94:3e:bc Sending EAP-Request/Identity to mobile 3c:c2:43:94:3e:bc (EAP Id 2)
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.761: 3c:c2:43:94:3e:bc Received EAPOL EAPPKT from mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.761: 3c:c2:43:94:3e:bc Received Identity Response (count=2) from mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.761: 3c:c2:43:94:3e:bc EAP State update from Connecting to Authenticating for mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.761: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Authenticating state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:36.761: 3c:c2:43:94:3e:bc Entering Backend Auth Response state for mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.794: 3c:c2:43:94:3e:bc Received EAPOL START from mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.794: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Aborting state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Connecting state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc Sending EAP-Request/Identity to mobile 3c:c2:43:94:3e:bc (EAP Id 4)
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc Reached Max EAP-Identity Request retries (3) for STA 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc Sent Deauthenticate to mobile on BSSID d4:d7:48:45:fb:20 slot 0(caller 1x_auth_pae.c:3165)
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc Scheduling deletion of Mobile Station: (callerId: 6) in 10 seconds
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Disconnected state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:54.795: 3c:c2:43:94:3e:bc Not sending EAP-Failure for STA 3c:c2:43:94:3e:bc
*apfMsConnTask_5: Dec 29 12:49:55.518: 3c:c2:43:94:3e:bc Association received from mobile on AP d4:d7:48:45:fb:20
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1709)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1876)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Applying site-specific Local Bridging override for station 3c:c2:43:94:3e:bc - vapId 9, site 'XXX', interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Applying Local Bridging Interface Policy for station 3c:c2:43:94:3e:bc - vlan 900, interface id 16, interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Applying site-specific override for station 3c:c2:43:94:3e:bc - vapId 9, site 'XXX', interface 'wlan'
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Changing IPv4 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1709)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Changing IPv6 ACL 'none' (ACL ID 255) ===> 'none' (ACL ID 255) --- (caller apf_policy.c:1876)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc processSsidIE statusCode is 0 and status is 0
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc processSsidIE ssid_done_flag is 0 finish_flag is 0
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc STA - rates (8): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc suppRates statusCode is 0 and gotSuppRatesElement is 1
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc STA - rates (12): 130 132 139 12 18 150 24 36 48 72 96 108 0 0 0 0
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc extSuppRates statusCode is 0 and gotExtSuppRatesElement is 1
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Processing RSN IE type 48, length 20 for mobile 3c:c2:43:94:3e:bc
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Received RSN IE with 0 PMKIDs from mobile 3c:c2:43:94:3e:bc
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Setting active key cache index 8 ---> 8
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc unsetting PmkIdValidatedByAp
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Initializing policy
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Change state to AUTHCHECK (2) last state 8021X_REQD (3)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 AUTHCHECK (2) Change state to 8021X_REQD (3) last state 8021X_REQD (3)
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) DHCP required on AP d4:d7:48:45:fb:20 vapId 9 apVapId 8for this client
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 29 12:49:55.519: 3c:c2:43:94:3e:bc 0.0.0.0 8021X_REQD (3) Plumbed mobile LWAPP rule on AP d4:d7:48:45:fb:20 vapId 9 apVapId 8 flex-acl-name:
*apfMsConnTask_5: Dec 29 12:49:55.520: 3c:c2:43:94:3e:bc apfPemAddUser2 (apf_policy.c:270) Changing state for mobile 3c:c2:43:94:3e:bc on AP d4:d7:48:45:fb:20 from Associated to Associated
*apfMsConnTask_5: Dec 29 12:49:55.520: 3c:c2:43:94:3e:bc Stopping deletion of Mobile Station: (callerId: 48)
*apfMsConnTask_5: Dec 29 12:49:55.520: 3c:c2:43:94:3e:bc Sending Assoc Response to station on BSSID d4:d7:48:45:fb:20 (status 0) ApVapId 8 Slot 0
*apfMsConnTask_5: Dec 29 12:49:55.520: 3c:c2:43:94:3e:bc apfProcessAssocReq (apf_80211.c:6309) Changing state for mobile 3c:c2:43:94:3e:bc on AP d4:d7:48:45:fb:20 from Associated to Associated
*dot1xMsgTask: Dec 29 12:49:55.521: 3c:c2:43:94:3e:bc Station 3c:c2:43:94:3e:bc setting dot1x reauth timeout = 0
*dot1xMsgTask: Dec 29 12:49:55.521: 3c:c2:43:94:3e:bc Stopping reauth timeout for 3c:c2:43:94:3e:bc
*dot1xMsgTask: Dec 29 12:49:55.521: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Connecting state
*dot1xMsgTask: Dec 29 12:49:55.521: 3c:c2:43:94:3e:bc Sending EAP-Request/Identity to mobile 3c:c2:43:94:3e:bc (EAP Id 1)
*Dot1x_NW_MsgTask_4: Dec 29 12:49:55.592: 3c:c2:43:94:3e:bc Received EAPOL START from mobile 3c:c2:43:94:3e:bc
*Dot1x_NW_MsgTask_4: Dec 29 12:49:55.592: 3c:c2:43:94:3e:bc dot1x - moving mobile 3c:c2:43:94:3e:bc into Connecting state
*Dot1x_NW_MsgTask_4: Dec 29 12:49:55.592: 3c:c2:43:94:3e:bc Sending EAP-Request/Identity to mobile 3c:c2:43:94:3e:bc (EAP Id 2)yes, I thought of that. But if i use a simple password authentication on the wireless, i can reach the server with the same subnet interface. But i don't want to allow this subnet to acess the management subnet of the wireless controller.
One question i have is: The WLC uses whitch subnet on radius? Uses the subnet of the wireless interface or uses always the management interface?
Could you help me understand how the radius auth works with this wireless controller? Did you see anything strange in the logs that I posted above? It seems to run ok until:
dot1x - moving mobile 3c:c2:43:94:3e:bc into Authenticating state
Entering Backend Auth Response state for mobile 3c:c2:43:94:3e:bc
Received EAPOL START from mobile 3c:c2:43:94:3e:bc
dot1x - moving mobile 3c:c2:43:94:3e:bc into Aborting state
I also note this: "Applying Local Bridging Interface Policy for station "
What does this means? -
Hi
I have one 5508 and about 70 Cisco1140 AP and spred around in to about 5 sites.
We use a Microsoft IAS server as radius server with auth from the AD with dot1x and certificate in the clinents to verify the clientents
The clients are IBM and Dell laptops
Some clients loses the connection to the network time to time
I have some errors in the WLC logg
dot1xMsgTask: Jan 18 11:23:34.254: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmissions
exceeded for client 00:24:d7:22:0e:e0
*apfMsConnTask_3: Jan 18 11:21:13.118: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:273 Could not che
ck supported rates. Missing Supported Rate. Length :0. Mobile MAC: b8:ff:61:8f:df:25.
*Dot1x_NW_MsgTask_0: Jan 18 11:15:31.521: %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: 1x_eapkey.c:708 Receiv
ed invalid EAPOL-key M2 msg in START state - invalid secure bit; len 40, key type 1, client 00:21:6a
:50:21:80
*spamApTask0: Jan 18 11:14:34.630: %LWAPP-3-VALIDATE_ERR: spam_lrad.c:9090 Validation of SPAM Vendor
Specific Payload failed - AP 30:37:a6:c9:53:20
*dot1xMsgTask: Jan 18 11:14:19.850: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2914 Max EAP identity re
quest retries (14) exceeded for client 00:1f:3b:16:aa:ef
Decrypt error occurred for clienten 00:24:d7:69:fb:7c using WPA2 key on 802.11a interface of AP e8:04:62:60:a0:10
Any sugestions ?Looking at the error messages, they don't point to a singlular fault with the WLC, more like a client issue. Below I'll explain the messages you are seeing.
dot1xMsgTask: Jan 18 11:23:34.254: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmissions
exceeded for client 00:24:d7:22:0e:e0
This means, the WLC has sent an EAP request to the client, and has not received a response. This could be because either the cleint didn't hear the request, or the AP didn't hear the response. It could also be the client ignored the request. You may want to take a look at the following document and see if you want to change the EAP timer values
. https://supportforums.cisco.com/docs/DOC-12110
*apfMsConnTask_3: Jan 18 11:21:13.118: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:273 Could not che
ck supported rates. Missing Supported Rate. Length :0. Mobile MAC: b8:ff:61:8f:df:25.
The WLC was reading a message from the client, and the client did not tell the WLC what rates it could support. This could happen because the packet from the client wasn't heard fully. As well, some clients will see the WLC that they are associated to, and not the individual AP. In this case, it is possible that the client didnt' send the supported rates, as it didn't see a change in BSSID>
*Dot1x_NW_MsgTask_0: Jan 18 11:15:31.521: %DOT1X-3-INVALID_WPA_KEY_MSG_STATE: 1x_eapkey.c:708 Receiv
ed invalid EAPOL-key M2 msg in START state - invalid secure bit; len 40, key type 1, client 00:21:6a
:50:21:80
The client tried to send a key, when the PEM state on the WLC was START. More than likely the client thought it could roam, but the WLC thought differently
*spamApTask0: Jan 18 11:14:34.630: %LWAPP-3-VALIDATE_ERR: spam_lrad.c:9090 Validation of SPAM Vendor
Specific Payload failed - AP 30:37:a6:c9:53:20
Bad packet.
*dot1xMsgTask: Jan 18 11:14:19.850: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2914 Max EAP identity request retries (14) exceeded for client 00:1f:3b:16:aa:ef
WLC is sending EAP Identity request to the client, and it is not repsonding.
Decrypt error occurred for clienten 00:24:d7:69:fb:7c using WPA2 key on 802.11a interface of AP e8:04:62:60:a0:10
Couldn't decrypt the packet. Could be a bad key, or could be we didnt' get the full packet, thus making the decrypt fail.
For the most part, these are commonly seen issues. Could be the result of RF issues, so you may want to take a look and make sure the coverage at the site is clean. Some of these can also be caused by WZC, which likes to ignore EAP messages, and has a tendancy to use the login credentials that get cached. Which if these are not domain credentials can cause issues as well.
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it. -
WLC 5760 - MAC Filtering wireless clients
Hi,
Does anyone ever deployed mac-filtering authentication to wireless clients in the WLC 5760?
I've configured a WLAN for Mac-filtering authentication only (named it as "macauth"):
wlan RNVDOS 4 RNVDOS
aaa-override
no broadcast-ssid
client vlan RNVDOS
mac-filtering macauth
no security wpa
no security wpa akm dot1x
no security wpa wpa2
no security wpa wpa2 ciphers aes
session-timeout 1800
no shutdown
Then, below Configuration->Security->MAC Filtering I've added several MAC addresses i.e. :
MAC Address: 88532e9ef70a Attribute List: macauth
Which turned out to be display in the CLI as:
username 88532e9ef70a mac aaa attribute list macauth
The problem is that whenever I try to associate the wireless client 88532e9ef70a, the client passes to the exclusion list.:
Sep 16 10:54:55.603: 8853.2E9E.F70A Adding mobile on LWAPP AP 0C68.03EA.4070 (1) 1 wcm: E9E.F70A (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Creating WL station entry for client - rc 0 1 wcm:
Sep 16 10:54:55.603: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: ssionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:55.603: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Idle to AAA Pending
Sep 16 10:54:55.603: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:55.604: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:55.604: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Idle to AAA Pending
Sep 16 10:54:55.604: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:55.604: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 18) in 10 seconds
Sep 16 10:54:55.813: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:55.813: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:55.813: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:55.813: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:55.813: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:55.814: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:55.814: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:55.814: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:55.814: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 18) in 10 seconds
Sep 16 10:54:56.520: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:56.520: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.520: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.520: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.520: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.521: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.521: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.521: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.521: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 18) in 10 seconds
Sep 16 10:54:56.729: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n 10 seconds
Sep 16 10:54:56.729: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.729: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: from AAA Pending to Authenticated
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.729: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.729: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.730: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.730: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.730: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.730: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 18) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:56.937: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.937: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.937: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 18) in 10 seconds
Sep 16 10:54:57.143: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:57.143: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:57.143: 8853.2E9E.F70A apChanged 1 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (8): 1 wcm: 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (12): 1 wcm: 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Sep 16 10:54:57.144: 8853.2E9E.F70A 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm: site 'renova', interface 'RNVDOS'
Sep 16 10:54:57.144: 8853.2E9E.F70A Updated location for station old AP 0C68.03EA.4070 -1, new AP 0C68.03EA.4070 -0 1 wcm: va', interface 'RNVDOS'
Sep 16 10:54:57.144: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: P 0C68.03EA.4070 -0
Sep 16 10:54:57.144: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:57.144: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:57.144: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm: (callerId: 20) in 10 seconds
Sep 16 10:54:57.145: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 0 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:57.145: 8853.2E9E.F70A apfBlacklistMobileStationEntry2 (apf_ms.c: 1 wcm: 6129) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Exclusion-list (1)
Sep 16 10:54:57.145: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 44) in 10 seconds
Sep 16 10:54:57.145: 8853.2E9E.F70A client is added to the exclusion list, reason 1 1 wcm: d: 44) in 10 seconds
Sep 16 10:54:57.145: *apfReceiveTask: 1 wcm: %APF-4-ADD_TO_BLACKLIST_REASON: Client 8853.2E9E.F70A (AuditSessionID: 0afe01fb5236e37f000000de) was added to exclusion list. Reason: 802.11 association failure
Sep 16 10:54:57.836: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:58.533: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:59.231: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:59.922: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireCallback (apf_ms.c: 1 wcm: 664) Expiring Mobile!
Sep 16 10:55:06.972: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm: (callerId: 46) in 60 seconds
Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireMobileStation (apf_ms.c: 1 wcm: 7067) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm: 3.2E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A 0.0.0.0 START (0) FastSSID for the client [ 0C68.03EA.4070 ] NOTENABLED 1 wcm: E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A Incrementing the Reassociation Count 1 for client (of interface RNVDOS) 1 wcm: D
Sep 16 10:55:06.972: 8853.2E9E.F70A Clearing Dhcp state for station --- 1 wcm: for client (of interface RNVDOS)
WLC1#
WLC1#
Kind Regards,
VascoHi Patrick,
Thank you for sharing your solution. It didn't solved entirely the problem but you pointed to the right direction!
They are caused, because the system searches for an aaa authorization list, which is not configured.
To resolve this configure the following
aaa authorization network mac-filter local
where mac-filter is the name you defined in the SSID.
I've used your sugestion to create an aaa local authorization list but instead of naming it with the SSID, I've used the name of the attribute list ( macauth ) and it solved the problem:
aaa authorization network macauth local
username 88532e9ef70a mac aaa attribute list macauth
wlan RNVDOS 4 RNVDOS
client vlan RNVDOS
mac-filtering macauth
WLC1#sh wireless client summ
Number of Local Clients : 1
MAC Address AP Name WLAN State Protocol
8853.2e9e.f70a APf872.ead7.31da 4 UP 11n(5)
Cheers,
Vasco -
Greetings -- I've just picked up an 881 and 2 521's. I have the 881 setup fine with the CP Express. No problem there. Now I'd like to get these 2 APs running but I haven't been able to figure out the first thing. I've attempted using the CCA to discover to topography but the 881 isn't supported. The CCA asks for my level 15 access, which I enter, then it asks for username/password for the "Admin" realm. I know of no such "Admin" realm. I've tried every user/pass combo I can think of. Also, when I plug these AP's into the 881 and power them up, the LED's eventualy alternate ethernet:green radio:amber and the main LED alternates green/red/amber which leads me to believe that there's something basically wrong with the AP's. Any help would be appreciated.
So on the AP521. Supported in CCA. Hopefully you are using a 2.x version of CCA?
I think the user/pass may be admin/Cisco <--- upper case C. Bet you didnt try that yet ;-)
Regarding the 881....Not supported by CCA.
here is the list of supported products in CCA 2.1:
Unified Communications Platforms: UC 520, UC 540
Cisco Switches: CE 520, ESW 520
Security Devices: SR 520, 871W 876W, 877W, 878W, SR 520-T1
Wireless Devices: AP521, WLC 526
IP Phones: 79xx, CP52x, SPA 525G, SPA 50xG -
3502i image extraction failure from WLC
This is a basic CAPWAP connection with static address on AP to WLC. Fails on extraction of image. Here is the console output from the AP:
examining image...!
extracting info (292 bytes)
Image info:
Version Suffix: k9w8-.124-23c.JA2
Image Name: ap3g1-k9w8-mx.124-23c.JA2
Version Directory: ap3g1-k9w8-mx.124-23c.JA2
Ios Image Size: 5612032
Total Image Size: 5919232
Image Feature: WIRELESS LAN|LWAPP
Image Family: AP3G1
Wireless Switch Management Version: 7.0.116.0
Extracting files...
ap3g1-k9w8-mx.124-23c.JA2/ (directory) 0 (bytes)
extracting ap3g1-k9w8-mx.124-23c.JA2/Z5.bin (29492 bytes)!!
extracting ap3g1-k9w8-mx.124-23c.JA2/ap3g1-k9w8-mx.124-23c.JA2 (4721941 bytes)!!!!!
*Jun 21 18:29:31.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: x.x.31.61 peer_port: 5246
*Jun 21 18:29:31.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Jun 21 18:29:31.569: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: x.x.31.61 peer_port: 5246
*Jun 21 18:29:31.572: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.31.61
*Jun 21 18:29:31.572: %CAPWAP-5-CHANGED: CAPWAP changed state to JOINperform archive download capwap:/ap3g1 tar file
*Jun 21 18:29:31.578: %CAPWAP-5-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
*Jun 21 18:29:31.581: %CAPWAP-5-CHANGED: CAPWAP changed state to IMAGE
*Jun 21 18:29:31.581: Loading file /ap3g1...
Premature end of tar file
ERROR: Problem extracting files from archive.
archive download: takes 80 seconds
*Jun 21 18:30:49.633: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to x.x.31.61:5246
*Jun 21 18:30:49.636: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 21 18:30:49.636: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 21 18:30:49.690: %CAPWAP-3-ERRORLOG: capwap ifs: read error or timeout
*Jun 21 18:30:51.521: capwap_image_proc: problem extracting tar file
It looks to me like the image might be corrupt on the WLC, but I can't figure out how to update it on the WLC. I have had this equipment for two weeks, so I am still figuring it out.
Any suggestions or guidance would be appreciated.
Thanks,
NoahThank you this helped me solved an issue I had with a 1042. Rebooting the WLC solved the issue following the upgrade of our WISMs from version 7.0.116.0 to version 7.0.220.0
-
I have a 526 controller and 4 521 APs on my LAN that I want to upgrade to LWAPP. I am using CCA and all the help says this should be a point-and-click type of thing. However, when I try the upgrade the CCA asks for an image I don't have and can't find in the CCA folder. The download section for the 521 doesn't have it either. Where can I get this image? Is there another way to upgrade?
Thanks in advance,
DiegoI have the right recovery code but the CCA topology map doesn't even see any of my 521 AP's. It can see the WLC526 and it can see the 3560 PoE switch it's attached to, but those are the only 2 items on the topology map. I'm using native VLAN as 100. I set the ports the 521's into a trunk ports w/ native vlan as 100 so I can http to the 521 AP's. I'm using 3 vlans, voice, guest, and internal users but I just can't get them to join the WLC as LWAPPS??? Frustrating!! Any ideas? All the documentation shows the AP's showing in the topology map and then you just point/click to LWAPP recovery image to convert them from autonmouse to LWAPP but I can't even see them in the topology map yet I can ping and web to them and they seem fine. I could probably leave them all autonomous and manually configure all 5 and have it work anyways but I'd be waisting the WLC 526 and it would serve no purpose?!?!?!
Thanks!!! -
Changing antenna power on lightweight 521
I have a 526 controller managing 3 lightweight 521 APs. I would like to config the APs for maximum distance even if it brings down the data performace a bit since these APs are 99% used for voice. I can't find where to do this on the 526 managment screens. Also, I can't seem to manage the APs by pointing a web browser to their IP. Is this normal when they are LWAPP?
Thanks,
DiegoDuring the site survey, we used the 1230 and assigned tx power based on 100mw, 50, 30, 10, 5.. so on.. on the AP. But when we implemented the controller-based, the transmit power were replaced with 'power levels', 1,2,3,4... so on... I read somewhere that 1 is the max and as the level increases, it is 50% less. say, 1=100mw, 2=50 mw, 3=25mw, 4=12.5, 5=6.25 and so on...
the confusion is, some AP's were set to 30mw of tx power during the site survey. Which level should be the euqivalent as tx power level on the wlc-based deployment? is it safe to assign the 30mw site survey data to the #3 tx power level on the controller?
And do you have ideas on the effect of using or assigning the country codes of the controller. If US is used, what is the max power level value, 100mw? And if US is used as country code, can we used any AP on any country domain. I checked out the chart, but it's quite confusing. Hope you can, or anyone can, shed light on this.
Thanks for any ideas.... Argh! -
3600 AP keeps bouncing between Primary & Secondary 5760 WLC
Hello All,
I am not sure if it was a good idea to change the controllers from software based to IOS based :(..... Anyway this is the first time I am working on the IOS based controllers and have been going through very unusual thing. I have a 3600 AP and a couple of 2600 AP, I am just at the start of the configuration for a new deployment. Even though I have many concerns but I will start with the one which is bothering me the most, which is the APs keep jumping from a primary controller to the secondary controller. I have attached the sh run, sh logging, and the sh version for a 3600 AP and the two controllers. All I can understand from the logs is that the capwap interface keeps going down which causes the AP to fall back to the other controller, I have also tried turning off the AP FALLBACK feature, still no luck.
Addiditional Confusions,
Does any one know as how to setup HA in these controllers, as I do not see any HA or RP (Port) on these controllers neither there is any stacking module on the controllers. Would it be the old way of doing it, which was defining Primary and Secondary Controllers on the APs, if yes than I should receive two different licenses for the Controllers. But these are my devices Part numbers:
Primary: AIR-CT5760-500-K9
Secondary: AIR-CT5760-HA-K9
for now I have enabled the evaluation license on both the devices. I hope that does not make any difference.Hi,
I have been doing some of my own trouble shooting and found out that as soon as I create a layer 3 interface on the controller so as to map it to any SSID, all of my APs start to jump on to the secondary controller and since there is a primary and secondary controller configuration on each AP they tend to come back but than soon after they jump back to the secondary....... As soon as I delete the additional layer 3 interfaces, apart from the wireless management, I get all the APs back to normal register to the controller without a glitch, I am pasting the logs being received for the APs behaviour. I have marked the logs in between with Asterics to indicate when I cleared the layer 3 interfaces and from there onwards all the APs started coming up again
Mar 12 15:09:58.624: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 4 times.!]
Mar 12 15:09:58.624: *%CAPWAP-3-ECHO_ERR: 1 wcm: Did not receive heartbeat reply; AP: 1c1d.86ee.7b40
Mar 12 15:10:03.427: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:10:05.373: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap13, changed state to down
Mar 12 15:10:08.539: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 7 times/sec!.]
Mar 12 15:10:11.657: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:10:11.657: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:10:11.660: %LINK-3-UPDOWN: Interface Capwap30, changed state to up
Mar 12 15:10:12.703: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap30, changed state to up
Mar 12 15:10:13.111: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap16, changed state to down
Mar 12 15:10:13.678: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap28, changed state to down
Mar 12 15:10:15.840: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:10:15.840: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:10:18.070: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap11, changed state to down
Mar 12 15:10:18.268: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap20, changed state to down
Mar 12 15:10:20.695: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 4 times/sec!.]
Mar 12 15:10:25.608: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap14, changed state to down
Mar 12 15:10:32.273: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times/sec!.]
Mar 12 15:10:35.526: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap24, changed state to down
Mar 12 15:10:47.032: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap29, changed state to down
Mar 12 15:10:50.913: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]
Mar 12 15:10:58.725: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:10:58.726: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:10:58.726: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:10:58.726: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:11:00.521: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap30, changed state to down
Mar 12 15:11:08.450: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:11:08.450: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:11:08.921: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Join Request) and state (CAPWAP Join Response) combination
Mar 12 15:11:09.318: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP f0:29:29:92:c7:f0
Mar 12 15:11:09.319: %LINK-3-UPDOWN: Interface Capwap15, changed state to up
Mar 12 15:11:10.319: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap15, changed state to up
Mar 12 15:11:13.413: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap27, changed state to down
Mar 12 15:11:14.095: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP f0:29:29:92:c7:f0
Mar 12 15:11:14.095: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:c0:a0
Mar 12 15:11:14.098: %LINK-3-UPDOWN: Interface Capwap23, changed state to up
Mar 12 15:11:15.098: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap23, changed state to up
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:11:56.713: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:c0:a0
Mar 12 15:11:56.713: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:12:06.178: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap23, changed state to down
Mar 12 15:12:06.899: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 5 times/sec!.]
Mar 12 15:12:10.411: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:12:10.411: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:ca:60
Mar 12 15:12:10.413: %LINK-3-UPDOWN: Interface Capwap1, changed state to up
Mar 12 15:12:11.266: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:ca:60
Mar 12 15:12:11.266: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 1c:1d:86:ee:7b:40
Mar 12 15:12:11.267: %LINK-3-UPDOWN: Interface Capwap3, changed state to up
Mar 12 15:12:11.413: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap1, changed state to up
Mar 12 15:12:12.267: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap3, changed state to up
Mar 12 15:12:16.889: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap4, changed state to down
Mar 12 15:12:30.365: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 1c:1d:86:ee:7b:40
Mar 12 15:12:30.365: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e6:10
Mar 12 15:12:30.366: %LINK-3-UPDOWN: Interface Capwap22, changed state to up
Mar 12 15:12:31.366: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap22, changed state to up
Mar 12 15:12:33.942: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e6:10
Mar 12 15:12:33.942: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:12:48.627: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap1, changed state to down
Mar 12 15:12:51.385: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 4 times/sec!.]
Mar 12 15:13:06.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap15, changed state to down
Mar 12 15:13:09.053: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:13:09.053: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
VIP_G_M_Core1(config-if)#
Mar 12 15:13:12.177: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:13:16.687: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times.!]
Mar 12 15:13:16.687: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:13:16.688: %LINK-3-UPDOWN: Interface Capwap31, changed state to up
Mar 12 15:13:17.689: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap31, changed state to up
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:13:20.998: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:13:20.998: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1d:c0
Mar 12 15:13:21.001: %LINK-3-UPDOWN: Interface Capwap21, changed state to up
VIP_G_M_Core1(config-if)#
Mar 12 15:13:22.001: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap21, changed state to up
VIP_G_M_Core1(config-if)#
Mar 12 15:13:23.935: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap22, changed state to down
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:13:40.943: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1d:c0
Mar 12 15:13:40.943: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:13:41.815: %DOT1X-5-FAIL: Authentication failed for client (c0f8.da9f.8227) on Interface Ca21 AuditSessionID 0a06906e53207995000001b8
Mar 12 15:13:41.815: %AUTHMGR-5-FAIL: Authorization failed or unapplied for client (c0f8.da9f.8227) on Interface Ca21 AuditSessionID 0a06906e53207995000001b8
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:13:44.342: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 3 times.!]
Mar 12 15:13:44.342: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:13:44.344: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
VIP_G_M_Core1(config-if)#
Mar 12 15:13:54.081: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times.!]
Mar 12 15:13:54.081: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:13:55.673: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap31, changed state to down
Mar 12 15:13:57.761: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination
Mar 12 15:13:57.761: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cd:01:f0
Mar 12 15:13:57.763: %LINK-3-UPDOWN: Interface Capwap6, changed state to up
Mar 12 15:13:58.642: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cd:01:f0
Mar 12 15:13:58.642: *%CAPWAP-3-ECHO_ERR: 1 wcm: Did not receive heartbeat reply; AP: 1c1d.86ee.7b40
Mar 12 15:13:58.763: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap6, changed state to up
Mar 12 15:13:59.044: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap18, changed state to down
Mar 12 15:13:59.512: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
Mar 12 15:14:07.361: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times.!]
Mar 12 15:14:07.361: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:6f:80
Mar 12 15:14:07.362: %LINK-3-UPDOWN: Interface Capwap2, changed state to up
Mar 12 15:14:08.111: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:6f:80
Mar 12 15:14:08.111: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:2d:60
Mar 12 15:14:08.115: %LINK-3-UPDOWN: Interface Capwap8, changed state to up
Mar 12 15:14:08.363: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap2, changed state to up
Mar 12 15:14:08.964: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap21, changed state to down
Mar 12 15:14:09.114: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap8, changed state to up
Mar 12 15:14:13.525: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap3, changed state to down
Mar 12 15:14:16.013: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.6.5.132:1812,1813 is not responding.
Mar 12 15:14:16.013: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.6.5.132:1812,1813 is being marked alive.
THIS IS WHERE I DELETED THE LAYER 3 INTERFACES ON THE WLC
Mar 12 15:14:24.129: %DOT1X-5-FAIL: Authentication failed for client (c0f8.da9f.8227) on Interface Ca6 AuditSessionID 0a06906e532079bf000001b9
Mar 12 15:14:24.129: %AUTHMGR-5-FAIL: Authorization failed or unapplied for client (c0f8.da9f.8227) on Interface Ca6 AuditSessionID 0a06906e532079bf000001b9
Mar 12 15:14:42.537: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:2d:60
Mar 12 15:14:42.537: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:4d:80:10
Mar 12 15:14:42.539: %LINK-3-UPDOWN: Interface Capwap17, changed state to up
Mar 12 15:14:43.539: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap17, changed state to up
Mar 12 15:14:46.456: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:4d:80:10
Mar 12 15:14:46.456: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:22:a0
Mar 12 15:14:46.458: %LINK-3-UPDOWN: Interface Capwap5, changed state to up
Mar 12 15:14:47.459: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap5, changed state to up
Mar 12 15:14:52.018: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:22:a0
Mar 12 15:14:52.018: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:bc:d0
Mar 12 15:14:52.021: %LINK-3-UPDOWN: Interface Capwap0, changed state to up
Mar 12 15:14:53.021: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap0, changed state to up
Mar 12 15:14:58.080: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:bc:d0
Mar 12 15:14:58.080: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 7c:95:f3:54:0d:d0
Mar 12 15:14:58.083: %LINK-3-UPDOWN: Interface Capwap9, changed state to up
Mar 12 15:14:59.082: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap9, changed state to up
Mar 12 15:14:59.727: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 7c:95:f3:54:0d:d0
Mar 12 15:14:59.727: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:ca:60
Mar 12 15:14:59.730: %LINK-3-UPDOWN: Interface Capwap10, changed state to up
Mar 12 15:15:00.730: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap10, changed state to up
Mar 12 15:15:04.498: %SW_MATM-4-WIRELESS_MAC_MOVE_NOTIF: Host 40f0.2f58.a172 moving from Port Te1/0/1 to Port Ca17 as wireless entry
Mar 12 15:15:05.916: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:ca:60
Mar 12 15:15:05.916: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 24:b6:57:5b:7d:90
Mar 12 15:15:05.918: %LINK-3-UPDOWN: Interface Capwap7, changed state to up
Mar 12 15:15:06.918: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap7, changed state to up
Mar 12 15:15:11.247: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 24:b6:57:5b:7d:90
Mar 12 15:15:11.247: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:de:b0
Mar 12 15:15:11.248: %LINK-3-UPDOWN: Interface Capwap19, changed state to up
Mar 12 15:15:12.249: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap19, changed state to up
Mar 12 15:15:17.150: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:de:b0
Mar 12 15:15:17.151: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP f0:29:29:92:c7:f0
Mar 12 15:15:17.152: %LINK-3-UPDOWN: Interface Capwap26, changed state to up
Mar 12 15:15:18.152: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap26, changed state to up
Mar 12 15:15:19.211: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP f0:29:29:92:c7:f0
Mar 12 15:15:19.211: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:dd:60
Mar 12 15:15:19.212: %LINK-3-UPDOWN: Interface Capwap25, changed state to up
Mar 12 15:15:20.212: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap25, changed state to up
Mar 12 15:15:28.681: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:dd:60
Mar 12 15:15:28.681: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:ff:d0
Mar 12 15:15:28.684: %LINK-3-UPDOWN: Interface Capwap12, changed state to up
Mar 12 15:15:29.684: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap12, changed state to up
Mar 12 15:15:30.285: %SW_MATM-4-WIRELESS_MAC_MOVE_NOTIF: Host 286a.bae3.de95 moving from Port Te1/0/1 to Port Ca7 as wireless entry
Mar 12 15:15:31.078: %SW_MATM-4-WIRELESS_MAC_MOVE_NOTIF: Host e0b9.ba1e.02b4 moving from Port Te1/0/1 to Port Ca7 as wireless entry
Mar 12 15:15:34.781: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:ff:d0
Mar 12 15:15:34.781: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:a7:10
Mar 12 15:15:34.782: %LINK-3-UPDOWN: Interface Capwap13, changed state to up
Mar 12 15:15:35.783: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap13, changed state to up
Mar 12 15:15:37.962: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:a7:10
Mar 12 15:15:37.962: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e6:10
Mar 12 15:15:37.964: %LINK-3-UPDOWN: Interface Capwap16, changed state to up
Mar 12 15:15:38.965: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap16, changed state to up
Mar 12 15:15:40.401: %SW_MATM-4-WIRELESS_MAC_MOVE_NOTIF: Host e0b9.ba1e.4c97 moving from Port Te1/0/1 to Port Ca7 as wireless entry
Mar 12 15:15:44.895: %AUTHMGR-4-UNAUTH_MOVE: (slow) MAC address (40f0.2f58.a172) from Ca0 to Ca17
Mar 12 15:15:50.124: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e6:10
Mar 12 15:15:50.124: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:9b:20
Mar 12 15:15:50.127: %LINK-3-UPDOWN: Interface Capwap28, changed state to up
Mar 12 15:15:51.126: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap28, changed state to up
Mar 12 15:15:54.510: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:9b:20
Mar 12 15:15:54.510: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:a4:2f:00
Mar 12 15:15:54.512: %LINK-3-UPDOWN: Interface Capwap11, changed state to up
Mar 12 15:15:55.513: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap11, changed state to up
Mar 12 15:15:58.371: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:a4:2f:00
Mar 12 15:15:58.371: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:c9:10
Mar 12 15:15:58.374: %LINK-3-UPDOWN: Interface Capwap20, changed state to up
Mar 12 15:15:59.263: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:c9:10
Mar 12 15:15:59.263: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:ce:70
Mar 12 15:15:59.266: %LINK-3-UPDOWN: Interface Capwap14, changed state to up
Mar 12 15:15:59.373: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap20, changed state to up
Mar 12 15:16:00.265: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap14, changed state to up
Mar 12 15:16:02.655: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:ce:70
Mar 12 15:16:02.655: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e7:10
Mar 12 15:16:02.658: %LINK-3-UPDOWN: Interface Capwap24, changed state to up
Mar 12 15:16:02.877: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:e7:10
Mar 12 15:16:02.877: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:4d:7f:a0
Mar 12 15:16:02.878: %LINK-3-UPDOWN: Interface Capwap29, changed state to up
Mar 12 15:16:03.659: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap24, changed state to up
Mar 12 15:16:03.879: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap29, changed state to up
Mar 12 15:16:07.595: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:4d:7f:a0
Mar 12 15:16:07.595: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:16:07.598: %LINK-3-UPDOWN: Interface Capwap30, changed state to up
Mar 12 15:16:08.597: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap30, changed state to up
Mar 12 15:16:10.146: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1f:e0
Mar 12 15:16:10.147: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:d6:30
Mar 12 15:16:10.148: %LINK-3-UPDOWN: Interface Capwap27, changed state to up
Mar 12 15:16:10.821: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:cc:d6:30
Mar 12 15:16:10.821: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 1c:1d:86:ee:7b:40
Mar 12 15:16:10.824: %LINK-3-UPDOWN: Interface Capwap23, changed state to up
Mar 12 15:16:11.148: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap27, changed state to up
Mar 12 15:16:11.824: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap23, changed state to up
Mar 12 15:16:16.727: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 1c:1d:86:ee:7b:40
Mar 12 15:16:16.727: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:62:e0
Mar 12 15:16:16.730: %LINK-3-UPDOWN: Interface Capwap4, changed state to up
Mar 12 15:16:17.729: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap4, changed state to up
Mar 12 15:16:21.617: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:62:e0
Mar 12 15:16:21.617: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:bf:50
Mar 12 15:16:21.618: %LINK-3-UPDOWN: Interface Capwap1, changed state to up
Mar 12 15:16:22.619: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap1, changed state to up
Mar 12 15:16:23.266: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP dc:a5:f4:61:bf:50
Mar 12 15:16:23.266: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:c0:a0
Mar 12 15:16:23.268: %LINK-3-UPDOWN: Interface Capwap15, changed state to up
Mar 12 15:16:24.268: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap15, changed state to up
Mar 12 15:16:26.127: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:c0:a0
Mar 12 15:16:26.127: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1d:c0
Mar 12 15:16:26.128: %LINK-3-UPDOWN: Interface Capwap22, changed state to up
Mar 12 15:16:27.128: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap22, changed state to up
Mar 12 15:16:27.919: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:67:1d:c0
Mar 12 15:16:27.920: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:a7:e0
Mar 12 15:16:27.921: %LINK-3-UPDOWN: Interface Capwap31, changed state to up
Mar 12 15:16:28.922: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap31, changed state to up
Mar 12 15:16:30.051: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b8:a7:e0
Mar 12 15:16:30.051: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:a4:29:00
Mar 12 15:16:30.053: %LINK-3-UPDOWN: Interface Capwap18, changed state to up
Mar 12 15:16:31.054: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap18, changed state to up
Mar 12 15:16:32.695: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 34:db:fd:a4:29:00
Mar 12 15:16:32.695: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:67:40
Mar 12 15:16:32.697: %LINK-3-UPDOWN: Interface Capwap21, changed state to up
Mar 12 15:16:33.697: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap21, changed state to up
Mar 12 15:16:34.336: *%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:a1:67:40
Mar 12 15:16:34.336: *%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP d0:c7:89:b4:d0:20
Mar 12 15:16:34.339: %LINK-3-UPDOWN: Interface Capwap3, changed state to up
Mar 12 15:16:35.339: %LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap3, changed state to up -
Web Authentication on HTTP Instead of HTTPS in WLC 5700 and WS-C3650-48PD (IOS XE)
Hello,
I have configured a Guest SSID with web authentication (captive portal).
wlan XXXXXXX 2 Guest
aaa-override
client vlan YYYYYYYYY
no exclusionlist
ip access-group ACL-Usuarios-WIFI
ip flow monitor wireless-avc-basic input
ip flow monitor wireless-avc-basic output
mobility anchor 10.181.8.219
no security wpa
no security wpa akm dot1x
no security wpa wpa2
no security wpa wpa2 ciphers aes
security web-auth
security web-auth parameter-map global
session-timeout 65535
no shutdown
The configuration of webauth parameter map is :
service-template webauth-global-inactive
inactivity-timer 3600
service-template DEFAULT_CRITICAL_VOICE_TEMPLATE
voice vlan
parameter-map type webauth global
type webauth
virtual-ip ipv4 1.1.1.1
redirect on-success http://www.google.es
I need to login on web authentication on HTTP instead of HTTPS.
If I login on HTTP, I will not receive certificate alerts that prevent the users connections.
I saw how to configure it with 7.x relesae but I have IOS XE Version 03.03.05SE and I don´t know how to configure it.
Web Authentication on HTTP Instead of HTTPS
You can login on web authentication on HTTP instead of HTTPS. If you login on HTTP, you do not receive certificate alerts.
For earlier than WLC Release 7.2 code, you must disable HTTPS management of the WLC and leave HTTP management. However, this only allows the web management of the WLC over HTTP.
For WLC Release 7.2 code, use the config network web-auth secureweb disable command to disable. This only disables HTTPS for the web authentication and not the management. Note that this requires a reboot of the controller !
On WLC Release 7.3 and later code, you can enable/disable HTTPS for WebAuth only via GUI and CLI.
Can anyone tell me how to configure web authentication on HTTP instead of HTTPS with IOS XE?
Thanks in advance.
Regards.The documentation doesn't provide very clear direction, does it?
To download the WLC's default webauth page, browse to the controller's Security > Web Login Page. Make sure the web authentication type is Internal (Default). Hit the Preview button. Then use your browser's File > Save As... menu item to save the HTML into a file. Edit this to your liking and bundle it and any graphics images up into a TAR archive, then upload via the controller's COMMAND page. -
ISE 1.2 - WLC 5508 (7.5x) - Windows 7 802.1X
Hi ,
We deployed ISE 1.2 (patch 3) with 5580 WLC to authenticate machines and users using 802.1x .
We are experiencing a strange issue - randomly some machines authenticate fine over wireless and we are able to see logs on ISE and nexst day the same machine stops authenticating itself and ISE doesnt generate any log.. seems like somehow no request is coming to ISE.
we have checked all the settings including wireless settings ,services, 802.1x settings on the laptop but struggling to find the a reason why randomly machine would work and then not work.
whenever a machine works we see all the logs but when a machine doesnt work no log is generated in ise.
has anyone experienced a similar issue?
ThanksThanks, we have figured it out.
Machine Auth timer would expire after 12 hours and ISE had another setting where it would blacklist the client and supress logs for an hour if it sees more then certain amount of failed authentication attempts.
Thanks -
We are deploying ISE 1.2 for wireless only and have been experiencing a lot of issues with central web auth on controllers on version 7.4MR2. It appears we are hitting a bug, but I am curious what others on ISE 1.2 have found as the best stable WLC code to use? Has anyone been experiencing issues on 7.4 specific to CWA and web redirect? We are encountering a problem where users are getting constantly thrown back to the guest portal page after about 5 to 10 minutes after successfully logging in. Thanks.
Hi,
I have been running 7.4.115.0 on a production system for over 6 months with no visible issues. The 7.4.115.0 patch is a special release to fix Apple iOS7 captive portal bypass. Other than that, 7.4.110.0 was pretty stable.
You might consider changing the Guest WLAN session timeout on the advanced page on the WLAN in the WLC to a higher number which may fix your re-authentication issue every 5-10 minutes.
Maybe you are looking for
-
AMD Switchable Graphics crashing Illustrator CC 2014
I have recently updated Illustrator to CC 2014 and I am unable to open any files or create new ones since then. It says the graphic card is not supported, however, it was supported and fully working in Illustrator CC Here's the system info: Component
-
NI-XNET nxBlink() what session type to use ?
What session to pass to nxBlink() NI-XNET function ? I tried to pass sessions obtained from: - nxCreteSession(..., nxMode_FrameInStream, ...) - nxCreteSession(..., nxMode_FrameOutStream, ...) But I get error. The nxBlink() help only says use "The XNE
-
Error message for promotion download
Responding to email about 10g download and 2-day training, this message persists, despite being registered within the Oracle system. Sorry, Unexpected Condition. (Error Document 500) If you aren't already a member visit our registration page and sign
-
SB Live 5.1 Un-install process h
What do I need to do to completely un-install the card and software from my computer... Thanks.
-
Benchmark tests!!!! Galaxy S3 vs iPhone5 !!!!!!
Benchmarks were run between the two phone: the 4 tests were (1) Speedtest.net, (2) Geekbench, (3) Sunspider JavaScript Benchmark, and (4) GL Benchmark. The link below has the Youtube video running all test! MUST SEE!!! iPhone 5 zips past Galaxy SI