5508 controller 8 ports ?

I am looking to configure if, 5508 controller's ports particularly in different VLANs and pull cable from the port and put it in L3 to it's belonging VLAN ? and at the same time all the different SSID will work as usual our standard and best practice that we do.

you could but then you are limiting yourself to 1G of connectivity.
You'd probably be better served by just ether channeling the ports that connect to the WLC and tagging the vlan/dynamic-interfaces so you can have up to 8G of aggregate bandwidth.
HTH,
Steve

Similar Messages

HA SKU, HA controller ports down.

Hi Friends,
Hope you all are doing good.
I have a situation.
I am deploying an HA controller for an already existing 5508 controller. I finished the configuration. tried enabling the AP SSO.
Some how it din't work well. HA went to maintenance mode.
So I disabled the AP SSO on the HA. now the redundancy status is ACTIVE.
But, my management port is down. I can't ping the gateway.
I am trying to use the GUI, no use.
Please share your thoughts.
I have attached the "run-config" of the HA controller.
Thank you.

Hi,
Sorry for the delay. I was in to other project.
Regarding the software code, both the controllers are same. 7.4.121.0.
I did follow the AP SSO guide.
Can someone just cross check the log file to see the configuration is correct. I know, its too much to ask.
I am planning of resetting the HA and configuring it again.

Channel-Group on 5508 Controller

Ok .. I have an odd question regarding creating channel groups to connect 5508 controllers to my network.
Today I have a single 5508 Controller and it is attached to the network using two interfaces configured as a channel group. I am in the process of adding a second controller to be an HA for the existing controller. Here is my question. Do I simply add the interfaces of the new controller to the existing channel group or do I need to create a unique channel group for the new secondary controller? I am thinking that the channel groups are basically a point to point type connection and are basically connection specific right?
Brent

Assuming you aren't doing VSS. I keep the channel numbers the same on both side.
See below:
A-SIDE
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SD) -
200 Po200(SU) - Gi7/9(P) Gi7/10(P)
201 Po201(SU) - Gi7/11(P) Gi7/12(P)
250 Po250(SU) - Gi3/15(P) Gi3/16(P)
6500-A#
B-SIDE
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SD) -
200 Po200(SU) - Gi7/9(P) Gi7/10(P)
201 Po201(SU) - Gi7/11(P) Gi7/12(P)
250 Po250(SU) - Gi3/15(P) Gi3/16(P)
6500-B#

5508 Controller & Muliticast

have a Cisco 5508 controller (version 6.0.199.4) that when I enable global multicast mode it will work for an hour or two and then it will kill the network. All internet both wired and wireless, access to server everything dead. I then have to directly connect to the service port and disable the global multicast mode. Then two reasons for enabling it are Docs2Go and LanSchool both require multicast to be enabled. I have it enabled on our wired network and it works OK there. I am probably just missing something stupid. Any thoughts or suggestions would be greatly appreciated.

On the Controller tab.
so if you're not setting a multicast address, then you are running in Unicast mode.
Multicast - Unicast - This is the easiest method to use. When the WLC receives a Multicast packet, it replays that packet to every AP that is connected. Now this does work, but can be very network intense, as every AP gets the stream. So if you have 100 AP, there are 100 streams, 300 AP 300 streams.
Mulicast - Multicast - This is the better method to use. With this method, the AP will join to a multicast group, that you configure, preferably in the 239.x.x.x administratively scoped space. Now when the WLC gets a mutlicast packet, it replays it once to the group.
Now, the WLC side is easy. Select Mutlicast - Multicast and configure your group, each WLC in your mobility group should use a unique address. For the WLC you are done.
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

AIR-CAP1602i cannot join a WLC 5508 controller

Hello,
I'm managing a large number of access points on a Cisco wlc 5508 controller.
We've recently purchased a bunch of new AIR-CAP1602I-E-K9.
note that we already have AIR-CAP1602I-E-K9 and other models in production.
These A.P are not able to join the controller for some reason, I've tried a lot of different things but I am now at a loss.
I have checked the regulatory domain, upgraded the FUS, manually upgraded the software version of the LAP to match the version on the other A.P.
I even downgraded/upgraded the WLC code (version 7.4.x and 8.0)
I use the dhcp option 43 to to send the controller IP.
Here are the info that can help:
errors:
#on A.P
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
#on WLC
Lwapp join request rejected (WLC version 7.6.130.0)
Failed to add database entry (WLC version 8.0)
WLC sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
System Name...................................... XXX
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... XXX
Last Reset....................................... Software reset
System Up Time................................... 6 days 4 hrs 16 mins 27 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180
Configured Country............................... Multiple Countries:CA,FR
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +41 C
External Temperature............................. +22 C
Fan Status....................................... OK
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 7
Number of Active Clients......................... 1977
Burned-in MAC Address............................ A4:93:4C:B0:E4:C0
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 250
AP sh version
AP58f3.9cb8.3701#sh version
Cisco IOS Software, C1600 Software (AP1G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Fri 22-Aug-14 10:56 by prod_rel_team
ROM: Bootstrap program is C1600 boot loader
BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
AP58f3.9cb8.3701 uptime is 31 minutes
System returned to ROM by power-on
System image file is "flash:/ap1g2-k9w8-mx.152-4.JB6/ap1g2-k9w8-mx.152-4.JB6"
Last reload reason:
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco AIR-CAP1602I-E-K9 (PowerPC) processor (revision B0) with 229366K/32768K bytes of memory.
Processor board ID FGL1832X5QU
PowerPC CPU at 533MHz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.6.100.0
1 Gigabit Ethernet interface
2 802.11 Radios
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 58:F3:9C:B8:37:01
Part Number                          : 73-14671-04
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC183171L4
Top Assembly Part Number             : 800-38552-01
Top Assembly Serial Number           : FGL1832X5QU
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP1602I-E-K9
AP sh inventory
NAME: "AP1600", DESCR: "Cisco Aironet 1600 Series (IEEE 802.11n) Access Point"
PID: AIR-CAP1602I-E-K9 , VID: V01, SN: FGL1832X5QU
Thanks for your help !

Hi Olivier,
The error messages that you have on the debugs:
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
It is related to the bug: CSCuh46442
https://tools.cisco.com/bugsearch/bug/CSCuh46442/?referring_site=ss
This bug is resolved in version : 8.0.100.0
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn80.html#pgfId-1163951
Can you please paste here "show ap auth-list" from the controller CLI?
I suggest to enable MIC if it is not enabled, and then check if the AP's will join or not.
Kind Regards
Mohammad Setan

Getting disconnected randomly (5508 controller, 3300 series LAPs)

I am at one of our remote offices and I am noticing my laptop, despite excellent signal strength is periodically losing IP connectivity on the wireless network. When it drops, all of my IP connectivity stops (pings fail, RDP sessions "await reconnection", etc...). The lower right corner still shows I'm connected to the hidden WPA2 Enterprise SSID. The only way to reconnect is to select disconnect on it, then click connect again. Immediately everything IP based starts working.
There is a 5508 controller in the headquarters. The site I am at has a 30mbps fiber point to point WAN to the headquarters. This site has 2 x 3300 series LAPs which are very good coverage. H-REAP mode is on so traffic terminates at the local office because it is more efficient than traversing the LAN twice for things like local file and print sharing, dhcp, proper active directory sites and services mapping, etc...
The 5508 has a 2008 R2 server running NPS to do radius authentication and it verifies a domain certificate. To be on the wireless you have to be a member of the domain.
Seems to not give me any problems at the home office so any idea's?
On the 5508 I see this around the times I lose IP connectivity:
*Dot1x_NW_MsgTask_4: Jan 08 14:00:53.599: #DOT1X-3-INVALID_WPA_KEY_MSG_STATE: 1x_eapkey.c:861 Received invalid EAPOL-key M2 msg in START state - invalid secure bit; KeyLen 24, Key type 1, client 88:53:2e:xx:xx:xx
*Dot1x_NW_MsgTask_4: Jan 08 14:00:52.551: #DOT1X-3-INVALID_WPA_KEY_MSG_STATE: 1x_eapkey.c:861 Received invalid EAPOL-key M2 msg in START state - invalid secure bit; KeyLen 24, Key type 1, client 88:53:2e:xx:xx:xx
*Dot1x_NW_MsgTask_4: Jan 08 14:00:52.387: #DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication Aborted for client 88:53:2e:xx:xx:xx
I have 0 (unlimited) as the max for user login policies so not sure why Authentication Aborted message appears.
WLC Software version
7.4.100.0
On the NPS server (2008 R2) I just see my username granted access because it matches the network health policy.
Laptop Sony VAIO SE2
Intel Centrino Advanced-N 6230
Driver version 15.1.1.1 Date: 3/12/2012

Well I'm going to try to move the EAP-Broadcast Key Interval back. It was set to 3600 which in seconds equals 1 hour. Seems like not only my laptop but others now have been reporting that every hour on the dot, they stop passing IP traffic. The regular users just reboot, while people "in the know" disconnect and reconnect, and they are good for an hour.
Towards the bottom of this thread here:
https://discussions.apple.com/thread/3753111?start=0&tstart=0
They suggested this.
I ran this
(Cisco Controller) >config advanced eap bcast-key-interval 86400
Now when I show advanced eap I get this:
EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 1000
EAPOL-Key Max Retries............................ 4
EAP-Broadcast Key Interval....................... 86400
I just will take note if this fixes the problem or not. If it does not maybe I will return it back to the default 3600.
Your idea of a hidden SSID in the clear to rule out auth issues is a good one, but security wise I don't want an open SSID - hidden or not for an hour in public places. Sure I could throw it on a VLAN with just one server and run a continuous ping... but I'm at the home office now which never has this issue.
Seems like when it's time for the key to be renewed, I'm thinking the renewal handshake at remote sites is just not making it back to the controller. However the initial key handshake when you first boot up or associate to the SSID goes over the WAN no issue. I only say this because at the home office where the WLC is physically located, there is no issue.
The WANs are a minimum of 10mbps over a Ethernet Virtual Private Line which is a busness level service provided by Verizon.
Some WLC info:
Product Version.................................. 7.4.100.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 6.0.182.0
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS

Third-Party access to AP health-information over 5508 controller

Hello,
Situation:
Third-Party Tool (Whats up gold) has connectivity to a 5508 controller, only.
There is no connectivity to the remote LAP access-points from the third-party tool.
Is it possiply to get the health information (AP available or not) over a controller via SNMP?
Sven

Just to elaborate on what Steve is saying:
The SNMP monitoring of APs is still through the WLC itself. You would be pulling this information out of the WLC not via reachability to the AP itself from your tool.
Or you could use Whatsup for just an IP reachability (ping) of the AP which would require interaction with the WLC.
Can Whatsup be a trap receiver? I believe the WLC will send TRAPs for AP up/down events which I would think you could query off of.....

Import 5508 Controller Config from NME-AIR-WLC25?

Greetings!
For 3 years now, I've been using an NME-AIR-WLC25 controller with an ever-increasing number of AP's (reaching the 25 limit a few months ago). As part of a new construction project, I'm adding 5 more AP's onto my network. As a result, I purchased a 5508 controller with a 50AP license to get me started.
My question is simple-- is it possible to import the WLC25's configuration to the 5508? I have a feeling the answer is no, but I figure it can't hurt to ask, and if I'm lucky it will save me quite a bit of time configuring this new controller.

Yes, I'm running 7.0.116.0 on the WLC25 today, so that sounds promising.
I've already downloaded the config file from the WLC25, and I did notice it looked pretty basic command-line, so I was certainly hoping that to be the case.
If the 5508 firmware is newer (I haven't even unboxed it yet), do you expect I'd run into trouble importing the old config, or should I version match first, import, then upgrade to latest?
Any other gotchas I should look out for in doing this?

Centralized 5508 controller

Have a design question regarding 5508 controller. (500 ap license)
Running a mix of 1042 and 1602 AP's, ~150 per site.
DHCP / subscriber authentication / etc is performed locally at each site.
Is it possible to locate a 5508 centrally and use with 1040/1600 series AP's across a layer 3 network or VPN back to the central site?

Yes it is possible, configure ur WLAN for local switching & local auth with remote branch AP in FlexConnect mode
Sent from Cisco Technical Support iPad App

Cisco 5508 controller

I have Cisco 5508 controller in our high school. I changed the password for one of our WLANs yesterday.(WLANs>WLANs>WLAN in question (in my case OBSD-Internal)>Security>Layer 2. For some reason it reverted back to the previous password ( this was confirmed by a client attempting to connect). What could possibly cause this?

Hi Sean,
May be you did not saved the config on WLC(After changing the password).
Regards

Cannot join AP to 5508 controller

Hi all
We have an infrastructure with a Cisco 4402-50 controller. We've just installed another controller, a 5508, and WCS as an "umbrella" to control the systems.
I have trouble joining some AP's to the 5508 controller. Note that all AP's connect fine to the older 4402 controller. It seems that our older AP's join fine, but the newer 1142 models just won't join. As far as as I can tell both controllers have exactly the same configuration (except for IP-adresses and such of course), I've even used configuration templates in WCS to ensure this.
If I go to Monitoring-->Statistics-->AP join on the 5508 controller, it says that the reason is "RADIUS authentication is pending for the AP". I don't understand this, because I've not set up any RADIUS authentication for AP's (only clients). I use MIC's and a local MAC database on the controller to authenticate the AP's.
Btw, the software controller version is 6.0.188.0.
Thanks in advance for any response!

Hi leolaohoo, and thanks for your response.
I've tried to configure the 5508 as primary, but that didn't cut it.
However, I've just fixed the problem by upgrading the firmware on the 5508 to 7 (ED), that - for some reason - did the trick.
This problem is now solved.

Minimum connection speeds 5508 controller and 2602E APs

We have an applicaiton that is sensitive to network speeds. Is there a way to guarantee a minimum wireless network speed such as 100 MBs utilizing a 5508 controller and 2602e APs?

We have an applicaiton that is sensitive to network speeds. Is there a way to guarantee a minimum wireless network speed such as 100 MBs utilizing a 5508 controller and 2602e APs?
Not easy. Wireless is a shared medium. This means if one client talks, everyone else has to stop and wait for their turn.
It's like doing video. Video is time-sensitive. If you put a single AP in a room (granted you've got full 1Gbps ethernet access all the way), and you get 25 people continuously streaming videos, then you'll see some impact. Bring the number down to say, 8 to 10 and you'll see improvements.
What kind of application are we talking about here?

Ask for help :( "%ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/17: Power given, but Power Controller does not report Power Good"

This question is used a translator....
Current conditions
- SW1 ----- Power injector ------ AP(cisco is not another model)
- Port, AP, Power injector, Switch <-> Injector UTP cable Problems occur even after replacement
- Power injector <->AP UTP canle No exchange
- Poe was OFF the function. This is because it is being used for Power Injector. -> Do not generate failure logs
- But even if another AP is turned ON POE function, no error messages.
SW1#show logging (5 mins cycle persists)
May 4 10:37:32.527: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/17: Power given, but Power Controller does not report Power Good
May 4 10:37:42.556: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/17, changed state to down
May 4 10:37:43.562: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/17, changed state to down
May 4 10:37:50.032: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/17, changed state to up
May 4 10:37:52.046: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/17, changed state to up
May 4 10:38:03.238: %ILPOWER-7-DETECT: Interface Gi1/0/17: Power Device detected: IEEE PD
SW1#show cable-diagnostics tdr interface gi 1/0/17 <----- Issues AP
TDR test last run on: May 04 10:49:14
Interface Speed Local pair Pair length Remote pair Pair status
Gi1/0/17 1000M Pair A 84 +/- 10 meters Pair B Normal
Pair B 84 +/- 10 meters Pair A Normal
Pair C 84 +/- 10 meters Pair D Normal
Pair D 84 +/- 10 meters Pair C Normal
SW1#show cable-diagnostics tdr interface gigabitEthernet 1/0/18 <--------- Normal AP
TDR test last run on: May 04 11:01:04
Interface Speed Local pair Pair length Remote pair Pair status
Gi1/0/18 1000M Pair A 92 +/- 10 meters Pair B Normal
        Pair B 92 +/- 10 meters Pair A Normal
   Pair C 92 +/- 10 meters Pair D Normal
      Pair D 92 +/- 10 meters Pair C Normal
SW1#show cable-diagnostics tdr interface gigabitEthernet 1/0/1 <--------- Normal AP
TDR test last run on: May 04 11:01:56
Interface Speed Local pair Pair length Remote pair Pair status
Gi1/0/1 1000M Pair A 79 +/- 10 meters Pair B Normal
   Pair B 79 +/- 10 meters Pair A Normal
      Pair C 79 +/- 10 meters Pair D Normal
    Pair D 79 +/- 10 meters Pair C Normal
SW1#show power inline <-------- (Check every 5 seconds)
Module Available Used Remaining
(Watts) (Watts) (Watts)
1 370.0 200.2 169.8
Interface Admin Oper Power Device Class Max
(Watts)
SW1#show power inline | in 17
Gi1/0/17 auto off 0.0 n/a    n/a 30.0
SW1#show power inline | in 17
Gi1/0/17 auto on 15.4 Ieee PD   0 30.0
SW1#show power inline | in 17
Gi1/0/17 auto on 15.4 Xirrus XR2426, 1.0G 0 30.0
SW1#show power inline | in 17
Gi1/0/17 auto faulty 0.0 n/a n/a 30.0
SW1#show power inline | in 17
Gi1/0/17 auto off 0.0 n/a n/a 30.0

Plug the Xirrus AP directly to the switch port and see if the logs go away or not.

Cisco 5508 Controller 5GHz band selection

hi,
today i installed one Cisco 5508 Controller with 1262 APs only with 5GHz antennas. all radios are came up excpet 5ghz band, i tried all my level of best to get it UP. can anybody tell me if there is anything we need to really inspect to enable 5 GHz band.
Anvar

hi Nocolas,
please find below answers, and attached snapshot
1) what is your AP exact model ? -A ? -E ?
Ans:-    AP Model No - AIR-LAP1262N-A-K9
2) What country did you configure your WLC for ?
Ans:-    Saudi Arabia
3) did you enable 802.11a network on the "wireless" tab ?
Ans:- Yes
4) if you go to the AP radio list on the WLC, what does it say for your AP ? up ? down ?
Ans:- 802.11a/n Radios      DOWN
          802.11 b/g/n Radios UP
Thanks,
Anvar

New software for the 5508 controller -when?

Hi,
Anyone have a clue when the new software for the 5508 controller is going to be released?

I hope they have resolved the bug CSCte01087 present in software 6.0.188.0. since my 1252 can't associate to the controller i had to downgrade to 6.0.182.0.

5508 controller 8 ports ?

Similar Messages

Maybe you are looking for