Access Points Joining 3850 next generation switches

It's my understanding that APs can join 3850s if and only if the APs are directly connected to ports on the 3850 next generation device.
Can someone point me to where this is explained?

CB90021204 - APs indirectly connected to a 3850 (connected to a downstream switch) will not join the 3850
Q. Does the Cisco Catalyst 3850 support indirectly connected access points?
A. No. The Cisco Catalyst 3850 switch will always terminate the CAPWAP tunnel locally. Pass-through mode or indirectly connected access point is not supported at this time.
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps12686/qa_c67-722110.html

Similar Messages

Access points joining different WLC

hi
i have a wireless controller module( NME-AIR-WLC25-K9) installed in a Cisco 2851 ISR, this setup is in my remote site, we are connected through MAN network. In our main office i have a cisco 4402 wireless controller. so whenever i install a AP in my remote site instead of joiining the remote site WLC, the access point joins my main office 4402 controller, i dont why it is happening, the AP is not even trying to join the remote site WLC.. i have not configured high availability and both these controller are in separate RF network.
the firmware version in NME-AIR-WLC25-K9 is 7.0.98.0 ...
the version in the other controller is 6.0.196.0
Please let me know what is else i need to check asap
Thanks
karthik

Hi,
Did you even see the AP trying to join the local controller? If the controller are in different domains, the AP will prefer the remote controller since it join that one first. Since you are running 5.2, try configure on the AP the primary controller with the name, and local IP address of the local controller, and then reboot the AP. See if after that the AP join. run debug capwap events enable to see if you see the AP event trying to join the controller.
Regards,
Manuel

Access Points Joining Random WLC

My environment contains 4 seperate controllers. 1 controller in the datacenter which remote offices use with HREAP and discover this WLC using DNS We will call this Controller WLC1. 2 more controllers (WLC 2 and WLC 3) in the corporate headquarters to support >40 access points in a N+1 configuration and finally an anchor controller which doesnt matter in this post.
What I am experiencing is Access points in the Corporate office are using DHCP option 43 to discover the WLC2. every night or after long periods of time a random number of my access points are either rebooting or most likely sleeping. Then are attaching them selves to WLC 1 which is in the datacenter and is not supporting DHCP from that location which to clients make the wireless network seem to be down.
I think that with using a hybrid of DHCP and DNS is partly my issue but it shouldnt be. I have primed all the Access point to look at primary controller WLC1 and secondary controller WLC2 both by name and using the IP address of the respective management ports.
Can there be any explaination for this and why this seems to be so random?
WLCs are 5508
Corporate Access points are 1142
***EDIT
After some more investigation this isnt completely random rebooting the access points in question are connected to a new 4506-E chassis with the Sup 6-E while the other access points are connected to a 6509-E.. not sure how much this matters but I am seeing in the access point logs that about every 2-3 hours they are accessing DHCP again and sometime not successfully. Is there some EnergyWise or power savings happening on the 4500 possibly??

I understand that all and here is a screen shot (see attached) of an ap that was on WLC 2 last night at midnight when i wrote this orginally and now how jumped to WLC 2.. The major issue here is that WLC 1 does not give out DHCP because it is used for HREAP and remote office that have other local DHCP servers.
I am running code 6.0.199.4
Now yes all controllers WLC1,2,and3 are in the same mobilty group. Maybe I should move the WLC1 out of the mobility group and that might solve the issue. Here is a log too. See timing is 3 hours and then its trying to find another controller. I see a retransmission count exceeded here. What can cause that? I have 4 port LAG configured on both WLC2 and WLC3 and they are both on seperate 6500 switches. This access point is on a seperate floor connected to a 4500 with uplink to each of the 6500's
**********LOG from Access Point***********
*Oct 14 02:41:21.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.104.210.21 peer_port: 5246 This Is correct
*Oct 14 02:41:21.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Oct 14 02:41:21.826: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.104.210.21 peer_port: 5246
*Oct 14 02:41:21.827: %CAPWAP-5-SENDJOIN: sending Join Request to 10.104.210.21
*Oct 14 02:41:21.827: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Oct 14 02:41:21.911: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Oct 14 02:41:22.047: %CAPWAP-5-CHANGED: CAPWAP changed state to UP
*Oct 14 02:41:22.052: %LWAPP-3-CLIENTEVENTLOG: Received AP Syslog IP Address(255.255.255.255) configuration.
*Oct 14 02:41:22.173: %CAPWAP-5-JOINEDCONTROLLER: AP has joined controller nwcp01-1211-02b
*Oct 14 02:41:22.254: %LWAPP-3-CLIENTEVENTLOG: SSID Roswifi added to the slot[0]
*Oct 14 02:41:22.255: %DOT11-4-NO_HT: Interface Dot11Radio0, Mcs rates disabled on vlan 1 due to WMM is not enabled
*Oct 14 02:41:22.257: %LWAPP-3-CLIENTEVENTLOG: SSID RosGuest added to the slot[0]
*Oct 14 02:41:22.259: %LWAPP-3-CLIENTEVENTLOG: SSID Roswifi added to the slot[1]
*Oct 14 02:41:22.261: %LWAPP-3-CLIENTEVENTLOG: SSID RosGuest added to the slot[1]
*Oct 14 02:41:22.263: %DOT11-4-NO_HT: Interface Dot11Radio1, Mcs rates disabled on vlan 1 due to WMM is not enabled
*Oct 14 02:41:22.263: %DOT11-4-NO_HT: Interface Dot11Radio1, Mcs rates disabled on vlan 2 due to WMM is not enabled
*Oct 14 02:41:22.264: %DOT11-4-NO_HT: Interface Dot11Radio0, Mcs rates disabled on vlan 2 due to WMM is not enabled
*Oct 14 02:41:22.274: %WIDS-6-ENABLED: IDS Signature is loaded and enabled
*Oct 14 05:57:40.164: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(CAPWAP_ECHO_REQUEST
., 3)
*Oct 14 05:57:40.164: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE
*Oct 14 05:57:40.164: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.104.210.21:5246 *** This is correct
*Oct 14 05:57:40.206: %WIDS-6-DISABLED: IDS Signature is removed and disabled.
*Oct 14 05:57:40.207: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Oct 14 05:57:40.207: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Oct 14 05:57:50.229: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 14 05:57:49.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.98.10.20 peer_port: 5246 **This is the controller it should never get on.
*Oct 14 05:57:49.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Oct 14 05:57:49.844: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.98.10.20 peer_port: 5246
*Oct 14 05:57:49.845: %CAPWAP-5-SENDJOIN: sending Join Request to 10.98.10.20
*Oct 14 05:57:49.845: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Oct 14 05:57:49.930: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Oct 14 05:57:50.078: %CAPWAP-5-CHANGED: CAPWAP changed state to UP
*Oct 14 05:57:50.078: %LWAPP-3-CLIENTEVENTLOG: Received AP Syslog IP Address(255.255.255.255) configuration.
*Oct 14 05:57:50.206: %CAPWAP-5-JOINEDCONTROLLER: AP has joined controller nep00WLC00e
*Oct 14 05:57:50.293: %LWAPP-3-CLIENTEVENTLOG: SSID Roswifi added to the slot[0]
*Oct 14 05:57:50.298: %LWAPP-3-CLIENTEVENTLOG: SSID RosGuest added to the slot[0]
*Oct 14 05:57:50.303: %LWAPP-3-CLIENTEVENTLOG: SSID Roswifi added to the slot[1]
*Oct 14 05:57:50.309: %LWAPP-3-CLIENTEVENTLOG: SSID RosGuest added to the slot[1]
*Oct 14 05:57:50.414: %WIDS-6-ENABLED: IDS Signature is loaded and enabled

Limiting access points joining a specific WLC

Hello Cisco Forum Team!
I am currently installing a new WLC in a VLAN/IP segment that already has WLCs configured and access points registered. I do not want existing ap's on this VLAN to join this new WLC. Which is the best way to limit ap's joining this new WLC?
I am thinking of some sort of AP authorization list but by IP address instead of MAC address due to the high amount of ap's currently registred on the existing WLCs (approx. 300 ap's).
Thanks in advanced for your support!

AP authorization list would work but you have to use MAC address & cannot use IP address for that. Once you enable AP authorization you can add AP mac to the list like below using CLI.
(5508-1) >config auth-list add mic <AP1 mac>
(5508-1) >config auth-list add mic <AP2 mac>
(5508-1) >config auth-list add mic <APn mac>
HTH
Rasika
**** Pls rate all useful responses ****

Lightweight access-point joined the wireless controller but no radio channels

a customer wireless controller 2106 he use access-point AIR-LAP1252G-E-K9 the access point the leds indicate
etherner and radio is blinking green and status is green.
please help i am in the customer company now

The AP1252 has higher power requirements than some of the Cisco PoE switches provide. Depending on the switch you are plugging them into you will get enough power to power up the device and connect to a controller but not enough to power up the antennas. Options that can work include:
1) Removing one of the antennas if you are not gonig to use it (or as a temporary workaround to get some wireless)
2) Using an external power supply
3) Using an external inline power appliance system that supplies enough power (http://www.microsemi.com/powerdsine/ is one example).
4) Depending on the type of switch you are connecting to you may be able to upgrade code to provide a higher amount of power to the port. For instance, a Catalyst 6500 by default supplies 15.8 watts of power to a port. But if you upgrade the code to 12.2(33)SXH2? I believe you can get 16.8 watts of power and this is enough to bring up both antennas on the AP. But even then you don't have enuf power to run the upper N speeds - I think anything above 72 Mbps is unattainable.
Other AP models such as the 1140 have lower power requirements and may work better for you.

Access Points Joining

Dear sir/ma,
I have bought a wireless LAN controller and access points of 10 qty
Item Name
Quantity
AIR-CT5508-12-K9
1
CON-SNT-CT0812
1
LIC-CT5508-12
1
LIC-CT5508-BASE
1
PI-MSE-PRMO-INSRT
1
AIR-PWR-5500-AC
1
SWC5500K9-72
1
AIR-PWR-CORD-UK
2
AIR-CAP2602I-E-K9
10
CON-SNT-C262IE
10
SWLAP2600-MESH-K9
10
AIR-AP-BRACKET-1
10
AIR-AP-T-RAIL-R
10
but the access points are not joining the controller. please what could be the cause of this?
please find the attached file for the configuration output.
br
kuku

Hi,
For the Mesh APs, you must enter the MAC address in the MAC filter which is found in
Security > AAA > MAC Filtering. Note that Outdoor Mesh APs, the MAC address is the BVI mac address, for Indoor Mesh, it is the Ethernet MAC address.
Also, if you're using DNS for controller discovery, create a pointer record in your DNS with the following:
CISCO-CAPWAP-CONTROLLER.domainname - IP address of WLC

How do i ensure the new access point is joined the controller or not

How do i ensure the new access point is joined the controller or not

To Verifying that Access Points Join the Controller or not there are two ways as below.
Please go through the step by step to find the APs joined state
When replacing a controller, you need to make sure that access points join the new controller.
Using the GUI to Verify that Access Points Join the Controller
Follow these steps to ensure that access points join the new controller.
Step 1 Follow these steps to configure the new controller as a master controller.
a. Click Controller > Advanced > Master Controller Mode to open the Master Controller Configuration page.
b. Check the Master Controller Mode check box.
c. Click Apply to commit your changes.
d. Click Save Configuration to save your changes.
Step 2 (Optional) Flush the ARP and MAC address tables within the network infrastructure. Ask your network administrator for more information about this step.
Step 3 Restart the access points.
Step 4 Once all the access points have joined the new controller, configure the controller not to be a master controller by unchecking the Master Controller Mode check box on the Master Controller Configuration page.
Using the CLI to Verify that Access Points Join the Controller
Follow these steps to ensure that access points join the new controller.
Step 1 To configure the new controller as a master controller, enter this command:
config network master-base enable
Step 2 (Optional) Flush the ARP and MAC address tables within the network infrastructure. Ask your network administrator for more information about this step.
Step 3 Restart the access points.

Cisco WLC 2125 and AIR-LAP1252AG-A-K9 access points

We are running into a little issue here and looking for some help. We have the Controller configured and it appears to be working properly the issue we are running into is that we can only get the above mentioned access points to only join the controller if they are plugged directly into the controller. I would assume that we should be able to plug these access points into any of our switches and they should be able to join the controller correct? Obviously there has to be a configuration issue somewhere and am hoping someone can point us in the right direction.

WAP to Switch - Access port
WLC to Switch - dot1Q trunk on the switch and tagged on the WLC side

Can't find my Airplay - using Airport Express as an Access Point

Hi,
i've a slight problem with my airport express. i build a network with an easybox 803 router as base and an airport express as an access point in the next room. the airport led shows me that is all fine (green light). but i can't find the airplay service. I suspect that my macbook connects to the base and not to the access point.
now i want to know: how can i config my mac or my airport express, so that i can find the airplay service
best regards and thx for your help

Solved.
I had likely the same problem. It was solved by replacing the home router internal connections with a real switch.
Many home routers will not properly multicast the required Airplay/Bonjour multicasts. Netgear and D-Link for instance does not work, although some ASUS routers work if you turn off IGMP snooping and fiddle with the firewall, but only with some firmware, so it is very iffy.
So, in my case, I connect Internet modem <-> router <-> switch <-> access points <-> devices
Works without any problem. Also the wired devices connect to the switch.
Do not connect any Airplay devices to the router!

Setting up wireless Cisco Access Points independently and network layout

Hello,
I am technician in a school. I have been asked to upgrade wireless system in school. Currently I am using VDSL2 30Mbps line. I am using E4200 Router, which is providing internet services. The school has 3 floors. On one floor I have this router which is further attached with 16 port gigabit unmanageable switch. The same router is providing wireless service on the same floor using Class C ip address. From the switch I have extended a cable and took it on to another (second floor), where I have got one more gigabit switch. From that switch I have connected one router using different subnet and further i have attached two access points for the entire floor, which is working ok. From the same switch I have extended one more cable up to third floor where I have connected one more access point. So, 3 access points on three floors, 2 switches and two router. This is the current network layout.
Now school have decided to go over to fiber. ISP is going to put Juniper router and going to create vlan and will configure access restrictions. School will have 100Mbps unlimited up and download speed. Its because of increase in number of students. School is still waiting for the router and configuration to be done.
I have got 4 cisco 1602i access points (AIR-SAP1602I-Z-K9). These access points are POE supported. I have got one 8 port POE switch also. When I got these 4 cisco I didnt get power adapters with them. First I want to ask, is this normal. Don't they usually come with power adapter. I know they are POE, but cisco doesn't send them with power adapters.
Second I want to ask, if these access points can work independent without WLAN controller. Or do i have to have WLAN controller.
As fiber is not up yet so, for the time being I have connected these access points with POE switch using Cat5E cable and then further connected the POE switch with normal gigabit switch, which is further conneted with router at this point.
Please tell me if I am doing it correctely. I will also be needing help with the configuration.
Can anyone tell me how to setup these access points independently for current situation to provide internet access. How to set them on different channels etc......
Also want to know if there is any software that can detect access points and can help me manage these access points.
I shall be thankful.
Sarab

DUPLICATE POST
Sent from Cisco Technical Support iPhone App

Problem with PowerBook (but NOT MacBook) and two access points on network

I recently installed a wall-plugged ethernet adapter system (Netgear XE104 and XE103) and plugged a wireless access point (Netgear WPN802) into one of the adapters (in the part of our house where we lacked a wireless signal) in order to extend the range of our (DSL) wireless network. I configured this new access point--disabled DHCP, assigned an IP address to the access point that does not fall into the wireless router's IP adress range, put the wireless router and access point on different channels (6 and 11), and made sure the router and access point had the same SSID.
I have had no problems using the resulting setup with our new MacBook--everything goes as planned. BUT I am having a terrible time with my PowerBook G4. It has a really strong signal everywhere, but when I open my browser it says that I am not connected to the internet. The problem seems to be that my PowerBook refuses to change channels once it connects to one. I installed iStumbler to see if I could manually control which access point/channel the PowerBook uses, and, while I can track the signal strengths for both access points, I can't get my PowerBook to switch from one access point to the other.
I've tried just about everything I can think of. I suppose I could try giving a different SSID to the access point (and then try to switch with the airport menu in the toolbar), but I would like to avoid this if possible.
I would really appreciate any advice you have. Thank you!

Can you connect if you temporarily turn off WEP or WPA?
This will determine if it is a WEP or WPA issue.
Does your PC support WPA, from both a hardware and a software perspective?
The problem you are having probably lies with the encryption key.
Accessing a Airport Network with a Windows XP PC or laptop (with XP SP2)
http://tech.ifelix.net/1011.html
Accessing a Airport Network with a Windows XP PC or laptop (with XP SP1)
http://tech.ifelix.net/1010.html
Problems connecting an XP PC to an Airport Base Station
http://tech.ifelix.net/2002.html
iFelix

VLANs thru a 350 Access Point

I'm considering use of 350 access points connected to Catalyst 4000 switches with a few Symbol phones & Call Manager. There may also be some (few) wireless PC cards also connecting thru the same APs. On my wired network, the phones, gateways, etc are on separate VLANs than the data devices. Is this possible using wireless APs? Do APs know anything about trunking or VLANs or is this strictly up to the switch port to which they are connected?

Is that true?
I had that question too before. I did call Cisco Tac, but they confirm me that was not supported.Because the Vlan trunk frame is a little difference with normal ethernet frame, so the AP doesn't recogonize it ,and will drop it.
Actaully it is simmilar as you put a hub between a trunk line, the trunk doesn't work with that.
In theory , it is reasonable not to work with vlan trunk, but I didn't do any lab to test it.
Icarr , are you really sure it works? There is not any problem ?
Thanks

Wifi - Handoff Among Access Points

Hi,
I have a wireless router and two access points in my house with the same SSID and security configured. The problem is that when I'm roaming throughout my house, the Charge will not automatically connect to a stronger access point when the signal of the one I'm currently connected to becomes very weak. I've done extensive searching on this issue and have gone so far as to replace my wireless hardware with those of the same make/model to no avail. Does anyone know a solution?
Thanks!

I'm fairly certain it is a limitation of the Droid Charge(my current device). My wife has the HTC Thunderbolt and her father has a Droid X. They roam between our access points just fine. All of our laptops are seamless as well. Both of us previously had the Motorola Droid which has the same issue.
I'm using two routers running DD-WRT. Same SSID/Security.
CH1 - Netgear WNDR3700 v2 >> DD-WRT v24-sp2 (06/14/11) std - build 17201
CH6 - Linksys E4200 >> DD-WRT v24-sp2 (06/14/11) big - build 17201
Here are some links. We are not alone...
Support Samsung Galaxy S on Froyo - cannot handover between WiFi Access Points automatically
wifi AP handover/switching
Roaming between multiple wifi access points with same SSID?
Issue 12649: WIFI roaming not working.

How do I setup an Access Point/Repeater on FIOS

I have a MI424WR-GEN2 router/modem from Verizon. Since Verizon installed it in the basement, my wi-fi at various other points is not the strongest. I do have cat-5 in various parts of the house. So, I'd like to add one of my old routers to the network and have it act as an access point or repeater (not sure if there is a difference between the two designations). I'm technical enough to be dangerous and do damage but I wasn't having any luck doing this ... for one, I can't even figure out how to access it to program it since 192.168.1.1 is the verizon router.
I have three choices for a device:
(1) Linksys WRT54GS
(2) Linksys BEFW11S4
(3) Netgear RangeMAx DGND3300 (my preferred choice because it has B/G/N as options)
Help please!
Thank you!

Ok, it is working, more or less. But there seems to be a connectivity or reliability issue. For some reason, and it seems to only be on my laptop (but perhaps because the others in my house aren't on engough and haven't noticed an issue?).
I periodically lose connectivity but the network is not down. I turn off my laptop wi-fi, wait a few seconds, and turn it back on.
I suspect this is something to do with competing protocols ... I don't know, and Verizon didn't confirm, if their router support b/g AND n. The netgear supports b/g/n. Also, the Netgear is dual band. Right now, the netgear, as an access point, has both 2.4Ghz (11g) and 5Ghz (11n) SSIDs set to the same name. Should they be different? In which case, do we need an additional wi-fi to recognize? It doesn't appear as if I can disable one of them.
For the time being, the netgear access point is right next to the laptop. COuld the proximity cause a problem? I've never had that issue before but trying to identify anything!
Any thoughts?
Thanks!

An Error Occurred while trying to join "my wireless access point"

Hi,
I've been using wireless access for a year and never had a problem connecting.
But starting yesterday I get a +*An Error Occurred while trying to join "my wireless access point", Please try again.+* Message.
I have 2 Mac's and have no problem connecting with the other one. It’s just the IMac.
I tried everything including resetting router, changing password, adding a $ to the password, accessing without password, deleting the whole air port and create a new one, but still getting the same message.
I might need to add, while I was working with the IMac I didn’t use wireless for a few hours, but when I got back to my browser I noticed that I was connected to a different wireless service. (FONFREEINTERNET if it matters) I have no idea why, since I didn’t change it.
Anyways, I tried to switch back to my access point, but it wouldn’t let me. It’ll just give me the +*An Error Occurred while trying to join "my wireless access point", Please try again.+* Message.
Funny is when I use the FONFREEINTERNET access point the internet seems to work fine.
I could look up Google without a problem, but when I tried to connect to Facebook for example it won’t let me. Instead a FONFREEINTERNET page will pop up with some options on how to pay! (by minute/or day/or week…)
I get the strange feeling that they planted some kind of bug/virus!!!
I don’t know what else to do.
Anyone knows that problem? What can I do?
Any help is greatly appreciated!
I researched on FONFREEINTERNET, there’s a spot close to my house/guess that’s the one I used…
http://maps.fon.com/ ZIP CODE 904-0113 and you’ll see a coffee pod, which is about 2 minutes walk from my house.

Hello Tesserax,
I get the same error message again...
I tried the 3 suggested steps again, but unfortunately it did not work.
After a Restart, Sleep or just the awaking from Screensaver mode I’m disconnected from my wireless Network anymore.
Even if the Computer was asleep for just a second!
I am able to fix the problem temporarily with Network Preferences → Assist me → Diagnostics
Choose Airport → Choose network → Enter Password (Even if I check safe password it’ll ask me every time) → and than usually all lights on the left menu switch from red to green and I get the popup message “A Network Change has been detected. Your Internet seems to work fine.” (similar - I’m at work and don’t remember exactly)
And it works fine…until the screensaver comes on or it sleeps again
I have the Problem with my IMac and Mini but the IMac at least remembers my password…
Any Ideas
I’m connected through a Buffalo WZR2-G300N wireless router

Access Points Joining 3850 next generation switches

Similar Messages

Maybe you are looking for