AIR LAP1142N DHCP Issue

Hi All,
We have an  autonomous AIR-LAP1142N-E-K9 AP with software release version 12.4(25d)JA1.
The access point is configured and an SSID is broadcasted. However when users are trying to connect to the AP, authentication seems to be accepted but users are not connected. I suspected the issue in DHCP but even on static IP the user is not connected.
I dont believe any LAN issue is there cause I connected a PC to the same interface where the AP is connected and it took an IP from the required VLAN (1234)
Config Below
Building configuration...
Current configuration : 4096 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP
logging rate-limit console 9
enable secret 5 $1$OFqX$0AQEOwhX6umUJGjeg9BYW0
no aaa new-model
dot11 syslog
dot11 ssid WIRELESS
   vlan 1234
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 044809015E731F1A5C4F
crypto pki trustpoint TP-self-signed-4079972194
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4079972194
revocation-check none
rsakeypair TP-self-signed-4079972194
crypto pki certificate chain TP-self-signed-4079972194
certificate self-signed 01
  3082023A 308201A3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 34303739 39373231 3934301E 170D3032 30333031 30303133
  31375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30373939
  37323139 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100D396 EE65F06D 87E10642 280B0742 AC9CCFF9 AC242C94 4DF146CC 5F3EA127
  7800A3BD D93343E2 BB5999C8 D2576298 33BC5787 3E26B5CF CC9048D2 DB3F4F5F
  FED7EC3C 5CC3DD7E 236ABBA2 D7D88AF9 F9732062 D1A2A92F 9448403D A9064900
  C728D700 FAF634E2 58DA1B58 D8B65D57 A84A9B71 04495B39 B919CC0A B51266EE
  A8930203 010001A3 62306030 0F060355 1D130101 FF040530 030101FF 300D0603
  551D1104 06300482 02617030 1F060355 1D230418 30168014 0537595B CCAD328D
  F8A96B71 7504DDD5 B18A6549 301D0603 551D0E04 16041405 37595BCC AD328DF8
  A96B7175 04DDD5B1 8A654930 0D06092A 864886F7 0D010104 05000381 81005373
  E7975701 5359B622 34EF441C 128529DC 5D666DDD 5DB559D8 D2745F57 653DA577
  0D0F986A 20F401AA 67A4D9EC B8D5585A 603413FC 52D31A05 84DB1F6D C20DE77A
  0548AB83 8CFA0234 24F996DE BE34CC42 EF25880D 46660F90 E0E6ACA7 DBEBA764
  7163E929 C55C7BB3 AA06E4F2 D7576730 78333965 FEC581D1 B0861C71 8DBE
  quit
username Cisco password 7 072C285F4D06
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 1234 mode ciphers aes-ccm tkip
ssid WIRELESS
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.1234
encapsulation dot1Q 1234
no ip route-cache
bridge-group 255
bridge-group 255 subscriber-loop-control
bridge-group 255 block-unknown-source
no bridge-group 255 source-learning
no bridge-group 255 unicast-flooding
bridge-group 255 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
encryption vlan 1234 mode ciphers aes-ccm tkip
ssid WIRELESS
antenna gain 0
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1.1234
encapsulation dot1Q 1234
no ip route-cache
bridge-group 254
bridge-group 254 subscriber-loop-control
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface GigabitEthernet0.1234
encapsulation dot1Q 1234
no ip route-cache
bridge-group 254
no bridge-group 254 source-learning
bridge-group 254 spanning-disabled
interface BVI1
ip address 10.1.1.20 255.255.255.0
no ip route-cache
ip default-gateway 10.1.1.1
ip http server
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
line con 0
line vty 0 4
login local
end

Problem is solved, in the web I had to enable Radio0-802.11N2.4GHz under Services>VLAN

Similar Messages

  • Issue with Ciso AIR-LAP1142N-A-K9 AP configuration

    I have trouble accessing the internet from my laptop after installing Ciso AIR-LAP1142N-A-K9 AP.
    The  AP are connetected to my router (which has a DHCP enabled) via a switch  and each has a Fix IP address with network mask, gateway and DNS  already configured. When I triy to connect to the access point, only the  IP address and network mask are automatically assigned to the my  laptop. and I have to manually input the gatway and DNS to be able to  navigate the internet.
    I would like to know which configuration  will allow any node that tries to connect the internet via the access  point to be automatically configured to access the internet after  authentification.
    I will appreciate any help in solving the issues.
    Best Regards,

    are you using vlan's ? if so trunk the ports that the AP's are connect to.
    Sent from Cisco Technical Support iPad App

  • AIR-LAP1242G-E-K9 do not work with AIR-CT5508-K9 while AIR-LAP1142N-E-K9 do

    Hello,
    we do have a site where we need to deploy AIR-LAP1142N-E-K9 and AIR-LAP1242G-E-K9 APs. We have two AIR-CT5508-K9 controllers with SW version                  6.0.188.0.
    AIR-LAP1142N-E-K9s work okay, as expected, we do not have any problems with them.
    However AIR-LAP1242G-E-K9s do not, there is a problem with establishing CAPWAP tunnel with the controller.The AP is seen on the controller for a while, with 0 time up-time, cannot change any settings on the AP via controller, and after a while it disapears from the controller, apears again and this repeats.
    The APs and controllers are connected to the LAN campus.
    Controllers via two 1G links configured as Etherchannel to WS-C6506-E VSS switch with s72033-ipservicesk9_wan-vz.122-33.SXI1.bin on it.
    APs to WS-C3750G-48PS with c3750-ipbasek9-mz.122-50.SE2.bin on it. 3750 is connected to the C6505 via two 1G links configured as Etherchannel.
    Below I copied the log I captured on 1242 and the controller. Highlighted ones are the ones which I think might bring a clue.
    I performed some troubleshooting steps.
    - As we have some other controllers available over WAN, I  tested the 1242 AP  with 2100, 4400 and also with the same model AIR-CT5508-K9 with SW version                  6.0.188.0 over WAN and this worked always okay.
    - I wanted to be sure that I eliminate any kind of out of sequence packet issue, so I brought down all redundancy L2 links so that the L2 path from the AP to the controller was only through one leg links.
    - I also brought the second controller down to eliminate potential issue with having two of them up.
    - The AP gets its IP from DHCP configured on the C6506 switch, I am always able to ssh to AP, so the IP connectivity does not seem to be an issue.
    - I have more 1242s, all behave in the same way. I also connected them to some other 3750 switches we have in the campus, always the same.
    - As this seems to be maybe a kind of ssl issue, I tried to play with controller settings, like enabling Accept... options  under Security/AP Policy,but this did not help.
    - I also tried to reboot the controller, no improvement.
    - The APs came from the factory, so in the beginning everything was factory default in them. They were always able to download the image from the controller in the very initial phase. I still do have some of them untouched, so I can perform any troubleshooting steps with the fresh one.
    I can reproduce this, can also send debugging logs if needed.
    Any idea on what could be wrong is highly appreciated.
    Thank you.
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    This Discussion has been converted into document:- https://supportforums.cisco.com/docs/DOC-23054
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    AIR-LAP1242G-E-K9 10.0.13.28 log
    *Mar  1 00:00:05.922: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
    *Mar  1 00:00:07.536: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot1 1Radio 0
    *Mar  1 00:00:07.672: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 304 messages)
    *Mar  1 00:00:09.809: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:09.874: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA2, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Mon 02-Nov-09 18:42 by prod_rel_team
    *Mar  1 00:00:09.874: %SNMP-5-COLDSTART: SNMP agent on host wuen4028 is undergoing a cold start
    *Mar  1 00:00:09.964: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Mar  1 00:00:09.967: bsnInitRcbSlot: slot 1 has NO radio
    *Mar  1 00:00:10.191: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:10.191: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:10.430: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:00:10.818: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Mar  1 00:00:11.212: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:18.315: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.0.13.28, mask 2 55.255.255.0, hostname wuen4028
    *Mar  1 00:00:28.988: Logging LWAPP message to 255.255.255.255.
    *Mar  1 00:00:31.456: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:00:31.495: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:32.457: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:32.457: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 started - CLI initiated
    *Mar  1 00:00:38.810: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:00:47.811: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:00:56.812: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLLER
    *Mar  1 00:01:07.815: %CAPWAP-3-ERRORLOG: Selected MWAR 'wuen4001'(index 0).
    *Mar  1 00:01:07.815: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Feb 11 07:52:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.13.5 peer_port: 5246
    *Feb 11 07:52:24.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 11 07:52:25.441: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.13.5 peer_port:  5246
    *Feb 11 07:52:25.443: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.13.5
    *Feb 11 07:52:25.443: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 11 07:52:25.445: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 10.0.13.5
    *Feb 11 07:52:25.445: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Feb 11 07:52:25.445: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Feb 11 07:52:25.445: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.0.13.5
    *Feb 11 07:52:30.441: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.13.5
    *Feb 11 07:52:30.442: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 10.0.13.5
    *Feb 11 07:52:30.443: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Feb 11 07:52:30.443: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Feb 11 07:52:30.443: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.0.13.5
    *Feb 11 07:52:47.644: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Feb 11 07:53:23.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.0.13.5:5246
    *Feb 11 07:53:24.000: %CAPWAP-3-ERRORLOG: Selected MWAR 'wuen4001'(index 0).
    *Feb 11 07:53:24.000: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Feb 11 07:52:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.13.5 peer_port: 5246
    *Feb 11 07:52:24.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 11 07:52:24.001: %DTLS-5-PEER_DISCONNECT: Peer 10.0.13.5 has closed connection.
    *Feb 11 07:52:24.001: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.0.13.5:5246
    *Feb 11 07:52:24.002: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
    *Feb 11 07:52:24.123: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    wuen4028#
    AIR-CT5508-K9 10.0.13.5 log
    *Feb 11 09:00:54.824: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:2171 Failed to c
    omplete DTLS handshake with peer 10.0.13.28
                                               *Feb 11 08:59:53.798: %DOT1X-3-MAX_EA
    P_RETRIES: 1x_auth_pae.c:2862 Max EAP identity request retries (3) exceeded for
    client 00:1f:3b:93:dd:4f
    *Feb 11 08:59:51.197: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:c0:a8:e1:b1:71
    --More-- or (q)uit
    *Feb 11 08:59:21.212: %RRM-3-RRM_LOGMSG: rrmChanUtils.c:292 RRM LOG: Airewave Di
    rector: Could not find valid channel lists for 802.11bg
    *Feb 11 08:58:39.766: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:2171 Failed to c
    omplete DTLS handshake with peer 10.0.13.28
                                               *Feb 11 08:57:06.131: %RRM-3-RRM_LOGM
    SG: rrmChanUtils.c:292 RRM LOG: Airewave Director: Could not find valid channel
    lists for 802.11bg
    *Feb 11 08:56:24.504: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:2171 Failed to c
    omplete DTLS handshake with peer 10.0.13.28
                                               *Feb 11 08:55:09.693: %DOT1X-3-MAX_EA
    P_RETRIES: 1x_auth_pae.c:2862 Max EAP identity request retries (3) exceeded for
    client 00:1f:3b:93:dd:4f
    *Feb 11 08:54:51.040: %RRM-3-RRM_LOGMSG: rrmChanUtils.c:292 RRM LOG: Airewave Di
    rector: Could not find valid channel lists for 802.11bg
    *Feb 11 08:53:56.493: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmis
    sions exceeded for client 00:1f:3b:93:dd:4f
    *Feb 11 08:53:34.497: %DTL-3-OSARP_DEL_FAILED: dtl_arp.c:1380 Unable to delete a
    n ARP entry for 10.0.13.28 from the operating system. ioctl operation failed
    *Feb 11 08:52:35.936: %RRM-3-RRM_LOGMSG: rrmChanUtils.c:292 RRM LOG: Airewave Di
    rector: Could not find valid channel lists for 802.11bg
    *Feb 11 08:52:26.492: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmis
    sions exceeded for client 00:1f:3b:93:dd:4f
    *Feb 11 08:50:07.680: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmis
    sions exceeded for client 00:1f:3b:93:e6:57
    *Feb 11 08:48:37.458: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:1f:3b:93:e6:57
    *Feb 11 08:47:37.438: %DOT1X-3-MAX_EAP_RETRANS: 1x_ptsm.c:426 Max EAP retransmis
    sions exceeded for client 00:1f:3b:93:e6:57
    *Feb 11 08:47:34.438: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:16:44:1d:0f:53
    *Feb 11 08:46:32.422: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:407 Max EAPOL-ke
    y M3 retransmissions exceeded for client 00:16:44:1d:0f:53
    *Feb 11 08:46:06.790: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:1f:3b:95:61:bd
    *Feb 11 08:46:06.789: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication abor
    ted for client 00:1f:3b:95:61:bd
    *Feb 11 08:46:06.210: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:1f:3b:93:e6:57
    *Feb 11 08:45:34.304: %DOT1X-3-MAX_EAP_RETRIES: 1x_auth_pae.c:2862 Max EAP ident
    ity request retries (3) exceeded for client 00:1f:3b:95:61:bd
    *Feb 11 08:45:34.303: %DOT1X-3-ABORT_AUTH: 1x_bauth_sm.c:447 Authentication abor
    ted for client 00:1f:3b:95:61:bd
    *Feb 11 08:45:01.298: %RRM-3-RRM_LOGMSG: rrmChanUtils.c:292 RRM LOG: Airewave Di
    rector: Could not find valid channel lists for 802.11bg
    *Feb 11 08:44:38.076: %SIM-3-PORT_UP: sim.c:9547 Physical port 2 is up!.
    *Feb 11 08:44:38.037: %SIM-3-PORT_UP: sim.c:9547 Physical port 1 is up!.
    --More-- or (q)uit
    *Feb 11 08:44:38.009: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'cliWebInitParms.cfg'
    *Feb 11 08:44:37.980: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'rrcEngineInitParms.cfg'
    *Feb 11 08:44:37.980: %CNFGR-3-INV_COMP_ID: cnfgr.c:2105 Invalid Component Id :
    Unrecognized (81) in cfgConfiguratorInit.
    *Feb 11 08:44:37.928: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'rfidInitParms.cfg'
    *Feb 11 08:44:37.915: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'dhcpParms.cfg'
    *Feb 11 08:44:37.903: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'bcastInitParms.cfg'
    *Feb 11 08:44:37.834: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'rrmInitParms.cfg'
    *Feb 11 08:44:27.331: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'apfInitParms.cfg'                                            
    *Feb 11 08:44:27.226: %MM-3-MEMBER_ADD_FAILED: mm_dir.c:903 Could not add Mobili
    ty Member. Reason: IP already assigned, Member-Count:1,MAC: 00:00:00:00:00:00, I
    P: 0.0.0.0
    *Feb 11 08:44:27.023: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'mmInitParms.cfg'
    *Feb 11 08:44:27.013: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'aaaapiInitParms.cfg'
    *Feb 11 08:44:27.011: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'pemInitParms.cfg'
    *Feb 11 08:44:26.898: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'dot1xInitParms.cfg'
    *Feb 11 08:44:26.868: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'capwapInitParms.cfg'
    *Feb 11 08:44:26.718: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'spamInitParms.cfg'
    *Feb 11 08:44:25.650: %SSHPM-3-FREAD_FAILED: sshpmlscscep.c:1395 Error reading f
    ile /mnt/application/lscca_pem.crt
    *Feb 11 08:44:06.435: %SYSTEM-3-FILE_READ_FAIL: nvstore.c:422 Failed to read con
    figuration file 'sshpmInitParms.cfg'  

    Thanks for such quick response and suggestions.
    Yes, I seem not to to be 100% perfect as for the list of troubleshooting steps I took.
    I had already tried the two commands you mentioned. I tried again, this time with some other 1242, but these do not help.
    Yes, I was already thinking that this could be in theory a licensing issue. The controller is bougth with 25 licenses.
    In the beginnign I had one 1142 on it and tried to enable 1242s which did not work. Now I have five 1142s on it, as this worked okay, I guess it could not be a licensing issue.
    I think that I can see in the log files that the machines communicate to each other, L2 or L3 paths seem to be working okay. I forgot to mention that I am using option 43 on the DHCP server, so the AP clearly finds its way to the controller. What's more both APs and the controllers are in the same VLAN, so they are in the same broadcast domain.
    Below is sho ver from the AP. The AP seems to have Certificate type - manufacture installed, so I guess there should not be a problem with the certificate, especially knowing that the AP works with other controllers over WAN.
    My guess these messages seen on AP especially "Invalid event 38 & state 3 combination" might tell us what's wrong.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman";
    mso-ansi-language:#0400;
    mso-fareast-language:#0400;
    mso-bidi-language:#0400;}
    *Feb 11 07:52:24.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 11 07:52:24.001: %DTLS-5-PEER_DISCONNECT: Peer 10.0.13.5 has closed connection.
    *Feb 11 07:52:24.001: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.0.13.5:5246
    *Feb 11 07:52:24.002: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
    *Feb 11 07:52:24.123: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is not established.
    Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA2, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2009 by Cisco Systems, Inc.
    Compiled Mon 02-Nov-09 18:42 by prod_rel_team
    ROM: Bootstrap program is C1240 boot loader
    BOOTLDR: C1240 Boot Loader (C1240-BOOT-M) Version 12.4(13d)JA, RELEASE SOFTWARE (fc2)
    AP9caf.ca00.1c78 uptime is 17 minutes
    System returned to ROM by power-on
    System image file is "flash:/c1240-k9w8-mx.124-21a.JA2/c1240-k9w8-mx.124-21a.JA2"
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-LAP1242G-E-K9    (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
    Processor board ID FCZ135082GH
    PowerPCElvis CPU at 262Mhz, revision number 0x0950
    Last reset from power-on
    LWAPP image version 6.0.188.0
    1 FastEthernet interface
    1 802.11 Radio(s)
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 9C:AF:CA:00:1C:78
    Part Number                          : 73-11479-01
    PCA Assembly Number                  : 800-30493-01
    PCA Revision Number                  : A0
    PCB Serial Number                    : FOC13484GYY
    Top Assembly Part Number             : 800-29589-03
    Top Assembly Serial Number           : FCZ135082GH
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-LAP1242G-E-K9
    Configuration register is 0xF
    AP9caf.ca00.1c78#

  • Air-lap1142n Is it dead or just in need of help?

    Hi,
    I have a number of air-lap1142n-e-k9 access points, so far they have all been deployed successfully aprt from this one unit.
    When I deployed it, it joined the wlc as normal, downloaded the image, and I was able to rename it etc.. but then a couple of min's later it's status changed to down. It's details on the wlc had changed to name: blank, mac address 0000.0000.0000
    I've tried restarting it a couple of times with no luck, below is the output from the console:
    Press RETURN to get started!
    *Mar 1 00:00:06.711: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
    *Mar 1 00:00:06.722: *** CRASH_LOG = YES
    Security Core found.
    Base Ethernet MAC address: 50:3D:E5:BE:E8:F8
    *Mar 1 00:00:08.683: ERROR: wait 3 failed
    *Mar 1 00:00:09.190: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
    *Mar 1 00:00:09.199: Unsupported radio found of type 0
    *Mar 1 00:00:09.236: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 1024 messages)
    *Mar 1 00:00:10.295: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar 1 00:00:11.374: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar 1 00:00:11.419: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 12.4(21a)JHB1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2010 by Cisco Systems, Inc.
    Compiled Wed 11-Aug-10 15:45 by prod_rel_team
    *Mar 1 00:00:11.419: %SNMP-5-COLDSTART: SNMP agent on host AP503d.e5be.e8f8 is undergoing a cold start
    *Mar 1 00:13:37.040: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Mar 1 00:13:37.040: bsnInitRcbSlot: slot 0 has venus radio(UNSUPPORT)
    *Mar 1 00:13:37.055: bsnUnlockDevice: not bring radio up: radio 0 is in admin disable state
    *Mar 1 00:13:37.232: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar 1 00:13:37.233: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar 1 00:13:37.235: Writing radio coredump to 'flash:/r0.rcore'
    *Mar 1 00:13:37.407: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar 1 00:13:38.239: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar 1 00:13:48.469: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigned DHCP address 172.31.44.41, mask 255.255.252.0, hostname AP503d.e5be.e8f8
    *Mar 1 00:13:49.264: Interface Dot11Radio0: not starting because stop-on-failure set
    *Mar 1 00:13:55.919: Interface Dot11Radio0: not starting because stop-on-failure set
    *Mar 1 00:13:56.289: Logging LWAPP message to 255.255.255.255.
    *Mar 1 00:13:59.364: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar 1 00:13:59.385: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar 1 00:14:00.384: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar 1 00:14:00.384: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 started - CLI initiated
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (192.168.134.251) (192.168.70.51)
    *Mar 1 00:14:06.925: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar 1 00:14:06.930: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar 1 00:14:16.931: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *May 19 08:07:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.18.1.40 peer_port: 5246
    *May 19 08:07:23.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *May 19 08:07:23.778: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.18.1.40 peer_port: 5246
    *May 19 08:07:23.778: %CAPWAP-5-SENDJOIN: sending Join Request to 172.18.1.40
    *May 19 08:07:23.779: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *May 19 08:07:28.778: %CAPWAP-5-SENDJOIN: sending Join Request to 172.18.1.40
    *May 19 08:08:05.436: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *May 19 08:08:23.000: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 172.18.1.40:5246
    *May 19 08:08:23.040: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *May 19 08:08:23.041: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *May 19 08:08:23.041: bsnInitRcbSlot: slot 0 has venus radio(UNSUPPORT)
    *May 19 08:08:23.046: bsnUnlockDevice: not bring radio up: radio 0 is in admin disable state
    *May 19 08:08:23.077: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *May 19 08:08:24.077: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *May 19 08:08:33.055: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *May 19 08:08:33.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.18.1.40 peer_port: 5246
    *May 19 08:08:33.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *May 19 08:08:33.785: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.18.1.40 peer_port: 5246
    *May 19 08:08:33.786: %CAPWAP-5-SENDJOIN: sending Join Request to 172.18.1.40
    *May 19 08:08:33.786: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *May 19 08:08:38.786: %CAPWAP-5-SENDJOIN: sending Join Request to 172.18.1.40
    I've tried re-imaging the AP a couple of times, with no luck. Is it dead or just in need of help?
    Any ideas.
    Thanks
    Dylan

    Hi,
    We are hitting the software bug and the bug ID is CSCsz56711
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsz56711
    The issue is related to PCI componenet on the AP hardware and log that points to that is..
    bsnInitRcbSlot: slot 0 has venus radio(UNSUPPORT)
    The Replacement is the resolution and please contact your reseller or partner and if ur are the partner then RMA ids the resolution..
    Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
    Regards
    Surendra

  • How can i add and configure a new AIR-LAP1142N-E-K9 Access Point to a AIR-WLC4402-12-K9 WLAN controller

    How can i add and configure a new AIR-LAP1142N-E-K9 Access Point to a AIR-WLC4402-12-K9 WLAN controller

    Thanks alot, that helped me .....
    what about option 43..i am using one wlc and the switch where wlac and APs are connected is playing the role of dhcp server used by APs as there is a dhcp pool configured.  please advise. will the command be
    option 43 hex (f104xxxxxxxxxxxx)  f104 adding to it the management ip address of the wlac in hexadecimal.
    if the ip address is 192.168.10.5  then the command will be
    option 43 hex f104c0a80a05
    please correct me if i am wrong!!!!

  • AIR-LAP1142N: Password required, but none set

    Hello!
    We have a problem with AIR-LAP1142N access points.
    AIR-LAP1142N-E-K9
    Version 12.4(21a)JA
    LAP's are not assotiated with controller yet.
    They get the ip address via dhcp, they are reachable by icmp.
    When I try to telnet, I get 
    Password required, but none set
    Is there any chance to get access to them without using serial port?

    1. in general the AP do not responmd to telnet or ssh, but this depends on the state of the AP and the controller settings
    I am not sure what state a Defaulted AP is in ...
    2. Normally the AP must resolve, via DNS, the record cisco-capwap-controller.YOURDOMAIN.COM
    så make sure you have this in your DNS for that AP (i.e. might be the DNS that the DHCP provide with the IP)
    But this link to CCO, provide you info on how DHCP option 43 can be used.
    (I find the DNS record much more suitable and easy to use)

  • MacBook Air intermittently has issues connecting to websites when wireless shows connected to the internet. The pages show that I am offline, but I can ping Google DNS. Windows PC, iPhone and Android phone have no issue displaying the same web pages.

    MacBook Air intermittently has issues connecting to websites when wireless shows connected to the internet. The pages show that I am offline, but I can ping Google DNS. Windows PC, iPhone and Android phone have no issue displaying the same web pages.How do I solve this issue?

    Go step by step and test.
    1. Power off the router. Unplug it from the wall. Wait a while.
        Plug it back to the wall. Power the router on. Wait until all the lights are lit properly. It will take a while.
        Restart the computer.
        Start up in Safe Mode.
        http://support.apple.com/kb/PH14204
    2. Empty Caches
        Safari > Preference > Advanced
        Checkmark the box for "Show Develop menu in menu bar".
        Develop menu will appear in the Safari menu bar.
        Click Develop and select "Empty Caches" from the dropdown.
    3. Deselect Proxies if selected.
        System Preference > Network > Advanced  > Proxies Tab
        Under "Select Protocol", uncheck any box if selected.
        Click "OK" then  "Apply”.

  • Wierd DHCP Issue

    Hello All,
    I facing a very wierd  DHCP issue and would like to know your thoughts on it.
    I have my wired clients on vlan 1 and wireless cleints(eap-peap) on VLAN 2.
    We are facing an issue where multiple wired clients who were on access port vlan 1 are receiving IP address from wireless subnet(vlan2) -their DHCP server was the WLC virtual gateway IP address(1.1.1.1). This is causing an outage to few wired clients.
    The WLC trunk does not have vlan 1 allowed on its ports and all APs are in local mode and all on access vlan.
    I'm not entirely sure whats causing this, but only way I think this is possible is  that 'A Client' laptop has his network connections  bridged - his wired nic on VLAN 1 and wireless NIC on vlan 2, acting like a WGB, which is causing new wired clients(vlan1) DHCP broadcast request forwared through the bidge mode laptop to AP--> WLC. Do you think this is possible??
    Havent been able to identify which client is causing this issue yet.
    Has anyone faced a similar issue and anyway to block this through WLC/ACS policy?
    Thanks
    Jino

    Hi,
    Might we consider to make use of network monitor to take a look at the traffics for the 1.1.1.1 address?
    How to use Network Monitor to capture network traffic
    Download link here:
    Microsoft Network Monitor 3.4
    Best regards
    Michael Shao
    TechNet Community Support

  • Very weird dhcp issue

    We've started 're-vlanning' our main location here, breaking up depts
    into their own vlans.
    All seems ok so far, aside from a real doozy.
    For the IT vlan, we have one address that will not talk to our web
    content mgmt appliance. It's the 2nd address in our assignable pool,
    and it doesn't matter if it's dhcp or statically assigned, that address
    will not talk to that device.
    That is the *only* device that cannot be reached from this particular
    address in our dept vlan, every other one works fine.
    Any ideas on this?
    Stevo

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    > and it doesn't matter if it's dhcp or statically assigned, that
    > address
    So.... the title of this thread should actually be 'Very weird non-DHCP
    issue', since your own testing confirms this has nothing to do with DHCP?
    If you do a LAN trace on this machine as well as your web content
    management appliance do you see packets on either side? Both sides? If
    not on both sides but you do on the source (workstation) side see
    packets going out, then get LAN traces after each network device
    (switch, router, firewall, etc.) to see when the packets disappear.
    Feel free to post the LAN traces somewhere with descriptions of IPs,
    ports, and what you should be seeing, if you want to post them somewhere
    for review.
    Good luck.
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2.0.18 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
    iQIcBAEBAgAGBQJP4jFPAAoJEF+XTK08PnB55aMP/3Rg9u6LX6jFCXGYuex/oXdS
    NZ/liqfCgjyIcykWWeKGgdtm2I7JZOcFiG8YW2le55mcltvCL1VJW +1VGng4kZER
    0f4hjfyQ3CcQ6HIU3RM6VL5U2Pblb80MsEQe0qo0xgtPXipmjs i7Q0xIv9p0wT7A
    7JMkfgM9tfuI5Yro+BDLfSIkFWicKuKs1sKpNugKalPuyyRrzW IiznoalIKFshon
    a40ETLJVZmngBYfqfeZL9nPNsFlveFNXrDkdbl2WbaprsHtNnA NwZfVUIlc5kOCT
    MknY0GXof4/tk149OVCCLgjEzoRtTIZH0BJTHQwW7ANkWUUNYwi49+Mk46V0o awl
    oe1aA+NK9gl2bWXWLCtTro4ERSVMvkcI0OffytrfcBsqdCKg/g3QPMjV3kiVEULI
    xnSTsqFgOl2qO8qGaL6FJtk39ZBnCwqDPtmoNt93OK4hAhWBuA Xihc+kiQHrwkpO
    O04quZu8qQG6A6qwFDr+r+QqarFR3kielfvi7H6o5iLfZn/sDhvijGOAknJVctH8
    j8fezki9PMznkcT+of2Oe4T99K9fChN2WFSgUKdlpkYSjbkmjP fdbWloou+WBjCm
    7hHwnAbKPPgoN8aPPfw9rG9E+K/0YW2kt4wRu79BEDvF6eMv0UdDPE1qPuw1ttmm
    jg2zzMZDkgIG39A0P3u7
    =+fCy
    -----END PGP SIGNATURE-----

  • Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?

    Hello Wireless Experts,
    I was able to order AIR-OPT60-DHCP on controller based AP AIR-CAP2602I-E-K9 using CCW, but this option is not available on autonomous AIR-SAP2602I access points.
    Is AIR-OPT60-DHCP available on autonomous AIR-SAP2602I access point?
    Thanks.
    George

    That is a feature and only used in lightweight access points. The standalone autonomous access points don't use that. Just follow the configuration guide for your access point to get you started.
    Sent from Cisco Technical Support iPhone App

  • 6500 DHCP ISSUE

    Hello All,
    I am having an issue do DHCP from the 6500, and was hoping someone cant help. So, I tried to setup DHCP from the FWSM to the clients and this worked fine with giving out the IP, however the gateway for devices on the inside is supposed to be the 6500, not the FWSM, which is why the clinets wouldn't get out to the internet. Do I need to set up DHCP relay on the FWSM or does anyone know the way I can setup DHCP on the 6500 to give out IP's to the clients. Again just to reiterate, when I setup DHCP on the FWSM the clinets get the IP's but do not get out to the internet and when I setup DHCP on the 6500 the clients do not get an IP. Also I know tghis is a dhcp issue becasue when I assign a static address on the network the clients get out fine. Thanks in advance for the help!
    6500 Config
    ip dhcp pool TEST
       network 1.1.1.0 255.255.255.0
       default-router 1.1.1.1
       dns-server x.x.x.x y.y.y.y
    FWSM Config
    FWSM/TEST# show run
    interface Vlan3
    nameif outside9
    bridge-group 1
    security-level 0
    interface Vlan203
    nameif inside9
    bridge-group 1
    security-level 100
    interface BVI1
    ip address 1.1.1.4 255.255.255.0
    passwd 2KFQnbNIdI.2KYOU encrypted
    access-list INSIDE1_IN extended permit ip any any
    global (outside1) 1 x.x.x.x
    nat (inside1) 1 1.1.1.0 255.255.255.0
    access-group INSIDE1_IN in interface inside1
    route outside1 0.0.0.0 0.0.0.0 1.1.1.1 1
    FWSM/TEST#

    Hello Alain,
    Thanks for your quick response. I attached a Diagram of the layout. Just to let you know this is an FWSM with many virtual contexts and most including this one that are Transparent. I understand that I need an access-list on both ends to specifiy so the FWSM opens it, I am just having issue because the FWSM sees this as unsual traffic and the access-list needs to be on-point to work. Thank you for the response and I'll look forward to hearing back from you.

  • VRF and DHCP issue

    VRF and DHCP issue
    We have a 6500 ( 12.2 (33) SXH5 ) that has a VRF running for our guest network. On this 6500 resides the DHCP pool with a range defined for our guest network. We have a stack of 3750's (12.2 (46) SE) connected to the 6500 with a L3 connection. The 3750's have a local guest VLAN with its gateway defined in a VLAN interface. This VLAN on the 3750 has an IP helper address pointing to an IP within the VRF on the 6500. When debugging DHCP on the 6500, a request is received and sent back out. The client never receives this request.
    If a static IP is applied, the client is able to communicate anywhere within the VRF successfully (including pinging the IP within the helper-address. As many posts have pointed out - there is no VRF <name> under the ip dhcp pool <name> within the 6500. I am just wondering if anyone else has run into this and what their solution was.
    Thanks.

    Hi,
    I have tested the dhcp server and vrf on Cisco 3640 and it is working without VRF under the ip dhcp pool. Please ensure that you have configured routing for the dhcp-relay agent(VLAN facing dhcp client on 3750 in your case).

  • Macbook Air (Mid 2011) Wired/Wireless DHCP issues

    All,
    I have been attempting to fix a nagging problem with my brand new MBA 'Ultimate' - while at home it connects fine wirelessly and I do not experience any issues (note this is the first SSID it has ever connected to) I have not been able to connect to my office's wireless - I do not pull a DHCP address or connect. In an attempt to rule out the wireless issues everyone has, I purchased the 10/100 Apple RJ-45 (ethernet) adapter and have attempted this morning to connect via a known working patch cable.
    The wired connection fails to pull a DHCP address as well!
    I have followed wifiguru's posts and attempted to disable the firewall, reset the SMC, reset the PRAM, delete the offending plists, changed the network order, etc.
    I do not believe my issue lies on my computer network as multiple other iOS and OSX devices can connect (that are Lion as well)
    Admittedly, I have not attempted to go to another third party wireless location (Starbucks, McD's, etc) but for the wired connection to fail as well and my home wireless (802.11n) connection to work leads me to think I am missing something. I do not believe I should have to reboot my work's wireless router to accept me as a client as well - especially since the wired does not connect.
    Any thoughts?
    Cliffs:
    - mid-2011 MBA Ultimate
    - wireless works at home network (802.11n) - gets DHCP address
    - wireless doesn't work at work (802.11b/g) - no DHCP address
    - wired doesn't work at work (apple adapter) - no DHCP address
    - firewall off/on doesn't matter
    - deleted problematic plists, no change
    I also feel I should add, I'm not computer illiterate by any stretch of the imagination and have used OSX products in the past.

    Really?
    No input at all?

  • 2100 wireless LAN controller intermittant DHCP issue does not respond to clients

    Hi everyone,
    I have been struggling with a difficult problem for some time now:
    The cisco 2100 wlan controller I have is configured with a dhcp scope in the same ip address range as its WLAN. The configuration works and on a good day I have up to 200 clients connecting with out issue. In the web interface they display as associated and authenticated
    On a bad day I find I will begin seeing about 50-80% of all new devices that attempt to join the WLAN show up as associated but not authenticated. These clients end up self assigning themselves a 169.254.0.0/16 (APIPA) address
    When my controller / WLAN enters into this state: if clients leave the WLAN they typically fail to get back on and successfully authenticate. By the end of a day around 80-90% of all devices are essentially without Internet access due to this issue.
    Rebooting the controller and or APs typically makes no difference or makes things worse – although sometimes it appears to resolve the issue. The same holds for disabling the entire wlan for about 10 minutes and then re enabling it.
    Im using 1130 cisco aironet APs with the controller. I have checked extensively for interference and congestion – I think I have congestion – some APs typically host 40 to 90 devices. However as mentioned on a good day the wlan will host 200 devices all day without any issue and some APs will host 50 to 70 devices without major issue.
    I can provide more specifics if anyone should need – eg firmware, IP addresses, exact model numbers etc.
    Please let me know if anyone has seen something like this before ?
    I believe the 2100 is rated to handle up to 350 devices and its recommended not to load a 1130 AP with more than 25 devices ??
    Regards
    Matthew

    Hi Amijad, Hi George:
    Thank you both for your time in considering my situation.
    I will think about implementing an independant DHCP server; im really wondering if the equipment is just overloaded
    - What software versoin the WLC uses?
    Product Version.................................. 6.0.199.4
    RTOS Version..................................... 6.0.199.4
    Bootloader Version............................... 4.0.191.0
    Emergency Image Version.......................... 6.0.199.4
    PID: AIR-WLC2106-K9, VID: V05
    - What ports of the WLC are connected to the neighbor swtich? one or more?
    2 ports connect to the neighbor switch on separate vlans
    - port 1 is vlan 0 and hosts the management and ap-management IPs for the wlan controller
    - port 2 is vlan 1 and hosts the wlan
    - the controller has one dhcp scope defined on port 2 for the WLAN
    - What is the security of your WLAN?
    WPA+WPA2
    AES
    PSK
    - Do you have "DHCP required" enabled on the WLAN?
    yes DHCP required is enabled in the WLAN
    please let me know if you have any additional advice.
    regards
    Matthew

  • Adobe AIR app installation issue due to certificate problem on mac 10.9.5

    Im trying to upgrade and then reinstall an Adobe Air application but get the error message failing to install due to a certificate issue.
    The developer says the fix is to uninstall the app and install again but this also fails.
    Checked my machine clock - saved but that didnt work
    The adobe AIR uninstaller simply says I have the latest version? Cant seem to delete and reinstall although other adobe air apps work so I dont think this is the issue
    I have gone through the troubleshooting guide: Troubleshoot AIR installation | Mac OS but still have the issue?
    Any ideas would be great.

    I suspect your Mac OS install was an in place upgrade from an earlier version. This is something I would never even consider with a production machine.

Maybe you are looking for

  • Can I install a SATA II drive in my iMac?

    Is there a difference between an internal SATA and a SATA II drive? Do both work in an iMac G5?

  • Error while starting the service "oracle client cache"

    hello everyone, I keep getting an error message: while i'm starting the service "oracle client cache " The instruction at 0x7c911e58 referenced memory at 0x00000000. The memory could not be read. please help me in rectifying this error ASAP so that i

  • Message KI102  with BAPI_ACC_MANUAL_ALLOC_POST

    Hi all, I have a problem with the CO-BAPI BAPI_ACC_MANUAL_ALLOC_POST. IN test the BAPI an Error occures: "Control indicators for controlling area xxxx do not exist" Message ki 102 Can anybody help me with this issue? Thank you in advance. Sebs

  • What is iPhoto dump?

    What is iPhoto dump?  I can  find it in finder but I don't know why photos are going there. 

  • Where Are TextEdit Documents Kept?

    I use Mavericks.  I just typed a letter within TextEdit, titled it, and now I can't find the letter.  Where should I be looking?