Ciscoworks2000 and Aironet VxWorks

I have 1200 series access points running VxWorks 12.03T. I have the LAN version of Ciscoworks2000 (assume latest version). The ANI server in Ciscoworks discovers the APs but doesn't recognize them (they show up as unknown). Can the LAN version of Ciscoworks recognize APs with VxWorks or is IOS required?
Note: I know there is a wireless version of Ciscoworks - I want to manage them minimally with the LAN version.

It works now. There has to be a user in the AP with the same name as your community string with SNMP rights.
Thanks!

Similar Messages

Cisco Prime Infrastructure 1.2 and Aironet 1250 + VSS issues

Hi,
I am new to the NCS implementations and configurations. I have one very specific case with Cisco Prime Infrastructure 1.2 and autonomnous APs and several issues with Cisco VSS on 6500 switches.
So here is the version from Prime:
NCS/admin# show version
Cisco Application Deployment Engine OS Release: 2.0
ADE-OS Build Version: 2.0.1.038
ADE-OS System Architecture: x86_64
Copyright (c) 2005-2010 by Cisco Systems, Inc.
All rights reserved.
Hostname: NCS
Version information of installed applications
Cisco Prime Network Control System
Version : 1.2.1.012
IOS version on our APs (which are autonomnous) is:
AP-N-1>show ver
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 11-Aug-11 03:23 by prod_rel_team
Well the issue what we have now is that access point has been added but its not recognized by the NCS prime. I have tried all three versions of SNMP but I get the same result. The SNMP configuration is valid since I use the same for my switching infrastructure. When I enter "debug snmp packets" and "terminal monitor" I can see the SNMP communication between Prime and Aironet 1250 which is standalone.
When I switch to Lifecycle theme and go to Operate > Device Monitor Center I see all devices I have added. The Aironet 1250 is reachable but under collection status I get Managed with Warnings. When I hover over with my mouse I get "None available".
I have successfully added my switching infrastructure in total, which is operating perfectly for Catalyst 2960/3650/3750/4500 series but for 6500 under VSS I have some warnings. The device is recognized by the system which is excellent and all is operational. I get the following errors under Collection Status:
feature_sensor
SNMP request timed out
feature_powerSupplyFanStatus-6k
SNMP request timed out
IdentityCapability
The device is unreachable.
feature_flashdevice
SNMP request timed out
sam_ipsla_feature
The device is unreachable.
What can be done to resolve these issues ? I have attached a screenshot of this particular issue. The affected access point is 172.16.165.241.
Predrag Petrovic

Hi rajeeshp,
Currently I am not allowed to upgrade it because of internal procedures involved in upgrading a specific piece of software (obtaining permissions from various departments). Is it free to upgrade from 1.2 to 1.3 or there is a specific charge for that.
Predrag Petrovic

Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points

Hi Guys,
I would like to go for "Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points 1300". I want the AP to broadcast only 1 SSID. The client find the SSID ->put in his user credential->Raudius athentication->assign him to an specific vlan based on his groupship.
The problem here is that I don't have a AP controller but only configurable Aironet Access Points 1300. I can connect to the radius server, but I am not sure how to confirgure the AP's port, radio port, vlan and SSID.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
I go through some references:
3.5 RADIUS-Based VLAN Access Control
As discussed earlier, each SSID is mapped to a default VLAN-ID on the wired side. The IT administrator may wish to impose back end (such as RADIUS)-based VLAN access control using 802.1X or MAC address authentication mechanisms. For example, if the WLAN is set up such that all VLANs use 802.1X and similar encryption mechanisms for WLAN user access, then a user can "hop" from one VLAN to another by simply changing the SSID and successfully authenticating to the access point (using 802.1X). This may not be preferred if the WLAN user is confined to a particular VLAN.
There are two different ways to implement RADIUS-based VLAN access control features:
1. RADIUS-based SSID access control: Upon successful 802.1X or MAC address authentication, the RADIUS server passes back the allowed SSID list for the WLAN user to the access point or bridge. If the user used an SSID on the allowed SSID list, then the user is allowed to associate to the WLAN. Otherwise, the user is disassociated from the access point or bridge.
2. RADIUS-based VLAN assignment: Upon successful 802.1X or MAC address authentication, the RADIUS server assigns the user to a predetermined VLAN-ID on the wired side. The SSID used for WLAN access doesn't matter because the user is always assigned to this predetermined VLAN-ID.
extract from: Wireless Virtual LAN Deployment Guide
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html
==============================================================
Dynamic VLAN Assignment with RADIUS Server and Wireless LAN Controller Configuration Example
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
==============================================================
Controller: Wireless Domain Services Configuration
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c951f.shtml
Any help on this issue is appreicated.
Thanks.

I'm not sure if the Autonomous APs have the option for AAA Override. On the WLC, I can go into the BSSID, Security, Advanced, and there's a checkbox that I would check to allow a Radius server to send back the VLAN.
I did a little research and it looks like the 1300 may give this option but instead is defined as "VLAN Override". I've found the release notes for 12.3(7)JA5 (not sure what version you're running) that give mention and a link to configuring EAP on page 4: http://www.ciscosystems.ch/en/US/docs/wireless/access_point/1300/release/notes/o37ja5rn.pdf
Hope this helps

7921 and aironet 1200 problem

I have set up a network consist of 2 7921 wireless phones and an aironet 1200 AP. I'm able to scan the network and get connected to the network using my laptop, however, the wireless phones keep prompting 'Locating Network Services' then 'Connection Failed'. My aironet 1200 is running on 802.11G. Is there any steps that I have miss out or is there any competability issue between aironet 1200 and 7921 wireless phones.thanks =]

something is wrong with your flash...you could try to blow it out and install IOS, if the AP will allow you to perform the ctrlZ function during startup. Since you have a VX works code 11.42 the Mode button doesn't work yet.
Read this
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_tech_note09186a008019fea0.shtml#without
and see if this works for you. you will need the 'Upgrade to IOS image v.3' first and then you go from there to a flavor of IOS.
It's an arduous process and may not work anyway, so time might be more important that buying another AP, but give it a shot...

Windows 98 and Aironet 350 PCI Card

I have a complicated question and would really appreciate any input anyone has. I have a network with 12 PC's that are running Windows 98 with Novell Netware. They all have Aironet 350 PCI cards in them. We recently decided to change an older PC out and took out it's Aironet card to install in the new PC which is a Dimension 4400. I install the card and the utilities and drivers and I can get the PC associated to the AP. I then install the Novell client and I can't get authenticated onto the network. I can't even get the Novell login to pop up. I can't even get out onto the internet which I can usually do even if I am not on the network. Neither my network admin nor I were here when these were originally deployed so maybe we are missing a step. Any help would be much appreciated. I would be glad to provide any additional info!
Thanks
Jamie

Thanks for the further info John. I would usually say sure and do it. I am only leary because a week ago this card was happily working in another machine. A interesting point to mention is that when I go into the access point all of my machines on the AP having their IP address in a field called IP Addr./Name and the machine I am having an issue with says unassigned. The last time we had this particular issue we had the network on 40 bit WEP encryption and then got a new card for a machine that could only run 128 bit so we changed the encryption and everything has been fine since. Once again thanks for all of your help!
Jamie

Wireless controller 5500 and aironet 1142

We have a wireless controller 5500 at a hub site. The remote sites are running the aironet 1142 wap in controller mode. We configure dhcp option 43 at the remote isr's and the 1142 remote site waps's join the controller's as they should. The 1142's are getting the subnets from the hub site. Because of this, they are not subject to the web content filtering at the remote site, but rather the filtering at the hub site. We would rather they be subjet to the content filtering at the remote site. Is there a way to have the remote 1142 wap's connecting through, and drawing the subnet from the remote isr, so that they will be subject to the local content filtering.

Convert the WAPs to H-REAP (aka FlexConnect).

Cisco 7920 and Aironet 1100 (Downloading config file)

For some reason the 7920 is trying to Downlaod the config file and can't pass that screen.
It authenticates just fine and the i get the screen "downloading config file" and that's it.
It's been doing the same thig all morning.
Not sure what's going on.
please help.
Call Manager 4.1.3 Aironet 1100
Thanks
Zeek

ok, so i guess after a while, the phone said "upgrading firmware" and after resseting, i got to the screen with the line up.
I still have a problem though.
i can dial a phone, it will call but once someone answer on the other side, the 7920 resets itself.
PLease help.

Guest wifi using RV180 and Aironet 1130AG

How would I configure a "guest" wireless network, with a different key/password, that uses a different subnet than the existing network?
We have a simple 192.168.1.x subnet currently, with the Aironet as our only AP. The Aironet support a "guest" wireless function, but how do I make that work with the RV180?

Good morning
Hi Dave , thanks for using our forum, my name is Johnnatan and I am part of the Small business Support community. In order to configure different wireless subnets in your rv180, first at all you have to create different vlan (subnets) then associate these vlan to a specific SSID in your Aironet, you can configure each SSID with differents passwords, I could help you with the RV180 configuration, in order to configure your Aironet you can post your question in the wireless section so you can have more feedback on your case, in order to create your vlan you can follow these instructions:
http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2902
http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2165
http://www6.nohold.net/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=2152
I hope you find this answer useful,
*Please mark the question as Answered or rate it so other users can benefit from it"
Greetings,
Johnnatan Rodriguez Miranda.
Cisco Network Support Engineer.

HP Journada 7xx and Aironet 1

Hi,
1 quick question. I have a Journada 720 and was hoping that I could go wireless. The only wireless driver available on the unit is for the Aironet or Aironet1. I have done some research and believe I have discovered that his is a Wireless "a" component. Most networks now are wireless G or B. Is it worth spending the money to try to get this item online? I am running wirelss B and G on my home network. Are there compatibility issues?
I may have other questions depending on the answers from here.
Thanks,
Swaff -)

There will be compatibility issues . So go for a new B or G devic

WLC and AIRONET AP1231

Hi everyone, i have a question, i'm trying to configure a WLC 5508 with an access point AIRONET air ap1231g-a-k9, this is possible or the model isn't supported by the WLC?? i read that only LWAP are compatible

You do need a service contract to download any image. This is the image you need...
If you are able to download this, then you need to convert the ap from autonomous to lightweight. Here are the directions for that:
Using a TFTP Server to Return to a Previous Release
http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
https://supportforums.cisco.com/docs/DOC-18268
http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
http://www.youtube.com/watch?v=QQ_NuxdRhQ4
https://supportforums.cisco.com/docs/DOC-14960
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

DHCP Error with WLC 2504 and Aironet 2600 setup across subnets

Hey guys
I have just setup a new WLC 2504 controller to manage a WiFi service that will span 6 geographic locations. The local networks at each location are on different subnets (all 192.168.x.x) and are linked up via IPSEC VPN links, and there is Active Directory spanning the sites, with DNS and DHCP servers running at each location.
I tested the WLC at our main office with a single AP, and it worked fine. The AP set itself up, and wireless devices connect with no probs. Great! Yesterday I headed out to one of our remote sites, and connected an AP to their network - and that seemed to work fine too. Within a few minutes I was able to see the WiFi network I'd setup, and my smartphone connected to it straight away (as I'd rpeviously connected at the main office), so I was pretty happy that all was working well.
This morning however I've had notification that wifi performance at the remote site isn't great. I've got someone to check their ip address, and I've found that their IP address and default gateway match the LAN at the main office where the WLC is based - NOT the LAN where the wireless client is. Obvioulsy this is not ideal!
So I guess my question is, what have I done wrong? (I guess I HAVE done something wrong!?). And how can I get wireless clients at remote sites to pick up an IP from the DHCP server at THEIR site?
Any help would be greatly appreciated!
Thanks!

Hello Tim,
What mode your APs are in? Local mode? or FlexConnect mode?
If local mode, then all the traffic will be tunnelled to the WLC and they'll be same as if you are connecting from the WLC location.
If you use FlexConnect APs (which is recommended for remote sites) you can configure FlexConnect groups on the WLC and add each location in a specific group. In that group you can decide what VLAN the users should be in.
Check this link for FlexConnect group configuration
http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_flexconnect.html#wp1230080
HTH
Amjad
Rating useful replies is more useful than saying "Thank you"

Intel cards and aironet problems

I have SSIDs configured on 1231's to support WPA/WPA2. They work fine with Cisco cards/supplicants but intel proset cards (2915ABG for one / I tried the latest drivers from dell and intel) seem to have issues. They will see the SSID and associate, but never pull down an IP address. ACS server shows it as a passed authentication, the AP shows it as associated and not authenticated. The AP config is below. Can anyone offer any suggestions or explanations? Thanks!
ssid <ssidname>
vlan <vlan#>
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-xxxx
accounting acct_methods
broadcast-key vlan <vlan#> change 600
encryption vlan <vlan#> mode ciphers aes-ccm tkip

I ran into a similar problem on one of my ssid's using the Intel client. That particular ssid is configured for WPA-PSK (TKIP + AES). It turns out the Intel client profiles have a check mark for "personal security" or "enterprise security". For some reason mine would not work with personal security selected. When I enabled enterprise security and selected WPA and TKIP (WPA)it works fine. It does not make sense but that fixed my problem.
R Duke

SG300-28P and aironet access points

Dear support,
does Cisco SG300-28P provide enough PoE to power access points 1550 and 1600?
Thank you

Hi Mireille, it should. The 1550 is 802.3af compliant.
The 1600 may be interesting because it can actually draw up to 15.4 watt of power and you may run into limitations of cable. It is also 802.3af compliant.
-Tom
Please mark answered for helpful posts

Does user traffic pass through Controller and Aironet 1030?

Hi All,
I want to beat out some questions that I cannot find exactly guideline in Cisco. I intend to implement 2 Airespace 2000 controller and some 1010s and one 1030 to my main office and branch office. At present, there is a 512kbps WAN link between this two office. So I don't want to let the traffic within the branch office to pass through the WAN link. Therefore, I intend to use the solution that 1 controller stay in main office to serve the 1010s in main office and 1 controller stay in remote office to serve the 1010s in remote office. But the remote site only needs 1 AP, thus I would like to use one 1030 to stay in branch office and 2 controller stay in main office to perform controller's redundancy. I would like to know Does the clients' traffic pass through the link between 1030 and controller as the same as 1010? I does very confuse whether 1030 has this feature because I found some blur instruction of 1030 in Cisco.
Further, if I place one of the controller in remote office, how can I control the APs in remote office to choose the local controller instead of the controller in main office using Layer 3 discovery method? Does any know? Thanks!
Jason,
best regards,

Hi Jason,
Hopefully this info will clear this up for you;
Q. Can I install an access point (AP) at a remote office and install a Cisco WLC at my headquarters? Does the Lightweight AP Protocol (LWAPP) work over a WAN?
A. Yes, you can have the WLCs across the WAN from the APs. LWAPP works over a WAN. Use Remote Edge AP (REAP) mode. REAP allows the control of an AP by a remote controller that is connected via a WAN link. Traffic is bridged onto the LAN link locally, which avoids the need to unnecessarily send local traffic over the WAN link. This is precisely one of the greatest advantages of having WLCs in your wireless network.
Note: Not all lightweight APs support REAP. For example, the 1030 AP supports REAP, but the 1010 and 1020 AP do not support REAP. Before you plan to implement REAP, check to determine if the APs support it. Cisco IOS Software APs that have been converted to LWAPP do not support REAP.
Q. I want to set up the Cisco 1030 Lightweight Access Point (AP) with a Cisco WLC in Remote Edge AP (REAP) mode. In this mode, is all wireless traffic tunneled back to the WLC? Additionally, if the AP cannot contact the WLC, what happens to the wireless clients?
A. The 1030 AP tunnels all WLC traffic (control and management traffic) to the WLC via Lightweight AP Protocol (LWAPP). All data traffic stays local to the AP. The 1030 REAP can only reside on a single subnet because it cannot perform IEEE 802.1Q VLAN tagging. As such, traffic on each service set identifier (SSID) terminates on the same subnet on the wired network. So, while wireless traffic may be segmented over the air between SSIDs, user traffic is not separated on the wired side. Access to local network resources is maintained throughout WAN outages.
At times of WAN link outage, all WLANs except the first is decommissioned. Therefore, use WLAN 1 as the primary WLAN and plan security policies accordingly. Cisco recommends that you use a local authentication/encryption method, such as the Wi-Fi Protected Access (WPA) Pre-Shared Key (WPA-PSK), on this first WLAN.
Note: Wired Equivalent Privacy (WEP) suffices, but this method is not recommended because of known security vulnerabilities.
If you use WPA-PSK (or WEP), properly configured users are still able to gain access to local network resources even when the WAN link is down.
From this doc;
http://www.cisco.com/en/US/products/ps6366/products_qanda_item09186a008064a991.shtml
Hope this helps!
Rob
Please remember to rate helpful posts.....

Intel 2200BG wifi nic and aironet 1131 LWAPP's

We recently had a nice sized installation of 1131 LWAPPS's (180) w/ WLC's and a WCS. The problem I'm having is out of the blue one day my Dell Latitude D400 w/ intell 2200BG internal wifi just disconnected and I wasn't able to reconnect. I've since formatted and rebuilt the system to ensure it's the latest n' greatest drivers (I'm running 9.0.4.13) from Dell. I checked Intel's site and they have 9.0.3.26 but nothing mentioned about the connection to LWAPP's problem. I can connect at home and other locations just fine. If I put in an external nic, I can connect to the 1131 LWAPP.
Suggestions? Help?
-Rob-

Hi Rob,
My WLC current software version is 4.0.179.8. Please tell us the stability of 4.0.206.0.
I enabled only 802.11b and 802.11g in my LWAPP environment. The LAP model is LAP1242AG-C-K9. Antenna is AIR-ANT4941 (diversity).
I'm using L3 LWAPP transport mode; the two WLCs (within the same Mobility/RF group) are located at a centralized data center while the LAPs are located at a remote office building. WAN is MPLS L3 VPN. WLC redundancy mode is 1+1. All LAPs join to one controller; the other acts as hot standby.
Clients use Windows Zero Configuration (WZC). Encryption is WPA2/AES and user authentication is using Microsoft PEAP against a backend AD. ACS version 4.0.
Clients use Dell Latitude D610 with Intel PRO 2200BG chipset. Driver version is either 9.0.4.17 or the latest 9.0.4.26. They face frequent disconnections while users with 3945ABG chipset have more stable connections.
Please advise.
Thank you.
B.Rgds,
Lim TS

Ciscoworks2000 and Aironet VxWorks

Similar Messages

Maybe you are looking for