CLI Configuration of WLC 5508 w 7.0.250.0

Hi all.  Is there a way to get the configuration of a WLC through the CLI similar to that of what you'd get from Cisco IOS?  So far I've tried
config paging disable
show running-config
and
show run-config
but the output doesn't look like that of what you could cut/paste like IOS. 
Thanks for all input.

Hi 
This is the command you have to run
(5508-1) >show run-config commands
If you want to take the backup & restore that to a different WLC, then you have to follow the method given below.
http://mrncciew.com/2013/01/25/backup-restore-wlc-configs/
HTH
Rasika
*** Pls rate all useful responses ****

Similar Messages

  • Unable to upload/download the configuration in WLC 5508

    Dear Friends,
    I do have issue in upgrading firmware or downloading code from WLC 5508 , version 7.0. I did the same image upload with other devices through CLI from my notebook and it works fine.
    Everytime i try to upload/download the image, it gives the error .
    Has anyone faced the issues, is there any workaround ?
    Regards,
    SID

    I believe that is just how Cisco designed it:). I believe in earlier versions this worked.
    I don't like it now because I cant download the config on a wlc of the ap I'm on. The enable managent via wireless is totally different... As you know, you can manage it.... Sort of:)
    Thanks,
    Scott Fella
    Sent from my iPhone

  • Cisco wlc 5508 with 30 Vlan

    Hello
    i need your help
    i want to configure Cisco WLC 5508 whith 03 vlans, 3750 as core swich
    - management Vlan
    - local-user vlan
    - Guest Vlan
    i want to know all steps or config to do on WLC 
    thx

    Hi,
    Just check this.
    It may help u.
    Wireless LAN Controller and Lightweight Access Point Basic Configuration Example
    http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69719-wlc-lwap-config.html
    http://rscciew.wordpress.com/2014/01/22/configure-dynamic-interface-on-wlc/
    Webauth for guest users:
    http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html
    http://rscciew.wordpress.com/2014/06/19/wlc-webauth-configuration/
    Regards

  • Please help me to configure 2504 WLC as secondary in N+1 HA mode. My primary WLC is 5508 and both have 50 AP license.

    Please help me to configure 2504 WLC as secondary in N+1 HA mode. My primary WLC is 5508 and both have 50 AP license. I want to deploy the AP in the same location.

    Go HERE:  https://supportforums.cisco.com/discussion/12219106/high-availibility-2500

  • Anchor mobility configuration getting lost in wlc 5508 ios code 7.4.100.0

    It is observed that in WLC 5508 , ios 7.4.100.0 ,  mobility anchor configuration on wlan  is getting lost .  we configure anchor ip address on  guest wlan > mobility anchor >  Switch IP Address (Anchor).
    We have configured the template on NCS 2.0 to push the anchor mobility ip address on all WLC
    Has anyone oberved this behavoiur. We have more than 100 WLC  , and  everyweek  mobility anchor configuration is lost on some WLC having code  7.4.100.0.

    I am having this exact same problem.  I am running 7.3 on 5508 WLC.   My remote site LAP's are using Flex (HREAP).  The initial access point that my laptop associates to connects with no problem, as soon as I wander out of range of the initial LAP and into the area of another access point, I lose data connectivity.   The was validated like the original post as I start a constant ping on the LAN and watch as the ping latency increases and then ping replies stop.  The only way to correct the problem is resetting of the wireless adapter on the laptop.  Side note my DroidX has no problem wandering from AP to AP.
    Laptop: Windows 7 32bit
    I then returned to my home site and test where I have a secondary controller and the LAP's are configured for local mode, no problems roaming from access point to access point.   Validated with constant ping test.  The pings drop for a second and re-
    continues as the laptop reconnects.
    **Edit: I am going to try the removing the DHCP Addr. Assignment required option, and report that back to the TAC engineer.
    Message was edited by: Michael Dunki-Jacobs
    **Edit Solved:***
    The problem is in deed solved by turning the "DHCP Address Required" but why?

  • Wlc 5508 : guest users to be configured only give access for internal SAP application

    Hi,
    I have one new requirement with one of the client.
    I have wlc 5508 with 6.0 firmware. I need to have one guest wlan which will have access only for internal SAP application.
    I have gone through cisco document for internet guest users , where web page will be redirected with user name and password once it is authenticated , we can access internet.
    Provided if we have access list configured in wlc ...  for internet access only /
    what about this mentioned scenario ?
    can anybody suggest on the same ?

    Hi Vinod,
    Go for the ACL on any Router or the switch.. i prefer not on the WLC..
    http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml
    Here is the link as well to do it on the WLC
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807810d1.shtml
    Lemme know if this answered ur question..
    Regards
    Surendra

  • WLC 5508 Configuration

    Hi Team,
    Just i want to know below configuration are possible with WLC 5508.
    Can we define specific timing to keep an account enabled. For e.g. 9:00AM to 9:00 PM from <x> date to <y> date?
    -          Can we authenticate the “lobby admin” user through TACACS?
    -          Can we enforce password change for guest user when he login for the first time?
    Regards,
    Jana

    Can we define specific timing to keep an account enabled. For e.g. 9:00AM to 9:00 PM from date to date?
    ans:- Yes through if you integrate WLC through ISE then its possible:-
    Step 1 Choose Administration > Web Portal Management > Sponsor Group Policy.
    Step 2 Click the Action icon and choose an option.
    Step 3 Enter a name for the new policy.
    Step 4 Choose the identity group to be associated with the policy.
    Step 5 (Optional) Choose additional conditions by choosing one of these options:
    •Select Existing Condition from Library to choose an existing simple, compound, or time and date condition
    •Create New Condition to choose an attribute, operator, and value from the expression builder.
    Step 6 Choose the sponsor group to associate with this sponsor group policy.
    Step 7 Click Save.
    -          Can we authenticate the “lobby admin” user through TACACS?
    for this you need ACS as ISE dont suport TACACS right now.
    -          Can we enforce password change for guest user when he login for the first time?
    Yes through ISE its possible.

  • WLC 5508 Configuration Query

    Hi Team,
    Just i want to know below configuration are possible with WLC 5508.
    Can  we define specific timing to keep an account enabled. For e.g. 9:00AM to 9:00 PM  from <x> date to <y> date?
    -          Can  we authenticate the “lobby admin” user through TACACS?
    -          Can  we enforce password change for guest user when he login for the first  time?
    Regards,
    Jana

    You can do this with Cisco's ISE, but not all just using the WLC lobby admin feature
    Can  we define specific timing to keep an account enabled. For e.g. 9:00AM to 9:00 PM  from date to date?
    > No... the lobby admin can create only from the start of the guest credential creation and can set how many days, hours, minutes, seconds, until that credential expires.
    -          Can  we authenticate the “lobby admin” user through TACACS?
    > Yes
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a0080851f7c.shtml
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080871921.shtml
    -          Can  we enforce password change for guest user when he login for the first  time?
    > No you can't
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • Inital configuration not saving in WLC 5508

    Hi Team,
    We having some issue with the wlc 5508 after configuring the initial setup it saved and ask for reboot but after it reboots again it is asking for the initial configuration again.
    It is repeating the same
    Please help on this issue.
    Regards,
    Arun

    i have the same problem but i reboot and save config the device after months  when i got the 0 access points supported on WLC after reboot  all the new  configuration  weren't  saved only the old configuration from 2 to 3 months old 
    and on AP i got the max no. of ap has reached 
    and those AP that dis-joint were joint to wlc a day before 
    the wlc supported 50 ap only 7 are joint and 11 were disjoint after 2 months 

  • How to configure two Cisco WLC-5508-50

    Hi everyone, last year we buy 1 wlc-5508-50 to use with cisco 1142 AP. This year we plan to add more APs and we just buy another WLC-5508-50 because it was cheaper than to buy 50 licences. We would like to know what is the best way to configure our second WLC so that we can distribute our 75 APs on each controller. Maybe someone can help us. Thanks!

    Hi Bernard,
    If you have WCS, you can use templates to synchronize your configurations on the WLCs.
    Another possibility is you can upload your current configuration from your production WLC, and then open up the configuration file and edit the IP addresses to give new addresses to the new WLC. You will also want to change the system name to be unique as well. You can then download this config onto the new WLC, as long as the IP addresses and system name are different it should not interfere with your current WLC.
    To have the WLCs operate together properly, you will want to make sure they are defined in a mobility group, see the following for instructions:
    http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html
    -Patrick Croak
    Wireless TAC

  • Configuring a AP 1552EU-A-K9 in layer 2 mode thru a WLC 5508 running 7.6.130.0

    We have an outdoor AP that we want to bridge to another one that is also outside and connect to our WLC 5508. I see a lot of data for connecting via a layer 3 network, but nothing yet on a layer 2 network (which we run). Can anyone point me to some doc that would explain this?

    We have an outdoor AP that we want to bridge to another one that is also outside and connect to our WLC 5508. I see a lot of data for connecting via a layer 3 network, but nothing yet on a layer 2 network (which we run). Can anyone point me to some doc that would explain this?

  • WLC 5508 running 7.4.110.0 unable to tftp upload config from controller

    Hi,
    Two WLC 5508 running identical code version. One is 50 license Primary, the second is HA. Identical config on both. HA WLC can upload its config to the TFTP or FTP server but Primary cannot. The operation fails for  both CLI and GUI and for different protocols i.e. TFTP, FTP.
    #### Primary Controller
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.4.110.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.95.16
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... PRODWC7309
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.1.30.210
    Last Reset....................................... Power on reset
    System Up Time................................... 18 days 18 hrs 51 mins 35 secs
    System Timezone Location......................... (GMT+10:00) Sydney, Melbourne, Canberra
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... AU - Australia
    Operating Environment............................ Commercial (0 to 40 C)
    --More-- or (q)uit
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +34 C
    External Temperature............................. +17 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 8
    Number of Active Clients......................... 138
    Memory Current Usage............................. Unknown
    Memory Average Usage............................. Unknown
    CPU Current Usage................................ Unknown
    CPU Average Usage................................ Unknown
    Burned-in MAC Address............................ 3C:08:F6:CA:52:20
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 50
    (Cisco Controller) >debug transfer trace enable
    (Cisco Controller) >transfer upload start
    Mode............................................. TFTP
    TFTP Server IP................................... 10.1.22.2
    TFTP Path........................................ /
    TFTP Filename.................................... PRODWC7309-tmp.cfg
    Data Type........................................ Config File
    Encryption....................................... Disabled
    *** WARNING: Config File Encryption Disabled ***
    Are you sure you want to start? (y/N) Y
    *TransferTask: Jun 02 10:41:15.183: Memory overcommit policy changed from 0 to 1
    *TransferTask: Jun 02 10:41:15.183: RESULT_STRING: TFTP Config transfer starting.
    TFTP Config transfer starting.
    *TransferTask: Jun 02 10:41:15.183: RESULT_CODE:1
    *TransferTask: Jun 02 10:41:24.309: Locking tftp semaphore, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.393: Semaphore locked, now unlocking, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.393: Semaphore successfully unlocked, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.394: tftp rc=-1, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    pLocalFilename=/mnt/application/xml/clis/clifile
    *TransferTask: Jun 02 10:41:24.394: RESULT_STRING: % Error: Config file transfer failed - Unknown error - refer to log
    *TransferTask: Jun 02 10:41:24.394: RESULT_CODE:12
    *TransferTask: Jun 02 10:41:24.394: Memory overcommit policy restored from 1 to 0
    % Error: Config file transfer failed - Unknown error - refer to log
    (Cisco Controller) >show logging
    *TransferTask: Jun 02 10:41:24.393: #UPDATE-3-FILE_OPEN_FAIL: updcode.c:4579 Failed to open file /mnt/application/xml/clis/clifile.
    *sshpmReceiveTask: Jun 02 10:41:24.315: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:1087 Sema 0x2b32def8 time=142 ulk=1621944 lk=1621802 Locker(sshpmReceiveTask sshpmrecv.c:1662 pc=0x10b07938) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1647 pc=0x10b07938)
    -Traceback: 0x10af9500 0x1072517c 0x10b07938 0x12020250 0x12080bfc
    *TransferTask: Jun 02 10:39:01.789: #UPDATE-3-FILE_OPEN_FAIL: updcode.c:4579 Failed to open file /mnt/application/xml/clis/clifile.
    *sshpmReceiveTask: Jun 02 10:39:01.713: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:1087 Sema 0x2b32def8 time=5598 ulk=1621801 lk=1616203 Locker(sshpmReceiveTask sshpmrecv.c:1662 pc=0x10b07938) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1647 pc=0x10b07938)
    -Traceback: 0x10af9500 0x1072517c 0x10b07938 0x12020250 0x12080bfc
    #### HA Controller
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.4.110.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.95.16
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... PRODWC7310
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.1.31.210
    Last Reset....................................... Software reset
    System Up Time................................... 18 days 19 hrs 1 mins 27 secs
    System Timezone Location......................... (GMT+10:00) Sydney, Melbourne, Canberra
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... AU - Australia
    Operating Environment............................ Commercial (0 to 40 C)
    --More-- or (q)uit
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +34 C
    External Temperature............................. +17 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 4
    Number of Active Clients......................... 0
    Memory Current Usage............................. Unknown
    Memory Average Usage............................. Unknown
    CPU Current Usage................................ Unknown
    CPU Average Usage................................ Unknown
    Burned-in MAC Address............................ 3C:08:F6:CA:53:C0
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 500
    (Cisco Controller) >debug transfer trace enable
    (Cisco Controller) >transfer upload start
    Mode............................................. FTP
    FTP Server IP.................................... 10.1.22.2
    FTP Server Port.................................. 21
    FTP Path......................................... /
    FTP Filename..................................... 10_1_31_210_140602_1050.cfg
    FTP Username..................................... ftpuser
    FTP Password..................................... *********
    Data Type........................................ Config File
    Encryption....................................... Disabled
    *** WARNING: Config File Encryption Disabled ***
    Are you sure you want to start? (y/N) y
    *TransferTask: Jun 02 10:51:31.278: Memory overcommit policy changed from 0 to 1
    *TransferTask: Jun 02 10:51:31.278: RESULT_STRING: FTP Config transfer starting.
    FTP Config transfer starting.
    *TransferTask: Jun 02 10:51:31.278: RESULT_CODE:1
    *TransferTask: Jun 02 10:52:05.468: ftp operation returns 0
    *TransferTask: Jun 02 10:52:05.477: RESULT_STRING: File transfer operation completed successfully.
    *TransferTask: Jun 02 10:52:05.477: RESULT_CODE:11
    File transfer operation completed successfully.
    Not upgrading to 7.4.121.0 because of bug CSCuo63103. Have not restarted the controller yet.
    Any one else had this issue ? Is there a workaround ?
    Thanks,
    Rick.

    Thanks Stephen, In my deployments of 7.4.110.0 version I have not seen this issue so may be controller reboot will fix it (we do have HA to minimize the impact). I will keep the thread updated with findings and may request TAC for the special release 7.4.121.0 if the still not happy with 7.4.110.0
    Rick.

  • WLC 5508 * 2 & Mobility Group

    What I am trying to configure is Mobility Groups.
    My understanding is that this will allow AP to successfully register and fail over over seamlessly if any of the WLC had to fail ?
    It could be I am confusing two things into one :( & I am totally confused and not understanding the benefits of mobility group mentioned above.
    Also when a AP starts up and registers with the WLC ......I click on a registered AP > High Availability ( Primary / Sec / Tertiary ) all fields are blank...
    Initially I also thought that once my SSO is all setup and working than those options "AP > High Availability" will get populated automatically but clearly not unless something is not working.
    My current config is as follows:-
    WLC 5508 * 2
    WLC 1 - Primary
    WLC 2 - HA SKU (Secondary )
    Redundancy = SSO (Both AP and Client SSO)
    =============
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.6.130.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.101.1
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... WLC5508
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. SSO (Both AP and Client SSO)
    IP Address....................................... 10.31.66.21
    Last Reset....................................... Software reset
    System Up Time................................... 0 days 22 hrs 39 mins 57 secs
    System Timezone Location......................... (GMT) London, Lisbon, Dublin, Edinburgh
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... GB  - United Kingdom
    Operating Environment............................ Commercial (0 to 40 C)
    --More-- or (q)uit
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +38 C
    External Temperature............................. +21 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 1
    Number of Active Clients......................... 0
    Burned-in MAC Address............................ F8:72:EA:EE:5B:B2
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Absent
    Maximum number of APs supported.................. 500
    ============================================
    TA

    TA,
    Mobility and mobility groups are used for the wireless users roaming. What we know that a wireless users can roam between different APs within the same WLC, but when the SSID is used within multiple WLCs, and the client wanted to roam to an AP joined to another WLC, you would need to configure WLC mobility to maintain seamless roaming. For more info:
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_010001101.html
    Now, I understand that your purpose is to have high availability for your APs. No this is done traditionally from the AP page, under HA tab, where you configure the WLCs names and IPs there. This can be done manually on each AP (you can use CLI to make it easier) or you can push a configuration template using a management server (WCS/NCS/CPI).
    Configuring HA on the AP:
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_01110000.html
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_01110001.html
    Using CPI to push AP configuration templates:
    http://www.cisco.com/c/en/us/td/docs/wireless/prime_infrastructure/2-0/configuration/guide/pi_20_cg/temp.html
    Now mobility may play a role in this, as if you have already configured mobility for your WLCs, then you won't need to configure a "name" for the WLCs when you add them under the HA tab in AP configuration page. That's it.
    BR, Ala

  • Deployment of WLC-5508 with 2702i-D have performance issue.

    Hi Team,
    We have centrally deployed WLC-5508 with 50 AP licence along with HA scenario. we have 3 locations.
    1- HQ. have 26 AP with POWINJ5.
    2- Branch location A- 8 AP with POWINJ5.
    3. Branch location B have 8 AP with POWINJ4.
    my exception is to achieve that  single SSID with dynamic VLAN from group police (NPS). MY HO have 26 AP and those are working in local mode.
    and branches are connected through flexconnect mode. and all are working with different-2 NPS. 
    Now i am facing a problem with this deployment are following.
    1- branch A have performance issue.
    2- HQ have performance issue.
    3- i don't want to go with dedicated NPS for every location. 
    In order to achieve this deployment i want only single SSID with primary and secondary NPS at my HQ with dynamic VLAN for respective departmental users vlans..
    above is my problem and concern. otherwise i am successfully achieving this solution with dedicated NPS with single group policy. but when i am going forward to achieve my expectation that time i am facing authentication issue at my HQ and sometimes am not able to get proper VLAN IPs. at my HQ. 
    kindly help me in that to understand where I am doing wrong things to achieve my expectation. 
    Thanks.
    Nalin    

    I am facing 2 different problems.
    1st issue- in existing setup we have throughput issue. (while downloading or uploading any data from the internet or Intranet,  that time wireless clients are facing slowness of the Speed. and same time when i am trying from LAN i am not facing any issue)
    2nd Issue- I want to achieve only single SSID with primary and secondary NPS (AD group is bind with vlan Attributes) with dynamic VLAN for respective departmental users.
    for Issue no 2 i have created SSID to achieve the single ssid parameter for every location. in order to achieve i have change all access points mode local to Flexconnect mode after that i have created AP groups location wise and then create flexconnect Groups where i have mapped all the vlan through AAA VLAN-ACL mapping. created interface group and mapped all the vlans in that group. 
    for more understanding please go through the below mentioned CLI view.
    Cisco Controller) >show wlan apgroups
    Total Number of AP Groups........................ 4
    Site Name........................................ GURGAON-AP-GROUP
    Site Description................................. GURGAON-AP-GROUP
    Venue Group Code................................. Unspecified
    Venue Type Code.................................. Unspecified
    NAS-identifier................................... Fractal-WLC1
    Client Traffic QinQ Enable....................... FALSE
    DHCPv4 QinQ Enable............................... FALSE
    AP Operating Class............................... Not-configured
    Capwap Prefer Mode............................... Not-configured
    RF Profile
    2.4 GHz band..................................... <none>
    5 GHz band....................................... <none>
    WLAN ID          Interface          Network Admission Control          Radio Pol                                                                                        icy
     3               gurgaon-interface    Disabled                          None
    --More-- or (q)uit
     4               gurgaon-guest        Disabled                          None
    *AP3600 with 802.11ac Module will only advertise first 8 WLANs on 5GHz radios.
    AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
    GUR-AP-01            2     AIR-CAP2702I-D-K9    f4:4e:05:78:ae:e4  default location  1     IN       1
    GUR-AP-05            2     AIR-CAP2702I-D-K9    f4:4e:05:80:b5:18  default location  1     IN       1
    GUR-AP-03            2     AIR-CAP2702I-D-K9    bc:16:65:13:71:00  default location  1     IN       1
    GUR-AP-07            2     AIR-CAP2702I-D-K9    f4:4e:05:80:b3:f8  default location  1     IN       1
    GUR-AP-06            2     AIR-CAP2702I-D-K9    f4:4e:05:80:b3:e0  default location  1     IN       1
    GUR-AP-08            2     AIR-CAP2702I-D-K9    f4:4e:05:45:78:98  default location  1     IN       1
    GUR-AP-02            2     AIR-CAP2702I-D-K9    f4:4e:05:80:b3:2c  default location  1     IN       1
    GUR-AP-04            2     AIR-CAP2702I-D-K9    f4:4e:05:78:ae:64  default location  1     IN       1
    GUR-AP-09            2     AIR-CAP2702I-D-K9    f4:4e:05:80:b4:44  default location  1     IN       1
    Site Name........................................ MUMBAI-AP-GROUP
    Site Description................................. MUMBAI-AP-GROUP
    Venue Group Code................................. Unspecified
    Venue Type Code.................................. Unspecified
    --More-- or (q)uit
    NAS-identifier................................... Fractal-WLC1
    Client Traffic QinQ Enable....................... FALSE
    DHCPv4 QinQ Enable............................... FALSE
    AP Operating Class............................... Not-configured
    Capwap Prefer Mode............................... Not-configured
    RF Profile
    2.4 GHz band..................................... <none>
    5 GHz band....................................... <none>
    WLAN ID          Interface          Network Admission Control          Radio Policy
     1               group for mumbai     Disabled                          None
     2               guest wifi           Disabled                          None
    *AP3600 with 802.11ac Module will only advertise first 8 WLANs on 5GHz radios.
    AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
    FAL-7-AP08           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:24:d8         7th Floor  1     IN       3
    --More-- or (q)uit
    FAL-7-AP10           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:18         7th Floor  1     IN       1
    FAL-7-AP14           2     AIR-CAP2702I-D-K9    f0:7f:06:bf:ad:e8         7th Floor  1     IN       1
    FAL-7-AP01           2     AIR-CAP2702I-D-K9    f0:7f:06:bf:b0:4c         7th Floor  1     IN       1
    FAL-7-AP07           2     AIR-CAP2702I-D-K9    f0:7f:06:30:92:bc         7th Floor  1     IN       1
    FAL-7-AP13           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:80         7th Floor  1     IN       1
    FAL-7-AP02           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:94         7th Floor  1     IN       1
    FAL-7-AP05           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:e8         7th Floor  1     IN       1
    FAL-7-AP12           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:f0         7th Floor  1     IN       3
    FAL-7-AP03           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:e4         7th Floor  1     IN       1
    FAL-7-AP06           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:84         7th Floor  1     IN       3
    FAL-7-AP04           2     AIR-CAP2702I-D-K9    f0:7f:06:bf:b0:14         7th Floor  1     IN       1
    FAL-7-AP09           2     AIR-CAP2702I-D-K9    f0:7f:06:92:b4:c8         7th Floor  1     IN       3
    FAL-7-AP11           2     AIR-CAP2702I-D-K9    f0:7f:06:30:93:08         7th Floor  1     IN       1
    Site Name........................................ MUMBAI-THIRD-FLOOR-AP
    Site Description................................. MUMBAI-THIRD-FLOOR-AP
    Venue Group Code................................. Unspecified
    Venue Type Code.................................. Unspecified
    NAS-identifier................................... Fractal-WLC1
    Client Traffic QinQ Enable....................... FALSE
    --More-- or (q)uit
    DHCPv4 QinQ Enable............................... FALSE
    AP Operating Class............................... Not-configured
    Capwap Prefer Mode............................... Not-configured
    RF Profile
    2.4 GHz band..................................... <none>
    5 GHz band....................................... <none>
    WLAN ID          Interface          Network Admission Control          Radio Policy
     1               group for mumbai     Disabled                          None
     2               guest wifi           Disabled                          None
    *AP3600 with 802.11ac Module will only advertise first 8 WLANs on 5GHz radios.
    AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
    FAL-3-AP07           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:a4         3rd Floor  1     IN       3
    FAL-3-AP09           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:94         3rd Floor  1     IN       3
    FAL-3-AP11           2     AIR-CAP2702I-D-K9    f4:0f:1b:73:00:74  3rd Floor- Eurek  1     IN       3
    FAL-3-AP06           2     AIR-CAP2702I-D-K9    f0:7f:06:bf:ae:d0         3rd Floor  1     IN       3
    --More-- or (q)uit
    FAL-3-AP10           2     AIR-CAP2702I-D-K9    f0:7f:06:92:b5:88         3rd Floor  1     IN       3
    FAL-3-AP08           2     AIR-CAP2702I-D-K9    f0:7f:06:92:b4:9c         3rd Floor  1     IN       3
    FAL-3-AP03           2     AIR-CAP2702I-D-K9    f0:7f:06:bf:af:a0         3rd Floor  1     IN       1
    FAL-3-AP12           2     AIR-CAP2702I-D-K9    f0:7f:06:92:b3:fc  3rd Floor- Eurek  1     IN       3
    FAL-3-AP02           2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:28         3rd Floor  1     IN       3
    FAL-3-AP01           2     AIR-CAP2702I-D-K9    f0:7f:06:92:b4:f4         3rd Floor  1     IN       3
    FAL-3-AP04           2     AIR-CAP2702I-D-K9    f0:7f:06:30:92:8c         3rd Floor  1     IN       2
    FAL-3-AP05           2     AIR-CAP2702I-D-K9    f0:7f:06:30:91:f4         3rd Floor  1     IN       3
    Site Name........................................ RAHEJA-AP-GROUP
    Site Description................................. RAHEJA-AP-GROUP
    Venue Group Code................................. Unspecified
    Venue Type Code.................................. Unspecified
    NAS-identifier................................... Fractal-WLC1
    Client Traffic QinQ Enable....................... FALSE
    DHCPv4 QinQ Enable............................... FALSE
    AP Operating Class............................... Not-configured
    Capwap Prefer Mode............................... Not-configured
    RF Profile
    --More-- or (q)uit
    2.4 GHz band..................................... <none>
    5 GHz band....................................... <none>
    WLAN ID          Interface          Network Admission Control          Radio Policy
     5               raheja-interface     Disabled                          None
     2               raheja-guest         Disabled                          None
    *AP3600 with 802.11ac Module will only advertise first 8 WLANs on 5GHz radios.
    AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
    FAL-RAHEJA-AP04      2     AIR-CAP2702I-D-K9    f0:7f:06:8d:24:1c  Near Meeting Roo  1     IN       3
    FAL-RAHEJA-AP02      2     AIR-CAP2702I-D-K9    f0:7f:06:8d:37:3c   Confrennce Room  1     IN       3
    FAL-RAHEJA-AP03      2     AIR-CAP2702I-D-K9    f0:7f:06:30:93:48  Near Confrence R  1     IN       3
    FAL-RAHEJA-AP05      2     AIR-CAP2702I-D-K9    f0:7f:06:bf:ae:c0  Near Meeting Roo  1     IN       3
    FAL-RAHEJA-AP06      2     AIR-CAP2702I-D-K9    f0:7f:06:92:b3:a0  Near Server Room  1     IN       3
    FAL-RAHEJA-AP01      2     AIR-CAP2702I-D-K9    f0:7f:06:92:b3:20    Reception Area  1     IN       3
    FAL-RAHEJA-AP08      2     AIR-CAP2702I-D-K9    f0:7f:06:8d:25:68  USER BAY ROAD si  1     IN       1
    FAL-RAHEJA-AP09      2     AIR-CAP2702I-D-K9    f0:7f:06:92:b4:d4     Training Room  1     IN       1
    --More-- or (q)uit
    Site Name........................................ default-group
    Site Description................................. <none>
    NAS-identifier................................... Fractal-WLC1
    Client Traffic QinQ Enable....................... FALSE
    DHCPv4 QinQ Enable............................... FALSE
    AP Operating Class............................... Not-configured
    Capwap Prefer Mode............................... Not-configured
    RF Profile
    2.4 GHz band..................................... <none>
    5 GHz band....................................... <none>
    WLAN ID          Interface          Network Admission Control          Radio Policy
     1               group for mumbai     Disabled                          None
     2               guest wifi           Disabled                          None
     3               gurgaon-interface    Disabled                          None
     4               gurgaon-guest        Disabled                          None
     5               raheja-interface     Disabled                          None
     6               test                 Disabled                          None
    Cisco Controller) >show flexconnect group summary
    FlexConnect Group Summary: Count: 4
    Group Name                # Aps
    Gurgaon-AP                         9
    HQ-3RD-FLR-AP-GROUP                        12
    HQ-7THFLR-AP-GROUP                         14
    Raheja-AP-Group                            8
    (Cisco Controller) >show flexconnect group detail Gurgaon-AP
    Number of AP's in Group: 9
    bc:16:65:13:71:00    GUR-AP-03     Joined    Flexconnect
    f4:4e:05:45:78:98    GUR-AP-08     Joined    Flexconnect
    f4:4e:05:78:ae:64    GUR-AP-04     Joined    Flexconnect
    f4:4e:05:78:ae:e4    GUR-AP-01     Joined    Flexconnect
    f4:4e:05:80:b3:2c    GUR-AP-02     Joined    Flexconnect
    f4:4e:05:80:b3:e0    GUR-AP-06     Joined    Flexconnect
    f4:4e:05:80:b3:f8    GUR-AP-07     Joined    Flexconnect
    f4:4e:05:80:b4:44    GUR-AP-09     Joined    Flexconnect
    f4:4e:05:80:b5:18    GUR-AP-05     Joined    Flexconnect
    Efficient AP Image Upgrade ..... Disabled
    Master-AP-Mac     Master-AP-Name                    Model      Manual
    Group Radius Servers Settings:
    Type           Server Address    Port
                                             Primary       Unconfigured      Unconfigured
                                                                                          Secondary     Unconfigured      Unconfigured
    --More-- or (q)uit
    Group Radius AP Settings:
    AP RADIUS server............ Disabled
    EAP-FAST Auth............... Disabled
    LEAP Auth................... Disabled
    EAP-TLS Auth................ Disabled
    EAP-TLS CERT Download....... Disabled
    PEAP Auth................... Disabled
    Server Key Auto Generated... No
    Server Key..................     <hidden>
    Authority ID................ 436973636f0000000000000000000000
    Authority Info.............. Cisco A_ID
    PAC Timeout................. 0
    Multicast on Overridden interface config: Disabled
    DHCP Broadcast Overridden interface config: Disabled
    Number of User's in Group: 0
    Vlan :........................................... 203
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 205
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 204
    --More-- or (q)uit
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 206
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 207
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 208
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 209
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 210
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 211
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 212
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    --More-- or (q)uit
    Vlan :........................................... 216
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 217
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Vlan :........................................... 218
            Ingress ACL :................................... None
            Egress ACL :.................................... None
    Group-Specific FlexConnect Wlan-Vlan Mapping:
    WLAN ID     Vlan ID
    WLAN ID   SSID                            Central-Dhcp  Dns-Override  Nat-Pat
    (Cisco Controller) >
    (Cisco Controller) >show wlan summary
    Number of WLANs.................................. 6
    WLAN ID  WLAN Profile Name / SSID               Status    Interface Name        PMIPv6 Mobility
    1        FRACTAL-EMP-MUMBAI / FRACTAL           Enabled   group for mumbai      none
    2        FRACTAL-GUEST / FRACTAL-GUEST          Enabled   guest wifi            none
    3        FRACTAL-EMP-GURGAON / FRACTAL-GURGAON  Enabled   gurgaon-interface     none
    4        GURGAON-GUEST / FRACTAL-GUEST-GURGAON  Enabled   gurgaon-guest         none
    5        RAHEJA-EMP-WIRELESS / FRACTAL-R        Enabled   raheja-interface      none
    6        TEST-SSID / TEST-SSID                  Enabled   test                  none
    hope this will give you proper understanding.  

  • AIR-CAP1602i cannot join a WLC 5508 controller

    Hello,
    I'm managing a large number of access points on a Cisco wlc 5508 controller.
    We've recently purchased a bunch of new AIR-CAP1602I-E-K9.
    note that we already have AIR-CAP1602I-E-K9 and other models in production.
    These A.P are not able to join the controller for some reason, I've tried a lot of different things but I am now at a loss.
    I have checked the regulatory domain, upgraded the FUS, manually upgraded the software version of the LAP to match the version on the other A.P.
    I even downgraded/upgraded the WLC code (version 7.4.x and 8.0)
    I use the dhcp option 43 to to send the controller IP.
    Here are the info that can help:
    errors:
    #on A.P
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    #on WLC
    Lwapp join request rejected (WLC version 7.6.130.0)
    Failed to add database entry (WLC version 8.0)
    WLC sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.6.130.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.101.1
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... XXX
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... XXX
    Last Reset....................................... Software reset
    System Up Time................................... 6 days 4 hrs 16 mins 27 secs
    System Timezone Location.........................
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... Multiple Countries:CA,FR
    Operating Environment............................ Commercial (0 to 40 C)
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +41 C
    External Temperature............................. +22 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 7
    Number of Active Clients......................... 1977
    Burned-in MAC Address............................ A4:93:4C:B0:E4:C0
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 250
    AP sh version
    AP58f3.9cb8.3701#sh version
    Cisco IOS Software, C1600 Software (AP1G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 10:56 by prod_rel_team
    ROM: Bootstrap program is C1600 boot loader
    BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    AP58f3.9cb8.3701 uptime is 31 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap1g2-k9w8-mx.152-4.JB6/ap1g2-k9w8-mx.152-4.JB6"
    Last reload reason:
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP1602I-E-K9 (PowerPC) processor (revision B0) with 229366K/32768K bytes of memory.
    Processor board ID FGL1832X5QU
    PowerPC CPU at 533MHz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.6.100.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 58:F3:9C:B8:37:01
    Part Number                          : 73-14671-04
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC183171L4
    Top Assembly Part Number             : 800-38552-01
    Top Assembly Serial Number           : FGL1832X5QU
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP1602I-E-K9
    AP sh inventory
    NAME: "AP1600", DESCR: "Cisco Aironet 1600 Series (IEEE 802.11n) Access Point"
    PID: AIR-CAP1602I-E-K9 , VID: V01, SN: FGL1832X5QU
    Thanks for your help !

    Hi Olivier,
    The error messages that you have on the debugs:
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    It is related to the bug: CSCuh46442
    https://tools.cisco.com/bugsearch/bug/CSCuh46442/?referring_site=ss
    This bug is resolved in version : 8.0.100.0
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn80.html#pgfId-1163951
    Can you please paste here "show ap auth-list" from the controller CLI?
    I suggest to enable MIC if it is not enabled, and then check if the AP's will join or not.
    Kind Regards
    Mohammad Setan

Maybe you are looking for