Clients are unable to access a New wireless Controller 5508

Clients are unable to access the public ssid, which is wide open(or any other ssids).
I'm using LAG and I can ping each interface on the controller.  Ap's show a total of 2 and 2 are up. 
interface name is public vlan identifier 107, ip add 10.1.255.252, interface dynamic
Software version 7.0.98.0
Model No.
AIR-CT5508-K9
Burned-in MAC Address
50:3D:E5:1A:2F:60
Maximum number of APs supported
25
FIPS Prerequisite Mode
Disable
UDI :
Product Identifier Description
AIR-CT5508-K9
Version Identifier Description
V01
Serial Number
FCW1508L0KT
Entity Name
Chassis
Entity Description
Cisco Wireless Controller
Profile Name
Type
SSID
Status
  Enabled
Security Policies
(Modifications done under security tab will appear after applying the changes.)
Radio Policy
All 802.11a only 802.11a/g only 802.11g only 802.11b/g only
Interface
jmhmanagementpublicspacelabsvoice
Broadcast SSID
Enabled
Layer 2 security none
Below is the errors that are in the controller's log.
spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-DECODE_ERR: spam_lrad.c:1932 Error decoding join request from AP 00:00:00:00:00:00
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-JOIN_DB_ERR: spam_lrad.c:6216 Could not allocate an entry in the database for AP 00:00:00:00:00:00 - dropping the join request (# of APs joined = 2)
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-AP_DB_CREATE_ERR: spam_lrad.c:4945 Unable to create an entry for AP 00:00:00:00:00:00 in the database - invalid mac address
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-PAYLOAD_MISSING: spam_lrad.c:5400  Join request does not contain BOARD_DATA payload
*spamApTask0: Dec 06 14:54:24.728: %LWAPP-3-DECODE_ERR: spam_lrad.c:1932 Error decoding join request from AP 00:00:00:00:00:00
*spamApTask0: Dec 06 14:54:24.728: %LWAPP-3-JOIN_DB_ERR: spam_lrad.c:6216 Could not allocate an entry in the database for AP spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-DECODE_ERR: spam_lrad.c:1932 Error decoding join request from AP 00:00:00:00:00:00
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-JOIN_DB_ERR: spam_lrad.c:6216 Could not allocate an entry in the database for AP 00:00:00:00:00:00 - dropping the join request (# of APs joined = 2)
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-AP_DB_CREATE_ERR: spam_lrad.c:4945 Unable to create an entry for AP 00:00:00:00:00:00 in the database - invalid mac address
*spamApTask0: Dec 06 14:54:43.895: %LWAPP-3-PAYLOAD_MISSING: spam_lrad.c:5400  Join request does not contain BOARD_DATA payload
*spamApTask0: Dec 06 14:54:24.728: %LWAPP-3-DECODE_ERR: spam_lrad.c:1932 Error decoding join request from AP 00:00:00:00:00:00
*spamApTask0: Dec 06 14:54:24.728: %LWAPP-3-JOIN_DB_ERR: spam_lrad.c:6216 Could not allocate an entry in the database for AP
I have attached show run-config and show running-config

For the public WLAN, what is 10.1.1.1?  Is it a real DHCP server, is it a FW?  If it's a FW, then you'll need to disable dhcp proxy:
CLI config dhcp proxy disable
GUI Controller > Advanced > DHCp, and uncheck the box for proxy.
As for all of your other SSID, they are all pointd at the management interface.  Double check the WLAN config, and point them to the interface you want the user to get an IP address in.
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

Similar Messages

  • HT1267 HAVE SET UP AN INCORRECT EMAIL ADDRESS. The call centre set up a new email address as the Username. I am unable to access the new account because the default on my phone is the email that is incorrect. How do I get the correct email as default

    I HAVE SET UP AN INCORRECT EMAIL ADDRESS. The call centre set up a new email address as the Username. I am unable to access the new account because the default on my phone is the email that is incorrect. How do I get the correct email as default??

    Thank you for your help, much appreciated
    Regards
    Geoff

  • Everyone Except External users are unable to access the subsites

    We have a SharePoint online site, in which we have given read permissions to
    Everyone Except External Users in the parent site. Now, the users are able to access the parent site. But for sub sites, we have stopped inheriting permissions from the parent site and have given read permissions to Everyone Except External Users in
    sub sites as well. But users are unable to access the sub sites. They are getting access denied message.
    Can any one help me to resolve the problem?
    Thanks in advance!
    Anjani.

    Hi,
    Please check below links. They encountered similar issues and they had some assets (Page Layout or master page) checked out by users in sub site due to which users with read permission could not access.
    http://sharepoint.stackexchange.com/questions/75263/user-has-correct-permissions-for-subsite-but-access-is-denied
    http://sharepoint.stackexchange.com/questions/90478/prevent-access-denied-error-for-domain-users
    Hope it helps!
    Thanks,
    Avni Bhatt
    If this helped you resolve your issue, please mark it Answered

  • Multiple Wireless Controller 5508 in WCS 7.0

    I have two Wireless Controller 5508 that are IDENTICAL in configurations and they will work as an ACTIVE/STANDBY scenario because right now we only have 30 APs, which one of the controller should be fine dealing with them...
    Now, the way we used to work was everytime we had to add a new WLAN, or change an ACL, etc..we had to both controllers and do the exact same things, so both would be ready in case of a failure of the MAIN controller....so in order to avoid this extra work, we bought the WCS 7.0, thinking we would only have to do it once, and the WCS would update both WLC...but I cant find that option..Ive read all the configuration guide, and cant find a way to keep this two controller completaly sync......I read something about templates..but I still have to do "extra" work in order to keep them sync..
    How do you guys keep your WLC sync??
    THanks!

    Carlos, make sure you also look at config groups. When you place a template into a config group and if you enable the background task for nightly configuration audits you do get a tally of which controllers are "in sync" and which ones are not. Cisco does not automatically apply any configurations from WCS/NCS to controllers, nor would I ever want them to in all honesty.
    NCS is a nice product and has a lot in the roadmap that will hopefully add more value to having your switches loaded. I can see in the future being able to have port templates for voice, data, etc, and then applying those to switch ports at a help desk tech level, they don't need to know how to configure the port, they just need to select a port and then a template.

  • VLAN assignment without ACS on Cisco Wireless Controller 5508

    I was wondering if it is possible to do dynamic VLAN assignment on the Cisco Wireless Controller 5508 without using Cisco ACS but use Microsoft NPS server instead?  Is there a manual or article that someone can point me in the right direction?
    Thank you!

    Any RADIUS server will allow you to do the dynamic vlan assignment if you configure the right RADIUS attributes (64, 65 and 81 that Steve mentioned above).
    This doc shows example of dynamic vlan assignment with WLC and ACS.
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml
    Same config on WLC is needed. However, on the RADIUS you need to configure the same attributes on the NPS instead.
    HTH
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • Cisco 4507 Switch - Clients are unable to renew the IP Address

    Hello .
    i have cisco 4505 core switch with different DCHP pool bind with different Vlan 
    clients from one DHCP pool are unable to renew the ip address . while others DHCP pools configured on the same switch are working fine .
    please Advice .

    Hello Leo ,
    Below are the requested info :
    DA-V02#sh ip dhcp binding | begin 10.1.X
    10.1.X.21      0184.2b2b.adfc.74       Infinite                Manual
    10.1.X.22      0100.1ec9.7820.fd       Infinite                Manual
    10.1.X.23      0100.1aa0.6f32.f7       Infinite                Manual
    10.1.X.24      0100.1ec9.782d.b0       Infinite                Manual
    10.1.X.26      01f0.4da2.25e7.b3       Infinite                Manual
    10.1.X.27      0100.1aa0.7872.71       Infinite                Manual
    10.1.X.30      0118.0373.2957.d4       Infinite                Manual
    10.1.X.31      01b8.ac6f.a4d2.03       Infinite                Manual
    10.1.X.32      0100.2170.407c.96       Infinite                Manual
    10.1.X.33      0100.1ec9.6ba3.d5       Infinite                Manual
    10.1.X.34      0100.2170.407b.c2       Infinite                Manual
    10.1.X.35      0100.1ec9.782a.11       Infinite                Manual
    10.1.X.36      0100.1ec9.6c31.32       Infinite                Manual
    10.1.X.37      0100.26b9.c283.09       Infinite                Manual
    10.1.X.38      0100.2170.407c.59       Infinite                Manual
    10.1.X.39      0100.2170.407c.74       Infinite                Manual
    10.1.X.40      0100.1ec9.6c33.2c       Infinite                Manual
    10.1.X.41      0100.1aa0.6f1f.6d       Infinite                Manual
    10.1.X.42      0100.1ec9.6b9e.d8       Infinite                Manual
    10.1.X.43      0100.1ec9.6a8b.cf       Infinite                Manual
    10.1.X.44      0100.1ec9.782c.f3       Infinite                Manual
    10.1.X.45      0100.2170.4074.cf       Infinite                Manual
    10.1.X.46      0100.1ec9.6c38.38       Infinite                Manual
    10.1.X.47      0100.1ec9.782c.5b       Infinite                Manual
    10.1.X.48      0100.2170.4077.06       Infinite                Manual
    10.1.X.49      0184.2b2b.ae10.f0       Infinite                Manual
    10.1.X.50      0100.2170.407c.e6       Infinite                Manual
    10.1.X.51      0100.1e4f.4f31.14       Infinite                Manual
    10.1.X.56      0100.1ec9.783e.b1       Infinite                Manual
    10.1.X.57      01b8.ca3a.a2d3.b0       Infinite                Manual
    10.1.X.59      019c.934e.1811.d8       Infinite                Manual
    10.1.X.80      019c.934e.1810.cc       Infinite                Manual
    10.1.X.87      0100.1ec9.6c1e.e3       Mar 17 2014 10:10 PM    Automatic
    10.1.X.98      0014.38e1.c9a0          Infinite                Manual
    10.1.X.114     01b8.ca3a.a31b.fe       Mar 18 2014 12:57 AM    Automatic
    10.1.X.204     0100.1ec9.7829.5e       Mar 17 2014 10:10 PM    Automatic
    10.1.X.205     0100.1ec9.77ea.a7       Mar 17 2014 11:46 PM    Automatic
    10.1.X.206     0184.2b2b.adfc.c1       Mar 17 2014 10:47 PM    Automatic
    10.1.X.207     01a4.badb.f89e.90       Mar 17 2014 11:39 PM    Automatic
    10.1.X.208     0100.1aa0.6f31.6c       Mar 18 2014 01:01 AM    Automatic
    10.1.X.242     0108.0037.8c00.ea       Infinite                Manual
    10.1.X.243     0000.aac1.636f          Infinite                Manual
    10.1.X.244     0800.379b.21f0          Infinite                Manual
    10.1.H.205     0100.2584.1870.11       Mar 18 2014 10:23 AM    Automatic
    10.1.H.206     0100.2584.186f.32       Mar 18 2014 10:29 AM    Automatic
    ip dhcp excluded-address 10.1.X.1 10.1.X.63
    ip dhcp excluded-address 10.1.X.240 10.1.X.254
    ip dhcp excluded-address 10.1.X.242
    ip dhcp excluded-address 10.1.X.243
    ip dhcp excluded-address 10.1.X.244
    ip dhcp excluded-address 10.1.X.130
    ip dhcp pool floor2_users
       network 10.1.X.0 255.255.255.0
       default-router 10.1.X.1
       dns-server 10.9.57.21 10.8.57.22
       domain-name corp.ank.ad
       lease 0 12
    interface VlanX
     ip address 10.1.X.1 255.255.255.0

  • Why am I unable to access my new Post Office Account they state that you will not allow and I will have to use Internet Explorer why?

    I have just opened a new account with the Post Office but I am unable to access this on the net. Telephoned Customer Services but say that I will not be able to access through Firefox and will have to use Internet Explorer. Going back to Internet Explorer is not something I want to do because I like Firefox, please explain why Firefox is blocking access if this is true. I have clicked 'allow' but it made no difference and the only message coming up is "timed-out" when I have been much less than 5 mins putting security details. Please advise. Paula

    I doubt if Firefox is blocking access. More than likely, that website is made to use ActiveX, or other proprietary Microsoft code, that only Internet Explorer can handle.
    If you post the address of that "Post Office" website, maybe one of us support helpers can figure out the exact reason for that.

  • After site migration, users are unable to access the site, even though they have permissions, prompted to request access

    Not sure whats going on here...
    SharePoint WSS3.0  -> SharePoint 2013 Ent
    Used ShareGate migration tool.
    I migrated the site, and everything appears to be in place as expected.  Users and groups are all assigned just like before.
    But when users try to access the new site, they are prompted to request access.
    Some users are in AD groups, that are in SharePoint groups, and some users are direct members of SharePoint groups.  So far it seems to be groups with read or contribute access.  The owners seem to be able to access the site fine.
    This makes no since...?
    Any ideas?
    Joshua Fuente

    Thanks, I think I may have found the issue...  But it still odd, and I am still verifying if it is in fact the issue.
    The old site has a visitors group, that contains an AD security group.... But that AD security group contains a DL.  I know that's a problem... But it should also be a problem in the source site. (but its not)
    Only thing I can imagine is that at some point the user had direct access, and it was changed to AD group.  And then AD group was changed, and somehow SharePoint just didn't catch on.... (just a guess)
    In any case, I am having the users added to the AD security group to see if that works.
    But I will check out your script if that doesn't work. 
    Thanks!
    Joshua Fuente

  • Clients are unable to get DHCP Addresses

    Hi, I have a setup where managment interface is in different vlan, ap-manager is in different vlan, APs are in different vlan and the clients are on their own vlans respectively. Everything works except for when I try to associate a client to an ap on the floor. It doesn't get an IP address..Here is a debug of DHCP on the controller.
    any help would be greatly apreciated...

    I got it to work, I had to create seperate AP groups and virtual interface for each client vlan and point it to the DHCP server.

  • Save config of Wireless Controller 5508 by SNMP

    On Catalyst switches one can save the running config with SNMP by using the CISCO-CONFIG-COPY-MIB.
    Is there an equivalent way of doing this on a 5508 Wireless Controller ?
    Many thanks
    chris

    Is it Cisco best practices to create one large Vlan that contains both controllers, ap's and clients all in the same network ? Or should I be segmenting the network a particular way?
         Not best practice.  Segmentation is up to how you want to do it for the most part
    With my current Wireless Controllers is it possible to segment the wireless network by building into seperate networks (vlans) but still allow clients to connect to the (mmg_wireless) ssid and roam throughout the campus without mobility and roaming issues?
         yes, you could use AP groups and do a subnet per building.  the traffic will still backhaul to the WLC then to the core.  So if the latency is the fiber between the buildings you would still have an issue.  you could also use FlexConnect, but would need to know more on how the application is supposed to work to answer that better
    Is it necessary to segment my wireless network by creating more vlans instead of putting all of the ap's controllers and clients all in the same network? Will having all of my wireless devices in the same subnet degrade my wireless network because everything is in the same broadcast domain?
         IMHO, I think the AP should be in their own VLAN, and the WLC can live in the 'server' vlan if you want.
    Is there a maximum recommended number of ap's that should be on a controller at any given moment? I currently have 200 ap's on one controller.
    with 672 clients currently conencted to them. (360 of them are connected to the mmg_wireless ssid) .
         how many ports are you using to connect to teh 6509?  if you are using all 8 ports you should be fine.
    Is it best practice to seperate the maangement ip's of the controllers and ap's from the client vlans?
              answered above

  • Wireless Controller 5508 dropping MAC Addresses

    Our 5508 Wireless Controller will drop MAC addresses clean out of the system. Addresses that are in use everyday just disappear. It is not a limitation issue because we are adding iPads everyday. And it is not a daily occurance, but maybe once or twice a week. Has anyone come accross this issue? Everything has been updated and it is more of a hassle than anything, I am just trying to understand what is happening.

    Shannon,
         can you be a bit more specific, when you say it's dropping mac addresses?
    is that from the user list? the macfilter?

  • Unable to connect to new wireless network in Mountain Lion with Photosmart C4780

    I have a Photosmart C4780 and have just upgraded my imac to Mountain Lion. HP are not providing new drivers for my printer as they say it will work with Mountain Lion. I have downloaded software updates. However, I have just changed my wireless network as I have a new broadband provider but am unable to connect to it. My problem is that the set up assistant software provided which I used originally to set up does not work with Mountain Lion.
    Any ideas please?

    I have solved my problem, I've bought an Epson. It works perfectly. If HP can treat their customers with such disinterest and contempt I don't want to give them my money. 

  • Users are unable to access Essbase data-corrupt group

    Someone moved a hyperion user to an ldap directory group that hyperion couldn't access which seems to have corrupted the group to which the ID belongs. I got rid of the ID but the users are still experiencing problems accessing essbase data. We have 9.3.1 and I have refreshed security filters and recycled many times. Does anyone have any suggestions? Should I reimport the secfile.txt?

    Where I need to check the logs in tbl Logs under Appserver?
    Well, I am unable to see complete input schedule. I have unprotected the sheet still there is data N38 but able to see before row 58. unable to expand.
    Kindly suggest.

  • PC Clients are unable to see or open PDF attachments

    I have seen an increase in my clients unable to open or see my pdf attachments. I work as a professional designer and rely on pdf email proofing. I am careful to click on the "widows friendly attachments" option and yet I'm still getting about 30% of my clients emailing back unable to open my files or saying I've not added the attachment when actually I have. Has anyone else seen and increase in this problem and know how I might go about solving this problem?

    I have heard of this problem but I don't know if there was a definitive fix or not. Some answers have been re-installing the 10.4.7 combo updater. Another solution has been to make sure you are sending plain text messages. If you are responding to a previous message, it may pick up a different format.
    Some e-mail servers, such as AOL and Compuserve, have a very difficult time extracting e-mail attachments.
    I have done quite a bit of work with e-mail formats. I would really like to see what these attachment problems look like. I will turn on my e-mail in my profile. If you want to send me an e-mail that you know contains an unreadable attachment, I might be able to find out why.

  • We are unable to access my I Pod

    My IPod is disable. How do you change or access my IPod 's password to unlock it.

    Connect the iPod to its syncing computer and restore via iTunes. If iTunes asks for the passcode and you can't enter the passcoe or if you do not have the syncing computer, place the iPod in recovery mode and then restore the iPod via iTunes on the computer. For recovery mode:
    iPhone and iPod touch: Unable to update or restore

Maybe you are looking for

  • How to find the model number for wired keyboard

    i have 2 metallic wires usb keyboards but have no idea what or which model they are. please help me to know. but have some number underneath but clearly not the model number

  • "Client" property set to "No", application deployment not working (issue with registering to MP?)

    Dear all, We're running an SCCM 2012 SP1 environment. All users have a thin client and are running virtual desktop in our VDI environment. Thin clients are deployed via an SCCM task sequence. Since a few months, software deployment (i.e. updated syst

  • Transaction iview to connect R3, sapgui is mandatory to be installed?

    hi to use transaction iview in EP to connect R3, sapgui is mandatory to be installed on the cliend side? br hua

  • Php to plsql

    can some one help me in converting this php code to plsql procedure to handle response code from authorize.net' gateway's response so that i can call it like http://mysite.com/!my_proc < ?php // Get the subscription ID if it is available. // Otherwis

  • Backup Macbook 10.5.8

    I have a MacBook with 10.5.8 processor and I would like to backup the computer with an external hard drive.  It is a Toshiba.  Can you tell me the steps I need to do to get Time Machine to backup my Mac? Thanks