Does WLC License will impact LAN & WAN connectivity access ?

Hi,
rececntly we have installed 2504 WLC in of branch office, I can able to log via console but it is not coming over LAN not even showing in CDP, all config seems to be fine in wired side & WLC side & physical connection also fine...LED also green.
I am seeing log message in WLC, is this related to License issue ?
*License Client Lib Notify Process: Sep 19 05:40:03.303: %LICENSE-1-REQUEST_FAILED: license_syslog_notify:564 License request for feature data_encryption 1.0 failed in this device, UDI=AIR-CT2504-K9:PSJ163200FM
*License Client Lib Notify Process: Sep 19 05:40:03.302: %LICENSE-1-REQUEST_FAILED: license_syslog_notify:564 License request for feature base-ap-count 1.0 failed in this device, UDI=AIR-CT2504-K9:PSJ163200FM
Thanks
Shrinivas

Hi Shrinivas,
Two things spring to mind here:
Are you trying to join APs to the Controller and they are failing? I'd expect that error message to come up if you haven't installed a license for the APs on top of the base license...
I'm not so sure about why you cannot access the Controller over your LAN, I expect if anyone is to help you will need to provide more details on where you're accessing it from etc, sorry!

Similar Messages

AS5400XM LAN/WAN Connectivity

What is the best practice for conecting an AS5400XM with a channelized voice DS3 to the netowrk? We have multiple 6500's at the next layer and most devices connect to each of them for redundancy. What's the best way to do this? We also have a 6500 with CMM mods and we use multiple vlans to connect one line to each access 6500. Does this model make sense with a lone AS5400XM?
Sample configs.
AS5400XM
interface Loopback1
description Voice Gateway Vlan CM
ip address 10.100.101.X 255.255.255.255
H323 Voice Commands and binding
interface Gi0/0
description L3 connection to AccessSwitch 6500
ip address 10.100.XXX.1 255.255.255.252
ip route-cache flow
interface Gi0/1
description L3 connection to AccessSwitch 6500
ip address 10.100.XXX.1 255.255.255.252
ip route-cache flow
router eigrp 1
network 10.0.0.0
no auto-summary
6500 with CMM Mods
interface VlanXXX
description Voice Gateway Vlan CM
ip address 10.100.101.X 255.255.255.0
ip route-cache flow
interface VlanXXX
description L3 connection to AccessSwitch 6500
ip address 10.100.XXX.1 255.255.255.252
ip route-cache flow
interface VlanXXX
description L3 connection to AccessSwitch 6500
ip address 10.100.XXX.1 255.255.255.252
ip route-cache flow
router eigrp 1
network 10.0.0.0
no auto-summary
This 6500 has 3 CMM mods with 2 6port T1 cards each.
CMM1 - Needs 2 IP's in 10.100.101.X VG VLAN
CMM3 - Needs 2 IP's in 10.100.101.X VG VLAN
CMM7 - Needs 2 IP's in 10.100.101.X VG VLAN

Hi Leo,
Thanks for the response. Do you see any problems with having one of the loopback interfaces on the AS5400xm having a /32 mask in the same subnet as a vlan interface with a /24 mask on the 6509 ?
My x's are more due to the fact that I don't know what the addresses wil be yet then to the fact that I am hiding them...but it is funny when they are hidden :)

Dsl, lan - wan - connection

hi there,
i got a 1841 router and i have a dsl - line. i get a public ip, but i do not have access to the internet. i have no idea why... can anyone help me? thanks a lot.
actual config:
Current configuration : 1964 bytes
! Last configuration change at 19:27:35 METDST Thu Apr 17 2008
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname pfistyle
boot-start-marker
boot-end-marker
enable secret 5 xxxxxxxxxxxxxxxxxxxxxx
clock timezone MET 1
clock summer-time METDST recurring last Sun Mar 2:00 last Sun Oct 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
ip name-server 193.x.227.3
ip name-server 195.x.56.5
ip name-server 194.x.230.53
vpdn enable
vpdn-group pppoe
request-dialin
protocol pppoe
no ftp-server write-enable
no virtual-template subinterface
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
duplex auto
speed auto
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface ATM0/0/0
mac-address 0013.199e.2e29
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
interface Virtual-Template1
no ip address
interface Dialer1
ip address negotiated
ip directed-broadcast
ip nat outside
encapsulation ppp
no ip route-cache cef
no ip route-cache
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname [email protected]
ppp chap password 7 xxxxxxxxxxxxxxxxx
ppp pap sent-username [email protected] password 7 xxxxxxxxxxxxxxxx
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
dialer-list 1 protocol ip permit
control-plane
line con 0
password 7 xxxxxxxxxxxxxxxxxxxxx
login
line aux 0
line vty 0 4
password 7 xxxxxxxxxxxxxxxxxxxx
login
line vty 5 15
password 7 xxxxxxxxxxxxxxxxxxxx
login
ntp clock-period 17178794
ntp server 134.93.132.118
ntp server 129.132.2.21 prefer
end

I see you have nat specified on your lan and dialer interfaces, but there are no nat translation statements in your config..I think you need to configure nat to translate your inside addresses to a public routable IP.
Try adding this and see if it works:
ip access-list extended nating
permit ip 192.168.1.0 0.0.0.255 any
permit ip any any
route-map NAT permit 5
match ip address nating
ip nat inside source route-map NAT interface Dialer1 overload
and of course also make sure your pc is using the correct ip and subnet mask, as well as default gateway, as I see that you also dont have the router providing dhcp services.
hope that helps...

Indirectly Connected Access points

Hi all, i'm just after a little clarification.
According to the Cisco 3850 QA sheet, (http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps12686/qa_c67-722110.html), this unit does not support indirectly connected AP's.
Q.
Does the Cisco Catalyst 3850 support indirectly connected access points?
A. No. The Cisco Catalyst 3850 switch will always terminate the CAPWAP tunnel locally. Pass-through mode or indirectly connected access point is not supported at this time.
What doesnt make sense to me is that i can buy 50 AP licenses per switch/wlc so i don't understand how i am going to attach these AP's to the 3850.
In our current setup we have a 5508 connected to a Cat4506 with all the AP's connected to an "AP vlan" on the Cat4506 - fairly typical setup i imagine.
We couldnt have each AP connected directly to the 3850 do to cabling and multiple buildings.
Any clarification would be appreciated,
Cheers,

the asnwer to that is a bit farther down.
Q.
How is the access point count license managed across a Cisco Catalyst 3850 stack?
A. The total access point count license of a Cisco Catalyst 3850 stack is equal to the sum of all the individual member access point count licenses, up to a maximum of 50 access points. When new members are added to the stack, the total access point count license of the stack is automatically recalculated. When members are removed from the stack, the access point count license does not decrement until a reload of the stack.
teh 3850 is designed to have AP's terminate in the closets vs coming all the way back to the core.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

WAN connection to 1 specific LAN RV320

Hi,
I have one cisco RV320, I use 2 wan connections with different isp.
It is possible to go out just with one ISP to one of the 4 LAN ports ?
I need one specific LAN port to have internet connection just from a specific wan1 or wan 2, and the other lan ports to use load balancing feature.
It is possible?
Thanks

Hello,
The RV320 has a feature called Protocol Binding that will allow you to link a single or a range of IP addresses on the LAN to use a specific WAN connection for an specific protocol.
Here is a document on how to configure such feature:
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=d6c17b6ee53141f59ae03c6defeb20cb_Dual_WAN_Configuration_on_RV320_Router.xml&pid=2&respid=0&snid=4&dispid=0&cpage=search
If what you are intending to do is to force, lets say a range of IP addresses on the LAN to only use WAN 1 as the outbound connection for all the traffic, then you want to configure the protocol binding as follows:
Service = Any
Source IP: Beginning of the range or single address
to: End of range or singe address
Destination IP: 0.0.0.0 (Anywhere on the internet)
to: 0.0.0.0 (Anywhere on the internet)
Interface: WAN 1
Status: Mark the checkmark to enable it.
Please remember that you can Bind the protocols via IP addresses and no specific LAN ports.
I hope this helps
Please don't forget to mark the answer as correct or grade it if it was helpful to you so that other members can benefit from it.

CT5508 wlc and Lost wan connections and remote AP case

Hi Team
I have an urgent question , my customer wants buy a couple of CT5508 in HA Cluster in Central Site, t he rest of remote sites would have controlled Aps
The question is In the case of lost connectivity wan lines, What´s the end users issue?
I mean, end users will be supported by wireless services locally by remote APs or not? new end users would attach to APs or not?
Regards.

Hi..You can use HREAP/Flexconnect Solution
In this method there is a mode in whihc you can use local switching(mean once you lost the connection from Centrel site your remote AP will still provide the Wireless access and they will mapped to local vlans)
Check this docs:
H-Reap Design and Deployment Guide
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/71250-h-reap-design-deploy.html
H-REAP Modes of Operation Configuration Example
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/81680-hreap-modes.html
Regards
Don't forget to rate helpful posts

HT1218 3TB Timecapsule version 7.6.4 is CONSTANTLY losing WAN connection. Comcast is our carrier, and I've ruled out the modem as it downloads at 30mbs consistently. Want to try and update firmware of Timecapsule, but it will not display an "Update" ico

3TB Timecapsule version 7.6.4 is CONSTANTLY losing WAN connection. Comcast is our carrier, and I've ruled out the modem as it downloads at 30mbs consistently.
Want to try and update firmware of Timecapsule, but it will not display an "Update" icon.
Grrrrr.....makes me miss my stupid PC set up as I could force it to do what I want!
Intermittent connection screws up Netflix, VOIP phone, Amazon, Streaming music via Spotify/Pandora, general internet access.....whole family is ****** off.
Any tips/tricks/ideas???
dave

Downgrade firmware to 7.6.1 .. as the latest is just lousy.
It is easy to downgrade.. hold down the option key whilst you click the version number. in Macs.. lots of stuff is hidden behind an option key.
I also strongly recommend a factory reset and use all SMB names.. not apple type names..
ie TC name.. TCgen4
Wireless name TCwifi (or give names to both bands.. TC24ghz and TC5ghz).
That helps all the non-apple part of the world.. connect.
Also Mavericks has now changed over to SMB as well. So even Mac is now windows networking.
Generally these two things. .7.6.1 firmware and SMB names will fix it.. if not post again as is another step that is possible.. controlling the WAN speed of the TC.

TS1410 My iPod shuffle ( 1st or 2nd generation) will not recharge and does not show when the doc is connected to my MacBook Pro. I'm running the latest updated version of iTunes.

My iPod shuffle ( 1st or 2nd generation) will not recharge and does not show when the doc is connected to my MacBook Pro. I'm running the latest updated version of iTunes.

Hello Jane Benstock,
Thank you for using Apple Support Communities
It sounds like the next best step to take would be to reset the iPod Shuffle.
Check out this article named Resetting iPod shuffle found here http://support.apple.com/kb/HT1655.
All the best,
Sterling

Will the Garmin GLO connect with a MacBook Air? If so, how does it display?

Will the Garmin GLO connect with a MacBook Air. If so, how does it display maps?

This issue was recently solved, you can see it in http://russia4d.ru/podklyuchenie-garmin-glo-k-mac-os-x.html (sorry, but only in Russian). Garmin GLO can be easily connected to MacBook.

If MTU size will increase in cisco 3550 does it will impact any traffic ?

For WiFi traffic from source to destination MTU size should ping up to 1472 Now the MTU is pinging up to 1468 because port level MTU size is 1500 we need to increase 1522.
while we changing size it will impact my traffic ?
Model number: WS-C3550-24-DC-SMI
#sh version
Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(25)SEE4, RELEASE SOFTWARE (fc1).
Any suggestions on this.
Thanks in advance.
NagaPrasad

Hello Prasad,
Changing the MTU size in general will not cause any impact except if it is VPC domain.
But it is advisible that MTU size keep same at both ends.
FYI...
Changing the MTU value (with the mtu interface configuration command) can affect the IP MTU value. If the current IP MTU value is the same as the MTU value, and you change the MTU value, the IP MTU value will be modified automatically to match the new MTU. However, the reverse is not true; changing the IP MTU value has no effect on the value for the mtu command.
Please rate the helpfull posts.
Regards,
Naidu.

Airport Extreme(SW) keeps dropping the WAN connection under "heavy" load

Hey,
Have had this problem ever since I got the Airport Extreme when it first came out and I got it.
The problem is this : The connection will work just fine for ages, but if I end up downloading something using (primarily this is the problem) torrents and I end up getting a rather good speed on it the airport will all of the sudden stop getting data from the WAN(ADSL modem connected to it through the WAN connection) and the Airport will have to be restarted. Some days it will have to be restarted up towards 15 times a day.
The Airport remains accessible through the LAN connection, as well as through the WiFi when it has failed like this so I can go in through the Airport Admin Utility and restart the unit without any problems whatsoever. The modem does not need restart or reiniting either.
The problem occurs no matter of if I am on the hard wired (LAN) connection or the WiFi connection. If I download something using a torrent that is high speed, especially if its more then one torrent at the same time (say 4 torrents each running at 200-300kbps therefor peaking at the roof of what my DSL connection can handle) then it will absolutely lock up after a minute or so. If I only do surfing or 'ordinary' work then there is no problem.
The problem is easily repeated.
* If I connect my laptop by wire to the modem directly without the airport in between there will be no problem.
* I have software reseted the Airport many times to attempt to fix the problem when it has gotten on my nerves with no positive or changing result.
* I have the latest available from Apple firmware(5.6) installed on the Airport.
* I have no 'weird' or abnormal settings set on the Airport, and no neighbors playing tricks on me - This problem was with me when I used the airport fully locked down in a office environment and then went with it when I moved my airport unit out of my office in to my home.
* I have no other wifi units in the house that may cause problems, no bluetooth phones running amok.
Airport details:
Apple Airport Extreme Base Station
Firmware Version: 5.6
Wireless Security : Not currently enabled
Wireless Channel : 1 (automatic)
Built in modem : No
Prod # : M8930LL/A (A-1034)

Hi guys,
Recently I bought AirPort Extreme 802.11n Base Station (Gigabit, MB053LL/A), and
seems, I have very similar problem with yours. Internet connection from my ISP over WAN is dropped after few hours of being idle. The router successfully receives its IP settings from provider's DHCP, eveyithing is working fine at first and as long as I have some inet activity. Then I disconnect, or sleep my laptops, and when I'm back - WAN provides no Internet traffic at all It looks like WAN is not functioning or blocked in someway. AirPort Utility and logs show no problems, all statuses are good, correct WAN IP settings are shown in the utility.
Sometimes it helps to plug-out/in Ethernet cable to WAN port, but more often only full router restart helps (with around 10-20 secs of outage). BTW, WiFi connection between the router and laptops is pretty stable and causes absolutely no probs. HDD connected to the router works good also.
My firmware is 7.2.1 (gigabit), and reading above posts I tried to downgrade to 7.2. It didn't fix the problem So well there are no earlier firmware versions for this AEBS model to try.
Does anybody have ideas about it?
(I understand you guys mostly wrote about 100Mbit version of AEBS)
Thanks you,
Strim

NEED HELP PLEASE Setting up 2 VLANS and a redundant WAN connection

I have a remote branch office which is actually a huge bar/lounge. The bar wants to enable patrons to access the Internet with their wireless laptops. I want to prevent those patrons from accessing our private network, and also prevent them from traversing our static VPN tunnel back to HQ.
The bar processes all credit cards via the T1 connection, and this has caused us to lose money every time the T1 goes down while we're open, since there is no WAN redundancy right now.
Here is my current hardware configuration:
1) one PIX 501 50-user 3des.
2.) two Dell 3024
3.) one Aironet 1100(g) AP.
Current LAN Network: 10.35.35.0
(internal employees only, static VPN tunneled to remote HQ network)
Current Wireless SSID's:
SSID1=PRIVATESSID
SSID2=PUBLICSSID (not currently in use, waiting to figure this out)
Current WAN: one T1 connection.
WHAT I WOULD LIKE TO DO AND NEED HELP FIGURING OUT:
#1a) I want to create two separate VLAN's that are able to share the WAN connection, but not be able to "see" each other.
#1b) These VLAN's would be mapped to their respective SSID's on the AP (PRIVATESSID>10.35.35.0 and PUBLICSSID>192.168.1.0).
#1c) The 192.168.1.0 network should not be able to traverse the static tunnel between the branch site and HQ.
#2) I would like to install a backup WAN connection such as a modem 56k dial-up to an ISP or a cable modem to an ISP. In case the primary T1 goes down, I would like the router to automatically dial out over the modem conection and route all Internet bound traffic over that backup WAN connection, until the primary comes back online.
Question 1:
I'm assuming I need a router to do the intervlan routing. Could this router also do the on-demand WAN backup dialing to an ISP via analog modem?
What IOS version and flavor (IP base, IP+, etc.) would I need? What is the cheapest router I can do all that with (i.e. 2620/2621/1720/3600 series)? What WIC's or NM's would I need?
Question Two:
I would like to prioritize PRIVATESSID's traffic over PUBLICSSID's traffic, which I know I can do on the access point. Can I do this on the router so that any 10.35.35.0 traffic takes priority over any 192.168.1.0 traffic?
Question Three
If the primary T1 WAN connection goes down, I don't want the router to re-route the 192.168.1.0 traffic over the backup 56k dial-up WAN connection. That traffic can wait until the T1 comes back up.
Any help you can provide would be very much appreciated.

Assuming your access points can place SSID into separate vlans and support 802.1q trunks then I can attempt to answer your questions. There are seperate secuity issues with both SSID for protection and VLANs for seperation but in your case in may be minimal.
q1
Any cisco router that will run 802.1q trunking will work. Since you are looking at older routers you will need IP+ to get it. Even 2610's will support 802.1q on their 10m ethernet at the correct code level but 10m and 802.1q is sorta nonstandard. Since your backup is only 56k you can use the internal modem port as a dial backup. A wic-2a/s will also work if you prefer not to use the modem port. You will need some wic to run your t1 line. If you are planning to leave the t1 on another router it makes the next 2 questions much harder.
q2
This is fairly simple and depends on your ios level. "priority queing" is supported on even the older software. I assume you do not control the far end of the t1 line since it sounds as if this goes to a ISP.
You will need to have them do the QoS since most issues with the internet are inbound and not outbound. You can only control outbound traffic.
q3
If the T1 is on the same router then this is fairly simple. You can just put a floating static default route in that will cause the dialer to come up if the the t1 goes down. There is no easy way to protect against the line being up but no traffic passing. This is also why it would be best to have the t1 on the same router. If its not you will need to get very creative to solve this. You could build a GRE tunnel to a remote location and montior the tunnel or run a routing protcol over the tunnel. In the newest software you could use SAA and policy routing to force the traffic over the dialer but the router must support ios 12.4.
3a. You mentioned a cable modem as a backup. That can be much easier sometimes since it is all routing and no dialer interfaces with nasty modem issues. This does not make the issue of the t1 not on the same router easier.

RV016 with 3 WAN Connections - Windows Messenger Intermittent problems.

I have a RV016 Router with 3 internet DSL conections.
Firmware version : 3.0.0.1-tm (Jun 6 2008 20:17:06)
LAN IP : 192.168.11.254 /24
WAN1 IP : 192.168.1.253 /24
WAN2 IP : 192.168.2.253 /24
WAN3 IP : 192.168.3.253 /24
MODE: Gateway.
Windows Messenger continually connects and disconnects. This behavior is permanent
I only have problems with Messengers (all releases), web page access is correct.
I check bandwith saturation and It's ok, I use less than 50% of each DSL.
I configured the correct size of MTU for each DSL and the problem continues.
Is there any way to set priority to this service?
Is there any way to check if the "load balance mode" affect this kind of connections?
I appreciate any idea.

Changing the DSL connections to bridge mode is part one of the solution. When they weren't in bridge mode, they were also acting as gateways/routers, probably also doing NAT.
Now that they are in bridge mode, the rv016 has control of the connections and the routing. Now that it has control, you can make the appropriate changes.
I ran into a similar issue as yours when I had an rv082 at one of my businesses. I had to access the state's web site to file sales taxes online. But their system detected when my router used a different WAN connection than the one I logged in on, so it would kick me off each time the router used both WAN connections. I could enable only one WAN connection each time I used their system (which would also work in your case with messenger), but that wasn't a real solution.
For you the solution will be a port trigger range. (For me the solution was to bind that destination site to a WAN connection.) Go to Setup-->Forwarding in the rv016 web management. You will see a section for port triggering at the bottom. Here's a link to a site that goes more into detail on the ports that need to have triggers on them:
http://www.electrictoolbox.com/article/networking/open-firewall-msn-icq/
I don't have messenger setup, so I don't know the ports off-hand. This setup should allow any system connected (just as they are now) to properly use messenger.
Let me know if you need any more help.

WLC license question

We have two 7510 WLC's and a bunch of AP's. I want to make sure I understand the license impact of what we are trying to do. Our AP's will not be up at all times and it's impossible to know when these AP's will be connected and booted up. They may be on for 2 days and then off for a month before booting up again. The question I have is once an AP registers to a WLC, is that license 'locked' and used regardless of whether the AP is up or not?

I agree with Steve and Vikas.
The WLC calculates the license for currently connected APs. The AP that joins the WLC consumes the 1 space in the WLC license once it is connected. Once it is disassociated you can simply bring another different AP and connect it.
Same way, if you have a license for 100 APs, it is possible that you connect 100 APs then remove them and bring different 100 APs and they should join without a prblem.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

SA 540 drops wan connectivity after some time interval

hello guys,
I have problem. after a certain period of time (ranging from 2 minutes to several hours) the unit keeps dropping the WAN connection, making the unit unaccessible from the WAN side. The strange thing is, that when the connection is dropped, the unit is perfectly accessible from the LAN side, the WAN LED is still on, status info shows the WAN link up, and packet trace shows broadcasted traffic on the WAN interface, so only the directed communication to and from the ISPs gateway (configured to fix IP) seems to be blocked for some reason. When this happens, then plugging the WAN cable to the Optional WAN port enables traffic again, but it is also dropped after some time, and then only power cycling the unit restores WAN connectivity.
please suggest me as soon as possiblethat how to fix this problem?
Awaiting for valuable reply.....

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Does WLC License will impact LAN & WAN connectivity access ?

Similar Messages

Maybe you are looking for