Lwapp to autonomous

Hi all,
I'm having a problem converting lwapp ap1231 to autonoumous mode. I followed all the steps on cisco docs, and also checked on other similar posts here on this forum.
First, I tried the tftp server with ip 10.0.0.10 set and tried to upload the image file "c1200-k9w7-tar.default". I held the mode until status went red and released and watched if it received image file from the tftp server but everytime it booted off with lwapp file. It's as if it never talked to the server at all. I changed several tftp servers, different file name and nothing worked out well.
So I moved on with using the wlc. I connected ap back to wlan and did "config ap downgrade...." and I received this error message "*Nov 12 15:32:06.737: lwapp_image_proc: unable to open tar file". I tried several file names ".default", ".tar" and kept getting same error message.
Please help me with this problem. Could it be the setting on the tftp server, corrupted tar files? I'm all out of idea.
Thanks in advance.
zp

'just did the lwapp to autonomous conversion today (first time) via tftp following the document and it worked well.
1. try to download a fresh copy of the image and rename it to the specified filename.
2. check the ram of the ap if it has enough space, if not delete some files.
3. you can delete the image and do it from "ap: " mode.
4. check out the 'Reloading the Image" section of the attached document.
good luck!

Similar Messages

  • Roll-back LWAPP to Autonomous IOS and retain a configuration

    I have a WLC-4404-100 with a mix of c1131 and c1232 access points associated. All my AP's are LWAPP (either ordered as LWAPP or converted from IOS to LWAPP), and I have just realised that I have more than 100 AP's to be rolled out. I know that an LWAPP AP can be converted back to Autonomous IOS, but cannot seem to find a definitive explanation about the configuration state of the AP after it has been converted back to Autonomous IOS.
    I wish to convert some of my AP's which have already been setup to connect to my controller back to Autonomous IOS. My problem is that they are already rolled out and installed in ceiling spaces etc, and are not easy to physically get to and plug into the console. When I issue the 'config ap tftp-downgrade tftp-server-ip-address filename access-point-name' command on the controller CLI for an AP, when it boots up into autonomous IOS, what is the configuration state? Is it a blank "factory default" configuration, or does it retain a configuration based on how it was configured on the controller? Will I be able to remotely access the AP over the wire at all?
    Thanks in advance.

    Try the following steps:
    LWAPP to Autonomous
    Requirements:
    • Image file (such as c1200-k9w7-tar.122-15.JA.tar);
    • AP is connected to the Wireless LAN Controller; and
    • AP can ping the TFTP server where the image is located.
    Procedures:
    1. Find out what AP needs to be converted from LWAPP to Autonomous mode by entering the following command:
    sh ap summary
    2. Enter the following CLI command on the Wireless LAN Controller:
    config ap tftp-downgrade
    3. The AP will download the software and after a reboot, the AP will be on Autonomous mode.
    Does this help?

  • 1250 LWAPP TO AUTONOMOUS

    Hi,
    I can't seem to find the image for upgrading a 1250 from LWAPP to Autonomous?
    Also do I need the upgrade tool? If so where can I find it? (No Controller)
    Please can someone point me in the right direction?
    Many Thanks.

    jcomment,
         There is an IOS image for the 1250 series AP on cisco's site, you must have a CCO account to access this. If you have access to that goto www.cisco.com, click on support> Download Software> Wireless> Access Points> Cisco Aironet 1250 Series> Cisco Aironet 1250 Series Access Point
    then select IOS Software and you should get a list of versions.
    In terms of converting this the easiest way is to use the mode button and do a reset.
    Step 1 set your computer to 10.0.0.100 255.255.255.0
    Step 2 Place image file into a TFTP server folder on your PC.
    Step 3 Rename the access point image file in the TFTP server folder to c1250-k9w7-tar.default.
    Step 4 Using an ethernet cable connect your PC to the power injector/AP
    Step 5 Disconnect power from the access point.
    Step 6 Press and hold the MODE button while you reconnect power to the access point.
    Step 7 Hold the MODE button until the Radio LED turns a red color (approximately 20 to 30 seconds), and release the MODE button.
    Step 8 it will download the firmware image and decompress it.
    Step 9 After the access point reboots, you must reconfigure the access point by using the Web interface, the Telnet interface, or Cisco IOS commands.
    Hope this helps....   Please rate helpful posts.
    Thanks,
    Kayle

  • Changing from LWAPP to autonomous

    I have a 1130AG access point in LWAPP mode with no controller. How can change it to an autonomous mode if I dont have access to a wireless controller.

    Yes.  Follow the link below and use the guide "Using a TFTP Server to Return to a Previous Release"
    http://www.cisco.com/en/US/customer/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
    Please don't forget to rate our posts.  Thanks.

  • Convert APs LWAPP to Autonomous without WLC

    How can I convert an Access Point with lightweight version to autonomous without a Controller??
    Regards,

    Hi Juan Carlos,
    No worries my friend, this should work :)
    Here is a conversion method;
    Reverting the Access Point Back to Autonomous Mode
    http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272
    You can convert an access point from lightweight mode back to autonomous mode by loading a Cisco IOS Release that supports autonomous mode (Cisco IOS release 12.3(7)JA or earlier). If the access point is associated to a controller, you can use the controller to load the Cisco IOS release. If the access point is not associated to a controller, you can load the Cisco IOS release using TFTP.
    Using a TFTP Server to Return to a Previous Release
    Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
    Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
    Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
    Step 3 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, and c1240-k9w7-tar.default for a 1240 series access point.
    Step 4 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
    Step 5 Disconnect power from the access point.
    Step 6 Press and hold MODE while you reconnect power to the access point.
    Step 7 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
    Step 8 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
    Step 9 After the access point reboots, reconfigure it using the GUI or the CLI.
    From this doc;
    http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272
    Hope this helps!
    Rob

  • LWAPP to Autonomous/IOS

    I have a Aironet LAP-1232AG (AIR-LAP1232AG-A-K9) that I need to downgrade to an Autonomous AP. I can't find any documentation on how to do this. I have downloaded c1200-k9w7-tar.123-8.JA2.tar and set up a tftp server, but the LAP won't connect.
    Any help would be GREATLY appreciated!

    Hi Tom,
    Here is the related info :)
    Using a TFTP Server to Return to a Previous Release
    Note This section does not apply to Cisco C3201WMIC and Cisco C3201LAP.
    Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
    Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
    Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
    Step 3 On the PC where the TFTP server is located, perform these steps:
    a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.
    b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View > Show hidden files and folders.
    Step 4 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.
    Step 5 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
    Step 6 Disconnect power from the access point.
    Step 7 Press and hold MODE while you reconnect power to the access point.
    Step 8 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
    Step 9 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
    Step 10 After the access point reboots, reconfigure it using the GUI or the CLI.
    http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918
    Hope this helps!
    Rob

  • LWAPP and Autonomous

    hello friends,
    I need your help. We have a 4402-12AP and a 1121G outside the unified wireless network.
    There are 2 vlans confgured on the WLC4402, 101 & 102. The ap-manager, management interface and AIR-1000-AP are on the vlan101. The port on the switch for the management interface is configured as a trunk with 101,102 allowed.
    The 1121G is configured with those vlans with trunk configured on the switch too.
    The problem is that when I associate to the 1121G i can't see the clients of the Unified WLAN.
    Any help would be appreciated.
    Thank you.

    Hi,
    I believe you need to examine the configuration of the switch port your LWAPP is connected to. Here is the documentation:
    "While Cisco WLCs always connect to 802.1Q trunks, Cisco lightweight APs do not
    understand VLAN tagging and so should be connected only to untagged, access ports on
    the neighbor switch. This is fundamentally different from how autonomous APs connect
    to switches, which must be connected to 802.1Q trunking ports."
    Hope this helps. Please let us know if this answers your problem.
    Best,
    Paul

  • Problems converting 1242AP from LWAPP to Autonomous

    I tried to downgrade a 1242 LAP to Autonomous through a WLC using cisco's brief instructions:
    Step 1 Log into the CLI on the controller to which the access point is associated.
    Step 2 Enter this command:
    config ap tftp-downgrade tftp-server-ip-address filename access-point-name
    Seems easy enough, i copied the IOS file (c1240-k9w7-tar.123-7.JA5.tar) to my TFTP root. Then i ran the command mentioned above from the CLI of the WLC. The WLC takes the command but nothing happens, if i hold down mode and reboot the AP it retains its previous settings? Any ideas?

    In the end i ended up using the a version of the IOS that was one iteration older and it worked......bizzare

  • Converting 1250 APs between autonomous and LWAPP

    It took me a while to get this information, so thought I'd share. Here it is:
    You cannot use the upgrade tool to do the IOS to LWAPP for the 1250 APs.
    Here is a method to do the conversion.
    *Method 1 : ( Mode Button )*
    1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.x ( Ex : 10.0.0.3)to the server.
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com
    4. Make sure you set the IP address on the BVI interface of the AP if
    not set.Set it in the 10.0.0.x range.
    5. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    5. Hold the mode button and power off the AP.
    6. Power back the AP while continually holding the mode button for 20-30
    seconds.
    *Method 2 : ( Archive Command )
    *1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.x ( Ex : 10.0.0.3)to the server.
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com
    4. Make sure you set the IP address on the BVI interface of the AP if
    not set.Set it in the 10.0.0.x range.
    5. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    6. On AP, type archive download-sw /overwrite /force-reload tftp://192.168.5.210/c3201-k9w7-tar.124-3.JK2.tar
    Going the other way (lwapp to autonomous)
    http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp161272
    If you need to manually "prime" the LWAPP:
    AP#lwapp ap ip address <IP address> <subnet mask>
    AP#lwapp ap ip default-gateway <IP-address>
    AP#lwapp ap controller ip address <IP-address>
    AP#lwapp ap hostname <name>
    (optional)
    Hope someone finds this useful!

    The problem here is that you can't have any fast roaming since you have autonomous and LAP's. The thing is... the phone is associated to a LAP and the mac is known on the trunk port of the wlc, then the phone roams to the autonomous AP and the LAP and IOS AP don't communicate so there is no smooth hand off. Phone has to re-associate or re-authenticate and the mac shows up on both ports until the arp times out. For VoIP, a mixed environment is not supported.

  • Can an autonomous 1252 be converted to Lightweight AP?

    I have incorrectly received a 1252 AP (model number AIR-AP1252AS-E-K9) and was hoping to convert this to a lightweight AP. But in the documentation this device is missing from the list of devices that can be converted.
    I am also unable to find an upgrade tool for this model.
    Is it possible to convert this device?

    Someone on the forum used the latest upgrade tool and siad he was able to convert the 1252 to LWAPP. You can try it or else here are some steps from another member on converting these ap's:
    Here is a method to do the conversion.
    *Method 1 : ( Mode Button )*
    1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.2 - .254 ( Ex : 10.0.0.3) to the tftp server (your laptop or pc).
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com or
    http://tools.cisco.com/support/downloads/go/IPCheck.x?defAdv=N&sftAdv=N&image=c1250-rcvk9w8-tar.124-10b.JA3&filepath=/swc/esd/02/crypto/3DES/281235915/guest&filename=c1250-rcvk9w8-tar.124-10b.JA3&advUrl=null&isk=Y&defInd=N&mdfid=281235915&sftType=Autonomous%20To%20Lightweight%20Mode%20Upgrade%20Image&optPlat=&relVer=12.4(10b)JA3&fileId=271159&treeMdfId=278875243&treeName=Wireless
    4. Rename c1250-rcvk9w8-tar.124-10b.JA3 to c1250-rcvk9w8-tar.default
    5. Make sure you set the IP address on the BVI interface of the AP if not set. Set it in the 10.0.0.x range. Default is 10.0.0.1.
    6. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    7. Hold the mode button and power off the AP.
    8. Power back the AP while continually holding the mode button for 20-30
    seconds.
    *Method 2 : ( Archive Command )*
    1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.2 - .254 ( Ex : 10.0.0.3) to the tftp server (your laptop or pc).
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com or
    http://tools.cisco.com/support/downloads/go/IPCheck.x?defAdv=N&sftAdv=N&image=c1250-rcvk9w8-tar.124-10b.JA3&filepath=/swc/esd/02/crypto/3DES/281235915/guest&filename=c1250-rcvk9w8-tar.124-10b.JA3&advUrl=null&isk=Y&defInd=N&mdfid=281235915&sftType=Autonomous%20To%20Lightweight%20Mode%20Upgrade%20Image&optPlat=&relVer=12.4(10b)JA3&fileId=271159&treeMdfId=278875243&treeName=Wireless
    4. Make sure you set the IP address on the BVI interface of the AP if not set. Set it in the 10.0.0.x range. Default is 10.0.0.1.
    5. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    6. On AP, type archive download-sw /overwrite /force-reload tftp:///c1250-rcvk9w8-tar.124-10b.JA3
    Going the other way (lwapp to autonomous)
    http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp161272
    If you need to manually "prime" the LWAPP:
    AP#lwapp ap ip address
    AP#lwapp ap ip default-gateway
    AP#lwapp ap controller ip address
    AP#lwapp ap hostname
    (optional)

  • AP-to-LWAPP-Upgrade-Tool won't install

    I have downloaded 3 versions, 3.0, 3.2 and 3.4.... all of them hang after extracting the files and launching setup.exe....
    I have tried on several different Win XP machines... same result
    Don't know if it matters at this point, but the intended WAP is an AIR-AP1252G-A-K9...
    any ideas?

    You can't use the tool for that:
    Here is direction from a member on this forum:
    It took me a while to get this information, so thought I'd share. Here it is:
    You cannot use the upgrade tool to do the IOS to LWAPP for the 1250 APs.
    Here is a method to do the conversion.
    *Method 1 : ( Mode Button )*
    1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.2 - .254 ( Ex : 10.0.0.3) to the tftp server (your laptop or pc).
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com or
    http://tools.cisco.com/support/downloads/go/IPCheck.x?defAdv=N&sftAdv=N&image=c1250-rcvk9w8-tar.124-10b.JA3&filepath=/swc/esd/02/crypto/3DES/281235915/guest&filename=c1250-rcvk9w8-tar.124-10b.JA3&advUrl=null&isk=Y&defInd=N&mdfid=281235915&sftType=Autonomous%20To%20Lightweight%20Mode%20Upgrade%20Image&optPlat=&relVer=12.4(10b)JA3&fileId=271159&treeMdfId=278875243&treeName=Wireless
    4. Rename c1250-rcvk9w8-tar.124-10b.JA3 to c1250-rcvk9w8-tar.default
    5. Make sure you set the IP address on the BVI interface of the AP if not set. Set it in the 10.0.0.x range. Default is 10.0.0.1.
    6. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    7. Hold the mode button and power off the AP.
    8. Power back the AP while continually holding the mode button for 20-30
    seconds.
    *Method 2 : ( Archive Command )*
    1. Install an external TFTP tool such as tftpd32 tool from http://tftpd32.jounin.net/
    2. Assign IP address in the range 10.0.0.2 - .254 ( Ex : 10.0.0.3) to the tftp server (your laptop or pc).
    3. Download the IOS to lwapp image onto the tftp's root directory. Use http://www.cisco.com or
    http://tools.cisco.com/support/downloads/go/IPCheck.x?defAdv=N&sftAdv=N&image=c1250-rcvk9w8-tar.124-10b.JA3&filepath=/swc/esd/02/crypto/3DES/281235915/guest&filename=c1250-rcvk9w8-tar.124-10b.JA3&advUrl=null&isk=Y&defInd=N&mdfid=281235915&sftType=Autonomous%20To%20Lightweight%20Mode%20Upgrade%20Image&optPlat=&relVer=12.4(10b)JA3&fileId=271159&treeMdfId=278875243&treeName=Wireless
    4. Make sure you set the IP address on the BVI interface of the AP if not set. Set it in the 10.0.0.x range. Default is 10.0.0.1.
    5. Connect the Ethernet port on AP to your TFTP Server ( Laptop )
    6. On AP, type archive download-sw /overwrite /force-reload tftp:///c1250-rcvk9w8-tar.124-10b.JA3
    Going the other way (lwapp to autonomous)
    http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp161272
    If you need to manually "prime" the LWAPP:
    AP#lwapp ap ip address
    AP#lwapp ap ip default-gateway
    AP#lwapp ap controller ip address
    AP#lwapp ap hostname
    (optional)
    Hope someone finds this useful!

  • Convert from LAP to autonomous mode issue

    I bought some after market 1242's for extended coverage in my warehouse. The current 1242's I have are all set up in autonomous mode.
    When I console into the AP's I bought they are looking for a CAPWAP -Controller obviously from the previous environment. There is nothing on the AP or in the sh version showing LAP. 
    *Mar  1 00:46:37.102: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:46:38.104: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER.xxx
    *Mar  1 00:46:38.106: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLLER.xxx
    *Mar  1 00:48:38.106: %CAPWAP-5-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    #sh version
    #Version 12.4(21a)JA2
    System image file is "flash:/c1240-rcvk9w8-mx/c1240-rcvk9w8-mx
    I cant seem to be able to reset these to where they aren't looking for the Controller. I can login with the default username and password Cisco/Cisco but I cant do an erase. I get the privileged command prompt but cant do erase star or a config t??? Is there something I'm missing here that I need to to?
    So far these commands have worked::
    debug capwap console cli
    debug capwap client no-reload
    So can I downgrade or go back to autonomous mode or do I have to reload an IOS again? I don't have a license so my options there are limited.
    Any ideas??? Thanks

    HI,
    As pe your post:
    System image file is "flash:/c1240-rcvk9w8-mx/c1240-rcvk9w8-mx
    This is lightweight image. for this image you need controller.
    If you want to use as autonomous AP. Then you must convert it to Autonomous mode.
    Autonomous image code : k9w7
    More about images:
    http://rscciew.wordpress.com/2014/01/04/understand-access-point-ios-images/
    Here is the procedure to convert to autonomous :
    https://supportforums.cisco.com/document/57476/lwapp-autonomous-conversion-and-vice-versa-access-points
    http://paulbeyer.wordpress.com/2010/01/16/converting-a-cisco-ap-from-lwapp-to-autonomous-mode/
    http://www.youtube.com/watch?v=QQ_NuxdRhQ4
    Regards
    Dont forget to rate helpful posts

  • How to wifi-enable an entire condominium block?

    Good day all.
    I'd be grateful if someone points me in the right direction here. I need to wire up, or rather, wifi'ize an entire condominium block, 12 floors, with a total of 72 units across all 12 floors.
    What would be the best way to do this? What routers or access points do I need?
    Internet would be provided by means of an ADSL modem via ethernet.
    TIA.

    Well for one, the ADSL is going to be your outbound connection, so you will need a switch that can supply PoE to the AP's you choose. 12 floors, so 6 units per floor.... You can get away with 2 ap's per floor to be on the safe side. Now you have to decide how will you mount the ap's.... on the ceiling, wall or mount above the ceiling. the 1242's can give you both 802.11b/g and 802.11a. You can also get those with just 802.11b/g. These do require external antennas. The 1131 looks kind of like a smoke detector and has built-in antenaas. These also have both 802.11b/g and 802.11a radios. Depending on the distance for each run. you might need to have 2 24-port PoE switches. One to cover floors 1-6 and the other to cover floors 7-12. The adsl can be connected to the one that covers floors 1-6 since most likeley this will be next to the adsl modem. the two switches will be connected via copper or fiber.
    Now if you go with LWAPP or autonomous ap's is up to you. Here is a link you can browse different products.
    http://www.cisco.com/en/US/products/hw/wireless/index.html#~acc~enterprise_wireless

  • Hellp on Nokia E61i associating with Cisco WLC 4402

    I met some problem with associate Nokia's dual mode mobile phone E61i with Cisco WLC 4402, hope someone can help me on it:
    I setup a VOICE WLAN in 4402(v5.0.148), Layer2 security is WPA1+WPA2, Key management using 802.1x, WPA1 policy enable both TKIP and AES, Radius server using ACS engine(v4.1.1.23)(enable PEAP-MSCHAPv2);
    I can use my laptop to join this WLAN(my laptop configure with PEAP/MSCHAPv2, WPA-TKIP, not validate server certificate), but can't let E61i join it, each time it will remind me “unable to connect, WPA authenticate failed).
    In E61i, I select WPA/WPA2 as WLAN security mode, enable EAP-PEAP, under EAP-PEAP, I enable EAP-MSCHAPv2; however under Cipher, there's a lot of options such as “RSA,3EDS,SHA”, “RSA,AES,SHA”, but there's no TKIP, I have tried to enable all of them and tried only enable those items which include AES, but I failed each time with the same reminder “unable to connect, WPA authenticate failed”. I checked ACS's failed log, there's no record; In 4402, there also have no record.
    If I change the security to open or static WEP for VOICE WLAN, then the E61i can connect to the WLAN.
    I think the problem maybe relate to encryption or certificate, right now I just do the test in lab, not in customer's real environment, so I use ACS to generate a self signed certificate and installed it in ACS.
    Pls. help to point me what I need to adjust to make it work. Thanks!

    Hello,
    CCKM Key Management mode on Nokia E61i phone can be used
    against Cisco LWAPP AP's with TKIP encryption
    Nokia E61i (and other E-series WLAN enabled phones) are supporting CCKM key management method with both dynamic WEP and TKIP ciphers.
    On the phone configuration, 802.1X security mode needs to be in use in order to enable CCKM support. WPA/WPA2 security mode on the phone is dedicated to standards based WPA and WPA2 methods and it does not allow usage of proprietary CCKM key management method.
    Phone's 802.1X security mode does not mean that phone would only support dynamic WEP encryption method in this mode although in contexts term "802.1X" may be attached to pure dynamic WEP (legacy / pre WPA era)security methods.
     802.1X security mode can be seen on Nokia Eseries phones as sort of an "everything with EAP based authentication is allowed" mode, meaning that following key management and cipher configurations are supported:
    - WPA-Enterprise  = WPA Key Management (EAP based authentication) with TKIP encryption
    - WPA2-Enterprise = WPA2 Key Management (EAP based authentication) with AES encryption
    - Mixed WPA/WPA2-Enterprise = I.e. WPA/WPA2 Mode Migration WPA2 Key Management (EAP based authentication) with AES (for unicast data) and TKIP (for multicast data) ciphers
    - 802.1X dynamic WEP = legacy (pre-WPA era) 802.1X based dynamic WEP (EAP based authentication with dynamic WEP encryption)
    Supported:
    - CCKM with WEP = CCKM Key Management (EAP based authentication) with dynamic WEP encryption
    - CCKM with TKIP = CCKM Key Management (EAP based authentication) with TKIP encryption
    Not supported:
    - CCKM with AES = CCKM Key Management (EAP based authentication) with AES encryption
    Please note that CCKM-AES mode (CCKM Key Management with AES cipher) is not working properly due to some incompatibilities between Cisco and Nokia implementations thus it must not be listed as a supported combination on the current Nokia E-series devices. We are also seeing CCKM-Fast
    Re-authentication failures with Cisco autonomous AP's when AES encryption is used although initial authentication to autonomous AP's is successful. Nokia is currently working with Cisco to get CCKM-AES based authentications and roaming working properly with both LWAPP and autonomous Cisco AP's.
     Also note that Nokia E-Series does not support Cisco proprietary CKIP/CMIC encryption/data integrity methods. CKIP/CMIC is supported at least by Cisco autonomous AP's and it seems to be available also
    at least on LWAPP AP version 4.1.171.0.
     CCKM on E-Series devices has been tested against Cisco LWAPP (ver. 4.1.171.0) and it works when TKIP encryption is in use (WPA Policy + TKIP encryption in Cisco LWAPP configuration terms).
    In practice this means Cisco LWAPP is configured in a following manner: WLAN -> Edit -> Security-> 
    Layer 2 Security = WPA+WPA2
    WPA+WPA2 Parameters:
    -WPA Policy = enabled
    -WPA Encryption = TKIP enabled, AES disabled
    -WPA2 policy = disabled
    -Auth.Key Mgmt = CCKM
    Br,
    -Pasi-

  • AP conversion

    hi! I;m trying to convert one of my lightweight AP (1240) to autonomous setup. I follow through the steps below, but i always got the msg attached (Error : msg is not a valid ios image archive. Loading "flash:/c1240-rcvk.....). Must i use a cross cable to connect from my pc to the laptop? i believe the ios image file(c1240-k9w7-tar.default ) is the correct one. Any idea? Thanks.
    Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
    Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
    Step 3 Set the timeout value on the TFTP server to 30 seconds.
    Step 4 On the PC where the TFTP server is located, perform these steps:
    a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.
    b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View; then uncheck the Hide extensions for known file types check box
    Step 5 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.
    Step 6 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
    Step 7 Disconnect power from the access point.
    Step 8 Press and hold MODE while you reconnect power to the access point.
    Step 9 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
    Step 10 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
    Step 11 After the access point reboots, reconfigure it using the GUI or the CLI.

    "flash:/c1240-rcvk.....
    This is the reason why.  If you are trying to convert the AP from LWAPP to autonomous using the Mode button method then why are you loading the LWAPP/CAPWAP recovery image?
    Basically, you're loading the WRONG image into the AP and this is why the automated conversion is failing. 

Maybe you are looking for