N+1 redundancy with 2504-HA
Hello,
I have question regarding N+1 redundancy with 2504-HA WLC.
Can I use 2504-HA unit for H+1 redundancy? SSO is not needed
I have two wireless network:
1. With WLC 5508 with about 40 AP(1262), all them are A regulatory domain
2. With WLC 2504, with about 30 Mesh AP(1552), all of them are E regulatory domain
I plan to use two 2504-HA units for backups, one for network with WLC5508 and second for network with WLC2504.
In case N+1 redundancy is management with Prime mandatory ?
Hi,
Better to use same model and same software.
Case1: You have 5508WLC
Solution from my side: You must buy a another WLC with HA SKU license(Zero AP license). This wlc can work as N+1 and AP SSO as well as Client SSO but with higher version of code(7.5 or higher).
Case2: You have 2504 WLC
Solution: You must buy a another 2504 HA WLC: AIR-CT2504-HA-K9, that only supports N+1(No AP SSO and NO Client SSO)
http://www.cisco.com/c/en/us/td/docs/wireless/technology/hi_avail/N1_High_Availability_Deployment_Guide/N1_HA_Overview.html
More info:
http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1130-ag-series/qa_c67-714540.pdf
Regards
Dont forget to rate helpful posts
Similar Messages
-
Revision: 12883
Revision: 12883
Author: [email protected]
Date: 2009-12-12 15:53:50 -0800 (Sat, 12 Dec 2009)
Log Message:
Remove the skin classes from the halo theme project to avoid redundancy with the airframework/framework swcs.
QE notes: No
Doc notes: No
Bugs: SDK-24293
Reviewer: Glenn
Tests run: Checkintests, smattering of Halo and AIR mustella tests
Is noteworthy for integration: Yes
Ticket Links:
http://bugs.adobe.com/jira/browse/SDK-24293
Modified Paths:
flex/sdk/trunk/frameworks/projects/framework/src/FrameworkClasses.as
flex/sdk/trunk/frameworks/projects/halo/build.xml
Added Paths:
flex/sdk/trunk/frameworks/projects/framework/src/mx/skins/halo/WindowBackground.as
Removed Paths:
flex/sdk/trunk/frameworks/projects/halo/assets/
flex/sdk/trunk/frameworks/projects/halo/src/HaloClasses.as
flex/sdk/trunk/frameworks/projects/halo/src/mx/skins/ -
Issue with 2504 WLC and 2602 AP. need help please.
Somehow the AP does not associates with the 2504 controller.
What could possibily be the issue.
Thanks in advance.
Anyway, Here is the log from the AP.
AP log
===========================================================
*Mar 1 00:30:35.551: %CAPWAP-5-DHCP_OPTION_43: Controller address 192.168.120.4 obtained through DHCP
*Mar 1 00:30:35.551: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'SNGNY-WLC1'running version 7.0.220.0 is rejected.
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Mar 1 00:30:44.551: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.120.4
===========================================================
show version output from the Access Point
=========================================================
AP0006.f6ec.be2a#show ver
Cisco IOS Software, C2600 Software (AP3G2-RCVK9W8-M), Version 15.2(2)JB, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Tue 11-Dec-12 00:07 by prod_rel_team
ROM: Bootstrap program is C2600 boot loader
BOOTLDR: C2600 Boot Loader (AP3G2-BOOT-M) LoaderVersion 12.4(25e)JA1, RELEASE SOFTWARE (fc1)
AP0006.f6ec.be2a uptime is 33 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"
Last reload reason:
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
--More--
*Mar 1 00:33:46.071: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 2 combination.
*Mar 1 00:33:46.171: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.120.98, mask 255.255.255.0, hostname AP0006.f6ec.be2a
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco AIR-CAP2602I-A-K9 (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
Processor board ID FGL1704ZC0Q
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.4.1.37
1 Gigabit Ethernet interface
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:06:F6:EC:BE:2A
Part Number : 73-14588-02
PCA Assembly Number : 800-37899-01
PCA Revision Number : A0
PCB Serial Number : FOC165188Y4
Top Assembly Part Number : 800-38356-01
Top Assembly Serial Number : FGL1704ZC0Q
Top Revision Number : A0
Product/Model Number : AIR-CAP2602I-A-K9
Configuration register is 0xF
========================================================Blake's right. Your WLC is running 7.0.X code which does not support the AP2600. Check the Release Notes and look under Software Release Support for Access Points to determine what suitable firmware your WLC can support your AP.
-
Nexus 7000 Switch Fabric Redundancy with Fab-2 ?
Hi all,
I know that N7K did not have N+1 Switch Fabric redundancy. It is required to have all five SF modules to provide full throughput. Does this change with FAB-2 modules ? I mean with new modules, does N7K have N+1 SF redundancy ?
Thanks in advance.
DumluThe N+1 fabric redundancy will depend on the type of module.
If you are using M132 (80G) per slot and you have 3x FAB-1 (46G each), it will provide N+1.
The same story applies to FAB-2. If you are using the F1 series, and have 4x FAB-2, you have N+1. Of course, if you are using F2 series linecard and have all FAB-2 populated, you don't have N+1 because F2 is 480G and all 5 FAB-2 will give you 550G.
HTH,
jerry -
Bandwidth limiting with 2504 WLR and 3602E AP
Hello,
My QA team needs to test number of special connectivity scenarios where their wireless connection has a limited bandwidth.
Ideally, I would like to provide them number of SSIDs each of which has different bandwidth limitation.
But so far I did not find a way to apply any bandwidth limitations to my 2504 Wireless controller and the 3602E AP.
QoS has only 4 pre-defined modes which can't be set to a specific limit...
Any help/advise would be highly appreciated!
Thank you,
Mark.Didnt realize this was not on the 5508, +5 Scott.
I guess the next best option is to ACL/QOS on the wired side for that subnet in question.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
"I'm in a serious relationship with my Wi-Fi. You could say we have a connection." -
We currently have the following environment:
1. Groupwise 2012 server #1 on one server, with GWIA, MTA, POA,
WebAccess on that server. Primary MX record points to this server. On
our dsl internet connection
2. Groupwise 2012 server #2, GWIA, MTA, on that server. Secondary MX
record points to this server. On our cable internet connection.
Currently, For incoming purposes, email normally comes in via the
primary MX record to server #1. If it is not responding, email incoming
traffic goes via the secondary MX record to server #2. m This is automatic.
However, I am not certain that the outgoing emails have automatic
redundancy. If the GWIA on server #1 cannot process outgoing mail
simply because the dsl internet connection it uses is down, does the
outgoing emails automatically get routed to server #2 to go out that
GWIA. Or does that automatic rerouting occur only if the GWIA on server
#1 is actually down.
I had read that the redundancy routing of the GWIA to server #2 did not
work on GW6, but did work on GW7. Is that the case and does it work
automatically for GW2012 in the instance where the GWIA on server #1 is
still up but is not able to connect to the internet because the internet
connection is down.
We want to have automatic outgoing GWIA redundancy in addition to the
incoming GWIA redundancy.
CliffOn 1/7/2015 1:15 AM, Massimo Rosen wrote:
> Hi.
>
> Am 07.01.2015 um 05:18 schrieb Clifford Wiernik:
>>
>> However, I am not certain that the outgoing emails have automatic
>> redundancy. If the GWIA on server #1 cannot process outgoing mail
>> simply because the dsl internet connection it uses is down, does the
>> outgoing emails automatically get routed to server #2 to go out that
>> GWIA. Or does that automatic rerouting occur only if the GWIA on server
>> #1 is actually down.
>
> The latter, but even that only when correctly configured. By default,
> there is no outbound redundancy whatsoever.
>
>> I had read that the redundancy routing of the GWIA to server #2 did not
>> work on GW6, but did work on GW7.
>
> I don't think that's true either. I'm not even sure if it was available
> in GW8, or just came in 2012.
>
> Full outbound redeundancy, as in the GWIA is up but it's internet line
> down is out of the scope of groupwise. This would better be done at the
> router level.
>
> CU,
> The latter, but even that only when correctly configured. By default,
> there is no outbound redundancy whatsoever.
What would be the proper configuration to provide for this outbound
redundancy if the GWIA itself is actually down? -
Redundancy with dual nic servers
Hi I have 2 11500's configured with box-to-box redundancy. I have a number of app servers each with dual nic's (which are Teamed) and which are connected directly to the CSS's. Nic 1 in each goes to the master CSS1 and is therefore live. Nic2 goes to standby CSS2.The CSS's are connected two 4500 switches to the public.I am monitoring the links to the 4500's,if i switch off the master CCS1,we fail over and the servers all connect via nic2 to the new master CCS2. But when the link to the 4500 from the CSS1 Master goes down the CSS'S failover but the nic2's do not connect to the CCS2 because Nic 1 in each server has not failed ie they still see CSS1 as up. Is there a workaround to this problem ?
Thanks
JI know of no way to link CSS interfaces so that if the uplink goes down, the the other ports are shutdown. There may be another way to configure the adapter teaming or failover on the server side. I know some OS's send out test frames from one adapter to the other to verify network integrity.
What I'd recommend is that you setup a VLAN on your 4500's for the server's physical connections, and uplink that to a "backend" interface on the CSS. This can be done with the CSS in either a router or bridge configuration, but I'd recommend router mode. -
How to implement redundancy with RT cFP?
Hi all!
I have a setup with a cFP-2020 controling a pump and multiple switch valves. The controller runs a PID that regulates the flow.
It also communicates with a pc through TCP/IP. A user can drive all the setup manualy ( opening/closing valves, change flow
setpoint, reading pressure sensors values,etc) and also launch an automatic mode that folows a recipe created by the user.
I would like to implement a redundancy at various levels:
1) Power : It is solved by the cFP itself since you can feed 2 power supplies.
2) Controller : I would like to add a second controller that would monitor the primary controller and takes over the control if
primary controller crashes. I know there is a hardware watchdog that would help a lot in the task.
I would know when the primary controller crashes through that watchdog. But how to know the final state where
the controller crashed so that the secondary controller would start from there? If it is in manual mode, it would be
easy, I could initiate the secondary controller with the last state on the host (pc). But what about automatic mode?
I could store the variables at any time but isn't it a bit too much? Is there a way to retrieve those data, other than
sending it to the host computer?
Does anybody has a good idea / structure in mind for this application?
3) Fieldpoint I/O: I would like the same as for the controller: have a second set of DI, DO, AI and AO that would secure the system.
There is also a watchdog there that could be used.
The main goal is, in fact: Let's say you remove physicaly the controller or any Fieldpoint I/O and the system would seemlessly go
on his task.
Anybody already did that before?
Thanks for any help!
Dai
LV 7.1 - WIN XP - RT - FPHi and thanks for the reply!
In fact, for the moment, when the connection to the pc is lost, the controller goes into "safe mode". It is a state where I am sure
there is no security issue for the person running the process ( avoid over-pressure in different tanks, etc).
I did not described the current process using the cFP because this one is less critical in terms of redundancy. If the process
is stopped because the connection is lost for example, it is not so important. The process can still be restarted from the very start.
It is because the process (chemical) allows it. It is like filtering. If half the filtering is done, you can still filter again to get the proper
result.
I am thinking about another process much more critical. If the process is stopped, it is lost. And it means a lot of money tens of 1000 euros at once.
For the moment, those processes are regulated and operated from a DeltaV DCS system (Emmerson). It is reliable but expensive and the programming environment is poor. I really like Labview. It is really powerfull !!!
In the future, if possible, I would like to replace the old systems of our plant with NI ones. I think it is much better when you have
a homogenuous system. Having a network with pc's, mac's and linux's is much more difficult to set up and maintain. The same
for the field, it is much more complicated when you use at the same time: labview, deltaV, profibus, foundation fieldbus, CAN, etc.
Of course sometimes, you cannot avoid it. The systems are different and have their pro's and con's... Of course, it is just my opinion!
If it would be possible, I'd buy only NI stuff... Now, I just replace if possible.
About the the Outputs being redundant, I was thinking about a polling system: use 3 outs and poll. The majority wins. It think it is used on space applications.
So, I should have asked at the first time : Do you think it is possible to replace a DeltaV system with a NI one?
I think it is possible. But is the effort worth it? If I have to code all that? If there was something built in, it would be a dream
Okay, thanks anyway. Maybe I need to think about it a bit more.
Dai
LV 7.1 - WIN XP - RT - FP -
How to implement redundant with 1 CE router to 2 MPLS service providers
Dear all,
Our head-office are currently have 1 Cisco CPE 3825 router with 2 WAN connections to our branches. We are now using static routing protocol in our network infrastructure, we consider how to implement the redundancy for networks by the redundant circuits connection to 2 MPLS providers, only when the primary connection to the primary MPLS L3 provider fail, the backup link to the second MPLS Layer 2 provider automatically active. Anybody knows where can I find information, tips or examples, how we'd handle the routing for that?
We are now have:
1 G0/1 interface connect to primary MPLS L3 Provider (the 2nd G0/2 interface is a leased-line connection to our partner, and we not consider here)
1 HWIC (layer 2) card, with 4 ports, which has interface F0/2/3 connected to the backup MPLS Layer 2 provider.
Thanks in advance.
PS: Current configuration : 3727 bytes
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname Router
boot-start-marker
boot system flash c3825-entservicesk9-mz.123-11.T7.bin
boot-end-marker
logging buffered 4096 debugging
logging monitor xml
no aaa new-model
ip subnet-zero
ip cef
no ftp-server write-enable
no spanning-tree vlan 4
no spanning-tree vlan 5
interface GigabitEthernet0/1
description connect to VDC MPLS$ETH-WAN$
mtu 1480
ip address 222.x.x.66 255.255.255.252
ip flow ingress
ip flow egress
service-policy output SDM-QoS-Policy-1
ip route-cache flow
duplex auto
speed auto
media-type rj45
fair-queue 64 256 256
no cdp enable
interface FastEthernet0/2/0
switchport access vlan 2
no cdp enable
interface FastEthernet0/2/3
description ToTBToverFPT
switchport access vlan 5
no cdp enable
interface Vlan2
description CONNECT TO MPLS_VDC
ip address 192.168.201.9 255.255.248.0
interface Vlan5
description Connect to HoChiMinhCity
ip address 172.16.1.5 255.255.255.252
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 172.16.244.0 255.255.255.0 222.255.33.65
ip route 192.168.0.0 255.255.248.0 222.255.33.65
ip route 192.168.24.0 255.255.254.0 222.255.33.65
ip route 192.168.30.0 255.255.254.0 222.255.33.65
ip route 192.168.32.0 255.255.254.0 222.255.33.65
ip route 222.x.x.68 255.255.255.252 222.255.33.65
ip route 222.255.33.72 255.255.255.252 222.255.33.65
ip route 222.x.x.196 255.255.255.252 222.255.33.65
ip route 222.x.x.200 255.255.255.252 222.255.33.65
ip http server
ip http authentication local
no ip http secure-server
ip http max-connections 3
control-plane
line con 0
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password
login
transport input telnet
line vty 5 14
privilege level 15
password
login
transport input telnet
line vty 15
privilege level 15
password
login
transport input telnet
parser view SDM_Monitor
scheduler allocate 20000 1000
endHi Mr jianqu,
Because of our customer now has 2 main central offices, and all other sub branches are now connected to each of these main central office via one primary full-meshed MPLS VPN of 1st Service Provider, so If I use the float static routes, and when there is a failure at one link at a CENTRAL CE Router to primary link to primary MPLS VPN Service Provider, but still there is no failure at the other site from a router CE sub branch with the the PE of the primary full-meshed MPLS VPN Layer 3 Service Provider,so It cannot cause a failover to a second redundant link of the 2nd Service Provider?
So with our system, do we only have one solution like this:
-Configure BGP as the routing protocol between the CE and the PE routers.
-Use local preference and Multi Exit Discriminator (MED) when running BGP inside a our customer VPN to select the primary and backup links.
-Use AS-override feature to support overlapping AS numbers between customer sites -
Cant Connect Cisco AIR-CAP 3602 with 2504 controller
Im trying to have one of our APs join our controller. No matter what I do, i cant get it to join the controller.
The controller has the right OS, I had to upgraded it 7.4 to support the 3600...
Both the controller and the AP has the same time and date.
But Im getting this from my AP:
*Oct 30 14:49:26.043: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Oct 30 14:49:26.055: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Oct 30 14:49:26.055: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Oct 30 14:49:26.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Oct 30 14:49:26.083: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Oct 30 14:49:27.055: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Oct 30 14:49:27.095: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Oct 30 14:49:27.103: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Oct 30 14:49:28.087: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Oct 30 14:49:28.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Oct 30 14:49:28.131: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Oct 30 14:49:28.139: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Oct 30 14:49:28.147: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Oct 30 14:49:29.131: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Oct 30 14:49:29.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Oct 30 14:49:29.167: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Oct 30 14:49:30.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Oct 30 14:49:36.083: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 30 14:49:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 14:49:36.411: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 14:49:36.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50
*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.1.0.50
Anyone can help me please?
Thanks....AP is connected directly to one of the ports on the 2504 controller.
I can move it to a POE switch, if needed.
Here is the output after I boot up the AP:
IOS Bootloader - Starting system.
flash is writable
FLASH CHIP: Macronix Mirrorbit (00C2)
Xmodem file system is available.
flashfs[0]: 43 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 16767488
flashfs[0]: Bytes available: 15230464
flashfs[0]: flashfs fsck took 16 seconds.
Reading cookie from SEEPROM
Base Ethernet MAC address: 4c:00:82:77:32:7b
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1"...###########################
File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...
Secondary Bootloader - Starting system.
Xmodem file system is available.
flashfs[0]: 43 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 16767488
flashfs[0]: Bytes available: 15230464
flashfs[0]: flashfs fsck took 8 seconds.
Base Ethernet MAC address: 4c:00:82:77:32:7b
Boot CMD: 'boot flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1;flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1'
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1"...###############################
File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, C3600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team
Initializing flashfs...
flashfs[3]: 43 files, 9 directories
flashfs[3]: 0 orphaned files, 0 orphaned directories
flashfs[3]: Total bytes: 31739904
flashfs[3]: Bytes used: 16767488
flashfs[3]: Bytes available: 14972416
flashfs[3]: flashfs fsck took 8 seconds.
flashfs[3]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 1 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.
Radio0 present 8764 8000 0 A8000000 A8010000 0
Rate table has 244 entries (64 SGI/104 BF variants)
Radio1 present 8764 8000 0 88000000 88010000 4
Radio2 not present 0 0 0 0 0 8
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco AIR-CAP3602I-A-K9 (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
Processor board ID FTX1731GQYY
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.5.102.0
1 Gigabit Ethernet interface
2 802.11 Radios
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 4C:00:82:77:32:7B
Part Number : 73-14521-02
PCA Assembly Number : 800-37501-02
PCA Revision Number : A0
PCB Serial Number : FOC17273HG4
Top Assembly Part Number : 800-35852-02
Top Assembly Serial Number : FTX1731GQYY
Top Revision Number : C0
Product/Model Number : AIR-CAP3602I-A-K9
% Please define a domain-name first.
Press RETURN to get started!
*Mar 1 00:00:11.355: FIPS IOS test Image Checksum successful
*Mar 1 00:00:11.355: FIPS IOS test Crypto RNG DEK Key Test successful
*Mar 1 00:00:11.355: FIPS IOS test SHA-1 successful
*Mar 1 00:00:11.355: FIPS IOS test HMAC-SHA1 successful
*Mar 1 00:00:11.355: FIPS IOS test AES CBC 128-bit Encrypt successful
*Mar 1 00:00:11.355: FIPS IOS test AES CBC 128-bit Decrypt successful
*Mar 1 00:00:11.355: FIPS IOS test IOS AES CMAC Encrypt successful
*Mar 1 00:00:11.355: FIPS IOS test IOS CCM Encrypt successful
*Mar 1 00:00:11.355: FIPS IOS test IOS CCM Decrypt successful
*Mar 1 00:00:11.387: FIPS IOS test RSA Signature Generation successful
*Mar 1 00:00:11.391: FIPS IOS test RSA Signature Verification successful
*Mar 1 00:00:11.391: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar 1 00:00:11.391: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
*Mar 1 00:00:11.847: Registering HW DTLS
*Mar 1 00:00:14.647: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:18.327: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 0 successful
*Mar 1 00:00:18.327: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 0 successful
*Mar 1 00:00:18.327: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 0 successful
*Mar 1 00:00:18.327: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 0 successful
*Mar 1 00:00:18.327: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar 1 00:00:24.451: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 1 successful
*Mar 1 00:00:24.451: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 1 successful
*Mar 1 00:00:24.451: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 1 successful
*Mar 1 00:00:24.451: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 1 successful
*Mar 1 00:00:24.451: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Mar 1 00:00:26.811: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C3600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team
*Mar 1 00:00:26.811: %SNMP-5-COLDSTART: SNMP agent on host AP4c00.8277.327b is undergoing a cold start
*Jul 4 23:55:50.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jul 4 23:55:50.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul 4 23:55:50.051: %PARSER-4-BADCFG: Unexpected end of configuration file.
lwapp_crypto_init: MIC Present and Parsed Successfully
*Jul 4 23:55:50.191: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Jul 4 23:55:50.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Jul 4 23:55:51.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Jul 4 23:55:51.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 4 23:55:51.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jul 4 23:55:53.319: FIPS HW test SHA-1 successful
*Jul 4 23:55:53.319: FIPS HW test HMAC-SHA1 successful
*Jul 4 23:55:53.319: FIPS HW test AES CBC 128-bit Encrypt successful
*Jul 4 23:55:53.319: FIPS HW test AES CBC 128-bit Decrypt successful
*Jul 4 23:55:53.819: FIPS HW test SHA-1 successful
*Jul 4 23:55:53.819: FIPS HW test HMAC-SHA1 successful
*Jul 4 23:55:53.819: FIPS HW test AES CBC 128-bit Encrypt successful
*Jul 4 23:55:53.819: FIPS HW test AES CBC 128-bit Decrypt successful
*Jul 4 23:55:53.819: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed
*Jul 4 23:55:53.819: DPAA Initialization Complete
*Jul 4 23:55:53.819: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Jul 4 23:55:54.819: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up%Default route without gateway, if not a point-to-point interface, may impact performance
*Jul 4 23:56:13.191: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
*Jul 4 23:56:14.279: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 4 23:56:15.279: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 4 23:56:15.371: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 4 23:56:16.371: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jul 4 23:56:18.895: Logging LWAPP message to 255.255.255.255.
*Jul 4 23:56:23.627: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.1.150, mask 255.255.240.0, hostname AP4c00.8277.327b
Translating "CISCO-CAPWAP-CONTROLLER.pti.local"...domain server (10.3.1.32)
*Jul 4 23:56:34.559: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Jul 4 23:56:34.567: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER.pti.local
*Jul 4 23:56:44.567: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 30 15:05:13.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 15:05:13.411: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 15:05:13.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.1.0.50
*Oct 30 15:05:18.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50 -
Hi all,
We are going to implement high availabilty in 5508 WLC with version of 7.3.101 . We will be using Prime infrastructure 1.2 for monitoring purpose.
With Prime , whether we can monitor and manage redundant WLC also or only active WLC?...
Thanks for your help.......I just know from experience. You can only GUI/ssh into the primary WLC when you enable AP-SSO. So once the pairs are in HA, that is it.... You have only the primary WLC IP address available. You learn things the hard way sometimes because there are things not documented.
Sent from Cisco Technical Support iPhone App -
Local printers not working with 2504 WLC
I have a 2504 WLC with 3 1262 WAPs in lightweight mode.
Clients connect using WPA2 PSK AES with no problem. Clients are Windows XP Home SP3. Test pages end up in print queue and eventually get a error printing status. Clients are not part of a domain and in a standalone workgroup - techstream.
Printer can be pinged from wireless client.
Another 1262N WAP in standalone mode connected to same lan from windows 7 sp1 clients have no problem printing to a local printer.
What does work on the Windows XP Home client is connecting to a network shared printer authenticating with domain admin id and password and it works. Reboot and the network shared printer can not connect multiple reasons are "access is denied" and message box says "only security tab will be displayed....." Another Windows XP Home SP3 client on reboot can't open the network shared printer with message "Can't find printer"
The local printers do work on these pc's with an old colubris router that has an outside interface on our lan and internal network with clients getting dhcp address from colubris router of 192.168.3.XXX .
What is wrong with the wireless 2504 WLC?
Thanks
Broadcast forwarding was enabled.Although a cisco tech support was helpful in making sure multicasting was enabled and a multicast server defined, the problem was at the CP2025DN printer. It had old network ip mask and gateway configured on the printer.
The new devices were part of the new network configuration (Mask and gateway had changed). I didn’t change that printer when I changed all the other printers at the facility because it was still active thru the old wireless network. I forgot to change the printer ip config when I brought the new wap on the new wireless network with the wlc 2504.
End result was the clients were part of a different subnet and gateway configuration then the printer and this disrupted the communication between clients and the printer. Once I corrected the mask and gateway on the printer to be the same as the dhcp scope of the wireless network, communication and printing worked.
Problem solved. User error -
Hi Forum,
is it possible to operate 2 vWLC (with version 8.0) and configure them to work redundant (in any mode A/A, A/P or cold stand-by) as you could with a 5500 WLC?
TIA
AlexanderHi Alexander,
Yes that is possible, but not in an hitless fashion like SSO with the 5500 controllers. The access-points need to determine that their primary controller is down which will take at least 10~15 seconds (if you are going to use fast AP heartbeats). And all the clients need to re-authenticate. To answer your question; just configure an primary and secondary WLC on the access-point.
With the virtual WLC your access-points have to run in FlexConnect mode which has some drawbacks (just like the virtual WLC itself, comparing it to an physical WLC). But depending on your deployment, the virtual controller can be much cheaper and lift on the HA infrastructure in the already existing hypervisor layer in your datacenter.
It is also possible to do "local authentication" on FlexConnect AP's when the connection to the controller has been lost, which can be handy when the WAN link is instable. Maybe this feature is an better solution that just add an second WLC in the datacenter far away. -
Hi, I will implement a WLAN network with AP1130AG and WLC 2125. If I understand right the whole traffic to/from the APs (data + management) will be first encapsulated in a LWAPP tunnel to/from the WLC ? Then, the WLC will forward the different traffic VLANs via a 802.1Q trunk to the network. Is it correct ? If so, the WLC is a true single point of failure ! What will happen if the WLC get out-of-service ? What is the impact on existing client sessions and new ones ? How will a redundant WLC 2125 work with the primary (active/standby with HSRP, load balancing)? What are the best practices in such a network ?
ThanksHi Jean-Pascal,
In the WLC world this is how an AP is covered in case one WLC fails. It is not without some "downtime" in case of failure but both Controllers are active. You have to keep in mind that an AP can only be registered to one WLC at a time so this is the best that you can do :) When one WLC fails the AP then has to re-register with the backup, this is not a completly seemless process.
This has some really good info;
WLAN Controller Failover for Lightweight Access Points Configuration Example
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008064a294.shtml#c4
Hope this helps!
Rob -
Ace redundancy with different software licences
Hi,
We have 4710 with ACE-4710-1F-K9.
1G Bundle: Includes ACE 4710 Hardware, 1 Gbps Throughput, 5,000 SSL TPS, 500 Mbps Compression, 5 Virtual Devices, 50 Application Acceleration Connection License, Embedded Device Manager
We have another 4710 with ACE-4710-2F-K9.
2G Bundle: Includes ACE 4710 Hardware, 2 Gbps Throughput, 7,500 SSL TPS, 1Gbps Compression, 5 Virtual Devices, 50 Application Acceleration Connection License, Embedded Device Manager
Is that possible to make redundancy (FT GROUP) with 2 devices has different software bundles?Hello-
When you initially setup the ACE's in an FT pair, they initially figure out who is master based on priority, then they check if the licenses that they each have installed are the same. If there is a mismatch, FT will continue to check the configuration and will eventually go into a "standby warm" state. It will not config-sync the startup or running configurations until you install the correct license and toggle config sync.
This is what yo uwould see:
ACE-A/Admin# show ft group 1 status
FT Group : 1
Configured Status : in-service
Maintenance mode : MAINT_MODE_OFF
My State : FSM_FT_STATE_ACTIVE
Peer State : FSM_FT_STATE_STANDBY_WARM
Peer Id : 1
No. of Contexts : 1
Running cfg sync status : Detected license mismatch with peer, disabling running-config auto sync
Startup cfg sync status : Detected license mismatch with peer, disabling running-config auto sync
If you disable config sync, it will still stay in a warm state and ignore the license mismatch:
ACE-A/Admin# show ft group 1 status
FT Group : 1
Configured Status : in-service
Maintenance mode : MAINT_MODE_OFF
My State : FSM_FT_STATE_ACTIVE
Peer State : FSM_FT_STATE_STANDBY_WARM
Peer Id : 1
No. of Contexts : 1
Running cfg sync status : Sync disabled by CLI.
Startup cfg sync status : Sync disabled by CLI.
It is not recommended to run with 2 different licenses because it is possible that you failover and don't have enough resources to carry the traffic that the active was running - however - if you disable configuration sync, it will allow you to do such.
Regards,
Chris Higgins
Maybe you are looking for
-
HP DesignJet 500 and OS 10.4.6
A few weeks ago, I upgraded from Mac OS 10.3 to OS 10.4.6 on an iMac G4. Ever since my upgrade, I have not been able to print custom sizes to my HP DesignJet 500+HPGL2. (FWIW, the printer is connectd with a USB cable, and the size I'm trying to print
-
File Sharing - External Drive - Unable to add user
Hello, I am trying to share a folder within an external firewire drive. However, when in the "File Sharing" section, I am unable to add users after adding the folder to the "Shared Folders:". The add user dialog appears, but when a user is selected a
-
How do I edit a converted PDF in a Word document?
How do I edit a converted PDF document in a Word document
-
4:3 stills in a 16:9 project
I have a 16:9 project to which I want to add a slideshow. The stills appear OK during editing but the people look fat when the DVD (16:9 project) is played. I know how to adjust each still's aspect ratio but there are 161 of them. Doing each one indi
-
Landing Page on ADFS 3.0
We use ADFS 3.0 (2012 R2) for Office 365. The user goes to Outlook.Office365.com, enters a username, then lands on our STS site, enters password matching the username, then gets bounced back to Outlook.Office365.com. How do I skip the first step? How