Roaming issue between ap's? 4402 controller, 1010 AP's.

We are having an issue logging into wireless. If I am authenticate at one location on campus I have no problems authenticating there at any time. However, if going to a different part of campus, different ap, I can not authenticate and the attempted authentication does not even show up in the passed or failed attempts log on the acs server. I can see the WiFi and I am able to obtain an IP. So, dhcp is working properly. I just can't authenticate.
All of our ap's are the light weight 1010, controlled by a 4402 controller. Authentication goes through the ACS controller which queries the LDAP server. It doesn't appear to be an LDAP issue because I don't have authentication problem as long as I authenticate to the same ap every time.
The default group they belong to allows an unlimited number of authentications.
Any ideas?

A little more info after some trouble shooting....I didn't mention previously but should have, we to 2 4402 wireless controllers. I took some of the ap's that were on controller 1 and set their primary controller to be controller 2 instead. After that I was able to authenticate to those ap's.
So, it appears that the issue is with the first controller.

Similar Messages

  • WLC (4402) Controller Redundancy

    I currently have 1 x 4402 Controller setup in the HQ. This has a failry extensive wireless environment.
    If there was to be a failure then the HQ has lost all Wireless communications.
    I would like to implement another controller and use this as a backup.
    Anyone have any implementation thoughts surrounding this? best practice and anything I need to consider?
    Thanks

    1. Add a second controller that is the same size controller that you currently have. Be careful to never exceed the total capacity of a single controller, or else you lose your full redundancy.
    2. Keep the controller at the same site, but connect it to a different switch in your core. If you are connecting it to a chassis switch, connect the two cables to different blades for highest redundancy.
    3. Configure each controller to use LAG (Etherchannel).
    4. Split your access points between the two controllers. Best practice is to group APs together that are physically close, so roaming occurs between APs that are on the same controller. Don't "checkboard" your APs when assigning primary controllers.
    I hope this helps!
    Jeff

  • L2 Roaming issue with Avaya wireless phone on WISM -V6.0.196.0

    Hello Friends,
    I am facing Layer2 roaming issue with Avaya Wirless phone 3620 which are configured WPA / Pre-shared key auth with a SSID1 and face a cut or delay in the voice.
    But when i use Cisco Wireless phones and try to roam between one LWAP to other i dont face a cut or delay in the vocie which are
    Configured with 802.1x +CCKM auth .
    Then i configured new SSID 3 with 802.1x+CCKM settings for  the new Avaya wireless module 3631 , but still face cut and delay while doing Layer 2 roaming.
    While i was using these AP in WDS mode i never faced this Layer 2 roaming issue with Avaya wireless phones.
    In  current WISM all the LWAPs are supporting properly to the Cisco phone and Wirelss laptop clients.
    I request you to please let me know how do i proceed further to solve the issue and please let me know if anybugs or incompatibilty for WISM with Avaya wireless phones.
    Appreciate your response.
    Regards,
    KA.

    Hello ,
    Can any body please respond to my above Query.
    Thanks,
    KA.

  • Upgrade of 4402 Controller to 7.0.98.0 or 7.0.22.0 breaks WLC ability to display 1130 series APs

    Almost a year ago we upgraded our 4402 Controller to 7.0.98.0 to support our 1262 APs. This allowed them to be in our network. We recently realized that we are unable to access the 1130 APs directly from the WLC. We can still access them from the controller GUI, but not the WLC gui.  If we downgrade to the 6.0.202.0, it fixes the issue with the 1130's, but we can longer have the 1262's on our network.  The error we get when we try to connect to 1130's while on 7.0.98.0 or 7.0.220.0 is as follows:
    7.0.98.0 error
    Error: Object "LradMeshNode" does not exist
    7.0.220.0 error
    Error: Object "Child of Lrad#302675 (Lrad00:15:c7:2a:20:c0) class LradMeshNode" does not exist.
    Any suggestions?
    thanks,
    Steve

    do you mean you can't see the 1131 on wcs ?
    If so, is your wcs on the same code rev as your wlc or a head ? Wcs should always be at or a head in code than your wlc ..
    Sent from Cisco Technical Support iPhone App

  • CCKM, WPA, fast roaming issues

    I have a 4404 LAN controller with 1131a/g light AP's. Clients are Cisco a/b/g cards using WPA2, PEAP MSCHAPv2 and the Odyssey supplicant.
    Sometimes my clients roam between access points without losing a single packet, but other times they lose connectivity for up to 15 seconds while the client reauthenticates. Obviously, I would like to improve roaming time.
    On the WLAN controller I have WPA2 configured with AES and "auth key managment" set to 802.1x. I just upgraded to the latest (4.0) code on the controller and noticed there is a new "auth key management" setting called 802.1x + cckm.
    After much research on cckm tonight, I seem to have more questions than answers.
    Can/should cckm be used WITH WPA2?
    If not, can both WPA2 and cckm be supported on the same WLAN?
    Which auth key management setting should I be using, 802.1x or 802.1x + cckm?
    Does cckm require support of both supplicant and NIC?
    Is there anything else I can do to make roaming more seamless?

    Is it possible to use
    WPA1 + TKIP + Auth Key Mgmt="CCKM"
    or
    WPA1 + TKIP + Auth Key Mgmt="802.1x + CCKM"
    My WLC have Software Version 4.0.179.8.
    With this configuration I will need client card CCX v4 ??
    Thanks

  • Wlc 4402 and 1010 Aps

    Hi,
    I have 2 vlans (wired-side) in my corporation: the first one for Data (vlan 1, native) and the second one for voice (vlan 2). We've just get a wlc 4402 with 1010 Aps and I would like to know one thing:
    Could I create 2 Ssids(one for voice and another for Data) and map each one to its wired Vlan?.
    Does the 1010 Ap support 802.1q?
    Thanks in advance for your help

    The 1010 aps connect to the switches as hosts
    (switchport mode access; switchport access vlan ...)
    The controller has 2 ports that connect to the network as trunks. You can connect them as port 1 and 2, or put them in a lag group [aka etherchannel)
    All the vlan trunking is done at the controller port to switch port. The AP sends the info down to the controller over the vlan specified for the aps
    In your case, you should create another vlan for the APS.
    The 4402 controller mgmt interface would sit in the same vlan as the APs. You would then create dynamic interfaces on the controller that have a vlan id and ip address for the desired network per your needs. You would then create a wlan on the controller and then bind it to the dynamic interface you just created.
    I am oversimplfying this process quite a bit, but it should get you started. There is now a good bit of info on cisco.com for the wireless products

  • Compatibility issue between your power management system and Windows,

    Compatibility issue between your power management system and Windows, and my system is Lenovo ACPI-Compliant Virtual Power Controller.

    What model do you have? Can you post your MTM or model name?
    Sometimes these messages are a false alarm.

  • Routing issue between Cisco Nexus and Cisco 4510 R+E Chassis

    We have configured Cisco Nexus 7K9 as core and Cisco 4510 R+E as access switches for Server connectivity.
    We are experiencing problem in terms of ARP learning and Ping issues between Cisco Nexus and end hosts.

    Hi,
    So you have N7k acting as L3 with servers connected to 4510?.
    Do you see the MAC associated with failing ARP in 4510?. Is it happening with all or few servers?. Just to verify if it is connectivity issue between N7k and 4510, you can configure an SVI on 4510 and assign address from same raneg (server/core range) and perform a ping.
    This will help narrow down if issue is between server to 4510 or 4510 to N7k.
    Thanks,
    Nagendra

  • Communication between : AP and WLAN controller

    Hi,
    The communication between AP and WLAN Controller is ( Data and Control ) UDP.
    Source port 1024 and destination port 12222 and 12223. Actually which device listen to which port or both should listen as control and data can be generated from both the devices.
    How does the user ( wireless client) traffic is switched - if user traffic is a TCP traffic. It will be sent to WLANC and then WLANC forwards it to respective VLAN or default gateway ( depending upon the destination in the packet ).
    Please explain / share the experience.
    any link on cisco.com
    Thanka in advance
    Subodh

    "the LWAPP Control and Data messages are encapsulated in UDP packets that are carried over the IP network. The only requirement is established IP connectivity between the access points and the WLC. The LWAPP tunnel uses the access point's IP address and the WLC's AP Manager interface IP address as endpoints. The AP Manager interface is explained in further detail in the
    implementation section. On the access point side, both LWAPP Control and Data messages use an ephemeral port that is derived from a hash of the access point MAC address as the UDP port. On the WLC side, LWAPP Data messages always use UDP port 12222. On the WLC side, LWAPP Control messages always use UDP port 12223.
    The mechanics and sequencing of Layer 3 LWAPP are similar to Layer 2 LWAPP except that the packets are carried in UDP packets instead of being encapsulated in Ethernet frames."
    Taken from "Cisco 440X Series Wireless LAN Controllers Deployment Guide"

  • Serious Sync issues between iTunes 8.0.2 and AppleTV 2.3

    Please Help,
    Everything was just wonderful until several weeks back when the AppleTV started having sync issues that seem to have degraded into oblivion. Rebooted everything, checked all software loads, tried many of the suggestions (no blocking network / firewall issues) and have even tried adding redundant port allows for any and all ports I could find going in / out of Apple TV. But to no avail there seems to be a bug that got introduced somewhere with the sync mechanisms.
    The Apple TV can purchase movies, download them fast to start playing, view youtube videos just fine and play all of the media great, So can my Mac and all media / iTunes functions work well it even syncs with my iPhone / iPods well.
    However... The only way I can get the AppleTV to sync is to reboot it, then it will sync some, iTunes will just get to a forever syncing with Apple TV state (which you have to stop), reboot AppleTV again, it will sync some more, until it stops, iTunes is stuck syncing forever with AppleTV again, repeat and rinse about 4 more times and you have it all synced.
    If there isn't anything to sync when AppleTV boots the Sync in iTunes just spins for ever. I actually left it for 4 days just to see if it was actually doing anything. Minimal Network IO and of course it never finished.
    If I stop the Sync with Apple TV in iTunes and then try to reinitiate it from iTunes I get the 3986 port error (which is bogus) unless there is some hidden setting somewhere in the OS that I can't find. And if there was a problem then why would it start and run when I boot the Apple TV.
    It just seems that all of a sudden things started going wrong with Sync with no real change other than 'software updates' .
    The only thing I haven't tried is to do a factory reset on the AppleTV which from what I have read doesn't really solve anything.
    So, please someone from Apple or someone with some detailed technical experience provide some guidance on whether there is a bug that got introduced, version issues between iTunes/AppleTV, or something else going that I haven't been able to figure out over the last 2 weeks.
    The only other unique things that may be different is that I have my iTunes library on an external drive (not on the internal drive). Does this many any difference?
    Thank You in advance to anyone that can help me get to the bottom of these issues. This started happening when I was totally sold on AppleTV and about to buy a second one.
    mmilford

    And it's good to know I'm not the only one with the problem too! I just cannot sync stuff from Mac to Apple TV without it locking up. It actually seems to lock the wifi also, meaning I have to quit iTunes, turn off the wifi and then turn it back on again. But as soon as I open iTunes, the same problem again...
    I've tried everything I can think of, searched all help articles, but cannot sort out this somewhat annoying problem.
    Message was edited by: Lee Nixon

  • Any known 'porting' issues between 8.2.2 and 9.0 ??

    Hi all,
    we are in the process of evaluating LS ES2 (9.0) and would like to know if there are any 'porting' issues between the two versions.   Asked another way, are there any issues in deploying a 8.2.2. LCA onto 9.0 ?
    Dan

    8.2 LCA's will run fine in 9.0 if they are just deployed into it.  But in 9.0 a new application model has been introduced, so in order to make changes to anything after you've migrated it you'll need to create an application and migrate your processes and resources into it.  You may want to take a look at the Leveraging Legacy Solution document available online.  Here's the link:  http://help.adobe.com/en_US/livecycle/9.0/workbenchHelp/help.htm?content=leveragingLegacy. html .
    Chris

  • Compatibility issue between your power management system and Windows 8.1

    I have purchased a new Lenovo Ideapad S410 and have this problem.
           Compatibility issue between your power management system and Windows
           It also gives a message "Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you. (100% complete)
           If you'd like to know more, you can search online later for this error:
    VIDEO DXGKRNL FATAL ERROR
    Please help! My laptop is only 5 days old.

    What model do you have? Can you post your MTM or model name?
    Sometimes these messages are a false alarm.

  • File sharing issues between iMac G5 20"/Mac OS 10.5.8 and iBook G3 600mhz/Mac OS 10.4.9.

    Both Macs can copy files from each other using the AFP connection.  However, I cannot copy files to another Mac.  So when I try and copy a file from the iMac to the iBook, I get these series of messages:
    1) You May Need to enter the name and password for an administrator on this computer on this computer to change the item names "filename".
    2) The item "filename" contains one or more items  you do not have permission to read. Do you want to copy the items you are allowed to read?
    3) The operation cannot be completed because you do not have sufficient privileges for some of the items.
    I'm not given the prompt for name and password at any stage.
    When I try and copy from the iBook to the iMac, this is the only message I receive:
    The operation cannot be completed because you do not have sufficient privileges for some of the items.
    I'm not given the prompt for name and password at any stage.
    With the iMac, I have the permissions preferences set for my startup drive and external harddrives for Read and Write for all entries.  I can't do that on the iBook because it doesn't have those settings in the Sharing Preferences.
    Could the fact that both Macs use the same user/account name and password?  I never had this issue between my iBook and Power Mac G3 300mhz/Mac OS 10.2.8 when having the same name and password.
    All help is appreciated.  Thanks.
    Bill Rudloff

    I've done a little reading, and it has to do with under the hood stuff with the Login ID number.  I found how to change it on the iBook, but I can't figure it out on the iMac.  Ideally, I want them to both be 501.  So how do I sent the iMac in Mac OS 10.5.8?
    Bill Rudloff

  • How do I fix the compatibility issue between my iPhone 4S with iOS 7 and my Pioneer car stereo? There was no problem with iOS 6, but now I get a message saying "this device is not compatible" and so I can't use Netflix for example. How do I fix it?

    How do I fix the compatibility issue between my iPhone 4S with iOS 7 and my Pioneer car stereo? There was no problem with iOS 6, but now I get a message saying "this device is not compatible" and so I can't use Netflix for example. How do I fix it?

    This is a typical response from the manufacturer. Did you try the fix that Lawrence mentioned. When Apple or any other phone manufacturer update phone software, they have the latest Bluetooth installed. It is usually the problem with the radio manufacturer that they devices are using the older Bluetooth protocols. You can try this support document http://support.apple.com/kb/TS3581 and see if anything there helps, but generally it requires the radio manufacturer to update their firmware.

  • Why can't I use WebCT chat with my computer?  I get the 'spiral of death' every time I try to type in my chat.  I have a feeling it has to do with compatibility issues between Java and Tiger.

    Why can't I use WebCT chat with my computer?  I get the 'spiral of death' every time I try to type in my chat.  I have a feeling it has to do with compatibility issues between Java and Tiger.

    Hi Elizabeth,
    Do your Mac meet any of these requirements?
    http://www.wvnet.edu/services/webct/requirements.html
    From this it appears to be PC only!???
    http://sourceforge.net/projects/awebctcclient/files/Pancake%20%28it%20own%20proj ect%20now%29/Pancake%20Console%20V1.0.0/PancakeConsole-1.0.0-src.zip/download
    Can you provide any more info on which bersion or file you have?
    Can you tell us why you need this for your use?

Maybe you are looking for

  • Retrival of data in smartview

    . hi friends i m new in HFM so i need help about following query The data is exported to smart view in excel but the cells are showing zeros what could be the reason? Thanks

  • Jobs to run the function modules to extract the generic extarctors

    Gurus, I have a Datasource 'ZCMS_PP_TRAN' with extract structure 'ZBW_ST_CMSD_PP'. The extract structure is populated using the function module Z_BW_GET_CMSD_PP. But how do I schedule this FM or in general, are they run using std programs? Thanks, Si

  • Test-owaconnectivity command is not working

    Hello Experts, Can you please help me figure out how to successfully run this command please? When I run test-owaconnectivity on one of our CAS servers, here is what I get: WARNING: Test user 'extest_0c7dd26927464' isn't accessible, so this cmdlet wo

  • ITunes was not installed correctly error 7 Windows error 5

    , how do i fix this? ive tried everything from security to uninstalling , im tired of going through all these discussion pages trying to fix it because nothing ever works. ive tried revo uninstaller, winRAR, and just uninstalling in general, please h

  • Access to individual photo files in Finder

    I recently updated to iLife 08. I've noticed a couple of things but the most confusing is that when I go through finder>pictures>Library.iPhoto instead of having "roll" folders like before, I now only see the iPhoto icon (the sunset pic to be exact).