Voice WLAN - HREAP

Hi to all,
I'm implementing  a WLC2106 for a small Voice WLAN environment using all the Blueprint settings defined in the CCO documents ("Voice WLAN designing" and "Cisco 7921 Implemenation Guide..").
In these documents the Voice WLAN configuration examples are always setup using the WLAN as Local Authentication and Local Switching without mentioning if the use of H-REAP will be also fine!
Since on my WLC I've to setup also a Data WLAN which will use H-REAP, I would live to know if H-REAP is also working fine configured on a Voice WLANs? Or should I use it only for Data WLANs?
Tnx for the feedback
Omar

Hi to all,
thanks for your info...I've rechecked again and again the WLC configuration regarding the 11a radio configuration and all is fine...
The WLC OS and Phone FW are the same as you mentioned above...
I've done a Site Survey using the 7921G and two other IP phone (another 7921G and a 7925G) and all were experiencing randomly disconnections from the Wireless LAN...the 7925 had the best behaviour since it had been disconnected only a couple of times...the 7921G not...
On the Site-Survey we've seen that the 7921G had seen 2 out of 3 APs...sometimes all threes, the 7925G had seen always all 3APs...
the strange thing is that the 7921G Site-Survey has informed me that Proxy-ARP is not supported...but from WLC Release 5.0 Proxy-ARP is enabled by default and you couldn't disabled..morever the disconnections are happening less when on the phone there is an active call..
I'm start to thinking that these randomly disconnections are related to external interference...
Omar

Similar Messages

  • Help with larger sized voice wlan.... design considerations.... tips...etc...

    Hi Everyone,
         I'm hoping that you guys and gals can help me with an ongoing problem that we have at one of our sites. We're working on areas of the location due to it's size and phone load. We have an area, that I will refer to as building A, that is roughly a square that is 240' x 240'. The inside of the building has some pallets inside for storage(they allow RF to penetrate through them) and also some metal production lines. There is also a mezzanine  / elevated area in the middle that the users can walk under. It's not very large, but it would affect a phone if you walked underneath it while making a call. So, now that I have a brief description of the environment, I will tell you the equipment I'm running...
    1 x 4402 50AP Wireless Controller with 6.0.199.3 (MR3) installed.
    We currently have nine AP's installed in this area, with 4 up front so that way they cover the office areas better. Most are 1231G's, but some are 1242's.
    Since we do not have A radios everywhere (budgetary decision) we are running all of these phones on 2.4Ghz (Yikes! I know!)
    The 7920's use LEAP and the 7921's use PEAP MS-CHAP v2 with CCKM enabled on the controller.
    I also have 802.1p wired QoS enabled for the voice QoS profile and it is applied to our voice WLAN.
    We have conference rooms in the front area that will need to support roughly 20-30 maximum mixed 7920 and 7921G phones in a roughly small area. (Yikes! I know!)
    We also have a 2106 with mesh .54M installed, but it is for outdoor AP's and should not be affecting this area.
    So, I guess my questions are....
    Has anyone ever operated the 7920 and 7921G's in mixed mode?
    I'm thinking about separating the 7920s on 2.4 and tell the 7921's to prefer the A band or just use A. This will require A radios / surgery, but we've dealt with different code trains, TAC configs, and even added a few more radios. I think it's time to say we need to redesign this area. It doesn't help that phones keep getting purchased either....
    What rule of thumb would you guys / gals say would be appropriate for this phone count in terms of the number of AP's I should use?
    Since we're dealing with two different phone models, it makes it hard to simply just read the deployment guide. I know these phones can coexist, I just think we're running into over capacity and problems with 802.11B in the mix. In the conf room right now, there are most likely signals from at least two AP's. This doesn't seem like enough bandwidth for just the 2.4 Ghz range when 20 - 30 phones are in there. Not all of them are calling, but the associations / mgmt traffic alone must be horrendous since the phones are 802.11B
    We are going to do a manual survey with a 1242 since that AP will support both phone models. I think we may need to survey twice if we're going to go this route; One survey for the 7920's on 2.4Ghz with a 1242AG and one survey on 5Ghz with a 7921G. I think that will provide the info we need to get the AP's repositioned where they need to be.
    What kind of power levels should I be using in an area like that? We've originally had a survey at 50mW, but since then we turned the power down to pwr lvl 3 in some spots due to the additional AP's. I've seen references of roughly 1 AP per 3000 sq. ft at pwr level 4, but that seems overkill. 
    Can we run mixed power levels on AP's with the phones? Or will that cause one way audio due to the transmit power diffrences in the cells?
    I'm thinking that we should pick a power level, survey the -67 cell size at the power level, add more AP's so that way they are overlapped 15-20%, and then actually implement the design. I'm pretty good at getting decent channel assignments in place. I know of non-overlapping channels, RRM, etc. I also have an AirMagnet laptop with an Aironet Adapter. It is good for finding noise, interference, etc...
    I understand this is practically a book, but at this point, we've been trying a LOT of different things in order to get this to work properly. I think it's finally time for me to "strongly suggest" that we do the following...
    1. Choose ONE phone model.
    2. Choose ONE AP model.
    3. Make sure to implement the 5Ghz band for all AP's so we have complete coverage.
    4. Choose ONE power level for each band. This will affect the coverage and placement of AP's. I'd imagine that we'd need to survey with A first, and then survey with b/g. Typically we can use the 1242 and get about the same cell size on both bands, but 5Ghz is a higher frequency and may not penetrate as much as 2.4 Ghz..
    5. Come up with a new coverage map based on a manual site survey with the phones mentioned above.
    6. Implement the design.
    7. Use it.
    8. Try not to have a heart attack when the system actually supports that many phones in that area...
    So, please, let me know your thoughts and if you have any suggestions. It would be greatly appreciated. We've been slowly working out the gremlins in the phones there over the past few years. I'm more of a data wireless person myself, but I do have good luck with a low to moderate phone count (usually no more than 7 calls per AP). Once we start doing craziness like trying to get 20-30 802.11B phones to work in the same area on only one or two AP's, then things start to become a challenge, especially when we don't have the 5Ghz cells to help with the bandwidth requirements for voice....
    Thank you for your time,
    Craig 

    There's a pretty recent (last few months) Voice over Wlan design guide published (was published for the 9971 phones - but all great advice) and it recommends just about all the settings required for an off the shelf wireless voice network.
    http://www.ciscosystems.com/en/US/docs/voice_ip_comm/cuipph/9971_9951_8961/7_1_3/english/deployment/guide/9971dply.pdf

  • VOICE WLAN BRIDGE

    Hallo Community,
    wie im Anhang zu sehen ist folgender Aufbau in der Planungsphase.
    Hardware
    Cisco 886 VDSL/ADSL
    Cisco SG 300-28P 28-port
    cisco AP WPA 321
    Cisco SPA 122
    Einrichtung
    Die Einrichtung des konvergenten Netzes erfolgt über zwei VLAN's (Daten / Voice).
    Die Konfiguration des Switches / Telefone snom 720 wird über LLDP für die Auto Voice Provisionierung erfolgen.
    Mit DSCP 46 EF die QoS
    Router 886 fungiert als DHCP für das Voice VLAN
    Die Frage an der community ist wie eine WLAN BRIDGE konvergent mit einem best practice aufgebaut wird.
    Eine Anfrage bei cisco hat folgenden Lösungsvorschlag
    Es werden drei WAP321 benötigt.
    Ein WAP321 wird an dem Switch direkt verbunden und zwei WAP 321 sind in dem abgesetzten Office installiert.
    Die zwei AP im externen Office sind notwendig aufgrund der WLAN Bridge die nur ein VLAN auf die MAC Adresse binden kann.
    Die beiden AP im Office bekommen die SSID Voice und Data.
    Was uns unklar ob diese Konfig so wirklich funktioniert oder ob es falsch verstanden ist.
    Zu diesem Lösungsweg zwei konkrete Fragen.
    1.) LLDP
    Ist über die WLAN Bridge ein LLDP bis zum Switch möglich ?
    Ist ein manuelles Einbinden der Telefone notwendig VLAN usw.
    2.) Konfiguration
    Wie sieht die Konfiguration WLAN Bridge / VLAN im Detail aus.
    Mit dem Thema WLAN Bridge und Voice in Verbindung mit LLDP zurzeit wenig Erfahrung, kann jemand helfen?
    Gruß
    Rene

    Hallo Rene,
    1.) LLDP
    Ist über die WLAN Bridge ein LLDP bis zum Switch möglich ?
    LLDP ist ein Layer 2 protokol und ist im SG300-28P supportet.
    Eine WLAN Bridge uebertraegt die Informationen von einer Stelle an die andere. Die Bruecke veraendert die Informationen nicht.
    2.) Konfiguration
    Wie sieht die Konfiguration WLAN Bridge / VLAN im Detail aus.
    Eine Erklaerung zur WLAN Bridge ist im Anhang.
    Gruss,
    Friedrich Scharz

  • AP HREAP VS WLAN HREAP

    I currently have a WLAN (lets call it WIFI1) that is configured for HREAP local switching. All of my APs are running in HREAP mode as well. Is there any way to run one of these access point in local mode that users can still connect to WIFI1? I tested this and it looks like you need both the WLAN and AP running in the same mode in order for clients to connect. Is this true?

    Hello Jason,
    If I understand it correctly, you would like to have some of your APs in local mode so that the client traffic is tunneled back to the WLC. You can certainly accomplish this by using local AP mode.
    The H-REAP local switching flag on the WLAN advanced configuration ONLY applies to APs in H-REAP mode. In other words, if you have APs in local mode, they will still service that WLAN, but traffic will be tunneled to the WLC and will use the defined controller interface that is bound to the WLAN.
    -Patrick Croak
    Wireless TAC

  • Voice over WLAN - Cisco 2504 and iPhones/Androids

    All:
    I'm working on a solution for someone who already has a Cisco WLC 2504 running 7.6.100 and 2602i APs.  They are running iPhones with a SIP application instead of purchasing Cisco 7925G phones.  They are having issues when roaming to different APs.
    Site survey is good.  I also used a laptop with Net Surveyor on it - signal looks good.  SNR is good.  They used to have coverage issues as well but I got that taken care of for them.  Only issue now is roaming.
    WLAN SSID:
    -Qos: Platinum
    -FT-PSK and PSK enabled
    802.11a/n/ac Radio:
    -Client Roaming: -67dBm for RSSI threshold and -62dBm for scanning threshold. 
    -Disabled 6mbps and 9mbps and 12 mbps is set to mandatory.  All others are supported
    802.11b/g/n Radio:
    -Client Roaming: -67dBm for RSSI threshold and -62dBm for scanning threshold. 
    -Disabled 1mbps - 12mbps.  18mbps set to mandatory.  All others are supported
    Switch to which WLC is connected:
    -switch ports used to connect to the controller are set to trust CoS and ports to APs and uplinks are set to trust DSCP. 
    With these setting changes - I believe most everything else is default.  I am confused about the following:
    -Best practice link - http://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/2_Gen_Troubleshooting_Guidelines.html
    Says to configure voice WLAN to use 802.11a.  Issues with that: Some Android's could not connect AND the big one - I am not able to set Qos to use 802.1p for the SIP WLAN.  It tells me to disable 802.11a and 802.11b.  If I go into each radio on 'Network' tab and disable these - NOTHING can connect to any SSID.  So unless I've misunderstood something - this is a contradiction in the best-practice link I posted above.
    another question:  If I enable FT-PSK and PSK - for devices that support FT-PSK (which i'm under the impression is 802.11r) will these devices use that and for devices that don't they'll use 'regular' PSK?  How do I know if my client is connecting using PSK or FT-PSK as both are enabled on the same WLAN.
    Again - only issue is roaming.  I second or two of 'choppy' voice then everything is back to normal working as expected.  Any ideas as to what else I can enable to get these iPhones to roam better - if this is even possible.  Can iPhones roam using a SIP app with zero voice interruption?  This is the equipment that they got and can't get anything else so I got to make the best of this.  Perhaps I've already done that?  Any ideas/suggestions are very much appreciated.

    Hi
    Before any other think  I would like you to upgrade your WLC image to 7.6.130.0 & FUS to 1.9.0.0. FUS upgrade will require 30-40min downtime to your wireless.
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn76mr03.html
    It tells me to disable 802.11a and 802.11b. If I go into each radio on 'Network' tab and disable these - NOTHING can connect to any SSID. So unless I've misunderstood something - this is a contradiction in the best-practice link I posted above,
    This simply says, you have to disable radio band before changing QoS profile values. Once you change those value you can re-enable the radio band. :)
    If I enable FT-PSK and PSK - for devices that support FT-PSK (which i'm under the impression is 802.11r) will these devices use that and for devices that don't they'll use 'regular' PSK? How do I know if my client is connecting using PSK or FT-PSK as both are enabled on the same WLAN.
    Read these 802.11r post & you will understand how 802.11r works. There are certain client devices does not like PSK & FT-PSK capability advertise on the same SSID & may have connectivity issues. But most of the clients like iPhone, iPads,etc  will connect without any problems.
    http://mrncciew.com/2014/09/06/cwsp-802-11r-ft-association/
    http://mrncciew.com/2014/09/07/cwsp-802-11r-over-the-air-ft/
    http://mrncciew.com/2014/09/08/cwsp-802-11r-over-the-ds-ft/
    "show client detail <mac_address>" should indicate if client connected over FT-PSK or PSK.
    HTH
    Rasika
    **** Pls rate all useful responses ****

  • How to determine PSK on WLAN?

    Basically I have been asked to manage a system pre-configured because the person who managed it left.
    We have a Voice WLAN setup and obviously security has been setup on it as well.
    Is there a way to find out what they PSK is for that WLAN without resetting it to something new?
    Since we are using the wireless 802.11b phones, is it in the phone template maybe? I can't seem to figure it out.....
    No one seems to have documented it nor does anyone have a clue as to what it could be either.
    Thanks,
    Ed

    Yep, sounds like you're hosed.
    Any chance of finding the original configurer ( not a word, I know , I know ...) and beat it out of them?
    Call the integrator and {ask them | threaten to sue them}? That *is* the kind of information they would likely keep, if only to make their future service easier.
    With WEP, you had a shot, with WPA your only bet is calling the NSA and see if they can give it to you (Uncle Sam has *all* the keys ;-) )
    Oh well, good luck, Happy Thanksgiving (or "just another pleasant Thursday" if you're not USA)
    Scott

  • PC + Softphone over WLAN QoS

    I could not find after hours of searching what Cisco’s best practice when using a PC and softphone in a wireless environment.
    We have always had wireless phones in one WLAN (platinum) and PC in another WLAN (silver). But now we have PC + Softphone scenario which is growing
    Do we now put all PC's into the voice WLAN (hundreds of users) which is setup as Platinum and mark the voice traffic from the softphone DSCP 46 (maybe 48 because of WMM and COS mapping) and everything else from PC mark as best effort?
    If WMM is turned off on the PC will the AP then treat all traffic as Platinum level regardless of DSCP marking.
    If I leave the users in the Silver WLAN then all traffic will get marked down to best effort.This is current setup and voice quality is suffering.
    I don’t feel comfortable putting hundreds of users on a Platinum level WLAN but how else can I prioritize softphone voice traffic. What are the implications of putting pc + softphone users into the voice wlan? What does cisco recommended for this scenario?
    if you have any insight/experience/documents please let me know
    Thanks!

    steve sousa wrote:Do we now put all PC's into the voice WLAN (hundreds of users) which is setup as Platinum and mark the voice traffic from the softphone DSCP 46 (maybe 48 because of WMM and COS mapping) and everything else from PC mark as best effort?If WMM is turned off on the PC will the AP then treat all traffic as Platinum level regardless of DSCP marking.
    WLC does not do anything to the QoS on the packets it forwards except the translation between 802.11e ot 802.11p.
    If you have clinets that are connected to a Platinium profile but they use normal DSCP (data. No priority) the traffic will be treated normally as data with no priority.
    If another WMM enabled client connected to the same WLAN and send voice traffic with platinum profile, the traffic will be mapped to the appropriate 802.1p and will pass the wire with priority.
    The controller does not apply its own QoS. The QoS support on the WLC gives the WLC the ability to apply the same priority that is set on the wire (or application).Therefore, the only action a WLC or AP will do is copy the value of the original packet to the outer header of the LWAPP packet. The whole purpose of the gold, silver, and bronze QoS options on the WLC is to perform proper QoS translations between 802.11e/802.1p UP values and IP DSCP values, which depend on the application or standard that is used. Once again, QoS on the WLC ensures that packets receive the proper QoS handling from end to end. The controller does not perform its own QoS behavior. The support is there for the controller to follow suit if QoS already exists and priority needs to be applied to wireless packets.You cannot have QoS only exist on the controller.
    Reference: http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807e9717.shtml
    Also;
    Note WLAN client support for WMM does not mean that the client traffic automatically benefits from WMM. The applications looking for the benefits of WMM assign an appropriate priority classification to their traffic, and the operating system needs to pass that classification to the WLAN interface. In purpose-built devices, such as VoWLAN handsets, this is done as part of the design. However, if implementing on a general purpose platform such as a PC, application traffic classification and OS support must be implemented before the WMM features can be used to good effect.
    Reference: http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch5_QoS.html#wp1021909
    HTH
    Amjad

  • An issue with WLC 5508 and 7921 phone

    Hello all!
    I have a system with WLC 5508 and some 1242 APs. And I use a lot of 7921 phones.
    One of 7921 phones was in trouble. It loses registration, disconnect conversations...
    I installed the trial WLC and run voice diagnostics.
    I  saw some of "Potentially degraded QoS in downlink direction because of  incorrect packet classification" messages and one "Fair upstream packet  loss ratio: 1,2%, which is less than threshold 2.5%"
    As I understand all of 7921 phones in these area are affected.
    what  does it mean? I set up Platinum QoS for voice WLAN. I don't have any qos  configuration string for AP and WLC ports on switches...
    any ideas?
    thanx in advance

    Sergey:
    There is one application called "WLC Config analyzer". You save your "show run-config" from your WLC in a text file and import it by this application. it will analyze the file for you and tell you what recommendations for voice are missing so you improve them.
    When importing a config file you choose what voice clinets you are using, so you need to choose cisco 7921 to it tells you what config improvemetns is needed based on 7921 needs.
    Here is the link to download the application:
    https://supportforums.cisco.com/docs/DOC-1373
    download the latest versoin.
    BTW, how many voice/data clients are connected to one AP in that area? if I remember correctly if you are utilizing voice then the max number of clients connected to one AP should not exceed 17. If you have more than this number per AP try to minimize the number of users concurrently connected to the AP then try again.
    Hope you'll find the config analyzer useful.
    If useful please don't forget to rate.
    Amjad

  • Load Balancing - Wireless

    Hi
    If I'm reading correctly Load Balancing is not advisable if using voice of wifi.
    On a conroler with 70.220 - Wireless - Advanced - Load balancing
              Load balancing - client windows is default 5, max denial 3
    But on the wlan, the load balancing isn't enabled..
    Which one is the master setting?
    We're boardcasting several SSIDs, one of them is a guest SSID, which is open, so we get the Apple devices autmaticaly associating to them.
    So if we dont set the load balancing on each wlan, this means there is a msximum of 5 devices to 1 AP, doesn't matter which wlan it's on?
    Is there a best practice guide for load balancing?
    Clarrifaction would be great
    Cheers
    Craig

    Craig,
    Do not use load balancing for latency-sensitive WLANs, especially voice WLANs. Rejecting voice clients extends their roaming delay and can drop calls.
    The setting on the WLAN Advanced tab determines whether or not clients associating to that WLAN will be denied if the load balancing algorithm determines the AP to which the client wants to associate is too loaded (determined by the global LB settings). If you have the box unchecked, then LB is not in effect for that WLAN and clients on that WLAN will never be rejected.
    The load balancing algorithm is run against clients for an AP. The count of clients is cumulative for all WLANs, i.e., the load balancing numbers are not set and comared on a per-WLAN basis. This wouldn't make a lot of sense as the LB algorithm is attempting to keep clients physically spread across infrastructure radio resources, regardless of whether you have 1 WLAN or 5 WLANs active on the radio.
    I don't know of a best practices guidefor load balancing other than don't use it on WLANs that have low-latency applications such as voice or live-streaming (unbuffered) video. The controller configuration guide is a good place to start and does a pretty good job of explaining how it works.
    One other thing I would recommend is to make the algorithm less aggressive. I think max 3 denials is too high and would drop to 1 or 2. I'd also open up the LB window size to about 8 or 10 instead of the default 5.
    I think some folks on the forums here have found some issues with LB, although I haven't run into too many so far. I think the AP sends a message type 17 and some clients have trouble processing it (or something like that). You might want to search the forums here and check the bug toolkit to see if there's anything that comes up.
    Justin

  • Hellp on Nokia E61i associating with Cisco WLC 4402

    I met some problem with associate Nokia's dual mode mobile phone E61i with Cisco WLC 4402, hope someone can help me on it:
    I setup a VOICE WLAN in 4402(v5.0.148), Layer2 security is WPA1+WPA2, Key management using 802.1x, WPA1 policy enable both TKIP and AES, Radius server using ACS engine(v4.1.1.23)(enable PEAP-MSCHAPv2);
    I can use my laptop to join this WLAN(my laptop configure with PEAP/MSCHAPv2, WPA-TKIP, not validate server certificate), but can't let E61i join it, each time it will remind me “unable to connect, WPA authenticate failed).
    In E61i, I select WPA/WPA2 as WLAN security mode, enable EAP-PEAP, under EAP-PEAP, I enable EAP-MSCHAPv2; however under Cipher, there's a lot of options such as “RSA,3EDS,SHA”, “RSA,AES,SHA”, but there's no TKIP, I have tried to enable all of them and tried only enable those items which include AES, but I failed each time with the same reminder “unable to connect, WPA authenticate failed”. I checked ACS's failed log, there's no record; In 4402, there also have no record.
    If I change the security to open or static WEP for VOICE WLAN, then the E61i can connect to the WLAN.
    I think the problem maybe relate to encryption or certificate, right now I just do the test in lab, not in customer's real environment, so I use ACS to generate a self signed certificate and installed it in ACS.
    Pls. help to point me what I need to adjust to make it work. Thanks!

    Hello,
    CCKM Key Management mode on Nokia E61i phone can be used
    against Cisco LWAPP AP's with TKIP encryption
    Nokia E61i (and other E-series WLAN enabled phones) are supporting CCKM key management method with both dynamic WEP and TKIP ciphers.
    On the phone configuration, 802.1X security mode needs to be in use in order to enable CCKM support. WPA/WPA2 security mode on the phone is dedicated to standards based WPA and WPA2 methods and it does not allow usage of proprietary CCKM key management method.
    Phone's 802.1X security mode does not mean that phone would only support dynamic WEP encryption method in this mode although in contexts term "802.1X" may be attached to pure dynamic WEP (legacy / pre WPA era)security methods.
     802.1X security mode can be seen on Nokia Eseries phones as sort of an "everything with EAP based authentication is allowed" mode, meaning that following key management and cipher configurations are supported:
    - WPA-Enterprise  = WPA Key Management (EAP based authentication) with TKIP encryption
    - WPA2-Enterprise = WPA2 Key Management (EAP based authentication) with AES encryption
    - Mixed WPA/WPA2-Enterprise = I.e. WPA/WPA2 Mode Migration WPA2 Key Management (EAP based authentication) with AES (for unicast data) and TKIP (for multicast data) ciphers
    - 802.1X dynamic WEP = legacy (pre-WPA era) 802.1X based dynamic WEP (EAP based authentication with dynamic WEP encryption)
    Supported:
    - CCKM with WEP = CCKM Key Management (EAP based authentication) with dynamic WEP encryption
    - CCKM with TKIP = CCKM Key Management (EAP based authentication) with TKIP encryption
    Not supported:
    - CCKM with AES = CCKM Key Management (EAP based authentication) with AES encryption
    Please note that CCKM-AES mode (CCKM Key Management with AES cipher) is not working properly due to some incompatibilities between Cisco and Nokia implementations thus it must not be listed as a supported combination on the current Nokia E-series devices. We are also seeing CCKM-Fast
    Re-authentication failures with Cisco autonomous AP's when AES encryption is used although initial authentication to autonomous AP's is successful. Nokia is currently working with Cisco to get CCKM-AES based authentications and roaming working properly with both LWAPP and autonomous Cisco AP's.
     Also note that Nokia E-Series does not support Cisco proprietary CKIP/CMIC encryption/data integrity methods. CKIP/CMIC is supported at least by Cisco autonomous AP's and it seems to be available also
    at least on LWAPP AP version 4.1.171.0.
     CCKM on E-Series devices has been tested against Cisco LWAPP (ver. 4.1.171.0) and it works when TKIP encryption is in use (WPA Policy + TKIP encryption in Cisco LWAPP configuration terms).
    In practice this means Cisco LWAPP is configured in a following manner: WLAN -> Edit -> Security-> 
    Layer 2 Security = WPA+WPA2
    WPA+WPA2 Parameters:
    -WPA Policy = enabled
    -WPA Encryption = TKIP enabled, AES disabled
    -WPA2 policy = disabled
    -Auth.Key Mgmt = CCKM
    Br,
    -Pasi-

  • QoS/bandwidth throttling on autonamous WAPs?

    We have about 5 autonamous 1231AG WAPs running IOS v12.3(8)JEC. I want to be able to limit, or at very best, prioritize corporate and voice WLAN traffic over those using guest SSID (VLANs listed below). So, I want to priortize traffic by VLAN. VLAN priortiy is: voice, corporate, management, guest.
    Would the best way to be to go to each WAP, QoS, and make a new policy for each VLAN? For corporate, I assigned all IP precedences a CoS of 3 (Excellent). For voice, all IP precedences a coS of Voice (6), and guest, all IP porecedences a CoS of (1). I would then assign the respective policies to each VLAN, inbound and outbound. IMy thinking is that no matter what precedence traffic is on guest VLAN, the WAP will downgrade it to CoS 1, making it the lowest priority traffic coming through the WAP.
    Would this accomplish what I am trying to do? Please note, these WAPs are not plugged into Cisco gear. Rather, we have Nortel switches, so talking of Catalyst gear won't work.
    VLAN1=management (native)
    VLAN10=Corporate LAN
    VLAN20=voice
    VLAN66=guest

    Hmmm...I have to ask if the Nortel switches recognize the CoS functionality. I have no idea.
    Your scenario is this - QoS really happens at the switch anyway. You can set the settings you discussed, but in the air, there is no QoS in a radio contention based network. Not yet anyway.
    So, if you are fighting for radio space, make it to the AP and then get passed on to a switch that may or may not recognize the effort, you might not be doing yourself any favors.
    Are you prioritizing voice now? This is a good question I'd like to read up on - thanks.

  • Migration to WLC Problems whit Phone 792X

    Hi,
    We have migrated from a Autonomous Wireless Solution (1200 AP) to Centralized Wireless LAN Controller (WLC 5500). The WLANs work fine, but the call on the Wireless Phone 7921, are experiencing problems, sound in one way, drop of calls, problems no present  previously with the autonoums solution. The QoS of the Voice WLAN is set to Voice, but the problems  persist. Any Suggestion ??

    It sounds RRM on the WLC may have changed your power levels on the APs.  One way audio is almost always caused by the power of the AP being set higher than the power on the phone.  Have a look at this deployment guide.
    http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/deployment/guide/7921dply.pdf

  • Creating "guest" VLAN on WLC 4400, created interface not selectable

    Presently have an internal network WLAN (HREAP) setup and running. I'm trying to create a guest Internet-only WLAN referencing this link http://www.cisco.rw/en/US/tech/tk722/tk809/technologies_configuration_example09186a008070ba8f.shtml
    Created dynamic interface "corp-26" and verified it was enabled. When I create the Internet-only WLAN... under Interface Name, only "management" appears in the drop down list; "corp-26" doesn't appear.
    How do I assign "corp-26" to my Internet-only WLAN?

    The management & ap-management are for the APs themselves. You will want a seperate vlan/wlan/subnet for your guest ssids altogether.
    You can provide dhcp from the controller or from a dedicated server.
    if you select override for dhcp under the wlan settings, provide a dhcp server address, otherwise add the dhcp server entries under the interface settings.
    What is really cool is that 1.1.1.1 appears as the dhcp server (unless you changed it on the controller to something else.) It has caused some confusion at times

  • Antenna Selection for High ceiling (Warehouse)

    i read nearly 500 topic on antenna selection for high ceiling and industrial warehouse environments  (~10m ceiling)
    Question1 : both ant2544v4  and Ant2524 has ~60 degrees Elevation plane 3 dB beamwidth does it mean this Omni antenna could be mounted on 10m height without coverage issue ?
    Question2:suppose installing plenty of 2702 with Ant2524 or Ant2544V4 in close adjacency , does CleanAir2 helps to avoid interference ?
    Question3:if i want avoid directional antennas to cover aisles using dipoles is the last solution ? (if omni antenna cant afford enough elevation due to its nature )
    my warehouse area is something like this : http://www.pathguide.com/Images/Content/warehouse%20aisle.jpg
    thanks

    As I can see this location presents challenging RF conditions: high attenuations, reflections, multipath, etc. The fact that you need to implement Voice WLAN too, introduces more difficulties.
    You have to conduct a wireless site survey. I don't know how much experience do you have with this activity or if you have the equipment and site survey tools required, but it has to be done.
    In the worst case scenario you have to grab at least one or two APs from the model that you intend to install, set them up in stand alone mode with some test SSIDs and install them in the warehouse in different locations. Than you walk arround and try to measure the signal quality and attenuations. You cand use some free or trial site survey applications that can be found on the Internet.
    You have to find out what protocol (802.11 a/b/g/n) the barcode scanners are using and what TX power are they capable of. You should set up your APs accordingly (the AP TX power should not exceed the client power, preferably it should be about half in order to benefit of CHD). The same has to be done for the Voice clients. The survey has to be done separately for each 802.11 protocol. I recommend taht you do some futher reading on the subject.
    As for the antenna type, Cisco recommends directional antennas in high ceiling environments. However, I have installed 2702e APs with standard omni antennas in warehouses and they did the job very well. The difference in my case was that I installed the APs on cable channels at ~6-7 meters, not directly on the ceiling. Maybe you can find some other mounting possibilities besides the ceiling if you want to stick to omni antennas.
    The co-channel interference between adjacent APs is avoided usualy by DCA and TPC not as much by CleanAir. However in 2.4 GHz there could be some interferences.
    As a conclution you have to use some real APs in order to estimate, with at least a minimal accuracy, the position and number of required APs for the deployment. Do not forget about the cabling requirements for the APs, distances to the closest switch, electrical power etc. 

  • 500 series phones wont register after recovering password

    I had to recover the password for a UC540W and followed the standard procedures that I am aware of. I went to rommon, , copy start to run, change the password, no shut on the interfaces, saved and rebooted.
    The 7900 series phones work with no problem but the 525 and 504 are stuck downloading the xmldefault.cnf.xml file. It would seem that there is some other item I need to adjust during the password recovery.
    What else would possibly be affected by a password reset that would selectively knockout the 500 series phones?
    I did a factory reset on the 504g phone and it loaded a default screen but didnt register with the UC540.
    The statements for the phones loads are listed:
    tftp-server flash:/phones/525/spa525g-7-4-4.bin alias spa525g-7-4-4.bin
    tftp-server flash:/phones/5x5/spa5x5-7-4-4.bin alias spa5x5-7-4-4.bin
    and the files are in the directory:
    Directory of flash:/phones/
        4  drw-           0  Oct 14 2010 08:05:10 -07:00  521_524
        6  drw-           0  Oct 14 2010 08:05:12 -07:00  525
        8  drw-           0  Oct 14 2010 08:05:12 -07:00  5x5
       10  drw-           0  Oct 14 2010 08:05:14 -07:00  7921
       18  drw-           0  Oct 14 2010 08:05:14 -07:00  7925
       26  drw-           0  Oct 14 2010 08:05:16 -07:00  7931
       34  drw-           0  Oct 14 2010 08:05:18 -07:00  7945_7965
       43  drw-           0  Oct 14 2010 08:05:18 -07:00  7970_7971
    260165632 bytes total (154513408 bytes free)
    POD-12#cd 525
    POD-12#dir
    Directory of flash:/phones/525/
        7  -rw-    10900992  Oct 14 2010 08:06:20 -07:00  spa525g-7-4-4.bin
    260165632 bytes total (154513408 bytes free)
    POD-12#cd ..
    POD-12#cd 5x5
    POD-12#dir
    Directory of flash:/phones/5x5/
        9  -rw-     3750540  Oct 14 2010 08:06:40 -07:00  spa5x5-7-4-4.bin
    260165632 bytes total (154513408 bytes free)
    What else would possibly affect this that I could check.
    I have a demo in the morning and am waiting on SCC support to fix my serial number so I can order support. So in the meantime I am stuck.
    I could upload my config but I dont have time to clean it. I know this is a simple one line statement issue so if you have any ideas please let me know.
    Also no changes were made to the configuration before or after this problem other than to reset the password.
    Thanks

    I thought about that but it was isolated to one series of phones.
    I was working on the unit and had to do work on the wireless to get the 7925 working. I edited the voice wlan and changed from wep to open. After it uploaded the changes.... both phones started working.
    It must have been security related as whatever statements were changed related to the wlan config.. it allowed the phones to complete registration.
    I wish I could find out what caused it.. but I do have the cca logs. I will bring it up with cca feedback.
    Thanks for your help.

Maybe you are looking for

  • Problem with JAAS authentication using jboss client

    I'm trying to make a little compiled application works. It has two parts: a little client(one class) and a server part which runs on a jboss server, and comunicates between them using JAAS + SSL. It works perfectly alone if I run it in a java project

  • RMAN error

    Hi... When I am trying to delete the obsolete backups its giving error... like this... RMAN-03002: failure of delete command at 08/24/2010 13:08:42 RMAN-06091: no channel allocated for maintenance (of an appropriate type). rman>RMAN configuration par

  • Defining a non local server for use within the IDE - version9.2

    How do I add a server that's running on another machine to one that my workshop is running. When I invoke the New Server dialog and modify the host from localhost to the one on which the server instance is running, then everything is blanked out and

  • Finite state machine using jsf ?

    I am building an online payment module and would like to implement it using a finite state machine. I am hoping that someone may give us advice on how to build it with jsf. Firstly, I am just beginning with jsf. Here is the example: Let's say that in

  • HP webcast on JRockit

    http://h21007.www2.hp.com/dspp/ne/ne_EventDetail_IDX/1,1394,986,00.html