VoWLAN Roaming without WLAN Controller (WLC)

Hi,
Need some advice here. I am trying to implement VoWLAN in a company using Cisco WAP4410n Access Point. The problem is, I've downloaded all Cisco WLAN Controller (WLC) data sheets and can't find any compatible WLAN Controller for this type of Access Point.
Can I still implement VoWLAN without WLAN Controller? Is there any way to provide smooth intercell roaming without WLAN Controller?
Thanks
Regards

I have designed the cells so they have 20% cells overlap. I've also designed the channels so they won't interfere with each other (I use 2 GHz channel here)
But what could be used to replace WLC's role to manage these Access Points? maybe some kind of server?

Similar Messages

How to get 300 mbps on Cisco LAP1142N without WLAN Controller

Hi,
Anyone using Cisco LAP1142N without Wireless LAN Controller and getting 300mbps throughput? I am only using 5 GHz (Manually Disabled 2.4) but i am getting only 144 mbps max throughtput. It would be great if someone can help me to achive around 300 mbps from this AP.
Thanks in advance.

Thanks for your reply. Yes, using Authentication-> open. Under the Radio interface using Channel Width 40-above. Checked with a laptop and it connects with 144 mbps and not getting more then that.
Here is a part of the config:
===================
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap
enable secret 5 $1$0M/H$HIkGshtMt9w5q.KqNvMQf/asdf
no aaa new-model
no ip domain lookup
dot11 syslog
dot11 ssid TestN2
authentication open
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
ssid TestN2
antenna gain 0
no dfs band block
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel width 40-above
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
line con 0
line vty 0 4
login local

WLAN Controller can configure as ACTIVE-ACTIVE

Customer is looking for two numbers WLAN Controller (AIR-AP1242AG-E-K9). And they want to configure as ACTIVE-ACTIVE. I would like to know whether it can be configuring as ACTIVE-ACTIVE.
And Is really require WLAN Controller for AIR-AP1242AG-E-K9 access point ? or it can be configure without WLAN controller ?
Please revert me ASAP
Regards,
Manoj

Hi Manoj,
Although WLC Controllers can be configured in an Active-Active type redundancy, you don't need the WLC for small deployments. The AIR-AP1242AG-E-K9 access point can be setup in Autonomous or Stand-alone mode as well :)
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points 12.3(7)JA
http://www.cisco.com/en/US/docs/wireless/access_point/12.3_7_JA/configuration/guide/i1237sc.html
Cisco Aironet 1200 Series Access Point Hardware Installation Guide
http://www.cisco.com/en/US/docs/wireless/access_point/1200/installation/guide/1200-TD-Book-Wrapper.html
Hope this helps!
Rob

WLAN Controller 4402 - Port HA Fails

We have a WLAN Controller 4402, with firmware version 4.0.206.0. The ports are connected to 2 separate switches. 'ap-manager' is on port 1, and 'ap-manager 2' is on port 2. The wireless network is running fine when both ports are connected. However, when I disconnect port 1, the client be disassociated, then re-associated, but unable to grab DHCP IP address. I have also assigned a static IP address on the client, but is unable to ping anywhere, not even the gateway. From what I understand, the ports should be able to backup each other in case of failure, but the HA does not seem to work. What could be wrong?

Let me make sure I understand something about this bug your referring to. In order to see if this might be affecting us I would want to change my controllers ap-manager interface gateway address from that of the hsrp address, to one of the actual ip addresses setup on the router right?
I think this might be the problem with my rollout. Seems like ever so often everyone looses their wireless connection. you can be working one minute perfect signal and everything, then without moving or anything boom your disconnected. Just recently converted every AP to WCS/WLC and then this started happening.
My concern is that I have two VLANs setup for my wireless with HSRP. One VLAN for all my AP's and ap-manager interface and such. One VLAN for wireless clients.
Both VLANs setup on the core 6509's with the standby IP as the default gateway.
Wondering if the problem is only related to the vlan for ap-manager interface? Are maybe I need to do the same for the wireless lan interface for the clients?

Communication between : AP and WLAN controller

Hi,
The communication between AP and WLAN Controller is ( Data and Control ) UDP.
Source port 1024 and destination port 12222 and 12223. Actually which device listen to which port or both should listen as control and data can be generated from both the devices.
How does the user ( wireless client) traffic is switched - if user traffic is a TCP traffic. It will be sent to WLANC and then WLANC forwards it to respective VLAN or default gateway ( depending upon the destination in the packet ).
Please explain / share the experience.
any link on cisco.com
Thanka in advance
Subodh

"the LWAPP Control and Data messages are encapsulated in UDP packets that are carried over the IP network. The only requirement is established IP connectivity between the access points and the WLC. The LWAPP tunnel uses the access point's IP address and the WLC's AP Manager interface IP address as endpoints. The AP Manager interface is explained in further detail in the
implementation section. On the access point side, both LWAPP Control and Data messages use an ephemeral port that is derived from a hash of the access point MAC address as the UDP port. On the WLC side, LWAPP Data messages always use UDP port 12222. On the WLC side, LWAPP Control messages always use UDP port 12223.
The mechanics and sequencing of Layer 3 LWAPP are similar to Layer 2 LWAPP except that the packets are carried in UDP packets instead of being encapsulated in Ethernet frames."
Taken from "Cisco 440X Series Wireless LAN Controllers Deployment Guide"

How can I copy a PSK from one WLAN Controller to another

I'm trying to replace a WLAN controller with a new one. One WLAN is configured with WPA-PSK. Nobody seems to know the key that was used.
Anyone know if there is a way to extract the encrypted key out of a controller and put it into the new WLAN Controller?
Thanks in advance.

No can do ...
https://supportforums.cisco.com/discussion/11364566/view-psks-wlans-wlc
However, if any users are on a MAC Book and has iCloud enabled you can see the key under the "keys". If you have a windows 7 box and uses the native supplicant you can expose the key on the supplicant ..

Can Wlan Controller work with Third party Aps

Can Cisco Wlan Controller work for 3rd party Aps which does not have LWAPP running. If yes How.If no then how we can manage existing Ap's of say 3com in the network...

Hi Friend,
No, Cisco WLC will not support any third party APs. Even if Cisco APs are not lwapp AP then WLC will not be able to manage them.
We need to have Cisco Lwapp APs only for wireless lan controller to manage them.
For 3com Aps you need to talk to 3com guys or any third party tool if available to manage these APs.
HTH
Ankur

Using ISE for guest access together with anchor controller WLC in DMZ

Hi there,
I setup a guest WLAN in our LAB environment. I have one internal WLC connection to an anchor controller in our DMZ. I'm using the WLC integrated web-auth portal which works fine.
To gain more flexibility regarding guest account provisioning and reporting my idea is to use Cisco Identity Services Engine (ISE) for web-authentication. So the anchor controller in the DMZ would redirect the guest clients to the ISE portal.
As the ISE is located on the internal network while the guest clients end up in the DMZ network this would mean that I have to open the web-auth portal port of ISE for all guest client IPs in order to be able to authenticate.
Does anyone know of a better solution for this ? Where to place the ISE for this scenario, etc ?
Thx
Frank

So i ran into a similar scenario on a recent deployment:
We had the following:
WLC-A on private network (Inside)
ISE Servers ISE01 and ISE02 (Inside)
WLC-B Anchor in DMZ for Guest traffic (DMZ)
ISE Server 3 (DMZ)
ISE01 and ISE02 are used for 802.1X for the private network WLAN.
Customer does not allow guest traffic to move from a less secure network to a more secure network (Compliance reasons).
The foreign controller (WLC-A) must handle all L2 authentication and it must use the same policy node that the clients will hit for web auth. Since we want to do CWA, we use Mac Filtering with ISE as the radius server. If you send this traffic RADIUS authentication for Mac Filtering to ISE01/ISE02, it will use https://ise01.mydomain.com/... to redirect the client to. Since we don't allow traffic to traverse from the DMZ with the anchor in it back inside to the network where ISE01 and ISE02 are, client redirection fails. (This was a limitation of ISE 1.1. Not sure if this persists in 1.2 or not.
So what now? In our deployment we decided to use a 3rd ISE policy node (ISE03 in the DMZ) for guest authentiction from the Foreign controller so that the client will use a DNS of https://ise03.mydomain.com/... to redirect the client to. Once the session is authenticated, ISE03 will send a CoA back to the foreign which will remove the redirect for the session. Note, you do have to allow ISE03 to send a CoA.
In summary, if you can't allow guest traffic to head back inside the network to hit the CWA portal, you must add a policy node in a DMZ to use for the CWA portal so they have a resolvable and reachable policy node.

I need to bridge a printer off a wireless bridge using a 4402 WLAN Controller

I need to bridge a printer off a wireless bridge using a 4402 WLAN Controller. Would I need to make any changes on the 4402 WLAN Controller?

One options is to take a cisco autonmous access point and configure it as a WGB. And no, you would not have to do anything special to the WLC in thay deisgn. The WGB would act as a wireless client.
Make sense?

Cisco 1010AP Can't find 4402 WLAN controller

Hi folks,
I'm running a 4402 WLAN controller running 5.2 code. I've got some 1010APs that don't associate with the WLC. I'm trying to keep the setup basic. The access points are plugged into the same VLAN as the native vlan for port1 on the controller. I've setup a DHCP server in the manner documented. The WLAN controller is configured as a master server. This is the message that I get in the web interface for WLC:
AP with MAC 00:0b:85:6e:4a:90 (AP 1010 #1) is unknown.
Any clues as to what I'm doing wrong?

Hi Daniel,
You won't like this I'm sure, but this is why the 1010 is not working;
**Note: Controller software release 5.0.148.0 or later is not compatible with Cisco Aironet 1000 series access points.
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn52.html
Hope this helps!
Rob

Virtual WLAN Controller Guest Anchor

We are planning a WLAN upgrade and the security policy is to forward wireless Guest user traffic to the DMZ controllers. We are now considering the Virtual WLAN Controller and all AP's will register with the virtual controllers and we will use Flexconnect for Staff and internal traffic that will switch their traffic onto the local switch.
We wish to forward the guest traffic to the DMZ Guest Anchor controller which will be a 5508 controller. This will also offer Office Extend AP service.
I have looked at teh virtual controller docs and not very clear if this deployment model is supported. Below is a diagram of what we wish to deploy and can anyone advise if thsi is a supprted deployment model.

Well you can use the vWLC to anchor to a 5508, but not the other way around. So if you use the DMZ 5508 for OfficeExtend, you will not be able to anchor the traffic back to the inside. Cisco doesn't support reverse anchoring for a Remote-LAN in OfficeExtend and requires you to actually have the OfficeExtend AP's connect to an inside WLC. In v7.0.x you were able to do this reverse anchor, but it was removed on later codes.
Sent from Cisco Technical Support iPhone App

1510 Mesh A.P with 5508 WLAN Controller

Hi everyone,
I got a situation. We had our wireless mesh network running with 4400 Controller and 1510 A.Ps. Now that we have bought new 5508 Controller (with SW: 7.2) and 3600 Indoor APs, we are unable to add legacy APs on our new controller. After a wild googling I have found that for 1510 APs i need to be on SW ver: 4.0. But that will lead into another situation i-e I wont be able to have my 3600 APs on WLAN Controller.
Any suggessions/wise words will be very very obliged....
Thanks,
Azhar...

You would have to keep those 440's up and have all the WLC in the same mobility group. That is the only way to keep those 1510's up and running. Cusco usually supports mobility between different version but only really as far back as 2 versions. Might work though.
Here is a compatibility guide that explains what devices work with what code.
http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html
Sent from Cisco Technical Support iPhone App

Single WLAN Controller Limitations

Aside from redundancy, are there any other limitations to deploying a single Cisco 5508 WLAN Controller that I should be aware of? The configuration guide states you need multiple controllers for the following:
A multiple-controller system has the following additional features:
•Autodetecting and autoconfiguring RF parameters as the controllers are added to the network.
•Same-subnet (Layer 2) roaming and inter-subnet (Layer 3) roaming.
•Automatic access point failover to any redundant controller with a reduced
Is it true you can't have those roaming capabilities with a single controller?

No... You have all those except for redundancy.
Sent from my iPhone

Problem Wlan Controller 5508

Friends,
I have a problem authenticate with AP AIR-LAP1131AG-AK9 to Wlan Controller 5508 (software versión of the Wlan Controller6.0.202.0 ). This AP always tries to authenticate with Wlan Controller. Maybe it tries to download the ios version.
Could be a hardware problem.
I am going to attach the log file.
Thank.
Marco.

*Nov 23 20:28:50.348: %APF-3-AID_UPDATE_FAILED: apf_80211.c:5744 Error updating Association ID for REAP AP Client64:00:f1:12:b1:d0 - AID 4
*Nov 23 20:28:50.348: %LWAPP-3-MAX_AID2: spam_api.c:1045 Reached max limit on the association ID for AP (max association ID 256)
Looks like a great case for TAC.
This is an HREAP AP? It looks like it is associated fine with the WLC (no logs indicating it is trying) but instead it looks like Client Associations are breaking because it thinks it is up to 256 AIDs.....?
Maybe this is a common error, but it hasn't cross my path before...

WLAN CONTROLLER 2100

We have have three different locations on three different subnets 172.17.0.0/16, 172.20.0.0/24 and 172.21.0.0/24.
An MPLS connects all three offices together.
All three routers are doing DHCP server for their respective LAN
All internet traffic must pass through 172.17.0.0/16 where I have my sonic wall firewall.
My aim is to deploy the WLAN controller on the 172.17.0.0/16 network.
Then plug 1131LAP access points on each of the subnets.
Access points are able connect to the controller but my challenge is that when a client connects to an any of the APs, dhcp is assigned from the 172.17.0.0/16 LAN irrespective of which location the client is connecting from.
When I log in to the controller I can see that the APs are assigned ip address from the dhcp server at their location e.g AP at 172.21.0.0/24 gets an ip address of 172.21.0.42/24 from its local router but when a client connects to that same AP the client is given an ip from 172.17.0.0/16 network.

Thanks Scot. Yes I configured a guest WLAN and allowed tunnel to WLC but I had problem in dealing with access rule configuration.Here is what I did;
I created a "Guest" interface on physical port number 2,then assigned a completely different IP address of 192.168.0.2
Create a guest SSID and assigned it to the guest interface.
On the firewall device (NSA 2400) I configured a second physical interface (GUEST ZONE) 192.168.0.1 and defined a dhcp scope on this interface
Create access rule that
Denys traffic from GUEST > LAN and LAN > GUEST
Allows traffic from GUEST to WAN and WAN to GUEST
Then connect WLC port 2 to the guest interface port on NSA 2400 device.
When clients connects to the guest SSID,ip is assigned correctly from the Firewall device.
From windows connection icon I can that there is access to the Internet but it won't browse
Also a ping to the WLC interface 192.168.0.2 replies fine but
Ping to firewall 192.168.0.1 times out continuously.
Is it possible for me to define acl within the WLC that will block traffic from the guest LAN to our corporate LAN so that I can forget about the access rule within the NSA 2400 .?
Once again thank you so much your post has being very helpful
Sent from Cisco Technical Support iPad App

VoWLAN Roaming without WLAN Controller (WLC)

Similar Messages

Maybe you are looking for