WCS MSE Help

I’m trying to synchronize one of our switches with the WCS/MSE (Version 6 on the WCS). I’ve added it onto the WCS and the MSE says it synchronizes properly but when I go into the SERVICES/MOBILITY SERVICES and look at the switch it is just showing the IP address. It’s not showing any of the ports or any information at all on the switch. I have the RW snmp string for the switch. Any ideas?

Well that is a complex question but let's start with making sure that you meet the requirements for it to work:
http://www.cisco.com/en/US/docs/wireless/wcs/6.0/configuration/guide/6_0admin.html#wpxref43135
Switch Port Trace
The Switch Port Trace page allows you to run a trace on detected rogue access points on the wire.
To correctly trace and contain rogue access points, you must correctly provide the following information.
•Reporting APs—A rogue access point has to be reported by one or more managed access points.
•AP CDP Neighbor—Access point CDP neighbor information is required to determine the seed switches.
•Switch IP address and SNMP credentials—All switches to be traced must have a management IP address and SNMP management enabled. You can add network address based entries instead of only adding individual switches. The correct write community string must be specified to enable/disable switch ports. For tracing, read community strings are sufficient.
•Switch port configuration—Trunking switch ports must be correctly configured. Switch port security must be turned off.
•Only Cisco Ethernet switches are supported.
•Switch VLAN settings must be properly configured.
•CDP protocol must be enabled on all switches.
•An Ethernet connection must exist between the rogue access point and the Cisco switch.
•You should have some traffic between rogue access points and the Ethernet switch.
•The rogue access point must be connected to a switch within the max hop limit. The default hop count is 2, and the maximum is 10.
•If SNMPv3 is chosen, use the context option and create one for each VLAN, in addition to the one for the main group (which is required for non-VLAN-based MIBs).
Follow these steps to specify options for switch port tracing.
Using switch port tracing:
http://www.cisco.com/en/US/docs/wireless/wcs/6.0/configuration/guide/6_0ctrlcfg.html#wpmkr1083367
After you meet all requirements the logs are your best bet for determining why it is not working. They are usually pretty good at leading you to the problem.
You would go to Administration > Logging and uncheck Status Polling, Configuration, SNMP Mediation, MSE/Location Servers, XML
Mediation, Navigator, Reports and Database Administration and change the message level to TRACE and click submit. Go back and recreate the issue
and then go back to the logging area and download the logs.
If you get the logs right after the test it should be in the wcs-0-0.log file and you will want to go from the bottom up and search for something like "
Switch port tracing failed". Around there will be why it failed.

Similar Messages

Refresh rate for client tracking i WCS/MSE

Hi
I have a customer that have trouble with the update of the position of a client. Even if the clients walks across the whole building, the client will stay at the same place for several minutes. Is there any way to tune the refresh rate? When I push the load button in the map, the clients position will refresh, or it did when I was on the site, now they just test with an application.
The setup:
WiSM 7.0.220
WCS 7.0.220
MSE 7.0.220
They use the API for MSE to get the location information to the external application, and that will show the information on a cisco 7925 IP phone.
Do someone know a way to increasing the refresh rate?
- Patrick

From: Cisco Mobility Services Engine - Context Aware Mobility Solution Deployment Guide
Jitter: Before the 5.2 release, MSE used to have Location Smoothening mechanism to track clients. Moving average was taken for clients, or, in other words, client movement was averaged. Starting with 5.2 software release, this whole
mechanism has been replaced with “Location Filters.” Location Filtering is applied internally on a per client basis. MSE
keeps track of which client moves and which is stationary, and it applies filtering accordingly. This reduces the overall jitter of the system. Location filtering is enabled by default.
Perhaps you want to turn location Filtering OFF for your application.

WCS upgrade help

Hi All,
Yesterday I upgraded WCS from 5.2.130 to 6.0.132 and now the WCS "home page" will not load. I've attached a screen shot of the error. Any help would be appreciated.
Thanks,
Scott

You can not downgrade, or you will loose your data.
You have in my opinion a configuration issue or a browser issue with the IE 8. Perhaps you can play with the settings to remove those messages.
WCS was not tested with IE 8 and not supported, perhaps try to tweak the settings in IE 8 to get it to work or convey to your management that IE 7 is needed.
I guess we can mark this resolved.
On a positive note: WCS does load and work, it's a browser issue here.

Calibration error message in WCS(MSE)

I get a calibration error message in WCS when I try to add data points in the RF calibrate models section. Here is the error message:
Error in Calibration. MessageMEDIATION-5, WcCalibration!x.x.x.x!xx:xx:xx:xx:xx:xx,row Status,No access
The first set of x is the IP address of the controller and the other x is the MAC address of the wireless system that is being used for calibration.

Hi,
Which Wireless-Card you used?
Best you use the Cisco CB21AG PCMCIA Card. I had similar problems with intel wireless chipsets
Sincerely,
Frederik

Unable to get MSE status.

My WCS reported the MSE was disconnected. Then i checked the mse status.
[root@SHWIPS01 ~]# service msed start
Starting MSE Platform
MSE Platform is already running
[root@SHWIPS01 ~]# service msed status
STATUS:
MSE Platform is up, getting the status
Unable to get MSE status. Error: java.net.SocketTimeoutException: Read timed out
Retrying status fetch -
[root@SHWIPS01 ~]#
Any idea or solution about this? thanks a lot.

Have you tried either of the following:
restarted msed altogether and/or rebooted the appliance?
Can you also provideoutput from the following commands
netstat -tap
ps -ef|grep mcsed
what is the network configuration between the WCS & MSE?

Cisco WCS + 5508 - Monitor view vendor name

Just finishing up a small install of a 5508 controller and WCS.
Approx 30 AP's across 2 buildings
2 WLANS - 1 prod wpa2 and 1 guest which is completely open to internet only.
Our security group is asking if there is a way to determine who is accessing the Prod WLAN. Currently it is setup
to work with eap and the users AD account which is working well.
I noticed under the client tab in WCS that there is a Vendor name and it shows me intel and even RIM when someone with their Blackberry is
connected. BUT when we connect via an IPAD it show "unknown" as vendor name. Is there a way to get the IPAD to register under the vendor name ?
Running 7.0.172.0 of WCS
Any help would be appreciated.
Cheers
Dave

I don't have your answer so I'm curious as well, but the vendor name is derived from the OUI - first six characters of MAC address. If the file that maps OUI to vendors was updated it would probably say "Apple" which would include all i-things and wireless macs.
Here's a site to lookup OUIs: http://hwaddress.com
I have set up an account in WCS for the security group, and made them members of "System Monitoring" group. They can create and schedule user reports but can't change any settings.

Eap-fast and CWWLSE-1030

HI,
I configure a Wireless Lan with 3 AP1131G-E-k9 and a radius serveur CWWLSE and Eap-Fast AND WPA2
All seem's to be OK but some Laptop are obliged to re-authenticate several time a day ?
Anybody has a idee if thre is a timer or
others paramatter I should do set ?
Thanks for your Help

I recently ran into this issue. What I found although not that technical....if the user is prompted for the PAC and does not accept, I had a hard time getting them to authenticate afterwards. I was able to remove the user from the AAA server and once I added them back in they were able to authenticate with no issues. Again this is a very basic finding and I have not had time to test my theory. I believe it has someting to do with the way AAA caches the user account, perhaps there is a denial of service or time-wait before the next login attempt is permitted. If you are using AD and not local accounts use the option, on the Radius server to Remove Dynamic Users.
hardware userd Version 7.0...5508 WLC, 3500i AP's, WCS, MSE, Cisco ACS/Radius 4.2 WPA2, 802.1x, EAP-FAST

WLC Trap Receivers

We are installing a new 3355 MSE and splitting up our environment between two. One of my colleagues told me I needed to add the MSE IP address to the SNMP trap receivers in the WLC's.
I have not heard of this before, nor can I find this action in the configuration guides for the WLC or MSE.
I though the trap receiver should be our WCS. Can anyone confirm?

youre right, trap reciever should be the WCS/NCS.
the wlc and mse communicate via NMSP protocol.
WLC - WCS = SNMP
WLC - MSE = NMSP
WCS - MSE = SOAP

Lobby Ambassador Profiles in ACS 5.3

We've set our WCS up to do AAA through our ACS 5.3 which works great. So in order to log into the WCS for Administration or as a Lobby Ambassador (to create guest users etc) the AAA is all done by the ACS, GREAT!
I have assigned a set of users the Lobby Ambassador role as passed that back through TACACS to the WCS, so those users have their role setup as Lobby Ambassador and are limited from doing anything else, as expected.
What I want to know is: With normal local AAA on the WCS, when you created a Lobby Ambassador account, you could give the account a set of defaults for any guests accounts created by that Lobby Ambassador account, which was good, so Lobby Ambassadors couldn't set up unlimited time accounts and stuff like that.
What I want to know now is that since I'm now doing all the AAA on the ACS, is there an attribute I can pass to the WCS in the Shell Profile, along with the roles etc telling the WCS what the guest user creation defaults for the Lobby Ambassador account is, so that we can continue to limit the defaults of any guest account that the Lobby Ambassador accounts create, as it used to be? We'd really like different lobby ambassadors to be able to do different things as well. i.e., Lobby Ambassador X can only create accounts for one region. Lobby Ambassador Y can create Unlimited time accounts where the others can not. We used to do this by assigning different guest user creation defaults to different lobby ambassador accounts on the WCS.
Help appreciated

Hi,
at the moment the only solution for your requirement is to create local NCS/WCS accounts with exactly the same username as existing in your ACS, no matter what password. Authentication will happen via TACACS+ while the defaults will be taken from the local user account. Please be aware that this mechanism is case sensitive.
Regards
Stefan

Define an Area Without WLAN Coverage

Hi all,
i have an Outdoor Area covered by Cisco Wireless LAN Solution (WCS,WLC,1550AP root and Mesh lightweight). I need to disable power transmission for some of these APs in the 2..4GHz.
I tried two possible way, but both are not working:
1) Set the power of 802.11g/g/n to 0. There is no such option (power can be set manually from 1 to 5 and, as per the documentation, each level is a reduction of 3dB. Therefore, even if i put to the minimum, i cannot guarantee that there is no utilization of the 2.4GHz spectrum).
2) Define an AP group containing these APs and don't add any SSID. Is not possible because at least one SSID must be added on each AP group.
Can somebody advice a working solution/setting in AP/WLC/WCS that help me to avoid transmission in 2.4GHZ? Otherwise the only solution is to power them off, but is not the solution i'm looking for.
Thanks in advance.

In order to be sure that i didn't misunderstand are you suggesting to go in WCS on:
Radio Detail : 802.11b/g/n
Configure> Access Points > "AP_NAME" > Radio Detail
and in Admin Status uncheck?
Please see the attached image.
Thanks for your reply.

Hospital Network Infrastructure

Hello,
I need to gather some general information about network infrastructure in hospital. Things like which network devices we need and generally how much load each department creates in our network (e.g. the operation room, the reception, etc.) and how much bandwidth we should allocate to that special room. It would be alo very nice if you tell me how I can calculate the load for each machine (i.e. computer connected to the network). Or any good reference books or websites.
Thank you very much,
Pat

how much bandwidth we should allocate to that special room
I'm no expert with hospital environment but we've started rolling out Gig ports switches with PoE+ support and 10Gb uplinks to the hospitals here. Some of the reasons are the uptake of video streaming and high definition media files that are coming online. Gone were the days when you have to physically look at x-ray templates on in front of a lighted cubicle. Nowadays the films and negatives (ranging from x-ray, ultra-sound, MRI, etc.) are stored in a bank of servers and streamed up to desktop.
Due to the proliferation of wireless we now have to consider putting wireless access points and associated support equipments (WLC/WiSM, WCS, MSE, Wireless VoIP phones and RFID tags).
Due to the nature of hospitals, our switches comprise of 3750E and 3750X with 6500 and Sup720.

MSE location problem in WCS map

Hi,
I've Installed a MSE context aware services 6.0.103 and WCS 6.0.196.0 plus loaction license in a Campus with 4 WLC in 2 buildings, every buildings has 3 floor, i configure the WCS and associate the campus to MSE engine, I syncronize it with controllers and It works, but only for the ground floor of the buildings, on the other floor there are many clients but they are not visible on WCS map, I can view associated clients only on the groundfloor maps, and i check the properties of every floor but they are the same.
any ideas?
thanks
Regards

Hello,
Are the groundfloors all covered by APs on the same controller(s) and maybe the other floors covered by APs on different controllers?
Or are the same controllers having APs on either the groundfloor and other floors?
I am asking this because we may be running into a situation where the MSE doesn't correctly communicate with the controllers managing APs (and clients) on the floors where you can't see anything.
Also, is the MSE license having still free slots, or is the license limit completely consumed by all the clients in the groundfloors?
This can be verified in WCS under
Services > Mobility Services > [your MSE] > Context Aware Service > Administration> Tracking Parameters
After these first checks, I'd also verify the following:
1. The client on a specific floor should show up on the WLC under
show client detail
2. The same client should show up on WCS through a search for its MAC address.
Is the WCS pointing you to a specific map location for this client?
3. In WCS, under Monitor > Maps, do you see a client count higher than zero for those floors where you can't display clients?
4. In the floor map view of WCS, could you please confirm that you checked the "Clients" box and that in its properties you also selected "Show All Clients"?
I understand these may sound like obvious steps, but I'd prefer not to neglect anything.
Regards,
Fede
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Wireless Migration from WCS to NCS and MSE/WLC 7.0.230 to 7.2.110.0

Hello,
I'm in the process of ripping out all of my wireless network and putting a new one in and have a couple of questions regarding code compatibility between the NCS, WLC, and MSE.
My current infrastructure consists of Wism running 7.0.230.0 code, WCS 7.0.230.0 code, and MSE 7.0.230.0 code. I am planning on migrating my WCS over to NCS 1.1.1.24 while maintaining the 7.0.230.0 code on my WiSM and MSE. Does anyone know if this will function properly and maintain location services?
Also, I am going to be replacing my MSE (3350) 7.0.230 code with redundant MSE (3355) 7.2.110.0 code running high availability. Will I be able to import the backups/config from the 7.0.230 code onto the 7.2.110.0 new servers? Or would it be better for me to load my new servers (3355) with 7.0.230 code, import the backups, and then proceed with the upgrade to 7.2.110.0. What is the best way to migrate my CAS licenses over to the new servers?
Thanks for any suggestions.

Well here is the compatibility matrix:
http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html
As far as the MSE, I would probably downgrade it to 7.0.230.0 and then import the backup and then upgrade. I guess you can just try it at first if you want, it won't hurt. You can always clear it and then downgrade if you want.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

MSE often unreachable from WCS

Hi,
I have upgraded MSE in my network from 7.0.105.0 to 7.0.201.204 a week ago.
After the upgrade, often MSE is going to unreachable state from WCS. A restart on MSE with "shutdown -r now" resolves the issue. But again after 2-3 days, it becomes unreachable from WCS. The IP reachability is fine from WCS and WCS communication password also matches.
"/etc/init.d/msed stop" command keep on showing "Shutting down MSE Platform ..." but never actually shuts down. only "shutdown -r now" helps.
getserverinfo is not giving any results.
Please let me know, what can be the possible issue.
Regards,
Madhan kumar G

Hi,
After restarting MSE, here is the output of Getserverinfo. Can "DB free size (kbytes): 0" be an issue?
Starting MSE Platform, Waiting to check the status.
MSE Platform is up, getting the status
Server Config
Product name: Cisco Mobility Service Engine
Version: 7.0.201.204
Hw Version: V01
Hw Product Identifier: AIR-MSE-3350-K9
Hw Serial Number: MXQ008A5S4
Use HTTP: false
Legacy HTTPS: false
Legacy Port: 8001
Log Modules: -1
Log Level: INFO
Days to keep events: 2
Session timeout in mins: 30
DB backup in days: 2
Services
Service Name: Context Aware Service
Service Version: 7.0.200.204
Admin Status: Enabled
Operation Status: Up
Service Name: Wireless Intrusion Protection Service
Service Version: 1.0.2077.0
Admin Status: Disabled
Operation Status: Down
Server Monitor
Server start time: Sun May 20 10:42:40 AST 2012
Server current time: Sun May 20 10:46:05 AST 2012
Server timezone: Asia/Riyadh
Server timezone offset: 10800000
Restarts: 4
Used Memory (bytes): 443802112
Allocated Memory (bytes): 994770944
Max Memory (bytes): 1908932608
DB virtual memory (kbytes): 0
DB virtual memory limit (bytes): 0
DB disk memory (bytes): 7104153216
DB free size (kbytes): 0
Active Sessions
Session ID: 12713
Session User ID: 2
Session IP Address: 172.18.5.15
Session start time: Sun May 20 10:43:06 AST 2012
Session last access time: Sun May 20 10:45:08 AST 2012
Context Aware Service
Total Active Elements(Wireless Clients, Tags, Rogue APs, Rogue Clients, Interferers, Wired Clients): 1107
Active Wireless Clients: 1107
Active Tags: 0
Active Rogue APs: 0
Active Rogue Clients: 0
Active Interferers: 0
Active Wired Clients: 0
Active Elements(Wireless Clients, Rogue APs, Rogue Clients, Interferers, Wired Clients, Tags) Limit: 6000
Active Sessions: 1
Wireless Clients Not Tracked due to the limiting: 250
Tags Not Tracked due to the limiting: 0
Rogue APs Not Tracked due to the limiting: 0
Rogue Clients Not Tracked due to the limiting: 0
Interferers Not Tracked due to the limiting: 0
Wired Clients Not Tracked due to the limiting: 0
Total Elements(Wireless Clients, Rogue APs, Rogue Clients, Interferers, Wired Clients) Not Tracked due to the limiting: 250
Context Aware Sub Services
Subservice Name: Aeroscout Tag Engine
Admin Status: Disabled
Operation Status: Down
Subservice Name: Cisco Tag Engine
Admin Status: Enabled
Operation Status: Up
Regards,
Madhan kumar G

MSE added to WCS, cannot assign services to controller

I have a 30 day trial license of WCS and have added my WLC controller and APs.
I installed the new MSE virtual appliance and added it to the WCS, it shows up fine however I see no services.
When I SSH to the MSE and do a /etc/init.d/msed status I see that the CAS is up and running!
However when I try to synchronize services and add mobility services to a controller CAS is greyed out and won't let me check it
Where should I go from here?

Hello Pavel,
I can provide some background for what you've faced - it's on my blog to-do list, but hasn't come out yet to have helped you.
There was a change in the internals of User-UserGroup relationship handling between XI Release 2 and XI 3.x.
Previously, the relationship was exposed via the SI_GROUP_MEMBERS property for the UserGroup InfoObject, tied to the Users property in BIPlatform Web Services.
Now, the SI_GROUP_MEMBERS is read-only, listing all the members, but trying to change the value using getUsers() is ignored.
New properties (all properties named SI_ENT_* for both User and UserGroup, check the Query Builder for their names) have been defined for User and UserGroup InfoObjects, specifically for Enterprise authentication UserGroups. This is to separate the handling of Enterprise UserGroups from those created for third-party authentication UserGroups (such as Windows AD user groups), such that you can add/remove memberships only for Enterprise UserGroups.
The Enterprise SDKs have been modified internally to make this change invisible when migrating from XI Release 2 -> XI 3.x.
However, since the BIPlatform Web Services work more directly with the InfoObject properties (via the BIAR API), it exposes the SI_ENT_* properties explicitly.
The gist is that, to affect User-UserGroup memberships, you have to use the getEnt*() methods for either User or UserGroup.
Sincerely,
Ted Ueda

WCS MSE Help

Similar Messages

Maybe you are looking for