Wlc 2100 mac -address issue

Hi all,
we are using wlc 2106-k9 controller, with mac based authetication for cilents. After few days mac-address database automatically deleted few mac-address. this is not first time it happen twice. we have entered totally 60 mac-address only . It has IOS AIR-WLC2100-K9-7-0-98-218.aes.
Thanks in advance.

I had the same problem yesterday and after many hours searching the web I ended up with this post that made me really desperate... But I didn't give up and while trying a new bios flash because of random crashes when in the bios, I noticed the obvious: you can change the MAC address when flashing
use the last version of the dos flasher with the parameters /nvmac:xxxxxxxxxxxx/wb after the name of the bios file; it's explained if you ask the help with the /help parameter. You can find the mac address on a stick on the parallel port.

Similar Messages

MAC address issue----Spearman

Saw your comments on this in the post about the 1.9 bios for neo2platty ....
I can confirm that My MAC address issue was caused by the bios that you sited in your comments....all F's were written to My nvidia lan too...
only solution from what I have read is too rma it...'bummer'
just thought You would like to know.... Your not alone

I had the same problem yesterday and after many hours searching the web I ended up with this post that made me really desperate... But I didn't give up and while trying a new bios flash because of random crashes when in the bios, I noticed the obvious: you can change the MAC address when flashing
use the last version of the dos flasher with the parameters /nvmac:xxxxxxxxxxxx/wb after the name of the bios file; it's explained if you ask the help with the /help parameter. You can find the mac address on a stick on the parallel port.

Cisco WLC Client MAC address backup to new Controller & ISE

Hi All,
We have an existing 4400 controller with MAC filtering for clients configured. Right Now, we are migrating to 5500 WLC and ISE setup.
We want to use MAC filtering due to company policies on the new Controller as well as ISE.
Is there a way (from GUI/CLI) that we can export the client MAC Addresses into an Excel file from existing WLC to new WLC & ISE?
Thanks,
CJ

On the CLI issue a show macfilter summary and then import that into excel or a text editor.
Sent from Cisco Technical Support iPhone App

WLC - block MAC Address

Wireless system with 3 x WLC-4402, version 6.0.199.4, about 100 AP, about 300 clients.
I need to block some clients that are bombarding me with frequent and repeated "Signature attack" (Auth flood).
I tried to put the MAC Address in the black-list (Disabled Client), but it seams non work.
Other suggestion ?
Claudio

If its an authentication issue, then you can enable client exclusion on the WLAN also. 3 failures will automatically put them in the exculsion list. Not that I like pgrading, but the latest versions of 7.0.x are pretty good, but you need to make sure your AP's support that code. 6.x is pretty old.
http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Spanning Tree and Admin mac address issues srw2048

Ok, I have a somewhat complex problem and hopefully someone may shed some light or have an idea as to whats wrong.
First the scenario:
I have two Cisco Cat 6509's etherchanneled to each other via two fiber cables. One of these is the STP/RSTP root. I have two SRW2048's.. one trunked to each of these 6509 switches. There is also a trunk between the SRW2048's. All this is to create a redundant topology so that if one of the switches fail's the others can still forward packets to each other. Of course the scenario described is in fact a loop that should be handled by STP/RSTP. I have RSTP enabled on all the switches in the scenario (PV RSTP on the cisco switches as they only do Cisco's brand of per vlan spanning tree). There are 3 vlan's configured on each of the srw2048's (2,55,96). There are corresponding vlan's also on the 6509's. I have put the srw2048's management interface into vlan 2.
The problem:
I need to forward packets between the srw2048's primarily and only use the 6509 that is not the root when a failure happens. I have configured the non-root 6509's spanning tree cost on the etherchannel to be higher then the alternate path through the srw's to the root. I can hook everything up and view the spanning tree and see that the srw2048's interface that goes to the non-root 6509 is blocked, and all other interfaces on the other switches are forwarding. I can in fact ping and get to the admin interface on all the switches. Then for some strange reason the admin interface of the srw2048 plugged into the non-root 6509 stops responding. If I disable either the interface its plugged into on the 6509 or the other srw2048 everything starts working again. Sometimes it responds after many failures for no apparent reason. I looked into the mac-address table on the 6509's and they are conflicting, pointing to each other for the mac-address of the broken srw2048. When I clear the mac-table the admin port comes back for about 5 seconds then again goes dark. When reviewing mac-table on the 6509's they are back to pointing to each other. The odd thing (although I haven't confirmed this completely) is that hosts placed into vlan 2 on that same srw2048 seem to work fine. If there was an STP loop or something misconfigured, I would expect it to effect any host in vlan 2 or the other vlan's for that matter on the srw2048 that stops responding. Alas, I am stuck because I need to manage this switch remotely. My only thought is that for some reason even when the STP status is blocked the broken srw2048 is still sending out arp's of its admin interface and bypassing the STP protocol. I have no way to confirm this, but maybe someone has an idea as to what I'm doing wrong, or otherwise offer a solution. For now, I simply removed vlan 2 from the 6509 that the broken srw2048 is plugged into and everything seems fine.
My apologies for such a long post, but this is somewhat complicated. Thanks in advance for any info.
-Geoff
Message Edited by gmyers on 08-19-2008 10:35 PM

To follow up, I had a ticket open with Linksys about this for about 3 months with no resolution. I submitted packet captures, stp outputs, etc and no luck. I gave up and basically had to revert to a manual failover for redundancy. It's no perfect or fast, but it works every time.
Unless linksys issues a firmware upgrade with this as a fix, I doubt we will be able to ever resolve this on our own.

WRT600N weird MAC Address issue

I've had the Linksys WRT600N for several months. One day the internet connection stopped working, after I power cycled it, I called support and they had me change the router to clone MAC address after that it worked. If I took off the cloned MAC the internet wouldnt work. So I got curious after that and I restored the router the settings file I had backed up previously. I tried my internet connection and everything worked. No clone MAC address, however, after about a month it stopped again. The issue was making sure clone mac address was on. My question is why does that keep happening there shouldnt be a reason that it would need my computers mac if my isp doesnt need me to do thaa. (ISP = Optimium) Has anyone had this problem or know what the cause is?

You have to tell what you did exactly if it did not work.
Generally: many ISPs (most cable ISPs) only grant you a single public IP address, i.e. a single device connected to their service. Most do this by storing the MAC address of the device connected to the modem. If you connect a different device with a different MAC address into the modem they won't accept it. You won't get an IP address. You don't have internet. Only the device with the MAC address stored (or a modified MAC address set to the stored MAC address) will have internet.
Some ISPs reset the stored MAC address if you call them. With a few ISPs this is the only option.
Most ISPs reset the MAC address after a few hours of inactivity or in fixed intervals.
Some ISPs recognize if you reset the modem and reset the MAC address then.
After it is reset you can connect a different device and it will get the IP address.
Now, if your internet at some point does not work and for a test you connect the computer directly to the modem and you get internet then, at that moment you already have locked in MAC address of the computer and you have to use the MAC address clone on the router.
Thus, if you need the MAC address clone or not depends on what you did when exactly after how much time of inactivity when the internet did not work anymore.

4500 VLAN MAC address issue

We are facing an issue with our 4500 switch. It is using the same MAC address for all VLAN interfaces, which is causing a problem with our service provider.
Is there a way to disable this?
Thanks,
Fabián

Fabián,
I'm afraid that's not possible on a 4500:
Supported Platforms for Unique MAC Address Configuration on VLAN or L3 Interfaces for Catalyst Switches
Best regards
Rolf

MAC Address issue in Linux Guest

Hi,
IP address is getting change on every reboot of Linux machine in HyperV environment even we have make it static inside the Linux configuration file.
Any Suggestion ??

Hi Amit,
Can you check whether the MAC address is persistent on the VM?
Configure a static MAC for the VM using VM properties.
Delete the *persistent-net.rules in /etc/udev/rules.d/ and reboot the VM.
Thanks,
Janaka
Janaka Rangama MCT MIEEE MBCS (Please take a moment to Vote as Helpful and/or Mark as Answer, where applicable.)

Cisco WLC username/mac address

Hi
Im are having problems with editing the User Field in the WCS. The purpose was to enable the ease to identify clients on the wireless network through their names rather than through MAC addresses which are currently the only method of authentication.
would appreciate it anyone could guide me in any form necessary in providing us to edit these details.

Just curious as to whether or not you figured out how to make this work. I would also like to get that set up.

MAC address issue...old, but have question

I missed all the news about bios 2.5 but anyway did it screw up the MAC address? I flashed it but it never let me into windows saying I didn't have an acpi compliant bios.
I see some things about it messing up the MAC...
If the mac address isn't all zeros is it ok? Or did the bios just change it altogether to a diiferent value?
Sorry for late post about it...I missed it when bios 2.5 out to do my comp being down at the time.

Quote
Originally posted by J*A*G
It looks odd it is like a bunch of 8080808080....maybe I better try the fix.
Uh-yup. You got a busted MAC address. Off to the catacombs with ya! At least the search function runs good now.
Jef

Wrong mac address listed in verizon router for a device on my network

Hi folks,
I'm having some routing issues and hope you can help.
I've got the standard verizon actiontec MI424WR-GEN3I router for my standard LAN and then a 2nd router (linksys wrt54g) for a testing environment I set up, to help isolate the traffic. I'm using the LAN to WAN strategy to set up the two networks.
everything seems to be working fine except for the fact that my devices behind the actiontec router cannot ping/access any devices behind the linksys router, but the devices behind the linksys router are able to ping and reach the devices behind the actiontec router.
my actiontec subnet is 192.168.1.X while my linksys subnet is 192.168.2.X. I followed this tutorial on the verizon forum to hopefully get the two networks talking correctly: http://forums.verizon.com/t5/FiOS-Internet/Multiple-routers-and-subnets-can-t-access-across-subnets/...
an issue I see in my actiontec router is that it appears as though the mac address is not correct for what I'd imagine is the WAN port on the linksys router. the actiontec is showing the MAC as 00:13:10:73:72:6a while the sticker on the router itself and through the ARP command in the command prompt shows the MAC for the linksys router as 00:13:10:73:72:69. I've power cycled both routers 2x and nothing has changed. I currently have the ethernet cable that goes from my actiontec to the linksys unplugged so hopefully it'll drop from network list eventually and reaquire an address when it's hooked back up, hopefully correcting the wrong MAC address issue.
I'm a bit perplexed as to why I can get out to the internet just fine on my 192.168.2.X network with a botched MAC address, but I can't ping the network that's just a hop away...even after following the guide mentioned above.
any ideas here?

You can release the address yourself. It's a function under my network, network connections, broadband connection (whichever one is connected), configure connection
dhcp lease Release
Then recycle the router
After you set up the static route did the ping work? - ensure that you have icmp enabled on the linksys. If you don't get a ping response it indicates an issue with the static route rule.

ISE and WLC 5508 IP and MAc address

Hi!
Is it possible that we recibe IP address and Mac address Client at the same time in ISE ?
The wlc permits choose radius Call station ip type MAC or IP, but not both.
Thanks you,

If you are using dot1x then no, the mac address is sent since the client does not receive an ip address till authetication succeeds.
Sent from Cisco Technical Support Android App

AP 2700 - 2 MAC addresses - problem with joining to the WLC

Hi,
I had a problem with joining my new AP 2700 to the controller. I've found workaround but I would like to ask you if you know if this behavior is a some kind of bug or maybe feature :)
I have DHCP server which assigns IP address base on the binding MAC address with the IP address. Without binding, IP won't be assigned so I added MAC address from the AP sticker (MAC and SN number is on the sticker at the back of each AP) to the DHCP, connected AP to the switch port which was configured exactly the same way like other ports on this switch where older AP are working fine and.... nothing. IP address was not assigned. There was no DHCP request in the DHCP server logs.
During the investigation I've found that AP present 2 MAC addresses on the switch interface:
switch#sh mac address-table interface fa1/1
Mac Address Table
Vlan Mac Address Type Ports
11 58f3.54c1.2cb3 DYNAMIC Fa1/1
11 58f3.54c1.2cb4 DYNAMIC Fa1/1
The first one (58f3.54c1.2cb3) is a "sticker" MAC address but the second one (58f3.54c1.2cb4) is something new. Looking in to the DHCP logs I've found log that this second MAC address (58f3.54c1.2cb4) tried to get IP address but it was not possible because this MAC was not binding with any IP address so DHCP server refuse. I added this second MAC (58f3.54c1.2cb4) to the DHCP server, AP get IP address, join to the WLC, download software, reboot and ... this MAC address disappear.
switch#sh mac address-table interface fa1/1
Mac Address Table
Vlan Mac Address Type Ports
11 58f3.54c1.2cb3 DYNAMIC Fa1/1
Software I had on the AP before joining to the WLC was:
Version :
Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)
now I have (after downloaded from the WLC)
Version :
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Do anyone know what happen?

(WLC1) >show sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.95.16
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
System Name...................................... WLC1
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.10.10.10
Last Reset....................................... Software reset
System Up Time................................... 25 days 2 hrs 53 mins 5 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180
Configured Country............................... US - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +44 C
External Temperature............................. +22 C
Fan Status....................................... OK
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 6
Number of Active Clients......................... 25
Burned-in MAC Address............................ XX:XX:XX:XX:XX:XX
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 25
(WLC1) >show time
Time............................................. Thu Apr 9 13:51:00 2015
Timezone delta................................... 0:0
Timezone location................................
NTP Servers
NTP Polling Interval......................... 3600
Index NTP Key Index NTP Server NTP Msg Auth Status
1 0 10.10.10.11 AUTH DISABLED
It's look like AP doesn't allow for console login or commands it just only show activity. After rebooting the WLC I get information:
Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB5, RELEASE SOFTWARE (fc1)

WiFi issue with MAC address

I've been using MAC filtering as part of my home network wireless security for years. This means inputting the MAC address of every device and computer that I want to have connect to my network. So I get my new WiFi + 3G iPad on May 28th and look in Settings to find the MAC address so I can input it into my router info. The router (D-Link) says that it's not a valid MAC format, presumably because it begins with E8 instead of the 00 that all my other devices have. I ended up having to disable MAC address filtering in order to have my iPad connect to my WiFi network. Does anybody have any comments or ideas about how I can get the router to recognize a MAC that begins E8:06 etc.?
Would appreciate any help. Thanks.
Glenys

I am using MAC filtering on my network using a Linksys router (WRT300N) and had no problems adding our iPad to the MAC table. Also, if I'm not mistaken, the first portion of a MAC address is unique to the manufacturer, so unless all of your wireless devices are from the same manufacturer (at least the wireless component of the device), then it isn't likely that all of your MAC addresses will start with the same digits. Make sure when you enter the MAC address that you include the colon in between each pair. My Linksys won't accept the MAC address without them. As someone else recommended, you may also want to see if there is a firmware update for your router that addresses this issue. Good Luck.

Help required - mac address table, virtual pc/ip addressing issue

Hi, hope someone out there can help?
This is the scenario
SW1 (WS-C2960G-48TC-L) port gig0/1 has a PC connected to it with ip address 10.182.8.6 and a Virtual IP address 10.182.8.107
SW2 (WS-C2960-24TT-L) port gig 0/1 has a PC connected to it with ip address 10.182.8.106
The system is designed so that if there is an issue with the PC connected to SW1, the PC on SW2 will take over the Virtual IP address and continue working.
We have a couple of other PC's in different subnets to the above PC's that use the Virtual IP (VIP) address to communicate with the PC that is 'on line'.
Unfortunately, the vendors software doesn't currently gratuitously refresh the arp to advertise the change of mac address for the VIP.
Is there anyway we can get the 2 dcnsw to 'refresh' on a regular time period to capture when the VIP changes to the other PC?

Hi Stephen
Without meaning to sound rude, the software which uses a VIP is not very well designed if it is not capable of sending a Gratuitous ARP one the Active one fails.
The default ARP cache timeout is 4 hours so an ARP entry will remain in the table and once the timeout is up, the switch will send an ARP to check if the device is still alive and if not, remove the entry from the table.
You could look at reducing the ARP timeout on a per port basis:
#interface gi1/0/1
#arp timeout 60
This will change the ARP cache timeout to 60 seconds for that port but having not used this before, I am not 100% this will address your issue. I would not advise trying to change the global ARP cache timeout for a production switch as this will increase ARP traffic and could cause problems if reduced to a small value.

Wlc 2100 mac -address issue

Similar Messages

Maybe you are looking for