WLC 5508 Finding the culprit

Hi everyone,
I have started receiving these log entries and can't find much about them. I am assuming I have an AP acting up somewhere. This is a WLC 5508 and we have 47 AP's. I thought the AP was one that had crashed but it came right back up after a restart on the AP. I have also restarted the controller. These messages have only been happening for a day or so now. How can I tell which AP it is? The error messages below say an AP but the MAC is the WLC burned-in MAC (redacted in bold). I ran these through the interpreter but nothing useful comes up.
*Sep 29 15:43:06.686: %LWAPP-3-HDR_PARSE_ERR: spam_net.c:1357 LWAPP header parsing failed, dropping the packet
*Sep 29 15:43:06.686: %LWAPP-3-PARSE_ERR2: spam_lrad.c:17724 LWAPP header parsing failed, dropping the packet
*Sep 29 15:43:06.686: %LWAPP-3-UDP_PORT_ERR: spam_lrad.c:17843 Received invalid UDP port (5247) in the packet from AP XX:XX:XX:XX:XX:XX, dropping the packet

*Sep 29 15:43:06.686: %LWAPP-3-UDP_PORT_ERR: spam_lrad.c:17843 Received invalid UDP port (5247) in the packet from AP d0:d0:fd:1f:7e:80, dropping the packet
Burned-in MAC Address
D0:D0:FD:1F:7E:80
Both copied from the WLC interface. I was hoping I wouldn't need to post the MAC of our WLC but I can see that it must be necessary. Anyone have any ideas? I see that the port is the CAPWAP port.
EDIT: I am not seeing this error in the log this morning. I had done a reload on the AP that I thought was the one after I posted this question. I am not sure if it will re-occur. I would still like to know more about this if anyone has anything to add or discuss.

Similar Messages

Why in Ai CC 2014, when I use a pathfinder tool on two objects, their anchor points snap slightly off from where they were? I'm looking under all the snap to options under VIEW & cannot find the culprit. Please help!

Why in Ai CC 2014, when I use a pathfinder tool on two objects, their anchor points snap slightly off from where they were? I'm looking under all the snap to options under VIEW & cannot find the culprit. Please help!

You're welcome.
There are a couple of issues connected to it:
http://www.vektorgarten.de/problems-align-to-pixel-grid.html
I don't think that list is complete

2 AP Management interface WLC 5508 at the same time

Good afternoon,
I have a customer that wants a few APs are managed by the interface of management and do join by that interface and another group of APs are managed and do join by another interface configured as "Enable Dynamic AP Management"
is a WLC 5508, i created an interface by checking the option "Enable Dynamic AP Management" but does not work, by the interface of management are recorded without problems.
Is it possible to do this? Are you supported?

I don't know I understand your question properly or not.
I think you want to join APs to management and AP manager interface at same time ?
When you want to allow APs to join on two ports 1(management) & 2 at the same time, then you have use this:
As you must be aware that only one AP manager is allowed per port. So if you leave the Management interface as an AP‐manager and just create one additional AP manager interface, you’ll allow APs to join to either port, but the Management interface will not be able to fail over since that would make two AP managers on the same interface.
Or
Remove the AP management function from the Management interface and then create two new AP manager interfaces (one for each port).
Regards
Dont forget to rate helpful posts

My mac's run out of memory and I can't find the culprit!

Hi, I'm in serious need of some help! I'm sure this is simple, but I'm about to break down over it – I use my mac for everything. I've got a 200gb 2009 macbook (running iOS7), and it's told me it's run out of memory. The storage tab in 'about this mac' tells me 108GB is being used for video – but I can't find them! My iPhoto has about 17GB of movies, my iTunes has around 20GB, and I've got maybe another 10GB in files within finder – but that's still only half the videos my mac is saying it has? How do I find the rest? I've got 80GB being used by 'other' as well – is that just pages and numbers documents, along with the iOS? Is there a way of finding exactly what all my memory's being allocated to?
I've got the entire mac backed up on an external hard drive, but I'm terrified of deleting anything from the mac in case that fails. I plan on getting a second external HD, but even then I think I'll be too worried (I've heard about so many hard drives continuously failing). How does anyone manage all their stuff?!?
Thank you in advance, for any help you can offer.

Just a slight correction to start, you're not running iOS 7. You're running a version of OS X, iOS is for mobile devices like iPhones and iPads. To find out which version OS OS X you're running click the Apple menu at the top left and select About This Mac.
This http://pondini.org/OSX/LionStorage.html should help you understand "Other".

Boot delayed in Windows 7 (HPE-515t)... how do I find the culprit?

I have an HP HPE-515t running Windows 7/64bit. When I boot the box, it can take 30 minutes before it is ready to use.
I get the HPO logo and then the Windows logo. The the desktop starts to appear and hten it appears to stop, though I know it is doing something. Eventually, it comes back to me and Adobe Lightroom loads, but I don't think it is the problem.
How do I see exactly what is loading and what is it waiting for? I tried the System Log, but didn't see anything that would help (of course I could just be missing it).
thanks!

Hello psimon1210
Are you still having a slow boot problem? If so one of the best ways to isolate the problem would be to disable all startup applications and reboot. If the startup is much quicker you can then proceed to re-enable individual startup item until you find the boot up is slow again.
The first article shows you how to open the msconfig utility. On the startup tab, press Disable All.
How to Disable Windows Startup Programs
Below is a good article from Microsoft for optimizing Windows 7 performance.
Optimize Windows 7 for better performance
Don't forgot to say thanks by giving "Kudos" to those that help solve your problems.
When a solution is found please mark the post that solves your issue.

Spinning wheel in finder- The culprit seems to be?

Well. I tried all the fixes and got no where.
I noticed I could not eject my Lacie external hard drives
2 hooked up, one to the other and then to my G5
I shut them all down and disconnected them and the spinning
wheel in the finder has stopped being a problem with all files.
Any ideas why this happened and how to avoid it or fix it when
connecting them again. I ran disk warrior on both. One had a single problem and the other had at least 4 problems it stated was repaired.
Thanks again for your help

Hi Viking,
You've identified your problem -- catalog errors on the external drives that left the Finder confused. You may have fixed it too: Have you remounted the external volumes successfully after the repair? If not, try it.
John

Screen going disco - Finder the culprit?

Most things seem to work although it's hard to check them out.
Finder keeps giving me a dialog box stating "The last time you opened Finder, it unexpectedly quit reopening windows. Do you want to try to reopen it's windows again? If you choose not to reopen windows, you may have to open and position the windows yourself."
My choices are "Don't reopen" and "Reopen" Neither are responsive but the message flashes over and over again and will not stop. Just before it does, all the desktop icons flash on and off.
I tried to use Maps full screen. It put it on a new desktop (four finger scroll to the right like Messages). Whenever the Finder message flashes it returns me to the main desktop.
The message and the icons flash about every 5 seconds.
Fortunately everything else seems to be working and the message flashes behind applications like Safari and Calendar, but it's hard to check some of them.
Tried to right click to open the picture I screenprinted of the message and before the list can populate, the message closes the menu.
I've rebooted several times to no avail.
HELP!

Update - Completely trashed my desktop, claims the hard drive is bad. This is so MICROSOFT!!!

Converted 1140 AP can't join the WLC 5508

Hello! Please, help me to sort my problem out.
We have bought autonomous APs   AIR-AP1141N-E-K9 and converted them to the lightweight mode, but they cannot join the WLC 5508. The errors are below. There were NO problems with the LAPs that were bought before, together with the WLC.
AP's IP: 172.22.90.27   IOS version 12.4
WLC's IP: 172.22.90.20   IOS version 6.0.188.0
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This Discussion has been converted into document:- https://supportforums.cisco.com/docs/DOC-23054
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
logs from the AP:
Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)
*Oct 13 21:37:06.044: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Oct 13 21:37:06.045: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Oct 13 21:37:06.046: bsnInitRcbSlot: slot 1 has NO radio
*Oct 13 21:37:06.056: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to a
dministratively down
*Oct 13 21:37:06.066: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
eset
*Oct 13 21:37:06.098: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Oct 13 21:37:15.060: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLL
ER
*Oct 13 21:37:24.060: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL
LER
*Oct 13 21:37:34.060: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 13 21:38:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 172.22.90.20 peer_port: 5246
*Oct 13 21:38:34.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Oct 13 21:38:34.822: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
peer_ip: 172.22.90.20 peer_port: 5246
*Oct 13 21:38:34.823: %CAPWAP-5-SENDJOIN: sending Join Request to 172.22.90.20
*Oct 13 21:38:34.823: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Contr
ol Message from 172.22.90.20
*Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
*Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Failed to handle capwap control messag
e from controller
*Oct 13 21:38:39.823: %CAPWAP-5-SENDJOIN: sending Join Request to 172.22.90.20
*Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Contr
ol Message from 172.22.90.20
*Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
*Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Failed to handle capwap control messag
e from controller
*Oct 13 21:38:39.824: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap p
acket from 172.22.90.20
*Oct 13 21:39:33.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
72.22.90.20:5246
*Oct 13 21:39:34.000: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 13 21:38:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 172.22.90.20 peer_port: 5246
*Oct 13 21:38:34.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Oct 13 21:38:34.001: %DTLS-5-PEER_DISCONNECT: Peer 172.22.90.20 has closed conn
ection.
*Oct 13 21:38:34.001: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
72.22.90.20:5246
*Oct 13 21:38:34.001: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination
*Oct 13 21:38:34.125: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
not established.
logs from the WLC:
debug capwap events enable
*Dec 21 15:02:06.244: 68:bc:0c:63:3d:a0 DTLS keys for Control Plane deleted successfully for AP 172.22.90.27
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 DTLS connection closed event receivedserver (172:22:90:20/5246) client (172:22:90:27/21077)
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Entry exists for AP (172:22:90:27/21077)
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 apfSpamProcessStateChangeInSpamContext: Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 apfSpamProcessStateChangeInSpamContext: Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 1
*Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 1
Ble
*Dec 21 15:04:03.194: 68:bc:0c:63:3d:a0 capwap_ac_platform.c:1223 - Operation State 0 ===> 4
*Dec 21 15:04:03.194: 68:bc:0c:63:3d:a0 Register LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
*Dec 21 15:05:36.253: 68:bc:0c:63:3d:a0 Join Version: = 100711424
*Dec 21 15:05:36.253: 68:bc:0c:63:3d:a0 Join resp: CAPWAP Maximum Msg element len = 93
debug capwap errors enable
*Dec 21 16:16:51.879: 68:bc:0c:63:3d:a0 DTLS connection was closed
*Dec 21 16:17:09.940: 68:bc:0c:63:3d:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 12, joined Aps =5
debug capwap detail enable
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 CAPWAP Control Msg Received from 172.22.90.27:21078
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 packet received of length 281 from 172.22.90.27:21078
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Msg Type = 3 Capwap state = 5
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: Result Code message element len = 8
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 1. 47 0
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 2. 232 3
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 3. 6 0
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 4. 12 0
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: AC Descriptor message element len = 48
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 acName = Wi-Fi_Controller
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: AC Name message element len = 68
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: WTP Radio Information message element len = 77
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: CAPWAP Control IPV4 Address len = 87
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Sending encrypted packet to AP 172:22:90:27 (21078)
*Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Releasing WTP
*Dec 21 16:24:12.212: 68:bc:0c:63:3d:a0 CAPWAP Control Msg Received from 172.22.90.27:21077
*Dec 21 16:24:12.212: 68:bc:0c:63:3d:a0 DTLS connection 0x167c8b20 closed by controller
*Dec 21 16:24:12.212: DTL Deleting AP 9 - 0.0.0.0
*Dec 21 16:24:12.214: CAPWAP DTLS connection closed msg
*Dec 21 16:24:12.216: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'mfpSendEventReport+168' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.216: Received SPAM_MFP_RADIO_DOWN message
*Dec 21 16:24:12.218: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'l2roamInit+560' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.220: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamCallbackInSpamContext+1224' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.222: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamSendBlackListTable+376' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.224: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'rrmIappSendChdPacket+2320' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.226: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'asTrackInitTask+19360' for AP 68:bc:0c:63:3d:a0(0)
*Dec 21 16:24:12.228: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'mfpSendEventReport+168' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.228: Received SPAM_MFP_RADIO_DOWN message
*Dec 21 16:24:12.230: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'l2roamInit+560' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.232: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamCallbackInSpamContext+1224' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.234: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamSendBlackListTable+376' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.236: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'rrmIappSendChdPacket+2320' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.238: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'asTrackInitTask+19360' for AP 68:bc:0c:63:3d:a0(1)
*Dec 21 16:24:12.238: 68:bc:0c:63:3d:a0 Deleting and removing AP 68:bc:0c:63:3d:a0 from fast path
P.S. The time is set to the WLC with the NTP
P.P.S. Don't lookup at the time the logs were made - they were made not during the same day/time

I have solved this as soon as published my problem!!!
the answer is published here:
https://supportforums.cisco.com/thread/2004491
especially in the post of Matthew Fowler
Hi,
Please take a look at CSCte01087.
I see that your WLC is 10.0.13.5 and your AP is 10.0.13.28/24 so they are on the same subnet. I also see your AP MAC address does not begin with 00. This is why I believe it is relevant.
Please try the workaround or open a TAC case if you need a fix.
-Matt
Symptom:
An access point running 6.0.188.0 code may be unable to join a WLC5508.
Messages similar to the following will be seen on the AP.
   %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
   %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message
Conditions:
At least one of the following conditions pertains:
- The high order byte of the AP's MAC address is nonzero, and the AP is in
the same subnet as the WLC5508's management (or AP manager) interface
- The WLC's management (or AP manager) interface's default gateway's
MAC address' high order byte is nonzero.
Workaround:
If the MAC address of the WLC's default gateway does not begin with 00,
and if all of the APs' MAC addresses begin with 00, then: you can put
the APs into the same subnet as the WLC's management (or AP manager)
interface.
In the general case, for the situation where the WLC's default gateway's
MAC does not begin with 00, you can address this by changing it to begin
with 00. Some methods for doing this include:
-- use the "mac-address" command on the gateway, to set a MAC address
that begins with 00
-- then enable HSRP on the gateway (standby ip ww.xx.yy.zz) and use this
IP as the WLC's gateway.
For the case where the APs' MAC addresses do not begin with 00, then make
sure that they are *not* in the same subnet as the WLC's management
(AP manager) interface, but are behind a router.
Another workaround is to downgrade to 6.0.182.0. However, after
downgrading the WLC to 6.0.182.0, any APs that have 6.0.188.0 IOS
(i.e. 12.4(21a)JA2) still installed on them will be unable to join.
Therefore, after downgrading the WLC, the APs will need to have a
pre-12.4(21a)JA2 rcvk9w8 or k9w8 image installed on them.
different vlan!!!! yes! thank you Matthew Fowler sooooo much!!!!

WLC 5508 and ACS server

Hi,
Apologies if this has been answered before. I did a search, but unable to find anythimg.
What I would like to do is be able to have a WLC 5508 as the local RADIUS DB and authenticator, but then be able to have an ACS server in a central location as a backup and then replicate between them.
In other words set up groups for my remote sites in the central ACS server, which then replicates only the correct group to the remote sites. This allows less adminstrative overhead, as we just update the central one.
Is this possible and how would I configure the WLC to do this ?
Thanks

Hi,
if I understood your request, you want to replicate user information between an ACS and a WLC right ?
That's impossible.
ACS can only replicate with other ACS running the same version. No other ways of synchronization exists.
Regards,
Nicolas
===
Don't forget to rate answers that you find useful

Safari 6.0.4 "broke" Share button - also Mail can no longer find the application (installed via Map App store)

Since installing the 6.0.4 Safari update via the Mac App store, I have a host of problems:
1. Mail can no longer find "an associated app" when I click on a url in a mail message
2. The Share button (extension) in the Safari toolbar no longer works
3. Any attempt to open a new url results in a new safari window being opened although in my preferences I have "open new windows in tabs" selected
4. If I click on a tab that was previously open I am continually asked to refresh the window
5. I have had about a half dozen "Safari not responding" events since the upgrade, forcing me to Force Quit - generally when I'm trying to use one of the extensions or returning to a prebiously opened tab
6. Safari is intermittently unresponsive to mouse clicks -functionality can only be restored by refreshing the page
7. Safari can no longer find my passwords for some extensions (e.g. Buffer)
8. Safari is EXTREMELY slow loading pages - stalls out a few moments after entering url (or switching back to that tab) - sometimes for as long as 2 or 3 minutes
All the Safari extensions I have were eeither pre-installed or from Apple's Safari extensions page.
The install also corrupted my iCloud (AppleID) password, but thiswas easily fixed in Keychain.
Anyone have a fix or know of any software conflicts that could be responsible?
OSX 10.8.3
Safari 6.0.4

From the Safari menu bar, select
Safari ▹ Preferences ▹ Extensions
Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then uninstall them one or a few at a time until you find the culprit.
If you wish, you may be able to salvage the malfunctioning extension by reinstalling it. That will revert its settings to the defaults.

"Cannot find the Macromedia Flash"

I have requested help with constant pop-up error messages
stating merely "Cannot find the Macromedia Flash" ever since
downloading the latest Adobe Flash player. I received zero replies!
I now cannot even find my post but have found that someone else had
posted the exact same problem back in August of 2006, which also
received zero replies. I cannot believe no one here has a clue or
that I and this other person are the only two people to have
experienced this problem. Since this message pops up at least a
dozen or more times a day with no clue as to which possible
application is producing it, I thought I will post this request for
help as many times as I can until someone is annoyed enough to at
least point me in the direction of finding the culprit and
eliminating this message and stop the constant posts!

when do you get this message?

WLC 5508 7.3.101.0

Hi,
I recently installed 2 wlc 5508 with the latest software 7.3.101.0. There is an issue I can not resolve. I am not able to activate the Internal DHPC Server. The following message appears: "Error in setting dhcp scop leasetime". Does anybody know how to fix this ?
Vincent

Hi Scott,
When trying to create a new one. It looks like a bug. I tried different lease times but it will always show in a messages box
"Error in setting dhcp scope leasetime"
O, I forgot to tell that both wlc's are configured as HA and running in redundancy mode. Everthing seems to work well and the failover is doing fine except DHCP is not working.

WLC 5508 authorization issue

Hello,
I have an issue with two wlc 5508 in the same mobility group. We use TACACS to authenticate admins, with maximum privileges.
When I want to configure cleanair, or some security functions (such as ACL, or password policies), I have an error message saying that my privileges are not enough.
When I use local account, it works well.
At the begining, I thought it was a TACACS issue, but I have the same problem with WCS and SNMP. Cleanair doesn't appears in config menu, and I have an error message for security function.
Do you have any idea ?
Thanks for your help.
FW : 7.0.116.0

Show sysinfo results :
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.0.116.0
Bootloader Version............................... 1.0.1
Field Recovery Image Version..................... 6.0.182.0
Firmware Version................................. FPGA 1.3, Env 1.6, USB console 1.27
Build Type....................................... DATA + WPS

One WLC 5508, Multiple Sites/Networks

So I'm trying to think this design out in my head. Here is what I have:
Corp Office with a WLC 5508 configured with a management port and a guest WLAN port for guest wireless etc to the corp Layer 3 switch in a wireless VLAN, using 802.1q trunk of course. The WLC is configured to be a DHCP server for the Guest WLAN.
(Side note: the sites are connected using WAN routers at each location configured with bundled T3's and all routes are setup and each network successfully traverses to the other)
First phase will be to install 30 APs. 5 at the corporate office and 25 and two other sites. I'm using a class A network but have subnetted the networks so to speak to make each site have multiple VLANs using class C networks. I want to be able to implement the WLC 5508 at the corporate office and manage the APs centrally at all locations. The APs are already configured for lightweight mode and I have successfully configured 5 of them and connected.
My question is if I install the other 25 APs at the other 2 offsite locations and connect them to the network, will it automatically contact the WLC and get a DHCP address from the Corporate WLAN DHCP even though it is at another site? Am I overlooking a step or configuration method for this type of implementation?
Thanks for all contributions!

Ok so I have configured my environment as suggested. I can see the new IP Address lease to the AP at my remote site on
the DHCP Server (Windows Server DHCP at the remote site). I can ping that IP from the Central office to the remote site however the WIreless Controller is not associating the AP at all. Although I can ping the AP from the WLC. I checked the logs and I dont see any association attempt from that IP or MACt. So here is what I have:
Central Site-
     WLC 5508 With Internal DHCP for local APs
     APs associating successfully
Remote Site
     Windows DHCP with Option 43 Configured per Cisco AP Option 43 Whitepaper
     AP 1142-Light-Weight attached to switchport (Wireless Vlan configured) and reachable via ping through all of network.
     AP obtained IP from Windows DHCP from Wireless Scope I configured successfully.
So it doesn't seem the CAPWAP tunnel was built successfully. I do have an ASA 5520 in the environment but all traffic to remote sites is wide open as I do not block any ports so CAPWAP traffic should flow well.
Mission a step?
Dee

Problem uploading SSL certificat on a WLC 5508

Hello,
I'm trying to upload a SSL-certificate (RSA:2048) on a WLC 5508 via the "Management->HTTP-HTTPS" - Tab and get the following problem :
*TransferTask: Jul 18 16:36:14.487: %UPDATE-3-CERT_INST_FAIL: updcode.c:1276 Failed to install Webauth certificate. rc = 1
*TransferTask: Jul 18 16:36:14.487: %SSHPM-3-KEYED_PEM_DECODE_FAILED: sshpmcert.c:4028 Cannot PEM decode private key
I've generated it using the following commands:
# openssl pkcs12 -export -in my.crt -inkey my.key -certfile my.ca-bundle -out CA.pfx
# openssl pkcs12 -in CA.pfx -nodes -out CA.pem
But it doesn't work...
Does anyone have an idea?
Best regards,
Eric

Hello Eric,
I'm facing the same problem, when trying to upload a chained SSL certificate (2048bits) to the wlc version 7.0.116.0
Did you use an unchained certificate and what size is your cert?
According to a Cisco document, for controllers version 5.1.151.0 and later, only unchained certificates are supported for the management certificate.
I'm just wondering, if this limitation still applies to the newer versions.
Regards,
Oliver

WLC 5508 Finding the culprit

Similar Messages

Maybe you are looking for