WLC 5508 - Set SNMP traps differently per AP

Hey All,
We have a controller with multiple remote AP's connected to it. A couple of the AP's are at branch offices connected to very low quality DSL connections (which is all that is available) and because of this those AP's cut SNMP traps constantly. For example last month one AP cut about 50 traps because the DSL connection kept cutting out...usually for only a few seconds/minutes.
I looked though and couldnt find a way to set the traps per AP...only globally. Is there a way to change the threshold per AP so for example it will only cut a trap if the AP is seen down for a 24 hour period as opposed to everytime it only goes down for a few minutes?
Thanks!

Similar Messages

WLC 5508 Most Recent Traps Duplications

Hi,
I have recently noticed that in my WLC traps I keep finding lots of Mac addresses that have many hits on joining but it's the same MAC ADDRESS. Example Mac addresss'08:11:96:e4:1a:60
4
Wed Mar 27 16:05:56 2013
Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
5
Wed Mar 27 16:05:45 2013
Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
7
Wed Mar 27 16:04:53 2013
Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
12
Wed Mar 27 16:02:51 2013
Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
This has like 20 hits in the traps section and when I check my ISE this is also reflected on the authentication aspect. This is starting to occur with many different client laptops, why does it keep re-authenticatiing into the profile joined?
Is there a Time to Live TTL setting I can set so it doesn't poll so often? The users aren't doing anything this is all occuring automcatically, I think it's the WLC 5508 controller not the ISE.
Any ideas?
Any information would be great.
Cheers
Eddy

Hi Eddy,
I am not an ISE guy so not sure about ISE config. But I would say couldn't it be roaming that increases the hit count?
Whenever a client roams it authenticates again with the radius server. There are key caching mechanisms to bypass this process and makes roaming faster.
You may read this: https://supportforums.cisco.com/thread/2065138
Now, if for some reason the WLC sends a request to the ISE for every roaming process then that probably explains what you see
HTH
Amjad
Rating useful replies is more useful than saying "Thank you"

Can a WLC have multiple SNMP Trap Receivers with the same cummunity string?

My Monitoring team want me to send traps to three different trap collectors with the same SNMP Community string.
I have 2106's, 2504, 4400's, 5500's, 7510 all running either version 6 or 7.
Is this possible on a Wireless controller? If so, how?

Read this from my friends blog ..
http://mrncciew.com/2013/02/14/configuring-snmp-on-wlc/
"Also you can configure SNMP trap receiver where WLC can send its snmp trap messages. Community Name means SNMP trap receiver name & that does not have any significance like snmp community value."
It doesnt appear to have the same significants .. But I havent tested it
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

WLC 5508 and SNMP monitoring

Dear all,
I'm a little bit confused about this piece of hardware.
I wonder if there is possibility of monitoring power supply and fans status (like on the other Cisco devices)?
This info is usually located in ENV-MIB, but seems to me, there is no support of this MIB. Even temperature of box is located in some weird OID.
Does anyone know, where to find above mentioned?
For start, power supply (to see through snmp, something like this via CLI):
Power Supply 1................................... Present, OK
Thanks for ideas.
Pavel

Hi Pavel:
Please know that the wireless LAN controllers were developed by Airespace and prior to their acquisition by Cisco in 2005, they had already created their own SNMP MIBs (the OIDs start .1.3.6.1.4.1.14179). Since the acquisition, several former Airespace objects have been obsoleted and replaced by CISCO-LWAPP-* or other Cisco objects, yet some former Airespace objects remain in use, depending on the software train in use on the wireless LAN controller. There are wireless MIBs for each software train in the Software Center.
All the maintenance releases (i.e. 7.0.240.0, 7.0.230.0, 7.0.220.0, 7.0.172.0, etc.) within a given train (i.e. 7.0.something.something, 6.0.something.something, 5.2.something.something) should have the same objects since maintenance releases are only supposed to contain bug fixes, while trains introduce new features and/or functionality--which, in turn, would require new SNMP objects.
Try walking agentSwitchInfo (.1.3.6.1.4.1.14179.1.1.3):
nms-jasmine:~# snmpwalk 172.18.254.29 agentSwitchInfoAIRESPACE-SWITCHING-MIB::agentSwitchInfoLwappTransportMode.0 = INTEGER: layer3(2)AIRESPACE-SWITCHING-MIB::agentSwitchInfoPowerSupply1Present.0 = INTEGER: false(0)AIRESPACE-SWITCHING-MIB::agentSwitchInfoPowerSupply1Operational.0 = INTEGER: false(0)AIRESPACE-SWITCHING-MIB::agentSwitchInfoPowerSupply2Present.0 = INTEGER: false(0)AIRESPACE-SWITCHING-MIB::agentSwitchInfoPowerSupply2Operational.0 = INTEGER: false(0)nms-jasmine:~#

Re:SNMP Trap in 10.3

Hello
We are migrating Applications for 8.1 to 10.3
So we wanted to set SNMP Traps in the 10.3 at the domain Level
We had setup the traps in 10.3 and restarted but we are not able to recevie any traps
Please let me know if you have any suggestions
Regards
-nar-

When you start the managed server, you should see a message such as the following:
<Feb 18, 2010 12:39:04 AM EST> <Notice> <SNMP> <BEA-320931> <The SNMP trap version is 2>
Are you using a port > 1000 on your Server agent? 161 is probably just your port on the Domain agent. There are 2 ports to be careful of, SNMP UDP Port and Master AgentX Port; both on the General tab for the server agent.
Here's an extract of the SNMP config, showing the "Server SNMP Agents" and a single String Monitor for the server status
<snmp-agent-deployment>
<name>Name_of_server_SNMPAgent</name>
<enabled>true</enabled>
<send-automatic-traps-enabled>true</send-automatic-traps-enabled>
<snmp-port>1161</snmp-port>
<snmp-trap-version>2</snmp-trap-version>
<community-prefix>public</community-prefix>
<snmp-trap-destination>
<name>some name</name>
<host>xxx.xxx.xxx.xxx</host>
<port>162</port>
<community>public</community>
<security-level>noAuthNoPriv</security-level>
</snmp-trap-destination>
<snmp-string-monitor>
<name>ServerStatus</name>
<enabled-server>Server1,Server2</enabled-server>
<monitored-m-bean-type>ServerRuntime</monitored-m-bean-type>
<monitored-m-bean-name></monitored-m-bean-name>
<monitored-attribute-name>HealthState</monitored-attribute-name>
<polling-interval>10</polling-interval>
<string-to-compare>OK</string-to-compare>
<notify-differ>true</notify-differ>
<notify-match>false</notify-match>
</snmp-string-monitor>
<community-based-access-enabled>true</community-based-access-enabled>
<snmp-engine-id>Name_of_server_SNMPAgent</snmp-engine-id>
<authentication-protocol>noAuth</authentication-protocol>
<privacy-protocol>noPriv</privacy-protocol>
<inform-retry-interval>10000</inform-retry-interval>
<max-inform-retry-count>1</max-inform-retry-count>
<localized-key-cache-invalidation-interval>3600000</localized-key-cache-invalidation-interval>
<snmp-access-for-user-m-beans-enabled>false</snmp-access-for-user-m-beans-enabled>
<inform-enabled>false</inform-enabled>
<master-agent-x-port>1705</master-agent-x-port>
<target>AdminServer,Cluster1,Cluster2</target>
</snmp-agent-deployment>

Cisco WLC 5508 not sending SNMP Traps

Hello Everyone.
I'm having a weird error on our WLC environment. We have an HA with two cisco WLC 5508 and i cannot get SNMP Traps working on a Windows PC running Kiwi Syslog server (free ed.).
I can receive correctly Syslog messages, but not traps.
I Tried also to send SNMP Traps from WLC to a different PC using Linux with snmptrapd and it works fine.
I tried then to send from my Linux box a snmp trap to my Windows PC, and it works fine, but i still cannot receive anything from WLC.
Using Wireshark to detect traffic, i cannot see any packet on udp port 162.
I cannot figure out any problem with my scenario, but i can see the following errors on syslog:
*rmgrTrasport: Mar 30 16:08:22.602: #RMGR-3-INVALID_PING_RESPONSE: rmgr_utils.c:270 Ping response from <my_windows_PC> is invalid. Ip address do not match.
My WLC Version is 7.6.130.0
Thank you for your support.

I have gone through your query and found the following fruitful links ,please let me know if it helps and mark it correct answer if it is.
https://www.manageengine.com/network-monitoring/help/userguide/processing_traps.html
https://rscciew.wordpress.com/2014/10/12/snmp-configuration-on-wlc/
Thanks :)

SNMP TRAP ON Secondary WLC 5508

Hi I'm Louis,
I work on 2 WLC 5508 with version 7.4 and Prime Infrastructure 1.3
We have activate AP SSO to work with a primary and secondary controller.
We have added the controller to Prime infrastructure and activated SNMP.
We receive correctly the alarms on Prime.
But when we work on Primary WLC, and the secondary crash we haven't got information about that. No SNMP received.
That is normal ?
Thx for your reply
Regards

I find this, in Monitoring and Troubleshooting the Redundancy States
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/1.2/user/guide/chgdevconfig.html
On my primary controller, in SNMP => Trap Log , I can see :
RF failure notification ErrorType: 34 Reason :Lost Peer, Moving to Active-No-Peer State! => When I unplug RP link
RF progress notification unitId: -1407319963 peerUnitId :14 unitState: -1407319863 peerUnitState :5
RF progress notification unitId: -1407319963 peerUnitId :14 unitState: -1407319863 peerUnitState :9 => When I plug the RP link.
So I can see the trap on my controller but there is nothing in Prime ...

WLC 5508 - SNMP traps

OK, so I'm at wit's end with this one now.
I configured my SNMP items on the controller and let it roll.
I started to watch my SNMP monitor (SNMPc Management Console by CastleRock) and saw some life from my controller. Yay, woot and dance.
I then started narrowing down the SNMP trap controls because I was getting more than what I want/need currently. I really just want to know if an AP falls off the network or if the controller's link drops.
I continued to get alerts that were just not desireable at this point.
The traps were similar to this:
ciscoLwappDot11ClientAssocNacAlert [1] cldcClientMacAddress.0.36.214.60.32.32 (DisplayString): 00:24:d6:3c:20:20 [2] cldcClientWlanProfileName.0.36.214.60.32.32 (DisplayString): Wireless [3] cldcClientIPAddress.0.36.214.60.32.32 (IpAddress): 172.31.19.101 [4] cldcApMacAddress.0.36.214.60.32.32 (DisplayString): 00:08:30:39:6c:80 [5] cldcClientQuarantineVLAN.0.36.214.60.32.32 (Integer): 0 [6] cldcClientAccessVLAN.0.36.214.60.32.32 (Integer): 119
I couldn't find the culprit, so I turned off (unchecked) all trap controls in the web interface and then verified in the CLI with "show trapflags".
I continue to get these same messages.
Any ideas?
Model: AIR-CT5508-K9
Version: 7.2.103.0

I went through the entire log (about 2000 lines) and almost all are this same type:
(Cisco Controller) >show traplog
Number of Traps Since Last Reset ............ 323738
Number of Traps Since Log Last Displayed .... 0
Log System Time              Trap
0 Mon Mar 11 08:21:49 2013 Client with MAC address 00:24:d6:3c:20:20 has joi
                             ned profile SC Wireless
1 Mon Mar 11 08:20:16 2013 Client with MAC address 00:24:d6:3c:20:20 has joi
                             ned profile SC Wireless
2 Mon Mar 11 08:19:09 2013 Client with MAC address 00:24:d6:3c:20:20 has joi
                             ned profile SC Wireless
3 Mon Mar 11 08:10:21 2013 Client with MAC address cc:af:78:44:7d:2b has joi
                             ned profile SC Wireless
4 Mon Mar 11 08:10:18 2013 Client with MAC address cc:af:78:44:7d:2b has joi
                             ned profile SC Wireless
Keep in mind that I have all trap controls disabled.
(Cisco Controller) >show trapflags
Authentication Flag.............................. Disable
Link Up/Down Flag................................ Disable
Multiple Users Flag.............................. Disable
configsave....................................... Disabled
strong-pwd check................................. Disabled
Client Related Traps
        802.11 Disassociation........................... Disabled
        802.11 Association.............................. Disabled
        802.11 Deauthenticate........................... Disabled
        802.11 Authenticate Failure..................... Disabled
        802.11 Association Failure...................... Disabled
        Excluded........................................ Disabled
        Authentication.................................. Disabled
Cisco AP
        AuthFailure..................................... Disabled
        Register........................................ Disabled
        InterfaceUp..................................... Disabled
802.11 Security related traps
        WEP/WPA Decrypt Error........................... Disabled
        IDS Signature Attack............................ Disable
AAA
        auth............................................ Disabled
        servers......................................... Disabled
rogueap......................................... Disabled
Auto-RF Profiles
        Load............................................ Disabled
        Noise........................................... Disabled
        Interference.................................... Disabled
        Coverage........................................ Disabled
Auto-RF Thresholds
        tx-power........................................ Disabled
        channel......................................... Disabled
Mesh
        auth failure.................................... Disabled
        child excluded parent........................... Disabled
        parent change................................... Disabled
        child moved..................................... Disabled
        excessive parent change......................... Disabled
        onset SNR....................................... Disabled
        abate SNR....................................... Disabled
        console login................................... Disabled
        excessive association........................... Disabled
        default bridge group name....................... Disabled
        excessive hop count............................. Disabled
        excessive children.............................. Disabled
        sec backhaul change............................. Disabled
Hopefully I'm just missing something stupid, but it appears all flags are off.
Message was edited by: Casey Hearn
Added "Show TrapFlags" details.

WLC 5508 version 7.3.112.0 : SNMP No Such Instance

Dear all,
I've set SNMP community v2c read-only on the controller and then trying to parse a specific OID with a MIB Tool with that community
but the following OID always returns "No such instance".
Controller Model : 5508 version 7.3.112.0
Object
clsSysApConnectCount
OID
1.3.6.1.4.1.9.9.618.1.8.4
Type
Unsigned32
Permission
read-only
Status
current
MIB
CISCO-LWAPP-SYS-MIB ; - View Supporting Images
Description
"This object specifies the count of AP's that are
connected with WLC"
Any solutions ?
Thanks

Hi
Only Cisco TAC can analysis this & tells you exact reason of this reload. It looks like a software related crash..
I would suggest to move onto a later code (like 7.4.121.0) rather staying in 7.3 code when you get the new hardware.
HTH
Rasika
**** Pls rate all useful responses ****

WLC 5508- how to setting up with Web auth with 2 profile

Hi Guys,
I wanted to control the 2 different profile to access internet with Cisco default landing page is that possible??
Example:
When connnected the SSID will redirect to Cisco landing pages
Cisco landing pages will differentiate there is member or guess with the password key in.
Member can access internet for 30 minute
guess only can access internet for 15 minute

Just some notes on WebAuth in the WLC. The timeout is specified per SSID so there would be no way to set a timeout unless you use a radius server and send a radius attribute to the WLC to set the session timeout.
So we really need to know if you have a radius server, is the radius server tied to Active Directory or is the plan just using the WLC for everything.
Sent from Cisco Technical Support iPhone App

SNMP web authenticated users wlc 5508

Hello everyone,
I am using web authentication with my Wlc 5508 and I would like to check all users currently connected (ip, login used, MAC address, ...) with SNMP.
I am using an external web server and my client are authenticated with ldap.
I know I can receive these information with traps, but I would like to create a short program which will check all users when I click on a button.
Can anyone help me ?
Thanks a lot for your answers.

Hello Julien,
Thank you for the info. +5 for solving your own problem.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

WLC 5508 , AP client dhcp address different from WLAN interface VLAN subnet?

Hope the title makes sense, here's my situation: I have multiple businesses on 1 WLC 5508, there's a LAG to my core switch with seperate interfaces for each, broken up by vlans.
My question is: if i have a WLAN setup to use interface "Company A" which is vlan 10 with an ip of 10.0.1.5 which then points to 10.0.1.10 for dhcp.
Can the WLAN client connecting to the Company A WLAN use an IP in a different IP range?(192.168.1.10?) can the wlc route? from the perspective of the DHCP server where doers the request come from? (10.0.1.5?)
Can the DHCP server 10.0.10.10 on vlan 10 respond back with and ip on a different subnet to assign to the client to use and still be fully fonctioning? would the default gateway for the client need to be 10.0.1.5? So the clients ip would be 192.168.1.10 /24 with a gateway of 10.0.1.5 (ip adress fo vlan10 interface on WLC) And if multiple clients on the same subnet wanted to talk to each other woudl the WLC know how to route them to each other without passing through the default gateway?
Sorry if this is confusing I'm having a bit of a hard time explaining it in works, i can try and draw somethign up if it makes more sense.
thanks
Eric

I think if you want these clients to stick to a WLAN configured on a VLAN that has a different IP addressing you could configure your VLAN with the normal IP addressing then add on the SVI the 2nd IP_Class_default_gateway.
E.G.
Vlan 10
interface vlan 10
ip address 10.0.10.1 255.255.255.0
ip address 192.168.1.1 255.255.255.0 secondary
Clients that receive IP address from 192.168.1.0/24 network will be able to reach 192.168.1.1 and all traffic will pass right.

WLC 5508 and Multiple DHCP servers in different sites?

Hi
I work for health authority in our region and we just purchased a Cisco wlc 5508 controller along with 25 3500 AP's. We have multiple sites with different IP subnets in each, all connected by a frame relay (owned by ISP). Each site has its own DHCP server. I have the controller in our main site. So when I take an AP to a remote site, the Ap gets an DHCP address from local DHCP server (which is great) and contacts controller and joins controller. Everything is good. BUT, when a client joins at the remote site, it gets an address from a previous site which will not work because the client is now on a different subnet. We dont use Vlans as they dont transvers the frame relay. I need those clients to obtain DHCP from the local DHCP server from the site they are on. Is that possible??
I have updated the controller to latest version as well.
Thanks
Bryan Yaciuk, CCNA
Parkland Regional Health Authority

We call this as HREAP LOCAL SWITCHING!! but here is the catch.. everytime the AP joins the new site.. we need to configure the VLAN mapping and this wil do it for you!! Here is the link which will resolve ur issue..
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc3b8.shtml#ll
Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
Regards
Surendra

Cisco WLC 5508 assigning different SSID to few APs

Hello Everyone,
I have a WLC 5508 runing 8.0
Presently one SSID is assigned to all th APs registered with my WLC.
I want a different SSID to 2 of APs. Can anyone tell me how to do this?

Depend on WLAN ID number as well.
1. if WLAN ID number is greater than 16, then those SSID not visible in "default ap-group" & only in the APs in particular AP Group.
2. if WLAN ID number is lower than 16 then, by default it will advertise in APs in "default ap-grop". So if you add that WLAN to particular AP Group, then that WLAN advertised by APs in both AP groups (default & specific AP group)
HTH
Rasika
**** Pls rate all useful responses ****

SNMP traps with WLC 4402

Currently using WLC 4402 with about a dozen WAPs. I would like to start logging some messages to troubleshoot some association issues. The syslog does not seem adequate for this the issues I am having. I noticed the default SNMP traps but is only holds 255 traps. I have tried to setup an SNMP server to get the traps but I get no data, only OID values. I was successful in getting the MIBs for the OIDs but still not all the data that I see on the brief traps screen.

Hi,
I have tried it with solarwinds and works fine for me. Talking about the traps. But they are too many.
The OID is : 1.3.6.1.4.1.14179.1.1.2.4.1.22
snmp info for polling:
MIB Value Type: Raw Value
Format: None
SNMP Get Type: Get Table
Polling Type: node
On WLC go to Managemnet (top TAB)
Right hand select > SNMP > Traps Control.
In this menu select what traps to need to be logged.
These traps will be shows on the oid polled.

WLC 5508 - Set SNMP traps differently per AP

Similar Messages

Maybe you are looking for