WLC 5508 - WebAuth Bundle tar error 256

Hi all,
I have a new fresh 5508 release 7.0.98.0
When I try to download (I mean upload to the controller) a customized Webauth bundle in .tar format I have the following message error in the syslog :
*TransferTask: Oct 29 12:56:08.894: %UPDATE-3-UNTAR_CMD_FAIL: updcode.c:2832 Error during untar of webauth bundle. Tar returned 256.
If someon could help me...
Thanks

Excellent find, Karl!
I'd just to clarify a bit for those who might not have completely understood this.  Note that Karl said all files and folders must have UID root and GID root.  Running chown root only changes the UID.  To change the GID, you must also run chgrp root .  The easiest way to go about this is to create a new directory, copy your current tar file to it and extract, chown and chgrp against ./*, then tar it back up.
su root     # alternatively, you can use sudo for chown and chgrp
mkdir weblogintmp
cp weblogin.tar weblogintmp/
cd weblogintmp
tar -xvf weblogin.tar
rm weblogin.tar
chown -R root ./*
chgrp -R root ./*
tar -cvf weblogin-new.tar ./*
## the tar file itself doesn't need to have UID and GID root, only the contents of it does.
Karl also pointed out that this must be done from a Unix/Linux-based operating system that a GID (group ID) literally named root.  In BSD-based systems (at least the ones I've worked with, including Mac OSX), the root-equivalent GID is named wheel.  The 5508 WLC with 7.0.98.0 will not accept this.
If you do all of this and it still gets rejected by the WLC, consider that there might actually be something else wrong with it.  There's a fantastic article in the Documents section of the Security and Network Management group which helped me figure out a couple issues I had in the past:
https://supportforums.cisco.com/docs/DOC-13954
Here's a snippet that pertains to not being able to transfer your webauth bundle to a WLC:
"There are some limitations with custom webauth that varies with versions  and bugs. The things to watch for are .tar file size (used to be 1Meg  maximum), also the number of files in the .tar as well as the filename  length of the files in there (something like 30 characters max for a  file)."

Similar Messages

  • Cisco WLC 5508 in HA mode error

    Hai ,
    I am Getting the below Error in Cisco WLC 5508, Version 7.4.100.0 in HAmode. The WLC contains Access Points having in local and Flex Connect Mode.
    RF failure notification ErrorType: 32 Reason :Error: Config Sync failed on Standby for the usmdb:HA_send_usmDbApfMsDelete,
    I sam a same bug in Cisco WLC 7.4.100.0 release notes similar to the error like
    RF failure notification ErrorType: 32 Reason :Error: Config Sync failed on Standby for the usmdb:HA_send_usmDbSpamSetRadSlotAntennaType.
    Any Ideas?

    HI Mohamed,
    its a open Caveats  in 7.4.100.0
    CSCud26632
    Symptom: The following SNMP trap appears on the controller when you change the channel width number to 40-MHz:
    RF failure notification ErrorType: 32 Reason :Error: Config Sync failed on Standby for the usmdb:HA_send_usmDbSpamSetRadSlotAntennaType.
    Conditions: Controller is in an HA pair. Join the 802.11n access point to the controller and change the channel width to 40-MHz and channel number to 157.
    Workaround: None
    http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn74.html
    Reagrds
    Please rate helpful posts

  • Wlc 5508 webauth subnet mask change issue

    Recenly l changed the network subnet for a particular wlc interface and scope and also an upstream router and for some reason it would only allow me to use a /24 Host mask as my plan was to go to a /22 mask to allow for over 1000 hosts within this scope.
    The Upstream Router which is a  ( RV042 ) had the following original config :
         192.168.1.1
         255.255.255.0
    I have noticed this device will not let me change the mask from a /24 to a /22 as you can only change from a pre-defined list of masks and you cannot manually add any either..
    New Config
         10.10.0.10
         255.255.255.0
    WLC 5508 Controller Interface
         Original Config
          192.168.1.25
         255.255.255.0
         192.168.1.1
         New Config
         10.10.0.25
         255.255.252.0
         Scope
         Range : 10.10.1.10 - 10.10.3.254
         Mask : 255.255.252.0
         Network : 10.0.0.0
         Router : 10.10.0.10
    When l reconfigure to this addressing the wireless clients connect and get the new dhcp scope details but following this the webauth screen doesn't appear not allowing them to connect meaning there is no routing of traffic / internet access.
    If l modify the above interface and scope masks back to a /24 - 255.255.255.0 the the wireless clients connect and webauth appears to prompt them to accept the terms and conditions and connect thus giving them internet access.
    It looks like an issue with the mask ? The main reason l am trying to change the subnet addressing is because the standard /24 mask is not providing enough dhcp addresses and we have had times were the scope has been exhausted due to the public connecting and disconnecting as the lease perod of 2 hours holds onto the address before expiring meaning there is not enough available addresses for people to connect.
    I would of thought that the upstream router ( RV042 ) even though it is only a /24 mask would still route the traffic coming from a WLC Controller interface with a /22 mask ?
    Hopefully someone can suggest a solution ?
    Thanks Simon

    Hey Scott just getting back to this issue..   If for instance l can modify the wlc interface and Scope to have a /22 mask ( 1022 Hosts ) and my upstream Router ( Cisco RV042 ) can only provide a /24 or higher mask then does that mean l am still limited to a range of 254 hosts ( /24 Mask ) ?  Would this mean l need to look into replacing my upstream Cisco RV042 VPN Router ?

  • WLC 5508 centrally switched client errors

    Hello,
    I am having trouble with a newly configured install.  Basically it seems that my centrally switched guest SSID is not functioning.  As you change AP groups, which should change the interface associated with the SSID and also the dhcp client address, the client is retaining the original dhcp address from whichever AP group they first associated with. 
    I also have a locally switch WPA2 SSID at each location which is working fine.  Clients are able to change dhcp address correctly as they move between AP groups.  It just doesn't seem to be working on the guest network, which is odd because it was working earlier in the install.  It has only started having issues yesteday afternoon. 
    It does not always coincide with the guest errors but I am generating these logging errors:
    *DHCP Socket Task: Aug 17 15:09:23.526: %SIM-3-DHCP_SERVER_NO_REPLY: sim_interface.c:1039 Failed to get DHCP response on interface 'may89-guest_vb_122'. Marking interface dirty.
    The interface above is assigned to the guest SSID in one of the AP group.  I assume this has something to do with it but I've been over my DHCP assignments on the core switch, local switch, controller, and dhcp server and can find no issue with the configuration.....Also the fact that it was working earlier this week.
    I also seem to be generating a high amount of:
    *dot1xMsgTask: Aug 17 14:46:22.844: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:456 Max EAPOL-key M1 retransmissions exceeded for client xx:xx:xx:xx:xx:xx
    I am not sure why as I am not using DOT1X at all.  The guest is a pass-thru and the WPA2 network is just WPA + WPA2 with TKIP and AES.  No DOT1X anywhere on the controller...

    I think I might know what to do.  Could I just create an interface group for each controller and place all of my individual guest interfaces within that group.  Then I could just assign that interface group to each of my AP groups so every AP group would have access to all of the guest interfaces on the controller.  I think the reason it is not currently working is because the AP group at my location is set to a specific interface and the ip addresses when I roam are from different interfaces not set for the AP group.  I am basically being blocked by the AP group/guest interface because my ip address belongs to the wrong interface. 
    I think an interface group would solve that problem.  The only other issue would what if I roam to an AP group on the other controller.  Could I just set up a mobility group and place both controllers in that group?  If they both have the UP status in the same mobility group would that allow inter-controller roaming?

  • WLC 5508 - Error When Uploading Webauth Bundle

    Currently have a WLC 5508 running 7.4.110.0.  I'm trying to upload (download) a webauth bundle to the controller from the web interface and am getting an error.  I've tried using FTP, SFTP and TFTP and get a different error with each.  When I started out with this, I was using a modified login.tar.  Thinking this was the problem, I switched to using the login.tar file included with the Web Authentication Bundle version 1.0.2 downloaded from the Cisco site.  This file fails with the errors below.  Does anyone have suggestions as to what I'm doing wrong?  Is this is a known bug in this version of the software?  Thanks!
    For FTP:
    The web interface shows: 
    % Error: Webauth Bundle file transfer failed - Unknown error - refer to log.   
    Log on the controller shows: 
    *TransferTask: May 28 13:51:12.942: #UPDATE-3-FTP_TRANSFER_FAIL: updcode.c:5631
    Error FTP file Transfer [ftp_get], <30>, Read-only file system.
    For SFTP:
    The web interface shows:
    % Error: Webauth Bundle file transfer failed - Unknown error - refer to log.
    Log on the controller shows: 
    *TransferTask: May 28 14:52:58.779: #UPDATE-3-SFTP_TRANSFER_FAIL: updcode.c:5869
     Error SFTP file Transfer [sftp_get], <11>, Resource temporarily unavailable.
    For TFTP:
    The web interface shows:
    % Error: Webauth Bundle file transfer failed - Unknown error - refer to log.
    Log on the controller shows: 
    *TransferTask: May 28 15:02:39.232: #UPDATE-3-FILE_OPEN_FAIL: updcode.c:4593 Fai
    led to open file webauth.tar.
    *sshpmReceiveTask: May 28 15:02:39.153: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:10
    87 Sema 0x2b32def8 time=11504 ulk=18587678 lk=18576174 Locker(sshpmReceiveTask s
    shpmrecv.c:1662 pc=0x10b07938) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1
    647 pc=0x10b079

    Hi,
    1. Did you used  PIcozip to compress your webauth bundle?
    2. Did you try only with one laptop , if yes then try to use other one.
    3. Just try to upload default webauth bundl from cisco to wlc and show the result to us.
    7.4.121.0 is very stable version.
    Regards

  • WLC 5508 - Error extracting webauth files.

    Hi all,
    i am getting an error during the Upload of Login page for WLC 5508 customized.
    After the upload is completed i receveid the error "Error extracting webauth files."
    I tried to create the file *.tar with different program (winrar, 7zip, gnu tar, etc)
    anyone know the solution for this problem?
    Thanks
    Marco

    TQVVM Marco, it helps and issue resolved. I was downloading a folder consists of (login.html+folder CSS) compressed .TAR but failed. Instead of putting in a folder and directly downloaded the compressed .TAR and it was extracted successfully.
    Thanks.

  • Cisco 5508 HA - Webauth Bundle for multiple SSID/multiple web pages

    Hi Guys,
    I have 2* cisco 5508 WLC in HA mode . Both are running IOS 7.5.102.0 . Everything is working perfectly fine.
    I need to Creat 3 differnet SSID and Creat 3 different login Pages for them . Each user from respective SSID will get specified login Page. like
    I have few questions :
    1) I have downloaded webauth bundle from cisco Support Site and in that itself so many files are there. So based on my scenario , in which folder do i need to copy my login and logo file.
    2) i have used Picozip to convert the file in .tar format but its giving me following error "
    % Error: Webauth Bundle file transfer failed - No reply from the TFTP serve" but i can ping my tftp server easliy.
    3) As Controllers are in HA mode , so once i am successful in uploading webauth bundle then it will be replicated on secondary controller or do i have to turn off SSO and upload in both one by one.
    Please help me out in this.
    Cheers

    Hello Sandeep,
    i have uploaded the tar which you have sent to me. When i supply my username and pwd, after that it keeps on going and not showing any end result. so it stays on same page and nothing happening after that.
    Are there any more radius ACL's to be defined ? 10.10.13.x is wireless client network , 192.168.10.21 is Radius Server , 192.168.10.215 is proxy server. Is there any other ACL need to be defined ??
                           Source                         Destination                 Source Port  Dest Port
    Index  Dir       IP Address/Netmask               IP Address/Netmask       Prot    Range       Range    DSCP  Action      Counter
         1 Any      10.10.13.0/255.255.255.0     192.168.10.21/255.255.255.255  Any     0-65535     0-65535  Any Permit           0
         2 Any   192.168.10.21/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit           0
         3 Out      10.10.13.0/255.255.255.0           1.1.1.1/255.255.255.255  Any     0-65535     0-65535  Any Permit           0
         4  In         1.1.1.1/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit           0
         5 Any      10.10.13.0/255.255.255.0    192.168.10.215/255.255.255.255  Any     0-65535     0-65535  Any Permit          98
         6 Any  192.168.10.215/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit          98
    DenyCounter : 12

  • Webauth page on WLC 5508

         Hi ,
    I need to download a login banner page on our WLC 5508 version 7.4.100.60  but i am getting error and the logs is showing the following :
    *TransferTask: Sep 11 11:05:04.248: #CLIWEB-3-BUFFER_TOO_LONG: cli_web_api.c:3240 Buffer for Login Banner too long (max = 1296 chars).
    My FTP is working fine since i have upgraded the version using it and the .tar file which i am trying to upload is 50K  can any body help on this please

    Mohammad,
    Typically, login banners are .txt files.  Please ensure the file that you are uploading is a .txt and not a .tar.
    If you are unsuccessful in uploading the file through the Web GUI, might I suggest that you try it through CLI?  Sometimes transfers just seem to work better through CLI.
    Just in case you have any questions on the CLI transfer, I have this link for your reference:
    www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mfw.html#wp1132285
    This is the Configuration Guide for the WLC.
    Please let me know if this fixes your issue.  If it does, please rate this answer and mark your question as Answered.
    Charles Moreton

  • Overwrite image webauth-bundle WLC 5500

    Hi,
    Does any one knows how to replace an image in webauth-bundle on WLC 5500?
    When I run "show custom-web webauth-bundle", I do see the files:
    aup.html
            login.html
                      yourlogo.jpg
    But, the size of yourlogo.jpg is too big and need to replace with a smaller one.
    I have tried (with the appropiate IP and filename):
    transfer download mode tftp
    transfer download datatype image
    transfer download serverip tftp-server-ip-addres
    transfer download filename {filename.jpg | filename.gif | filename.png}
    but, it does not work.
    Thanks very much.

    If the size changes, then yes you will need to define that on the html.  Anyways, you will need to tar up the files and upload it to the WLC.  That is the only way to update a custom webauth, either being a change to the html, image or maybe the AUP.
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • ISE 1.2 / WLC 5508 EAP-TLS expired certificate error, but wireless still working

    Hi I have a customer that we've deployed ISE 1.2 and WLC 5508s at.  Customer is using EAP-TLS with and everything appears to setup properly.  Users are able to login to the network and authenticate, however, frequently, I'm getting the following error in ISE authentication logs:
    12516 EAP-TLS failed SSL/TLS handshake because of an expired certificate in the client certificates chain
    OpenSSL messages are:
    SSL alert: code=Ox22D=557 : source=local ; type=fatal : message="X509
    certificate ex pi red"'
    4 727850450.3616:error.140890B2: SS L
    rOYbne s: SSL 3_  G ET _CL IE NT  _CE RT IF ICAT E:no ce rtific ate
    relurned: s3_ srvr.c: 272 0
    I'm not sure if this is cosmetic or if this is something that I should be tracking down.  System isn't in full production yet, but every client seems to be working and there is no expired cert in the chain.  Any ideas what to check?

    Hello Dino,
      thanks very much for your reply.
      The client uses a machine-certificate, the PKI is not a microsoft one, but a third party PKI.   The certificate is fresh and valid, the root-cert is installed and checked to be validated against it for the login.
    Clock is correct too. The same setup works flawlessly in Windows 7 and XP.
    EKU is set on the certificate (1.3.6.1.5.5.7.3.2)
    I suspect the cert-setup itself, but don't get a clue where this might stuck...
    Björn

  • WLC 5508 with LAP-1142n - Several Errors

    Hello all,
    I had installed a WLC 5508 with 7 LAP 1142n and 2 converted AP 1131abg.
    I am seeing some errors relating 2 issues.
    1st- One particular AP 1142 is disassociating and reseting the radios.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman","serif";}
    Thu Oct 28 11:50:49 2010
    AP's Interface:0(802.11b)   Operation State Up: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio interface   reset. Status:NA
    Thu Oct 28 11:50:49 2010
    AP's Interface:0(802.11b)   Operation State Down: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio interface   reset. Status:NA
    Thu Oct 28 11:50:49 2010
    AP's Interface:1(802.11a)   Operation State Up: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio interface   reset. Status:NA
    Thu Oct 28 11:50:49 2010
    AP's Interface:1(802.11a)   Operation State Down: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio interface   reset. Status:NA
    Thu Oct 28 11:50:46 2010
    AP's Interface:1(802.11a) Operation   State Up: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio reset due to Init.   Status:NA
    Thu Oct 28 11:50:46 2010
    AP's Interface:0(802.11b)   Operation State Up: Base Radio MAC:e8:04:62:23:ac:e0 Cause=Radio reset due to   Init. Status:NA
    Thu Oct 28 11:50:46 2010
    AP 'AP3', MAC:   e8:04:62:23:ac:e0 disassociated previously due to AP Reset. Uptime: 1 days,   10 h 24 m 23 s . Last reset reason: operator changed 11g mode.
    Thu Oct 28 11:50:35 2010
    AP Disassociated. Base Radio   MAC:e8:04:62:23:ac:e0
    Thu Oct 28 11:50:35 2010
    AP's Interface:1(802.11a)   Operation State Down: Base Radio MAC:e8:04:62:23:ac:e0 Cause=New Discovery Status:NA
    Thu Oct 28 11:50:35 2010
    AP's Interface:0(802.11b) Operation   State Down: Base Radio MAC:e8:04:62:23:ac:e0 Cause=New Discovery Status:NA
    I had some search, and the new discovery cause, might be that the AP didnt know what WLC do associate, in a multi-controller environment. This is not the case. I only have one WLC in the same management vlan.
    2st-The Radius server is beeing related in the logs as been deactivated. I raise the server time-out on Radius configuration option, but it still continues to do it.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman","serif";}
    Thu Oct 28 10:24:41 2010
    RADIUS server 10.67.128.36:1812 deactivated in global list
    Thu Oct 28 10:24:41 2010
    RADIUS server 10.67.128.36:1812 failed to respond to request (ID 172)   for client e8:06:88:51:c0:2b / user 'unknown'
    Is this meaning the WLC stop sending request to the Radius Server ? We dont have BackUp Radius.
    As far as i know, its always the same mac-address client that is associated to that error, maybe a iphone.
    I had so many clients in that SSID and they are all working good.
    The Radius server is a NPS from windows Server 2008
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman","serif";}
    , and the client says that the medium response time is 0,02 sec, so im wondering why the controller is not getting response from Radius for a particular client?! My client also says, that didnt found any log related to that mac-address client ... what is weird...
    WLC with last software available 7.0.164
    Hope some one help me here.
    Best Regards,
    Bruno Petrónio

    Thanks Scott,
    I understand what you are mentioning, and i really didnt do it yet.
    I realize that the primary controller was not configured on the
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman","serif";}
    Wireless –> All APs –> High Availability tab, and did it only to the AP that is taking this beahviour.
    Is this mandatory for a 1 controller only ?
    No mather what the manual say, after that the AP is rebooting 2 mins in 2 mins... with the same kind of messages.
    The interface on the switch is getting a few input errors and the same numbers of crc... but are so few...
    Next step ... i will change it to another one's place/pathing cable.
    Regarding the Radius messages... any ideas ?
    I'm already on 30 sec's of server timeout.
    Best Regards,
    Bruno Petrónio

  • WLC 5508 duplex mismatch error

    Hi I've got a WLC 5508 connected to a Catalyst 6000 switch. In the switch I've get a CDP duplex mismatch error every 30 min.
    %CDP-4-DUPLEXMISMATCH:Full/half duplex mismatch detected on port 3/23
    with the show port command I can see this:
    Port  Name                 Status     Vlan       Duplex Speed       Type
    3/23  WLC           connected  trunk        full        1000 10/100/1000
    With the show CDP neigh I see a duplex mismatch
    C6K9> (enable) sh cdp neig 3/23 detail
    Port (Our Port): 3/23
    Holdtime: 142 sec
    Capabilities: HOST
    Version:
      Manufacturer's Name: Cisco Systems Inc.  Product Name: Cisco Controller  Product Version: 7.0.116.0  RTOS Version: Erro  Bootloader Version: 1.0.1  Build Type: DATA + WPS
    Platform: AIR-CT5508-K9
    Port-ID (Port on Neighbors's Device): GigabitEthernet0/0/1
    VTP Management Domain: unknown
    Native VLAN: unknown
    Duplex: half (Mismatch)
    But in the WLC console there is not half duplex
    (WLC5508) show>port 1
               STP   Admin   Physical   Physical   Link   Link
    Pr  Type   Stat   Mode     Mode      Status   Status  Trap     POE    SFPType  
    1  Normal  Forw Enable  Auto       1000 Full  Up     Enable  N/A     1000BaseTX
    I don't have errors in the port counters
    How I can resolve this duplex mismatch?

    Try upgrading the firmware of the WLC to 7.0.230.0.

  • SFP Error with WLC 5508

    all,
    I'm facing a problem to upgrade my WLC 5508 from 6.0.199.4 to 7.0.98.218
    On my WLC, I have a bad src error message about the SFP.
    With the version 6, I have the "warning" but the port is UP and Running
               STP   Admin   Physical   Physical   Link   Link
    Pr  Type   Stat   Mode     Mode      Status   Status  Trap     POE    SFPType
    1  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    2  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    3  Normal  Forw Enable  Auto       1000 Full  Up     Enable  N/A     SFP Error
    on version 7.0.98.218, the port never comes UP:
               STP   Admin   Physical   Physical   Link   Link
    Pr  Type   Stat   Mode     Mode      Status   Status  Trap     POE    SFPType
    1  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    2  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    3  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     SFP Error
    I see a bug about CSCta32912, but normally, it is solved in version 7.
    How to solve this issue?
    Thanks.
               STP   Admin   Physical   Physical   Link   Link
    Pr  Type   Stat   Mode     Mode      Status   Status  Trap     POE    SFPType
    1  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    2  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A     Not Present
    3  Normal  Forw Enable  Auto       1000 Full  Up     Enable  N/A     SFP Error

    Are you using a Cisco SFP or a third party one?
    Sent from Cisco Technical Support iPad App

  • WLC 5508- GUI Cert Error

    I tried installing chained certificate in for the https access in wlc 5508. It failed and later i came to know it will only accept unchained cert for management access. But now the problem is i could not get GUI access. It shows error like "This server security certificate is revoked "
    What should i do now..?

    Amjad,
    Do you mean this link for unchained certs ?
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml
    "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
    ‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

  • Error APF_HA-3-SYNC_RETRANSMIT_FAIL - Controller Cisco WLC 5508

    hello,
    I have two controllers on Cisco WLC 5508 HA version 7.5.
    I'm having several sync error logs:
    *haSSOServiceTask3: Jan 22 09:22:51.637: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (00:0b:6b:b3:d4:6b )data sync. Retry after 300 secs.
    *haSSOServiceTask4: Jan 22 09:22:51.037: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (60:67:20:fa:19:04 )data sync. Retry after 300 secs.
    *haSSOServiceTask2: Jan 22 09:22:50.838: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (04:fe:31:3b:7d:ca )data sync. Retry after 300 secs.
    *haSSOServiceTask2: Jan 22 09:22:50.838: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (88:9b:39:c3:cf:42 )data sync. Retry after 270 secs.
    *haSSOServiceTask3: Jan 22 09:22:50.838: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (18:e2:c2:c0:9b:5b )data sync. Retry after 300 secs.
    *haSSOServiceTask0: Jan 22 09:22:50.837: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (08:70:45:77:36:60 )data sync. Retry after 240 secs.
    *haSSOServiceTask0: Jan 22 09:22:50.837: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (20:64:32:cb:13:a8 )data sync. Retry after 180 secs.
    *haSSOServiceTask0: Jan 22 09:22:50.837: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (8c:70:5a:2e:36:e0 )data sync. Retry after 300 secs.
    *haSSOServiceTask4: Jan 22 09:22:50.837: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (58:94:6b:65:ad:0c )data sync. Retry after 300 secs.
    *haSSOServiceTask1: Jan 22 09:22:50.836: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (40:2b:a1:53:8d:a9 )data sync. Retry after 300 secs.
    *haSSOServiceTask4: Jan 22 09:22:50.836: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (a4:17:31:16:19:2c )data sync. Retry after 300 secs.
    *haSSOServiceTask1: Jan 22 09:22:50.836: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (04:1e:64:7e:19:31 )data sync. Retry after 300 secs.
    *haSSOServiceTask4: Jan 22 09:22:50.639: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (60:67:20:33:7c:74 )data sync. Retry after 300 secs.
    *haSSOServiceTask4: Jan 22 09:22:50.639: #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2939 Maximum retransmission exceeded for client (00:26:c6:57:61:34 )data sync. Retry after 300 secs.
    Has anyone had something similar?

    Hi Valerio, did you ever find out what this error was. I am seeing the same  error but on 7.6
    #APF_HA-3-SYNC_RETRANSMIT_FAIL: apf_ha.c:2966 Maximum retransmission exceeded for client (8c:00:6d:16:7b:3d )data sync

Maybe you are looking for

  • Free goods on bills of materials

    Dear all My requiremt is i want give free goods with Bom materials.example i maintained condition record for BOM cs01 is material A I is main item and BC D materials are subitems. Now i want give free good for material B In back ground i maintained V

  • Problem with recompose in PSE 11 trial version

    I am trying to determine whether to purchase PSE 11. I currently solely use Lightroom 4. I have attempted to use the recompose tool several times on several different pictures marking different things and generally have failed results. On the odd occ

  • Report painter and sql query

    I suppose we ABAPers can make use of sql query that is sq01 sq02 and sq03 and report painter pls can u provide me the links for that i am new to them thank you

  • SoD rules maintenance: in DEV, QAS or PRD

    Hello colleagues, Could you please help with recommendations for SoD rules maintenance process? Where to maintain SoD rules: in DEV AC system, QAS (and then transfer to PRD) or directly in PRD AC? Thanks, Anton.

  • How to insert bibliographical references

    I would like to know if you guys know how to insert and manage bibliographical references. Especially in long documents like thesis documents. Thanks, Acyr