Wlc 5760 - wlan configuration

I have a WLC 5760 and i did below configuration for WLAN:
wlan 3 85 GUESTS
client vlan 85
no security wpa
no security wpa akm dot1x
no security wpa wpa2
no security wpa wpa2 ciphers aes
session-timeout 1800
no shutdown
the ap is joined with WLC:
EFFAT-WLC#show ap summary
Number of APs: 4
Global AP User Name: Not configured
Global AP Dot1x User Name: Not configured
AP Name                           AP Model  Ethernet MAC    Radio MAC       State
APAP16.0009.abdc                  3702I     1616.9999.8888  3c12.f123.0000  Registered
* have changed the mac address
but still i am not able to get the WLAN on the wireless clients. SSID is been broadcasted but when scanned on the client i am not getting it.

Are you using any radius server ???
if yes then use this commands: aaa-override
Check this config :
http://www.cisco.com/c/en/us/td/docs/wireless/technology/5760_deploy/CT5760_Controller_Deployment_Guide/Secure_WLAN_Configuration_on_Catalyst_3850WLC5508.html
Hope it ehlps.
Regards
Dont forget to arte helpful posts

Similar Messages

  • WLC 5760 - MAC Filtering wireless clients

    Hi,
    Does anyone ever deployed mac-filtering authentication to wireless clients in the WLC 5760?
    I've configured a WLAN for Mac-filtering authentication only (named it as "macauth"):
    wlan RNVDOS 4 RNVDOS
    aaa-override
    no broadcast-ssid
    client vlan RNVDOS
    mac-filtering macauth
    no security wpa
    no security wpa akm dot1x
    no security wpa wpa2
    no security wpa wpa2 ciphers aes
    session-timeout 1800
    no shutdown
    Then, below Configuration->Security->MAC Filtering I've added several MAC addresses i.e. :
    MAC Address: 88532e9ef70a  Attribute List: macauth
    Which turned out to be display in the CLI as:
    username 88532e9ef70a mac aaa attribute list macauth
    The problem is that whenever I try to associate the wireless client 88532e9ef70a, the client passes to the exclusion list.:
    Sep 16 10:54:55.603: 8853.2E9E.F70A Adding mobile on LWAPP AP  0C68.03EA.4070 (1)  1 wcm: E9E.F70A (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
    Sep 16 10:54:55.603: 8853.2E9E.F70A  Creating WL station entry for client -  rc 0 1 wcm:
    Sep 16 10:54:55.603: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
    Sep 16 10:54:55.603: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: ssionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
    Sep 16 10:54:55.603: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw00dd) was added to ^G$h\225v^K
    Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.603: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm:  ^G$h\225v^K
    Sep 16 10:54:55.603: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:55.603: 8853.2E9E.F70A STA - rates (8): 1 wcm:  140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
    Sep 16 10:54:55.603: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
    Sep 16 10:54:55.603: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Idle to AAA Pending
    Sep 16 10:54:55.603: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:55.604: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:55.604: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070  from Idle to AAA Pending
    Sep 16 10:54:55.604: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:55.604: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
    Sep 16 10:54:55.813: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: n.t^Gwseconds
    Sep 16 10:54:55.813: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
    Sep 16 10:54:55.813: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw  0C68.03EA.4070  f^G$h\225v^K
    Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.813: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
    Sep 16 10:54:55.813: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:55.813: 8853.2E9E.F70A STA - rates (8): 1 wcm:  140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
    Sep 16 10:54:55.813: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
    Sep 16 10:54:55.813: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:55.813: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:55.814: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:55.814: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:55.814: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:55.814: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
    Sep 16 10:54:56.520: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: n.t^Gwseconds
    Sep 16 10:54:56.520: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
    Sep 16 10:54:56.520: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw  0C68.03EA.4070  f^G$h\225v^K
    Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.520: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
    Sep 16 10:54:56.520: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:56.520: 8853.2E9E.F70A STA - rates (8): 1 wcm:  140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
    Sep 16 10:54:56.520: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
    Sep 16 10:54:56.520: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.520: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.521: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.521: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.521: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:56.521: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
    Sep 16 10:54:56.729: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: n 10 seconds
    Sep 16 10:54:56.729: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
    Sep 16 10:54:56.729: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.729: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: from AAA Pending to Authenticated
    Sep 16 10:54:56.729: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:56.729: 8853.2E9E.F70A STA - rates (8): 1 wcm:  140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
    Sep 16 10:54:56.729: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
    Sep 16 10:54:56.729: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.729: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.730: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.730: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.730: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:56.730: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
    Sep 16 10:54:56.937: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: n.t^Gwseconds
    Sep 16 10:54:56.937: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
    Sep 16 10:54:56.937: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw  0C68.03EA.4070  f^G$h\225v^K
    Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.937: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
    Sep 16 10:54:56.937: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:56.937: 8853.2E9E.F70A STA - rates (8): 1 wcm:  140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
    Sep 16 10:54:56.937: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
    Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.937: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:56.937: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Authenticated
    Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
    Sep 16 10:54:57.143: 8853.2E9E.F70A Association received from mobile on AP  0C68.03EA.4070  1 wcm: n.t^Gwseconds
    Sep 16 10:54:57.143: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
    Sep 16 10:54:57.143: 8853.2E9E.F70A apChanged 1 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw  0C68.03EA.4070  f^G$h\225v^K
    Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm:  ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm:  0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:57.143: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
    Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific IPv6 override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
    Sep 16 10:54:57.143: 8853.2E9E.F70A Applying local bridging Interface Policy for station  8853.2E9E.F70A  - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
    Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific override for station  8853.2E9E.F70A  - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
    Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (8): 1 wcm:  130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
    Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (12): 1 wcm:  130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
    Sep 16 10:54:57.144:  8853.2E9E.F70A  0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm:  site 'renova', interface 'RNVDOS'
    Sep 16 10:54:57.144: 8853.2E9E.F70A Updated location for station old AP  0C68.03EA.4070 -1, new AP  0C68.03EA.4070 -0 1 wcm: va', interface 'RNVDOS'
    Sep 16 10:54:57.144: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: P  0C68.03EA.4070 -0
    Sep 16 10:54:57.144: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:57.144: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:57.144: 8853.2E9E.F70A
    client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
    Sep 16 10:54:57.145: 8853.2E9E.F70A Sending Assoc Response to station on BSSID  0C68.03EA.4070  (status 256) ApVapId 2 Slot 0 1 wcm: 68.03EA.4070  from Authenticated to AAA Pending
    Sep 16 10:54:57.145: 8853.2E9E.F70A apfBlacklistMobileStationEntry2 (apf_ms.c: 1 wcm: 6129) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from AAA Pending to Exclusion-list (1)
    Sep 16 10:54:57.145: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 44) in 10 seconds
    Sep 16 10:54:57.145: 8853.2E9E.F70A client is added to the exclusion list, reason 1 1 wcm: d: 44) in 10 seconds
    Sep 16 10:54:57.145: *apfReceiveTask: 1 wcm:  %APF-4-ADD_TO_BLACKLIST_REASON: Client 8853.2E9E.F70A (AuditSessionID: 0afe01fb5236e37f000000de) was added to exclusion list. Reason: 802.11 association failure 
    Sep 16 10:54:57.836: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion  1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
    Sep 16 10:54:58.533: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion  1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
    Sep 16 10:54:59.231: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion  1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
    Sep 16 10:54:59.922: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion  1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
    Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireCallback (apf_ms.c: 1 wcm: 664) Expiring Mobile!
    Sep 16 10:55:06.972: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 46) in 60 seconds
    Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireMobileStation (apf_ms.c: 1 wcm: 7067) Changing state for mobile  8853.2E9E.F70A  on AP  0C68.03EA.4070  from Exclusion-list (1) to Exclusion-list (2)
    Sep 16 10:55:06.972:  8853.2E9E.F70A  0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm: 3.2E9E.F70A  on AP  0C68.03EA.4070  from Exclusion-list (1) to Exclusion-list (2)
    Sep 16 10:55:06.972:  8853.2E9E.F70A  0.0.0.0 START (0) FastSSID for the client [ 0C68.03EA.4070 ] NOTENABLED 1 wcm: E9E.F70A  on AP  0C68.03EA.4070  from Exclusion-list (1) to Exclusion-list (2)
    Sep 16 10:55:06.972: 8853.2E9E.F70A Incrementing the Reassociation Count 1 for client (of interface RNVDOS) 1 wcm: D
    Sep 16 10:55:06.972: 8853.2E9E.F70A Clearing Dhcp state for station  ---  1 wcm:  for client (of interface RNVDOS)
    WLC1#
    WLC1#
    Kind Regards,
    Vasco

    Hi Patrick,
    Thank you for sharing your solution. It didn't solved entirely the problem but you pointed to the right direction!
    They are caused, because the system searches for an aaa authorization list, which is not configured.
    To resolve this configure the following
    aaa authorization network mac-filter local
    where mac-filter is the name you defined in the SSID.
    I've used your sugestion to create an aaa local authorization list but instead of naming it with the SSID, I've used the name of the attribute list ( macauth ) and it solved the problem:
    aaa authorization network macauth local
    username 88532e9ef70a mac aaa attribute list macauth
    wlan RNVDOS 4 RNVDOS
    client vlan RNVDOS
    mac-filtering macauth
    WLC1#sh wireless client summ
    Number of Local Clients : 1
    MAC Address    AP Name                          WLAN State              Protocol
    8853.2e9e.f70a APf872.ead7.31da                 4    UP                 11n(5)  
    Cheers,
    Vasco

  • WLC 5760

    Since  i mentioned new to this tech,i deployed 2 WLC 5760 in network i connected one  of Stack wise 480 cable in ring type.but my port is down state
    when i give show switch stack-port summary both controllers are down state.
    What could be the issue can any one suggest me.
    Apart from the above issue i configured few of configuration please vlaidate it
    wlan Guest-WbAuth 3 Guest-WbAuth
    client vlan 100
    mobility anchor 192.168.5.1
    no security wpa
    no security wpa akm dot1x
    no security wpa wpa2
    no security wpa wpa2 ciphers aes
    security web-auth
    security web-auth authentication-list EXT_AUTH ---- need more information ?
    security web-auth parameter-map webparalocal -need more information ?
    no shutdown
    2. Redudancy configuration
    conf t
    service internal
    redundancy
    main-cpu
    standby console enable
    end
    session standby ios
    please validate this 

    Please follow the startup procedure:
    http://www.cisco.com/c/en/us/td/docs/wireless/technology/5760_deploy/CT5760_Controller_Deployment_Guide/CT5760_Centralized_Configuration_eg.html#pgfId-1071864

  • External AAA for WLC 5760

    Hi, I have WLC 5760 on mode Centralized because I don't have Switch 3850. I need to implement dot1x authentication using external AAA Server which is in my case is Active Directory on Windows 2012 Server. You can see my configuration in pictures i attached bellow. My problem is authentication is always failed. 
    Can you give me a hint ?
    AAA Server
    Authentication
    LDAP
    WLAN Security L2
    WLAN Security L3
    ERROR Log
    Thanks

    Complete these steps in order to add the WLC as an AAA client in the ACS.
    From the ACS GUI, choose the Network Configuration tab.
    Under AAA Clients, click Add Entry.
    In the Add AAA Client window, enter the WLC host name, the IP address of the WLC, and a shared secret key. See the example diagram under step 5.
    From the Authenticate Using drop-down menu, choose RADIUS .
    Click Submit + Restart in order to save the configuration.

  • WLC 5760 - show client ccx roam-history

    Hi,
    We're running an WLC 5760 with the latests version (3.3.1). We have several wlans, with diferent authentication methods, and they are all working fine.
    However we noticed that the roaming is working correctly but no information is displayed if the "show ccx roam-history".
    WLC1#sh wireless client mac-address 8853.2e9e.f70a det | i CCX
    Client CCX version : 4
    WLC1#debug dot11 ccx-roam all
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Mobile  8853.2e9e.f70a  associated
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile  8853.2e9e.f70a 
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile  8853.2e9e.f70a
    Dec 12 17:11:40.963: 00000000: 1 wcm:  01 1a 33 81 88 53 2e 9e  f7 0a c0 25 5c 68 50 50  ..3..S.....%\hPP
    Dec 12 17:11:40.963: 00000010: 1 wcm:  28 11 c0 25 5c 68 50 50  01 00 02 01 06 ab 0d 0d  (..%\hPP........
    Dec 12 17:11:40.963: 00000020: 1 wcm:  03 b8 05 28 11 c0 25 5c  ec 05 a0 0b 00 07 01 06  ...(..%\........
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11  0c 68 03 ea 52 10 06 00  ......(..h..R...
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8  05 28 11 0c 68 03 d6 e4  .........(..h...
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 00 0b 00 07 01 06 ab 0d  0d 03 b8 05 28 11 0c 68  ............(..h
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 03 4d d0 60 01 00 07 01  06 ab 0d 0d 03 b8 05 28  .M.`...........(
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 ea 40 70 01  00 07 01 06 ab 0d 0d 03  ..h..@p.........
    Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000080: b8 05 28 11 0c 68 03 ea  4b 10 01 00 07 01 06 ab  ..(..h..K.......
    Dec 12 17:11:40.963: 00000090: 1 wcm:  0d 0d 03 b8 05 28 11 c0  25 5c 68 50 5f 3c 01 04  .....(..%\hP_<..
    Dec 12 17:11:40.964: 000000a0: 1 wcm:  01 06 ab 12 12 03 b8 05  28 11 c0 25 5c ec 05 af  ........(..%\...
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 24 01 07 01 06 ab 12 12  03 b8 05 28 11 0c 68 03  $..........(..h.
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06  ab 12 12 03 b8 05 28 11  .R.$..........(.
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 ea 4b 1f 38 01  07 01 06 ab 12 12 03 b8  .h..K.8.........
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000e0: 05 28 11 0c 68 03 d6 e4  0f 38 01 07 01 06 ab 12  .(..h....8......
    Dec 12 17:11:40.964: 000000f0: 1 wcm:  12 03 b8 05 28 11 c0 25  5c a3 f4 8f 30 01 07 01  ....(..%\...0...
    WLC1#
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05 28  11 0c 68 03 ea 40 7f 30  .......([email protected]
    Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 00000110: 01 07 01 06 ab 12 12 03  b8 05                    ..........
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Received Neighbor List Request from Mobile  8853.2e9e.f70a
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile  8853.2e9e.f70a 
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile  8853.2e9e.f70a
    Dec 12 17:12:51.006: 00000000: 1 wcm:  01 1a 33 81 88 53 2e 9e  f7 0a c0 25 5c 68 50 50  ..3..S.....%\hPP
    Dec 12 17:12:51.006: 00000010: 1 wcm:  28 11 c0 25 5c 68 50 50  01 00 02 01 06 ab 0d 0d  (..%\hPP........
    Dec 12 17:12:51.006: 00000020: 1 wcm:  03 b8 05 28 11 c0 25 5c  ec 05 a0 0b 00 07 01 06  ...(..%\........
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11  0c 68 03 ea 52 10 06 00  ......(..h..R...
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8  05 28 11 0c 68 03 d6 e4  .........(..h...
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 00 0b 00 07 01 06 ab 0d  0d 03 b8 05 28 11 0c 68  ............(..h
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 03 4d d0 60 01 00 07 01  06 ab 0d 0d 03 b8 05 28  .M.`...........(
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 ea 40 70 01  00 07 01 06 ab 0d 0d 03  ..h..@p.........
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000080: b8 05 28 11 0c 68 03 ea  4b 10 01 00 07 01 06 ab  ..(..h..K.......
    Dec 12 17:12:51.006: 00000090: 1 wcm:  0d 0d 03 b8 05 28 11 c0  25 5c 68 50 5f 3c 01 04  .....(..%\hP_<..
    Dec 12 17:12:51.006: 000000a0: 1 wcm:  01 06 ab 12 12 03 b8 05  28 11 c0 25 5c ec 05 af  ........(..%\...
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 24 01 07 01 06 ab 12 12  03 b8 05 28 11 0c 68 03  $..........(..h.
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06  ab 12 12 03 b8 05 28 11  .R.$..........(.
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 ea 4b 1f 38 01  07 01 06 ab 12 12 03 b8  .h..K.8.........
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000e0: 05 28 11 0c 68 03 d6 e4  0f 38 01 07 01 06 ab 12  .(..h....8......
    Dec 12 17:12:51.006: 000000f0: 1 wcm:  12 03 b8 05 28 11 c0 25  5c a3 f4 8f 30 01 07 01  ....(..%\...0...
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05 28  11 0c 68 03 ea 40 7f 30  .......([email protected]
    Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000110: 01 07 01 06 ab 12 12 03  b8 05                    ..........
    Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Received Neighbor List Request from Mobile  8853.2e9e.f70a
    Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile  8853.2e9e.f70a 
    Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile  8853.2e9e.f70a
    Dec 12 17:15:48.712: 00000000: 1 wcm:  01 07 33 81 88 53 2e 9e  f7 0a c0 25 5c 68 81 20  ..3..S.....%\h..
    Dec 12 17:15:48.712: 00000010: 1 wcm:  28 11 c0 25 5c 68 81 20  01 00 02 01 06 ab 0d 0d  (..%\h..........
    Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 00000020: 03 b8 05 28 11 0c 68 03  ea 52 10 06 00 07 01 06  ...(..h..R......
    Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11  0c 68 03 ea 4a f0 0b 00  ......(..h..J...
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8  05 28 11 0c 68 03 d6 eb  .........(..h...
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 20 01 00 07 01 06 ab 0d  0d 03 b8 05 28 11 c0 25  ............(..
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 5c ec 05 a0 0b 00 07 01  06 ab 0d 0d 03 b8 05 28  \..............(
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 d6 e4 00 0b  00 07 01 06 ab 0d 0d 03  ..h.............
    Dec 12 17:15:48.713: 00000080: 1 wcm:  b8 05 28 11 c0 25 5c 68  50 50 01 00 07 01 06 ab  ..(..%\hPP......
    Dec 12 17:15:48.713: 00000090: 1 wcm:  0d 0d 03 b8 05 28 11 c0  25 5c 68 81 2f 38 01 04  .....(..%\h./8..
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000a0: 01 06 ab 12 12 03 b8 05  28 11 0c 68 03 ea 4a ff  ........(..h..J.
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 2c 01 07 01 06 ab 12 12  03 b8 05 28 11 0c 68 03  ,..........(..h.
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06  ab 12 12 03 b8 05 28 11  .R.$..........(.
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 d6 e4 0f 38 01  07 01 06 ab 12 12 03 b8  .h....8.........
    Dec 12 17:15:48.713: 000000e0: 1 wcm:  05 28 11 c0 25 5c ec 05  af 24 01 07 01 06 ab 12  .(..%\...$......
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000f0: 12 03 b8 05 28 11 0c 68  03 d6 eb 2f 3c 01 07 01  ....(..h.../<...
    Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05                              .......
    WLC1#show wireless client mac-address 8853.2e9e.f70a ccx roam-history
    Shouldn't the output be the same as the AireOS command "show client roam-history client-mac"?
    Kind regards,
    Vasco Costa

    Obtaining CCX Client Roaming Information (CLI)
    Step 1  
    View the current RF parameters configured for client roaming for the 802.11a or 802.11b/g network by entering this command:show {802.11a | 802.11b} l2roam rf-param
    Step 2  
    View the CCX Layer 2 client roaming statistics for a particular access point by entering this command:show {802.11a | 802.11b} l2roam statistics ap_mac
    This command provides the following information:
    The number of roam reason reports received
    The number of neighbor list requests received
    The number of neighbor list reports sent
    The number of broadcast neighbor updates sent
    Step 3  
    View the roaming history for a particular client by entering this command:show client roam-history client_mac
    This command provides the following information:
    The time when the report was received
    The MAC address of the access point to which the client is currently associated
    The MAC address of the access point to which the client was previously associated
    The channel of the access point to which the client was previously associated
    The SSID of the access point to which the client was previously associated
    The time when the client disassociated from the previous access point
    The reason for the client roam
    Debugging CCX Client Roaming Issues (CLI)
    If you experience any problems with CCX Layer 2 client roaming, enter this command:
    debug l2roam [detail | error | packet | all] {enable | disable}

  • Wlc 5760 design

    I have a new deployement with WLC 5760.
    total number of aps are 150 with 4 WLANs.
    each WLAN is mapped to a sperate VLAN. I have a couple of design questions:
         - the switchport configuration of the AP will be trunk or access ?
           if access, then port should be memeber of which VLAN ?
         - mobility configuration for single WLC design ?
         - I would like to make two groups in which group 1 will advertise WLAN 1,2 and 3 while the group 2 will advertise only WLAN 4.
           is it possible ?
    really apprecite your response.
    Regards

    Hi,
    Here is my responses
       - the switchport configuration of the AP will be trunk or access ?       if access, then port should be memeber of which VLAN ?
    5760 only support Local mode APs. So all your AP connected switchports (in access layer) should be configured as access ports. You can put that in a different AP management vlan.
         - mobility configuration for single WLC design ?
    You can configure a mobility group name even though no any other controllers.
         - I would like to make two groups in which group 1 will advertise WLAN 1,2 and 3 while the group 2 will advertise only WLAN 4.        is it possible ?
    Yes, you can create two AP groups & map these WLANs. Then add APs into these two AP groups according to your requirement.
    These posts should give you some reference
    http://mrncciew.com/2013/12/16/5760-in-ca-cuwn/
    http://mrncciew.com/2013/12/12/getting-started-with-5760/
    http://mrncciew.com/2013/12/14/3850ma-with-5760mc/
    HTH
    Rasika
    **** Pls rate all useful responses *****

  • WLC 5760 - AP2600i failed to join ap-group after reboot

    Hi,
    We're deploying a couple of 2600i with an WLC 5760.
    We've configured an AP group, named it "factory", and then issued the command ap name AP<ip mac address> ap-groupname factory for both APs. After the restart, both AP were on the AP-Group factory.
    The problem is that is we reboot or power off the APs, one will join automatically the AP-Group factory and the other goes to default-group and requires the ap name APAPf872.ead7.31da ap-groupname factory to join the AP group factory again.
    Any suggestion? Is it possible to forced the ap-group configuration directly on the cli of the AP?
    WLC1#sh ap groups
    Site Name: default-group
    Site Description:
    WLAN ID   WLAN Name                        Interface
    AP Name                          Slots AP Model             Ethernet MAC      Location      Port                   Country Priority GroupName
    Site Name: factory
    Site Description:
    WLAN ID   WLAN Name                        Interface               Radio
    AP Name                          Slots AP Model             Ethernet MAC      Location      Port                   Country Priority
    APf872.eaa6.fc69                 2     2602I                f872.eaa6.fc69 default location Te1/0/1                PT      1      
    APf872.ead7.31da                 2     2602I                f872.ead7.31da default location Te1/0/1                PT      1      
    debug ap group
    (AP joining the apgoup factory)
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 1 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 2 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 3 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 4 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 5 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 6 for ap APf872.eaa6.fc69  apgroup factory
    Sep 17 18:24:24.420: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 7 for ap APf872.eaa6.fc69  apgroup factory
    (AP joining the default-group)
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 0 for apVapId 1 for ap APf872.ead7.31da  apgroup default-group
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 0 for apVapId 2 for ap APf872.ead7.31da  apgroup default-group
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 0 for apVapId 3 for ap APf872.ead7.31da  apgroup default-group
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 7 for apVapId 4 for ap APf872.ead7.31da  apgroup default-group
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 0 for apVapId 5 for ap APf872.ead7.31da  apgroup default-group
    Sep 17 18:30:36.078: apfRadioPolicySiteTableEntryGet: 1 wcm:  found radio Policy 0 for apVapId 6 for ap APf872.ead7.31da  apgroup default-group
    Kind regards,
    Vasco Costa

    We've used a another group of 2600i APs and it seems that this problem only occous with AP "APf872.ead7.31da" so this is not a WLC problem.
    closing case

  • I cant not control wlc 5760 (every thing CLI & GUI)

    After wlc 5760 reload (because of some problems.)
    I don't know this message. and I can not control wlc 5760 in CLI console.
    Please help me.
    %Error opening tftp://255.255.255.255/network-confg (Timed out)
    %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-wlc01-confg (Timed out)
    .... again & again
    I try to booting. but I can't.
    I want to know : method 5760 Factory default or normal booting mode.
    + log
    FIPS: Flash Key Check : Begin
    FIPS: Flash Key Check : End, Not Found,FIPS Mode Not Enabled
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CT5760 (i686) processor with 10485760K bytes of physical memory.
    Processor board ID FOC1746V2AK
    2048K bytes of non-volatile configuration memory.
    10485760K bytes of physical memory.
    255000K bytes of Crash Files at crashinfo:.
    3612840K bytes of Flash at flash:.
    0K bytes of Dummy USB Flash at usbflash0:.
    0K bytes of  at webui:.
    Base Ethernet MAC Address          : 1c:1d:86:24:10:80
    Motherboard Assembly Number        : 73-14448-04
    Motherboard Serial Number          : FOC174577NZ
    Model Revision Number              : A0
    Model Number                       : AIR-CT5760
    System Serial Number               : FOC1746V2AK
    %Error opening tftp://255.255.255.255/network-confg (Timed out)
    %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-wlc01-confg (Timed out)
    %Error opening tftp://255.255.255.255/network-confg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-.cfg (Timed out)
    %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-wlc01-confg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-.cfg (Timed out)
    %Error opening tftp://255.255.255.255/network-confg (Timed out)
    %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-wlc01-confg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-.cfg (Timed out)
    %Error opening tftp://255.255.255.255/network-confg (Timed out)
    %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
    %Error opening tftp://255.255.255.255/nx-5760-wlc01-confg (Timed out)

    I have same problem when i upgraded Cisco 3850 Switch to latest IOS. I have lost access to the console.
    can someone please help.
    Thanks

  • Custom WebAuth WLC 5760

    I want to setup a custom webauth for my WLC 5760. I already downloaded the webauth bundle and put it in WLC via Command Download in WLC GUI. According to Guide, after the download completed, the custom page will appear in custom page dropdown for web parameter map.
    But in my case it shows nothing. So where did I miss ?
    Thank You

    Hi
    Pls refer this document 
    http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117728-configure-wlc-00.html
    HTH
    Rasika
    **** Pls rate all useful responses ****

  • Prime Infrastructure and WLAN Configuration Controller Templates

    Hello,
    I work with PI v1.2 in customer environment. This app has SNMP relation with 7 controllers (4 controllers in 2 WiSM modules, 3 controllers are standalone). All controllers uses WLANs which I sometimes need to update. I would like to use the PI so that update all of them in one step. But when I use WLAN Configuration Controller Templates and choose given WLAN Template then the PI answer me with error message: "Unknown Exception Occured. If the problem persists send logs to the Tech Support."
    Have you anyone had such a problem? Is it any bug of the application?
    Thank you.

    Yes, you should be able to discover templates from the WLC
    HTH,
    Steve

  • NCS WLAN Configuration Template Problems

    Hi All,
    I'm trying to set up WLAN Configuration templates on our new NCS server.  The version of NCS is 1.1.1.24 and the version of our WLC is 7.2.103.0.  I have two problems:
    1.  I do not see an option for AAA Override.   Has this been renamed to something else in NCS?
    2.  I do not see a way to assign a WLAN ID in the template.  This is important as I use it as a RADIUS attribute in our ClearPass guest wireless service.
    Thanks,
    Jason

    Yeah, it's a bit hidden.
    For the AAA Overide, it's actually under the Security > AAA Servers.
    As for setting the WLAN ID, this is not a configurable option from NCS.  It will just build the next one that is available.
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • Cisco WLC 5760

    Hi All,
    I have Cisco WLC 5760 at my company. I see some document that CISCO WLC 5760 not support FlexConnect. What i want is AP still function when Controller down. Any feature that WLC can do that?
    Thanks in advances. 

    5760 Access Point Stateful Switch Over (AP SSO) Overview
    IOS XE 3.3 SE release for Cisco 5700 Series Wireless Controller introduces 1:1 Active-Standby redundancy model for HA with the CT5760 controllers using the StackWise-480 technology. HA in Cisco 5700 Series Wireless Controller is enabled using Cisco StackWise-480 technology. StackWise-480 identifies active and standby members in the stack as per the Cisco IOS Software SSO technology. All the control plane activities are centralized and synchronized between the active and standby units. The Active Controller centrally manages all the control and management communication. The network control data traffic is transparently switched from the standby unit to the active unit for centralized processing. The 12 ports of the CT5760 HA redundant pair can be connected to the infrastructure network either through a single switch or two switches.
    Bulk and Incremental configuration is synced between the two controllers at run-time and both controllers share the same IP address on the management interface. The CAPWAP state of the Access Points that are in Run State is also synched from the active WLC to the Hot-Standby WLC allowing the Access Points to be state-fully switched over when the Active WLC fails. The APs do not go to the Discovery state when Active WLC fails, and Standby WLC takes over as the Active WLC to serve the network.
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/5700/software/release/ios_xe_33/5760_HA_DG_iosXE33.html#pgfId-43188

  • Prime Infrastructure to manage WLC 5760 with IOS XE 03.03.03

    Hi there Is IOS XE 03.03.03 on WLC 5760 to be managed via Prime infrastructure 2.1 or what version do I need? It seems to be not fully supported with 2.1... Thanks and best regards Dominic

    Hi Dominic,
    The release notes http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/release/notes/cpi_rn.html#pgfId-43893 show support of up to 03.03.02
    I have got a 3850 WLC running on IOS XE 03.03.03 managed by Prime 2.1
    The release might not be up to date. When the release notes for Prime 2.1 came out, the highest supported is 03.02.03 and a few days later got changed to 03.03.02.
    Regards,
    Jeen Chew

  • ISE Compatibility with WLC 5760

    The ISE compatibility Matrix (June 5, 2013), does have a row for WLC 5760 in its tables.
    The WLC 5760 Release Notes says it is compatible with with ISE without specfying which features.
    Why is the WLC 5760 missing from the ISE Compat Matrix and how can I get specific ISE feature support (ie CoA, DACL).
    Thanks.         

    Hello Marvin,
    ISE 1.2 is in road map and it will be available till July 17, 2013 and that will support WLC 5760 and all the features which you are looking.

  • WLC 5760 AUTHMGR-5-FAIL log

    I am using the WLC 5760
    My SSID use WPA2 PSK and i don't use ISE or Radius or AAA to authentication
    Some client can connect to the AP,but can not ping the gateway
    When i show logging from WLC,it will see the log like
    %AUTHMGR-5-FAIL: Authorization failed or unapplied for client
    How do i resolve this problem
    Thank's

    Hi,
    Have you made sure that the appropriate vlans are permitted on the trunk between the WLC and the switch?
    Normally the gateway is an SVI on a core switch, so if the vlan is not permitted, you wouldn't be able to ping the gateway.
    HTH
    Mike

Maybe you are looking for