Questions tagged [wlc]
For questions about Wireless LAN Controllers (WLCs), whatever the manufacturer.
45 questions
18
votes
4
answers
26k
views
Cisco APs ignore DHCP Option 43 and use CAPWAP UDP broadcasts
Background
I am trying to redeploy Cisco 1242 LWAPs on new Cat4507R+E switches, which means the IP address of the WLC is changing for that LWAP. For some reason, I have to configure ip helper-...
- 30k
12
votes
3
answers
7k
views
Identifying a Cisco access point post-install
We have about 50 Cisco 1242 access-points and we're managing them with a Cisco 4404 Wireless Lan controller. The guy who installed the APs did not assign a location to the access points in the ...
- 185
11
votes
4
answers
12k
views
Is there an automatable way to backup the configuration from a WLC 2504 controller?
I am looking for a way to backup the controller configuration file via an automatic process. I've seen links to the web interface which appears to do a one-time tftp copy of the config to a remote ...
- 705
11
votes
1
answer
24k
views
WLC - How to disable 2.4Ghz
Is there any way I can disable the 2.4Ghz and just leave 5.0Ghz channel enabled on a per WLAN (SSID) basis? Or the only way is to disable the AP's radio and leave 5Ghz enabled?
- 453
9
votes
1
answer
510
views
NCS Cisco Prime licenses
I am almost 100% sure this is not possible, but just thought about double checking with someone with more expertise on wireless.
Suppose I have the following scenario:
WLC-1 with 25 licenses on ...
- 453
8
votes
2
answers
8k
views
Does 2504 WLC support LAG?
I am finding some contradictions in Cisco documentation about the LAG support in 2504 WLC. On one hand, the Cisco 2500 Series Wireless Controller Deployment Guide clearly states:
Note: Link ...
- 2,904
8
votes
3
answers
4k
views
Cisco WLC: Per user authentication, many Vlans, few SSIDs
We have a simple problem. We want to restrict our wireless users to certain business websites based on their username when they login. We have many kinds of wireless devices: voip phones, cell phone,...
- 81
8
votes
4
answers
5k
views
CISCO Wireless Lan Controller and AP's design question
There are a couple of questions on design solution.
CAPWAP tunnel is created between the controller and the access points. The ends of the tunnel are the controller's "ap-management" interface and ...
- 831
7
votes
2
answers
766
views
Is 802.11k a security risk?
I'm looking at enabling 802.11k on my Cisco WLC. I see that it is a per-WLAN feature and that leads me to wonder if there might be any reason to not enable it? Specifically, does anyone know if there ...
- 315
6
votes
1
answer
4k
views
WLC geographical redundancy
There are two "central" locations each one having one satellite or spoke site. Let's have:
- zone A and its spoke_zone A1
- zone E and its spoke_zone E1.
Both region A and region E have a similar ...
- 795
6
votes
2
answers
2k
views
Cisco Prime / 5508 WLC captive portals
Need some assistance with a small query.
Can a 5508 WLC be configured to host multiple concurrent captive portals?
Have been googling for the information but if anyone has the info available, I would ...
- 1,051
6
votes
1
answer
1k
views
Cisco WLC Mobility Group between 7.0.x and 7.5.x
Our customer has two Cisco WiSM(1) blades running code 7.0.x and wants to migrate to Cisco 5508 controller which have code version 7.5.x
The WiSM(1) blades are EoL and they aren't able to run newer ...
- 63
6
votes
2
answers
1k
views
Configure radius server via GUI in Cisco WLC
My boss asked me to create a lobby administration for user authentication in a certain Virtual LAN. So I googled for it, and I found out that RADIUS server will work for this. And I've reached this ...
- 163
6
votes
1
answer
2k
views
Can FlexConnect ACLs be combined with Local mode ACLs on the same Cisco WLC WLAN?
There's a limitation (stated below in Cisco's documentation) that FlexConnect ACLs in Cisco WLC cannot be combined in the same WLAN with local mode ACLs. The GUI allows the entry of a local mode ACL ...
- 7,134
5
votes
2
answers
2k
views
Cisco commands to find rogue access point connected
Is there any methods in cisco switches (without using extra devices or softwares)to detect and prevent the unauthorised access points connected? I found a method using wireless lan controller (WLC). ...
- 69
5
votes
2
answers
975
views
How do we protect our open guest wireless?
We have a Cisco WLC and we want an open SSID for guests. We have a sign in form so they see our terms but this isn't a real liability protection. How can we block illegal activities on the open ...
- 3,062
5
votes
2
answers
5k
views
CISCO WLC: use LAG or not?
Could you advise from your own experience is it good practise to use LAG (Link Aggregation) on CISCO wireless lan controllers on not?
Benefits (as for me): redundancy and a little bit simplification (...
- 831
4
votes
3
answers
6k
views
How do I preload an Autonomous AP with the latest CAPWAP firmware from WLC?
We are running a Cisco WLC 5508 with version 7.6.120. We have over 100 autonomous APs around the globe. The latest CAPWAP firmware from Cisco's website for these APs contains CAPWAP code for 7.6.100, ...
- 3,062
4
votes
1
answer
14k
views
What should be the EAPOL-key timeout setting on the WLC?
I am getting this error for many clients. I don't think they get disconnected but it's just filling-up my logs:
xtrcca204wm40: *Dot1x_NW_MsgTask_3: Dec 15 17:22:36.045: #DOT1X-3-...
- 123
3
votes
1
answer
3k
views
Configure Cisco 5508 WLC with Internal DHCP and external DHCP
I have configured a Cisco WLC 5508 to use the internal DHCP server and a windows NPS server. So far, all is working fine.
However, I want to use EAP authentication with an external DHCP server. How ...
- 31
3
votes
2
answers
2k
views
What is the best way to monitor individual APs on an Cisco 5508 WLC?
I need to generate a notification for APs that have lost connectivity so that we can proactively dispatch a tech to troubleshoot. We have about 150 APs on our controller. Looked into Cacti and PRTG, ...
- 33
3
votes
2
answers
310
views
Manage Wifi clients
We have 20 location and about 150 laptop clients, each location has Cisco WLC 5508. Right now everyone is using same password which is individually configured on all WLCs.
Is there any management ...
- 175
3
votes
1
answer
2k
views
Blacklisted DFS channels on Cisco WLC
As you may already know, one of the requirements to use all the available wifi US 5GHz channels is supporting DFS on the Access Point; when DFS is enabled, it scans active and inactive 5Ghz channels ...
- 30k
2
votes
2
answers
478
views
How to connect Cisco AP1242 with WLC4402?
I just got a pair of Cisco APs and a WLC in order to play around for my CCNA Wireless certification. I'm having troubles connecting all 3 devices together. I believe I need a switch to connect them. ...
- 175
2
votes
1
answer
380
views
IPAD Roaming on HP APs
Was just wondering if anyone has any insight into this. I have an issue with IPADs roaming when connected to a specific SSID in a large campus network design. The APs are managed via a WLC from HP. I ...
- 837
2
votes
1
answer
695
views
Cisco ISE and WLC 802.1x Non-Dynamic VLAN Placement
I am trying to migrate from Microsoft NPS using 802.1x PEAP to Cisco ISE 802.1x PEAP for our WLC wireless clients. I see a lot of articles regrading Dynamic VLAN assignment, which we are not trying to ...
- 813
2
votes
1
answer
461
views
OEAP feature in Cisco wireless LAN controller
First of all thank you everyone for helping me out and thank you for such a wonderful platform like this; it's been a boon to someone as novice like me.
Now my question is: I read about the Cisco's ...
- 433
2
votes
2
answers
1k
views
Access control with WLAN web authentication
I'd like to use WLAN Web authentication, but have no experience with it. I'd like to use such an authentication for staff members and external people, whereby the external people when logged are only ...
- 145
2
votes
1
answer
612
views
DHCP option 43 on switch Dell PowerConnect 5500
I have Dell PowerConnect 5524.
Put
SW01(config-dhcp)# option 43 hex f104ac1338fa
got
Option code 43 is not a valid HEX string.
Strange. Its worked ok for me on Cisco device. Looking at User Guide:...
- 123
2
votes
1
answer
3k
views
Real time RSSI from Clients
I have a Cisco WLC and different LWAPPs. What I am looking for is a way to be able to get in the WLC the RSSI of all connected clients.
For the moment, I am able to access through SNMP to the ...
- 123
2
votes
0
answers
247
views
Overlapping IP addressing on dynamically assigned wireless VLANs (can Fortigate do this?) [closed]
Broad question touching many vendors.
CONTEXT DESCRIPTION
For a project of a client of mine (I'm giving the context to make things clearer, please don't reply with "get a professional", I'm ...
- 135
2
votes
0
answers
419
views
Cisco ISE 1.3 and 1.4 - Sponsored guest approval email - single click approval possible?
When self-registering guests generate a request to their Sponsor, how can one create a REST-based link that can approve new Guests with a single click from the email message?
Has anyone successfully ...
- 327
2
votes
1
answer
953
views
Cisco Wireless Guest user management
I am in bad situation where I was allowed to build wireless network for my company, I did so using WLC-2504 with 7 APs registered, but I was not aware of the limitations of generating random username ...
- 21
1
vote
2
answers
4k
views
WLC <-> AP CAPWAP communications and ports
According to this document, you need to open UDP 1024 - 65535 between WLC (source) and APs (dest).
And it's correct - I can see these sessions getting dropped on my firewall since I didn't open those ...
- 590
1
vote
1
answer
211
views
Has anyone successfully deployed WLC 8.3+ anchored wlan with PSK and CWA?
There seems to be something broken with Cisco WLC 8.3.140 and 143. 8.3 was the first AireOS release training to add MAC Filtering (CWA) and PSK. ISE is serving as the RADIUS server (v2.2).
I can get ...
- 327
1
vote
1
answer
533
views
Cisco WLC 5508 - Cannot ping Redundancy Mgmt Ip
I have a couple of Cisco WLC 5508 systems. They are set up as follows:
System A: (Mgmt IP 172.16.1.4/24) (Redundancy Mgmt Ip 172.16.1.5) SSO Mode ENABLED
System B: (Mgmt IP 172.16.1.15/24) (...
- 30k
1
vote
1
answer
141
views
Cisco Wireless Migration
here is the scenario guys:
2 wlc (5508) in cluster, currently advertising 2 SSIDs, I want to advertise 2 more SSIDs with new vlans. 2 new SSIDs will be using their own RADIUS and NTP servers. Please ...
- 11
1
vote
1
answer
1k
views
Cisco WLC 5508 HA licensing
I have one Cisco WLC 5508 with 40 access points and I need to implement HA.
So, as I understand, I need to buy the 5508 HA version of the controller. What is the differences between standard and HA ...
1
vote
1
answer
1k
views
Multiple APs repeatedly dissociate from Cisco 5508
I have a pair of Cisco 5508 controllers with close to 50 APs shared between the two. After some maintainence - changing from (the unsupported) LACP to LAG for the port-channel I have repeated issues ...
- 11
1
vote
1
answer
3k
views
Install VMware Tools on Cisco Virtual Wireless LAN Controller
I was interested in installing VMware Tools on a Cisco vWLC (version 8.3.102). Is there anyway to access a Linux shell on the appliance, or would I have to do something hacky like mount the vmdk on ...
- 121
0
votes
1
answer
303
views
Cisco Meraki versus Cloud-Based WLC Deployment
A networking course that I follow mentions that we can centrally manage our APs in the cloud and that Cisco Meraki is a popular solution for that.
But then again, we can also have a Cloud-Based WLC ...
- 951
0
votes
1
answer
33
views
Authenticating APs and WLCs
I am currently learning about WLCs and Lightweight APs.
My book mentions that every AP and WLC must authenticate each other with digital certificates, and that a X.509 certificate is preinstalled in ...
- 951
0
votes
1
answer
111
views
CAPWAP encryption
I'm new to wireless networking and I have a question that might be dumb.
Regular 802.11 uses AES/TKIP encryption. CAPWAP uses DTLS encryption, but CAPWAP is also 802.11 spec.
Can you please explain ...
- 1
0
votes
1
answer
742
views
AP won't join WLC
I have a lightweight AP AIR-AP3802I-E-K9 that I'm trying to connect to my WLC, but it just won't.
When I run a debug on the WLC, I can see the Join request from my AP, and I can see my WLC sending a ...
- 33
-1
votes
1
answer
184
views
link asa with core switch to wlc
have 4 switch 3560 POE-8 , 2 of them have been RESET, AND w l c 2100 RESET too, but there are firewall AND ONE switch. Keeps the OLD CONFIG. I try to restore the network to the same old ...
- 9