topic Cisco Virtual Wireless Controller in Wireless

Cisco Virtual Wireless Controller

Murad* — Mon, 05 Jul 2021 16:21:56 GMT

i have Cisco Virtual Wireless Controller that are supported 3000 Access Points , and because this is my first try to work wit ( virtual ) device my query here , is this VM worked normally with AP1142n or not ?

and if there any tips can help me to dialing with this machine please guide me to it .

this logg from AP

*Oct 24 11:49:25.000: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.33.33:5246
*Oct 24 11:49:25.087: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Oct 24 11:49:25.087: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Oct 24 11:49:25.089: %LWAPP-4-CLIENTEVENTLOG: Not sending change state post as the radio admin is down, lrad state = 5
*Oct 24 11:49:25.090: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Oct 24 11:49:25.145: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Oct 24 11:49:26.086: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Oct 24 11:49:26.115: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Oct 24 11:49:26.119: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Oct 24 11:49:27.109: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Oct 24 11:49:27.114: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Oct 24 11:49:27.141: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Oct 24 11:49:27.145: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Oct 24 11:49:27.150: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Oct 24 11:49:28.140: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Oct 24 11:49:28.146: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Oct 24 11:49:28.171: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Oct 24 11:49:29.172: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Oct 24 11:49:35.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.33.33 peer_port: 5246
*Oct 24 11:49:35.483: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.33.33 peer_port: 5246
*Oct 24 11:49:35.484: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.3

Re: Cisco Virtual Wireless Controller

Murad* — Wed, 24 Oct 2018 12:45:49 GMT

and the AP cannot joined with controller till now and this logging stay appeared ?!

Re: Cisco Virtual Wireless Controller

balaji.bandi — Wed, 24 Oct 2018 13:39:17 GMT

what is the code version of vWLC, have you verified the release notes and supported devices ?

Re: Cisco Virtual Wireless Controller

pieterh — Wed, 24 Oct 2018 13:50:05 GMT

check the release notes of the software version, this specifies what devices are supported.

or check the wireless compatibility matrix

My guess is the 1140 series is not supported if the version is higher than 8.3

Re: Cisco Virtual Wireless Controller

Murad* — Wed, 24 Oct 2018 15:35:39 GMT

i checked it before posted here and the release supported 1142 , thanks .

Re: Cisco Virtual Wireless Controller

balaji.bandi — Wed, 24 Oct 2018 15:43:10 GMT

can we know what is the code of vWLC ? (another try asking same question).

Re: Cisco Virtual Wireless Controller

Murad* — Wed, 24 Oct 2018 16:09:12 GMT

sorry i didn't see your reply
did you mean Software Version is 8.2.170.0

Re: Cisco Virtual Wireless Controller

balaji.bandi — Wed, 24 Oct 2018 17:37:23 GMT

ok so there no other AP joined with this controller, this is your test environment to test.

can you console to ap and post sh version and 192.168.33.33 (is this vWLC IP ?)

if this this first time setup you need follow below guide to help you :

https://mrncciew.com/2013/03/17/ap-registration/

Re: Cisco Virtual Wireless Controller

Leo Laohoo — Wed, 24 Oct 2018 21:28:21 GMT

Post the complete output to the following commands:
1. vWLC: sh sysinfo;
2, vWLC: sh time;
3. AP: sh version; and
4. AP: sh ip interface brief

Re: Cisco Virtual Wireless Controller

Jurgens L — Thu, 25 Oct 2018 01:01:39 GMT

Check your time and date settings on the vWLC, the AP won't join if the vWLC is set to default (the year 2000).

Re: Cisco Virtual Wireless Controller

Murad* — Thu, 25 Oct 2018 09:37:27 GMT

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.2.170.0
RTOS Version..................................... 8.2.170.0
Bootloader Version............................... 8.3.15.96
Emergency Image Version.......................... 8.2.170.0

Build Type....................................... DATA + WPS

System Name...................................... Cisco12
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1631
IP Address....................................... 192.168.1.3
IPv6 Address..................................... ::
System Up Time................................... 0 days 20 hrs 22 mins 28 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... US - United States

--More-- or (q)uit

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

Burned-in MAC Address............................ 00:66:56:B6:4B:2E
Maximum number of APs supported.................. 3000
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1
Licensing Type................................... RTU
vWLC config...................................... Large

(Cisco Controller) >show time

Time............................................. Thu Oct 25 08:57:37 2018

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Polling Interval......................... 3600

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ----------------------------------------------------------------------------------------------
1 0 192.168.255.25 In Sync AUTH DISABLED

Ap:

sh ver
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JD, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 29-Jul-16 05:16 by prod_rel_team

ROM: Bootstrap program is C1140 boot loader
BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(23c)JA6, RELEASE SOFTWARE (fc1)

NOC uptime is 20 hours, 41 minutes
System returned to ROM by watchdog timer expired
System image file is "flash:/c1140-k9w8-mx.153-3.JD/c1140-k9w8-xx.153-3.JD"
Last reload reason:

Re: Cisco Virtual Wireless Controller

Murad* — Thu, 25 Oct 2018 09:30:00 GMT

i think this is the problem : WLC MIC Certificate Types........................ SHA1

where from i can change it to SH1/SH2 ?

Re: Cisco Virtual Wireless Controller

Leo Laohoo — Thu, 25 Oct 2018 10:05:43 GMT

I want to see the COMPLETE output to the AP command "sh version".
How many AP licenses have been activated?

Re: Cisco Virtual Wireless Controller

Murad* — Thu, 25 Oct 2018 11:37:31 GMT

this is the output of sh ver of one Active Access point but it work on another WLC ,because i have the same module if it work with you because i cant access to the AP that must be connected with the VWLC :

Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JD, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 29-Jul-16 05:16 by prod_rel_team

ROM: Bootstrap program is C1140 boot loader
BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(23c)JA6, RELEASE SOFTWARE (fc1)

NOC uptime is 22 hours, 38 minutes
System returned to ROM by watchdog timer expired
System image file is "flash:/c1140-k9w8-mx.153-3.JD/c1140-k9w8-xx.153-3.JD"
Last reload reason:

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-LAP1142N-E-K9 (PowerPC405ex) processor (revision A0) with 98294K/32768K bytes of memory.
Processor board ID FCZ1635W0PS
PowerPC405ex CPU at 586Mhz, revision number 0x147E
Last reset from watchdog timer expired
LWAPP image version 8.3.102.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: F8:72:EA:6F:F3:C6
Part Number : 73-13303-02
PCB Serial Number : FOC17221EQ7
Top Assembly Part Number : 800-29230-03
Top Assembly Serial Number : FCZ1635W0PS
Top Revision Number : A0
Product/Model Number : AIR-LAP1142N-E-K9

Re: Cisco Virtual Wireless Controller

Murad* — Thu, 25 Oct 2018 13:09:30 GMT

*Oct 25 13:08:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.33.33 peer_port: 5246
*Oct 25 13:08:23.002: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_handshake.c:94 First fragment for seq 2 is missing
*Oct 25 13:08:23.002: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_handshake.c:94 First fragment for seq 2 is missing
*Oct 25 13:08:23.003: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_handshake.c:94 First fragment for se33

Re: Cisco Virtual Wireless Controller

Murad* — Thu, 25 Oct 2018 16:22:44 GMT

OK , i solved this problem by Activate the certificate and AP joined with VWLC normally but i cant broadcast the SSID and i dont know what is the reason of that , this is the output of AP :
APd0d0.fdcb.a0bf#sh ip int br
Interface IP-Address OK? Method Status Protocol
BVI1 192.168.33.13 YES DHCP up up
Dot11Radio0 unassigned NO unset administratively down down
Dot11Radio1 unassigned NO unset up up
GigabitEthernet0 unassigned NO unset up up

Re: Cisco Virtual Wireless Controller

Leo Laohoo — Thu, 25 Oct 2018 21:17:38 GMT

@Murad* wrote:
Product/Model Number : AIR-LAP1142N-E-K9

APs got the wrong Regulatory Domain. This AP has the Regulatory Domain of "-E". This is EUROPE.

vWLC is configured for the US.

Re: Cisco Virtual Wireless Controller

Jurgens L — Thu, 25 Oct 2018 22:35:22 GMT

As mentioned by Leo, your WLC is configured for the US regulatory domain, where your AP is for Europe. Under AP details, check under advanced and ensure the correct country code is selected.