topic Re: AIR CAP 3602I-E-K9 configur in Wireless

AIR CAP 3602I-E-K9 configur

tony99982 — Mon, 05 Jul 2021 17:35:06 GMT

Hello,

Im having problems configuring my access point AIR CAP 3602I-E-K9.

I connected the AP with a POE (one connection 'TO AP' and other one 'TO SWITCH') to a switch which is connected to the main internet.

I can see the AP's IP address in terminal, but when I try to access that IP address in a webbrowser I can't get access.

My question is: How can I configure the AP?

I have an iMac.

Thanks in advance!

Tony

Re: AIR CAP 3602I-E-K9 configur

patoberli — Wed, 19 Jun 2019 15:03:59 GMT

You probably have a CAPWAP based AP. Can you show us please the full boot process with an attached console cable?
A CAPWAP based AP requires a WLC to function.
If it has a autonomous image you can configure it via Telnet/SSH.

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Wed, 19 Jun 2019 15:14:44 GMT

@patoberli wrote:
You probably have a CAPWAP based AP. Can you show us please the full boot process with an attached console cable?
A CAPWAP based AP requires a WLC to function.
If it has a autonomous image you can configure it via Telnet/SSH.

Hi, thanks but I don't have a console nor console cable, can't you configure/ reset the AP without that?

I've tried Telnet and this is what I got:

Trying 192.168.1.162...

telnet: connect to address 192.168.1.162: Connection refused

telnet: Unable to connect to remote host

SSH I tried as well and it asks for a Password, I tries Cisco with and without capitals, no luck

For resetting the AP, what I did is deconnect the ethernet cable, hold the Mode button then reconnet the ethernet cable, what I see is a blue light for 2 seconds, then rapidly flashing green lights for about 10 seconds, then a solid green light. But I cannot connect to reconfigure....

Re: AIR CAP 3602I-E-K9 configur

patoberli — Wed, 19 Jun 2019 15:57:31 GMT

For SSH you also have to supply the correct username. Did you use Putty or similar?

If you use a shell based ssh client, use the syntax Cisco@ipaddress and then supply the password Cisco.

Reset doesn't exactly work like that, look here for a manual:

https://popravak.wordpress.com/2014/08/26/resetting-cisco-capwaplwap-access-point-to-factory-defaults/

Depending on the model, you have to press the button for around 25 seconds, but not much more than 35.

I really suggest you get a Cisco console cable, as this will greatly help with troubleshooting in the future.

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Wed, 19 Jun 2019 16:04:25 GMT

@patoberli wrote:
For SSH you also have to supply the correct username. Did you use Putty or similar?

If you use a shell based ssh client, use the syntax Cisco@ipaddress and then supply the password Cisco.

Reset doesn't exactly work like that, look here for a manual:

https://popravak.wordpress.com/2014/08/26/resetting-cisco-capwaplwap-access-point-to-factory-defaults/

Depending on the model, you have to press the button for around 25 seconds, but not much more than 35.

I really suggest you get a Cisco console cable, as this will greatly help with troubleshooting in the future.

Thanks, when using SSH, I get this:

# ssh Cisco@192.168.1.162

Unable to negotiate with 192.168.1.162 port 22: no matching cipher found. Their offer: aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc

I think the AP has been reset because i cannot see it in programs like WIFI Explorer, so all I need to do is access it to set it up and I cant get into the AP, do you really need a console cable for this`?

Re: AIR CAP 3602I-E-K9 configur

craig.beck — Wed, 19 Jun 2019 21:05:27 GMT

A CAPWAP AP needs to be connected to a WLC. It won't allow you to configure it via the CLI, apart from priming it to set the WLC IP address.

Do you have a WLC? If not, you'll need to install the Autonomous version of code on it before you can configure it.

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Thu, 20 Jun 2019 04:33:27 GMT

@craig.beck wrote:
A CAPWAP AP needs to be connected to a WLC. It won't allow you to configure it via the CLI, apart from priming it to set the WLC IP address.

Do you have a WLC? If not, you'll need to install the Autonomous version of code on it before you can configure it.

Hi Craig, I don't have a WLC, so basically this AP is useless to me if I don't have a WLC? There is no other way to configure it?

Re: AIR CAP 3602I-E-K9 configur

patoberli — Thu, 20 Jun 2019 06:43:31 GMT

SSH Access should still be possible, even in CAPWAP mode, unless it was disabled on the WLC it was previously attached to. I think, but I'm not sure, it's enabled after a successful factory reset.

If you don't have a WLC, but a CAPWAP AP, you need to convert it to autonomous. This works best with a console cable.

See here for a somewhat old manual, but it should still work: https://community.cisco.com/t5/wireless-mobility-documents/lwapp-to-autonomous-conversion-and-vice-versa-on-access-points/ta-p/3121542

Please note, you need a SMARTNET contract for the AP to download software (or use google...).

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Thu, 20 Jun 2019 08:31:16 GMT

@patoberli wrote:
SSH Access should still be possible, even in CAPWAP mode, unless it was disabled on the WLC it was previously attached to. I think, but I'm not sure, it's enabled after a successful factory reset.

If you don't have a WLC, but a CAPWAP AP, you need to convert it to autonomous. This works best with a console cable.

See here for a somewhat old manual, but it should still work: https://community.cisco.com/t5/wireless-mobility-documents/lwapp-to-autonomous-conversion-and-vice-versa-on-access-points/ta-p/3121542

Please note, you need a SMARTNET contract for the AP to download software (or use google...).

Ok, thank you very much, this is too complicated for me, to convert it, using console cables (which I don't have) etc...

The AP is resetted I guess, because I don't see any signal in WIFI explorer for example, but nevertheless SSH doesn't work, access refused all the time. I was hoping there would be an easy way to configure the AP

Anyway, thank you very much for all your answers

Re: AIR CAP 3602I-E-K9 configur

patoberli — Thu, 20 Jun 2019 09:12:31 GMT

Not sure about the old models, but I thought they don't show any SSID until it has been configured via Console or probably SSH. The newer series (with Mobility Express Controller built-in) will show an SSID for configuration for sure.

But I guess you have to spend the 1$ for a console cable on Ebay.

Please note, this is an Enterprise model of an AP and not recommended for beginners, as they have a fairly high learning curve. The new series with Mobility Express are suitable also for beginners.

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Thu, 20 Jun 2019 09:16:04 GMT

@patoberli wrote:
Not sure about the old models, but I thought they don't show any SSID until it has been configured via Console or probably SSH. The newer series (with Mobility Express Controller built-in) will show an SSID for configuration for sure.

But I guess you have to spend the 1$ for a console cable on Ebay.

Please note, this is an Enterprise model of an AP and not recommended for beginners, as they have a fairly high learning curve. The new series with Mobility Express are suitable also for beginners.

Hi, thanks, buying the console cable is not the problem, the problem is where/ how do I connect this cable, I have an iMac to do this, the AP has a POE with one Ethernet cable to switch and other to the AP. How do I conect this console cable?

Re: AIR CAP 3602I-E-K9 configur

patoberli — Thu, 20 Jun 2019 09:49:31 GMT

Ah, then you also need an USB-Serial adapter, they are also fairly cheap. Make sure to buy an Apple compatible one...

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Thu, 20 Jun 2019 09:59:29 GMT

@patoberli wrote:
Ah, then you also need an USB-Serial adapter, they are also fairly cheap. Make sure to buy an Apple compatible one...

Ok, so if I have all these cables, what do I do?

I connect the consolde cable in the 'Console? part of the AP I guess, the other end I connect to the usb serial cable which I plugin to my iMac.

That's it? the 'Ethernet' socket of the AP stays empty?

And what program do I start when all is connected?

Re: AIR CAP 3602I-E-K9 configur

patoberli — Thu, 20 Jun 2019 10:54:32 GMT

You use some console program. OS X probably has one included, but I don't work with Apple. In any case, there are many, Putty for example. When you start it, you don't enter the IP address, you enter the Serial Port (often the number 1 or COM1). After that it works exactly like an SSH connection, albeit a bit slower. The other end of the serial cable comes into the AP serial port.

The Ethernet socket should also be connected, as you have now, for power reasons. It will also allow you to directly test the configuration.

Here an old configuration guide: https://www.cisco.com/c/en/us/support/docs/interfaces-modules/security-modules-routers-switches/116586-config-ap-00.html

Or this one: https://rscciew.wordpress.com/2014/05/24/single-ssid-configuration-on-autonomous-ap/

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Thu, 20 Jun 2019 11:02:39 GMT

@patoberli wrote:
You use some console program. OS X probably has one included, but I don't work with Apple. In any case, there are many, Putty for example. When you start it, you don't enter the IP address, you enter the Serial Port (often the number 1 or COM1). After that it works exactly like an SSH connection, albeit a bit slower. The other end of the serial cable comes into the AP serial port.

The Ethernet socket should also be connected, as you have now, for power reasons. It will also allow you to directly test the configuration.

Here an old configuration guide: https://www.cisco.com/c/en/us/support/docs/interfaces-modules/security-modules-routers-switches/116586-config-ap-00.html

Or this one: https://rscciew.wordpress.com/2014/05/24/single-ssid-configuration-on-autonomous-ap/

There is no serial port in the AP, only the console port which looks like an ethernet port, see pic

Re: AIR CAP 3602I-E-K9 configur

patoberli — Thu, 20 Jun 2019 12:12:31 GMT

Sorry for my wording, Console = Serial in Cisco terms.

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Fri, 21 Jun 2019 11:53:03 GMT

@patoberli wrote:
You use some console program. OS X probably has one included, but I don't work with Apple. In any case, there are many, Putty for example. When you start it, you don't enter the IP address, you enter the Serial Port (often the number 1 or COM1). After that it works exactly like an SSH connection, albeit a bit slower. The other end of the serial cable comes into the AP serial port.

The Ethernet socket should also be connected, as you have now, for power reasons. It will also allow you to directly test the configuration.

Here an old configuration guide: https://www.cisco.com/c/en/us/support/docs/interfaces-modules/security-modules-routers-switches/116586-config-ap-00.html

Or this one: https://rscciew.wordpress.com/2014/05/24/single-ssid-configuration-on-autonomous-ap/

I've come so far to get the cables and after entering these commands

'cd /dev^

'ls -ltr /dev/*usb*'

I found out what the port name is, then I type 'screen /dev/tty.NAME OF THE PORT'

A window opens called 'Terminal - screen/dev/name of the port'

But it's empty and nothing is happening....I don't know what I have to do next....

Re: AIR CAP 3602I-E-K9 configur

patoberli — Fri, 21 Jun 2019 12:58:51 GMT

So you have now a serial/console adapter connected to the mac?

Here is a manual, replace the 115200 with 9600. 9600 is the speed of the serial/console port. Cisco defaults this to 9600 on (nearly) all of their devices. Other settings: Data bits 8, Parity None, Stop bits 1, flow control disabled.

https://software.intel.com/en-us/setting-up-serial-terminal-on-system-with-mac-os-x

Not sure if your USB-Serial adapter is also named cu.usbserial-whatever or if it has a different name. I guess that is written in the manual of your adapter.

Here an alternative, graphical program: https://www.decisivetactics.com/products/serial/

Much more info here: https://apple.stackexchange.com/questions/32834/is-there-an-os-x-terminal-program-that-can-access-serial-ports

Re: AIR CAP 3602I-E-K9 configur

tony99982 — Fri, 21 Jun 2019 13:16:52 GMT

@patoberli wrote:
So you have now a serial/console adapter connected to the mac?

Here is a manual, replace the 115200 with 9600. 9600 is the speed of the serial/console port. Cisco defaults this to 9600 on (nearly) all of their devices. Other settings: Data bits 8, Parity None, Stop bits 1, flow control disabled.

https://software.intel.com/en-us/setting-up-serial-terminal-on-system-with-mac-os-x

Not sure if your USB-Serial adapter is also named cu.usbserial-whatever or if it has a different name. I guess that is written in the manual of your adapter.

Here an alternative, graphical program: https://www.decisivetactics.com/products/serial/

Much more info here: https://apple.stackexchange.com/questions/32834/is-there-an-os-x-terminal-program-that-can-access-serial-ports

Hi, Yes, so what I have done is the following

Installed the serial cable to my iMac.

Connected the usb to the serial cable and to my mac, the serial cable is in the 'console' port of the AP and the ethernet is connected to the PTY to have power.

Then I follow all the commands in terminal, putty, serial, but connection is always refused, serial app keeps 'connecting', SSH in terminal doesn't work, I don't know what to do now....Im not sure if it was you or some else told me to make it autonmous, but I have no clue how to do that.....I can't believe Cisco makes it so comlicated to simply access an AP to change SSID etc.....

Re: AIR CAP 3602I-E-K9 configur

patoberli — Fri, 21 Jun 2019 14:39:04 GMT

The thing is, you probably don't have such a model. I assume you have a company model that requires a wireless-controller (WLC) to work with.

In a typical company, with a working WLC, you would simply put that AP into the same VLAN as all the other APs, power it on and it works. Nothing to configure, because the WLC will push the configuration. That's it, it works. All the configuration is done on the WLC, you never ever connect to the individual AP (besides very rare debugging reasons).

That functionality uses the protocol CAPWAP (earlier called LWAPP). In this case the AP has a very small operating system (also named "image") without most administrative functions (as that is done on the WLC).

The alternative is the same AP, but with the Autonomous image. An Autonomous AP works without a WLC and offers full management functionality.

Here you find more details (the manual for the 2600 series should be identical to your 3600 model):

https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15_2_4_JB/configuration/guide/scg15-2-4-Book/scg15-2-4-chap4-first.html#44264

Now the thing is, if the AP was ever used together with a WLC and the software was at least once updated (which is nearly guaranteed), it now has only the CAPWAP image. That image requires the use of a working console connection to get access (if no WLC is available). Once that connection works, you can simply download a new Autonomous image via TFTP (or maybe FTP) onto the AP and reload it.