topic Re: WiSM rebooting randomly in Wireless

WiSM rebooting randomly

Victor Fabian — Sun, 04 Jul 2021 00:35:49 GMT

I have 3 WiSMs two of them (WiSM-a and WiSM-b) are seated on the CORE1 switch (6509) and the WiSM-c is seated on CORE2 also a 6509 .

One of the controllers from WiSM-a/b keeps rebooting let's called it Con-1a and Con-2b reboots but usually more than the other one the controllers (WiSM located on CORE2 never reboot .

Both COREs have the same software code. The WiSM have been online for about a year with 4.2.99.0 version and they never rebooted until 3 months from now so a Cisco Tech suggested upgrading to 4.2.176.0 but it keeps doing it .

""IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF9, REL"

Thank you

Vic

Re: WiSM rebooting randomly

George Stefanick — Thu, 14 May 2009 04:08:09 GMT

check the crash logs on the controller ... do these show anything?

Re: WiSM rebooting randomly

Victor Fabian — Thu, 14 May 2009 12:09:08 GMT

It doesn't show anything , somebody suggested removing the service vlan from all the trunks but that didn't help .

Could SSH cause problems on the Wireless controllers ??

Re: WiSM rebooting randomly

Victor Fabian — Thu, 14 May 2009 12:20:33 GMT

Does anybody knows what debug i can use to troubleshoot what the controllers does while i am login through SSH ?

Re: WiSM rebooting randomly

jeff.kish — Thu, 14 May 2009 12:28:09 GMT

Hate to say it, but debugs are really Cisco TAC's specialty. Not a lot of forum users really know detailed debugs like what you're looking for.

What you have may well be a hardware issue that requires a replacement. I'd open a TAC case and see where it goes.

Sorry for not being able to help 😕

Re: WiSM rebooting randomly

b.smeets — Fri, 15 May 2009 08:08:04 GMT

We experienced exactly the same problem for months, driving us and Cisco crazy. The cause is an as yet unsolved ssh bug in all codes up to and including at least 4.2.176.0. Cisco told us we were almost the only user in the world having this problem, so I'm "glad" here's another victim. Try this workaround: enable an ACL in the controllers, blocking all ssh traffic (TCP port 22) from 'any' to the controller's interface in all VLANs associated to wireless clients.

Re: WiSM rebooting randomly

Victor Fabian — Fri, 15 May 2009 12:08:18 GMT

But did that completely resolve the issue???

Because this is driving me nuts

Re: WiSM rebooting randomly

ericgarnel — Fri, 15 May 2009 12:25:27 GMT

How was this workaround discovered? It sounds like this bug could be a huge security issue! Have you tested whether or not ssh traffic from a wlan to the controller has an impact?

Re: WiSM rebooting randomly

ericgarnel — Fri, 15 May 2009 12:30:09 GMT

4.2.205.0 is now available for download.

I haven't read the rel notes yet, but it may be worth checking into

Re: WiSM rebooting randomly

Victor Fabian — Fri, 15 May 2009 12:39:11 GMT

What is the purpose of TCP port 22 ?

Re: WiSM rebooting randomly

b.smeets — Fri, 15 May 2009 13:37:34 GMT

Well, the controllers have never crashed since then, so for me it's over. But Cisco never told us if they resolved the bug yet.

Re: WiSM rebooting randomly

b.smeets — Fri, 15 May 2009 13:46:21 GMT

It took Cisco's TAC people months of studying several crash files and reproducing our configuration in their labs, and only the fifth (or so) patch at last worked. And speaking of security, we noticed many many ssh connections from the wired Internet to this controller port which apparently slipped through the firewall - you might call it a continuous DoS attack that every few weeks succeeds. So, a hole in our firewall revealed an obscure ssh bug in the controllers. Ssh connections from the WLAN did not seem to have any impact.

Re: WiSM rebooting randomly

b.smeets — Fri, 15 May 2009 13:53:48 GMT

Logging in to the controller's console using ssh (instead of telnet) for management purposes. Usually you use http or manage controllers via the WCS, but some management commands can only be issued from the console. But then you connect to the controller's management IP address, never to its WLAN interface address, so shutting off this WLAN interface for ssh is shutting off something you don't need.

Re: WiSM rebooting randomly

Victor Fabian — Fri, 15 May 2009 14:53:39 GMT

Can you please provide me the command that you use to implement it ?

thank you

Vic

Re: WiSM rebooting randomly

b.smeets — Mon, 18 May 2009 08:51:43 GMT

We've done it from the WCS. Here are the relevant screenshots. For 'IP address' you should fill in the controller's address in the wireless clients' subnet, not the management subnet.

Re: WiSM rebooting randomly

Victor Fabian — Tue, 19 May 2009 11:36:17 GMT

What do you mean by this ?

For 'IP address' you should fill in the controller's address in the wireless clients' subnet .

Re: WiSM rebooting randomly

Victor Fabian — Tue, 19 May 2009 17:43:46 GMT

So do you mean that if i have 5 segments for the client side i need to put the IP address of the controller from each segment ??

Thank you

VIc

Re: WiSM rebooting randomly

Victor Fabian — Wed, 20 May 2009 18:12:25 GMT

Do you know by any chance :

What ssh traffics is generated into the wlc

in another word where is it coming from?

Thank you

Vic

Re: WiSM rebooting randomly

b.smeets — Tue, 26 May 2009 12:50:00 GMT

Suppose your wireless clients are in 10.13.15.0/24 and the controller's address in this subnet is 10.13.15.1. Then the 'destination IP/Mask' in the ACL rule should be 10.13.15.1/255/255/255/255.

Re: WiSM rebooting randomly

b.smeets — Tue, 26 May 2009 12:51:25 GMT

Correct, you'll have 5 deny-rules then.