Switch 3850 doesn't take wlan config.

[DanyRuiz]

Hi,

I have a 3850 switch (running  03.03.05SE) operating as WLC but it doesn´t take any configuration related to a SSID.

After a power failure it set the SSID to default configuration and I can´t reconfigure it (web or CLI). 

I tried to create a new wlan but it didn´t work too.

Thanks.

[Rasika Nayanajith]

Pls share the CLI configuration related to this WLAN configs.

I am running 3.6.3E code in my production and did not encounter this sort of issues.

HTH

Rasika

[DanyRuiz]

Hi Rasika,

Current config:

wlan pfr-WLAN 1 WLAN
 client vlan wireless
 no security wpa akm dot1x
 session-timeout 1800
 shutdown

After applying the following commands, wlan config doesn´t change.

security wpa wpa2 ciphers aes
security wpa akm psk set-key ascii 0 test798$
no shutdown

% switch-1:wcm:Invalid WLAN configuration. Either dot1x or psk authentication must be configured under wpa.

Thanks.

[Christos Stefaneskou]

Hi,

It's a known issue, bug CSCus85866.You need to configure key obfuscate or reset your switches to defaults.

conf t

passwd key obfuscate

Regards

Christos

[Rasika Nayanajith]

Hi Chris,

Could you share the bug details, I cannot see it due to permission restrictions, what codes affected. I did not have this on 3.6.x codes which I deployed.

HTH

Rasika

[Christos Stefaneskou · Accepted solution]

Hey Mate,

I hit this bug 2 weeks ago on my 3850 stack running version 3.6.3.

Below you can find the answer from TAC engineer: 

This is a known issue and the following bug filed:

CSCus85866    

Invalid Wlan configuration error when trying to change AKM to PSK 

<B>Symptom:</B>

Error when attempting to change AKM to PSK, in wlan configuration.

% switch-2:wcm:Invalid WLAN configuration. Either dot1x or psk

authentication must be configured under wpa

<B>Workaround:</B>

Reset appliance to defaults or configure passwd key obfuscate

Seems that the bug details are not public available that's why don't have sufficient permissions.

Regards

Christos

[Rasika Nayanajith]

Thanks for sharing this info chris.

[DanyRuiz]

Hey Chris,

Thanks for this information.

The key obfuscate configuration didn't work for me.

Regards.

[ravi570224]

Hello Christos,

"passwd key obfuscate" on code 03.06.04.E worked for me.

Thank You very much.

Regards,

Ravi...

[Rasika Nayanajith]

Hi

What code version you running ?

3850-1(config-wlan)#security wpa                           
3850-1(config-wlan)#security wpa wpa2 ciphers aes 
3850-1(config-wlan)#no security wpa akm dot1x 
3850-1(config-wlan)#security wpa akm psk set-key ascii 0 Cisco123

Did you try above ? Note that additional "security wpa" line that was not there in your config. Here is my reference

http://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

HTH

Rasika

[DanyRuiz]

Hi,

I'm running 3.3.5SE.

I tried all commands above but there is no change.

Thanks.