Login to the AP by typing the IP address of the AP thru the web browser.  Check in the DHCP what IP the AP got.   Then from there go to Wireless/WLAN   You can also install the APP in your PC. https://software.cisco.com/download/home/286311274/type/283453334/release/2.0.4   Reference: https://www.cisco.com/c/dam/en/us/td/docs/wireless/access_point/csbap/wap571_571E/QSG_WAP571/EN-US/Cisco_WAP571_Quick_Start_Guide_English.pdf     ... View more

To see the logs, you can go to: Management>Logs>Message Logs    But need to set the syslog level to debugging: I won't recommended this as it might cause high CPU and you can't trace back that far, rather have the logs be sent to a syslog server.   Management>Logs>Config>Buffered Log Level - Debugging   Sending to a syslog server: Management>Logs>Config>Syslog server - IP Syslog level - debugging   ***Please mark as an acceptable solution if it answers your question*** ... View more

Have a backup of your config as the fex 100 ethernet config might be lost. On the global config mode:     default interface Ethernet1/15 default interface Ethernet1/16 ! interface Ethernet1/15 channel-group 100 ! interface Ethernet1/16 channel-group 100 ! interface po100 switchport mode fex-fabric fex associate 100 ... View more

Another thing is, I see fex 100 on two ports Eth1/15 and Eth16. Nexus 2K-1 have 2 uplinks to 5K-1 right? You should port-channel it as well.  Have a back up of your config before doing it.   Example on how to do it, but do it during maintenance window as it will require network outage.   interface Ethernet1/15 channel-group 100 interface Ethernet1/16 channel-group 100 ! interface po100 switchport mode fex-fabric fex associate 100   to check: show fex show fex detail ... View more

Nathan, As you're doing NIC teaming on the server side, in the the Nexus side it should be a port-channel as well.   https://social.technet.microsoft.com/wiki/contents/articles/51163.windows-server-2016-nic-teaming-with-cisco-switch.aspx ... View more

I see "management" is configured in both interface vlan1 and interface vlan3.   Can you remove it?   interface vlan 1 no management interface vlan 3 no management     The management VRF is for management purposes only.     ... View more

You can see the password in plain text by: config passwd-cleartext enable   Then to disable: config passwd-cleartext disable   config paging disable grep include netuser "show run-config commands" ... View more

Since the 2 WLCs are new, you can export the config of WLC1 then import it to WLC2 and WLC3.  You just have to reconfigure the IP addresses in the interfaces and the hostname.      ... View more

Can you provide the running-config?  Just mask-out or delete username/password/community or anything you don't want to share. ... View more

Can you disable dhcp snooping globally?  DHCP snooping v alidates DHCP messages received from untrusted sources and filters out invalid messages.   no ip dhcp snooping     ... View more

DHCP config looks good. Can you provide the output of "show ip dhcp snooping"   I checked NX-OS version you have  7.2(3) N1(1) and didn't see it in the downloads.  Cisco might have removed it if it is not a stable version or is deferred.     Is it possible for you to upgrade to  7.3(5)N1(1)     ... View more

Most probably the 1242 AP certificate has expired, it has a 10 year validity.   You check this by issuing CLI command in the WLC.   config ap cert-expiry-ignore mic enable config ap cert-expiry-ignore ssc enable   Refer to: https://community.cisco.com/t5/wireless-mobility-documents/lightweight-ap-fail-to-create-capwap-lwapp-connection-due-to/ta-p/3155111   ***Please mark as an acceptable solution if it helped you***     ... View more

For DHCP issue.   Can you provide the output of the CLI commands below from Nexus:   show   running-config dhcp show ip dhcp relay     ... View more

Reason why I ask if you can turn on some dynamic routing protocol just to see if the inter-vlan routing is not working properly. If you can connect 2 test device like a laptop directly to 5k or 2k, assign to vlan 1 and vlan 3 and do connectivity test. If this works with no issue then the issue will be is on how nexus switchport and windows is configured.   You mentioned that you did nic teaming, is nexus configured as port-channel or vpc facing the Windows server?   Can you show run-config of nexus? And if you can provide a simple diagram. ... View more

Hi, You have to SSH to ME controller and issue the commands below through CLI.   config ap lan over-ride enable "AP NAME" config ap lan port-id 1 enable "AP NAME" config ap lan poe-out enable "AP NAME" config ap lan port-id 1 poe enable "AP NAME" config ap lan enable access vlan "vlan-id" "port-id" "AP NAME"       ***Please mark as accepted solution if it helped you."*** ... View more