Hi,   Those logs didn´t say much about anything. What are you looking at?  This question is important because look at WLC syslog, you go crazy with so many strange messages you´re going to see.         -If I helped you somehow, please, rate it as useful.- ... View more

Hi   PSK is hard to manage, mac filter is inefficient. Someone just need to capture some traffic and use a valid mac address to get in.  What you need is a portal where your users can input its data, create a password and use the network. You can even use Social media authentication depending on the solution you choose.   Considering the size of your company, probably your are not going to buy a fancy solution like Cisco ISE or similar. But, with a bit effort you can do something quite good using a linux machine with an open source solution. Search for "open source wifi guest portal" on Google and you end up with tons of option.   -If I helped you somehow, please, rate it as useful.- ... View more

Hi    Pretty straightforward. If we were talking about a very large environment, I´d recommend to pre-download AP images, but, that´s not the case.  Just go for it.   https://www.youtube.com/watch?v=vCFODVsEi64   https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68835-wlc-upgrade.html   -If I helped you somehow, please, rate it as useful.- ... View more

Hi  Are we talking about autonomous AP ou Controller based AP?  Either way the expected behavior should be:   " 802.11 stations, before transmitting in a DFS channel, must validate (by first listening for 60 seconds) that there is no radar activity on it.  And, if an 802.11 radio should detect radar while using the DFS channel, it must vacate that channel quickly.  Thus, if a radio should detect radar in its serving channel, then switch to another DFS channel, this will impose (at least) a one-minute outage."   "When an access point (AP) uses a DFS channel and a radar signal is detected, the AP will behave as follow:  Stops transmission of data frames on that channel Broadcasts an 802.11h channel-switch announcement. Disassociates clients Selects a different channel from the DCA (Dynamic Channel Assignment) list If the selected channel is not DFS then AP enables beacons and accepts client associations If the AP selects a DFS-required channel, it scans the new channel for radar signals for 60 seconds. If there are no radar signals on the new channel, the AP enables beacons and accepts client associations. If a radar signal is detected, the AP selects a different channel"  On the WLC is quite eady to setup it and let RRM to work for you.       -If I helped you somehow, please, rate it as useful.- ... View more

Hi   Do i need to purchase separate license (C1FPAIRK9) for each AP. Yes, per AP.   Do i need to buy DNA license? if yes then can i buy only for 1 year term. Are you going to deploy SD-WAN/SD-A ? If you do, then you need.   Moreover I want to know what is difference between model C1-AIR-CT3504-K9 and AIR-CT3504-K9. C1-AIR-CT3504-K9 - Perpetual License AIR-CT3504-K9 - Part Number.     -If I helped you somehow, please, rate it as useful.-   ... View more

Hi  On the WLC, go to the WIRELESS tab, select the 2.4 Ghz Radios. Find the referred AP and on the right hand side, on the blue triangle go to configure and enable the radio.  Keep in mind that, radio 2.4 ghz disabled often is required by design. Make sure this is not the case.     -If I helped you somehow, please, rate it as useful.-  ... View more

Hi  Don´t you have web interface? If you do, just go over the WLAN and on the Security tab, Layer 3, disable the web auth config.   -If I helped you somehow, please, rate it as useful.- ... View more

Hi  To which interface did you assign the IP address?  Can you share the output ?       -If I helped you somehow, please, rate it as useful.- ... View more

Hi   It was not exactly clear to me but I´d that this not related to the Wireless. I´ve seen things like this on my network as well but it was always security fault. Proxy, DNS (Umbrella) and perhaps Firewall are the most probably cause.      -If I helped you somehow, please, rate it as useful.-       ... View more

Hi,      A few thing you should be sure: - For those devices the pre-auth ACL is being delivered? You can see that with 'show client detail' - Are they getting the proper DNS? You can see that also on 'show client detail' -Are those device able to reach the DNS service?     If you thing that all the answers is YES then I dont see much you can do on the wireless infrastructure side. This might be a device problem.     -If I helped you somehow, please, rate it as useful.-  ... View more

Hi,     We can list some reasons for that. Coverage problem is one of them.  High channel utilization is a second one. Client driver also can be the problem.  Try to debug while moving and share the whole conversation with us.   -If I helped you somehow, please, rate it as useful.-    ... View more

Ah sorry, I was referring as wifi monitoring.        By Cisco definition, AP sensor means: "When in sensor mode, the radio inside the Access Point functions much like a client would establishing a connection to the network (as a WLAN client) to allow the following tests/functions to be performed. Network Client Connection On-Boarding Tests 802.11 Association 802.11 Authentication and Key Exchange IP Addressing DHCP (IPv4) General Network tests DNS (IPv4) RADIUS (IPv4) First Hop Router/Default gateway (IPv4) Intranet Host External Host (IPv4) Client Application tests"    In your situation, you are actually connect Sensor to the network using the Access Point, right?  Why it would be different from regular clients?    -If I helped you somehow, please, rate it as useful.- ... View more

Hi,    Looks like in flexconnect mode the client is not associating to the network. Which authentication method do you have?    I guest this can be some configuration.    -If I helped you somehow, please, rate it as useful.- ... View more