When using the show nmsp status command im not seeing the cipher option, however I am also on 8.5.140 MSE IP Address Tx Echo Resp Rx Echo Req Tx Data Rx Data -------------- ------------ ----------- ------- ------- XXXXXX 242114 242114 9089556 8 Any idea? On CMX the controller is shown as inactive. Other WLCs work great.
... View more
We are doing a POC with 3850 as MA+MC. When the AP is in the wireless management VLAN, there is no issue, the AP joins the controller. However we want another VLAN to be used for the APs. Following errors on the console: *Sep 23 11:55:00.423: *spamApTask0: 2 wcm: %CAPWAP-3-DISC_WIRELESS_INTERFACE_ERR1: Unable to process discovery request from AP 5478.1a70.8bd0 , VLAN (30) scrIp (172.24.100.141) dstIp(255.255.255.255), could not get wireless interface belonging to this network Last join error summary Type of error that occurred last : Lwapp discovery request rejected Reason for error that occurred last : Missing AP Manager interface Why is he complaining about a AP-manager? This does not excist on 3850 correct? Relevant config: ! interface GigabitEthernet2/0/1 description "AP" switchport access vlan 30 switchport mode access switchport nonegotiate carrier-delay msec 0 spanning-tree portfast ! ! interface Vlan30 description AP ip address 172.24.100.137 255.255.255.248 ! ! interface Vlan50 description Mgmt ip address 172.24.100.169 255.255.255.248 ! wireless mobility controller wireless management interface Vlan50 ! ! ip dhcp pool AP network 172.24.100.136 255.255.255.248 default-router 172.24.100.137 dns-server 8.8.8.8 option 43 hex f104.ac18.64a9 ! Any ideas? Greetings Steven
... View more
Hello I have installed 1.2 and when guests login, they get the new (not improved imo) device registration portal, but the field where they have to enter the MAC adress is empty, I can remember it was prefilled in previous ISE versions. Is this normal beheavior on 1.2? I have configured calling station ID on MAC instead of IP, any other things that I need to configure to get this working? 90% of the users doesnt know what a MAC adress is, or where to find it. Greetings Steven
... View more
The problem seems only to occur when WDS is active. Something about LEAP and WDS that is not working on my configuration. UPDATE: Found the problem. The WDS Server Groups Client Authentication Profile needs to allow EAP authentication also, not only LEAP authentication.
... View more
Why do you say special config on top of 1.1.0.7? It is 1.1.0.7 without any extras I was trying to do Im gonna test your solution and find the difference.
... View more
Hello I am trying to configure repeater mode on an AP, but the authentication is not working. It seems the authentication is seen as EAP-TLS on the ACS 5.2, but im trying to do LEAP. Relevant config root AP: ! dot11 ssid Auto3 authentication open eap eap_methods authentication network-eap eap_methods1 guest-mode infrastructure-ssid ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid Auto3 ! Relevant config repeater AP: ! dot11 ssid Auto3 authentication network-eap eap_methods authentication client username otherAP password 7 104D000A0618 guest-mode infrastructure-ssid ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid Auto3 ! antenna gain 0 station-role repeater ! Full configs attached. Debugs on Root AP attached. Versions: Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1) - Repeater Cisco IOS Software, C1140 Software (C1140-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1) - Root
... View more
Hello there I have an ISE 1.1.1 setup, with a guest portal. The AD can be used to log onto this portal, and the Guest Portal Policy Configuration is on First Login. However, every time a AD user logs in on the portal, he has to accept the User Accept Policy. Is this a bug? Or is there a configuration error? Greetings
... View more
I have tested this, and the portal does work on the other interface, however, I cant login with the guests, Im getting an error about the session cache.
... View more