We are doing a POC with 3850 as MA+MC. When the AP is in the wireless management VLAN, there is no issue, the AP joins the controller. However we want another VLAN to be used for the APs. Following errors on the console: *Sep 23 11:55:00.423: *spamApTask0: 2 wcm:  %CAPWAP-3-DISC_WIRELESS_INTERFACE_ERR1: Unable to process discovery request from AP 5478.1a70.8bd0 , VLAN (30) scrIp (172.24.100.141) dstIp(255.255.255.255), could not get wireless interface belonging to this network  Last join error summary   Type of error that occurred last                        : Lwapp discovery request rejected   Reason for error that occurred last                     : Missing AP Manager interface Why is he complaining about a AP-manager? This does not excist on 3850 correct? Relevant config: ! interface GigabitEthernet2/0/1 description "AP" switchport access vlan 30 switchport mode access switchport nonegotiate carrier-delay msec 0 spanning-tree portfast ! ! interface Vlan30 description AP ip address 172.24.100.137 255.255.255.248 ! ! interface Vlan50 description Mgmt ip address 172.24.100.169 255.255.255.248 ! wireless mobility controller wireless management interface Vlan50 ! ! ip dhcp pool AP network 172.24.100.136 255.255.255.248 default-router 172.24.100.137 dns-server 8.8.8.8 option 43 hex f104.ac18.64a9 ! Any ideas? Greetings Steven ... View more

Hello I have installed 1.2 and when guests login, they get the new (not improved imo) device registration portal, but the field where they have to enter the MAC adress is empty, I can remember it was prefilled in previous ISE versions. Is this normal beheavior on 1.2? I have configured calling station ID on MAC instead of IP, any other things that I need to configure to get this working? 90% of the users doesnt know what a MAC adress is, or where to find it. Greetings Steven ... View more

Hello I am trying to configure repeater mode on an AP, but the authentication is not working. It seems the authentication is seen as EAP-TLS on the ACS 5.2, but im trying to do LEAP. Relevant config root AP: ! dot11 ssid Auto3    authentication open eap eap_methods    authentication network-eap eap_methods1    guest-mode    infrastructure-ssid ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid Auto3 ! Relevant config repeater AP: ! dot11 ssid Auto3    authentication network-eap eap_methods    authentication client username otherAP password 7 104D000A0618    guest-mode    infrastructure-ssid ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid Auto3 ! antenna gain 0 station-role repeater ! Full configs attached. Debugs on Root AP attached. Versions: Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1) - Repeater Cisco IOS Software, C1140 Software (C1140-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1) - Root ... View more

Hello there I have an ISE 1.1.1 setup, with a guest portal. The AD can be used to log onto this portal, and the Guest Portal Policy Configuration is on First Login. However, every time a AD user logs in on the portal, he has to accept the User Accept Policy. Is this a bug? Or is there a configuration error? Greetings ... View more