Hello there, Nothing special to add, except that for a theoretical data rate of 650 like mentionned by Patoberli, we generally calculate the real throughput as 50 to 65% of the theoretical data rate, meaning : Throughput for a theoretical 650 Mbps : 650 x 0.5 = 325 or 650 x 0.65 = 422.5 so your real throuput should be between 325 and 422.5 Mbps. Regards, Léo
... View more
Hello Sejelmohajj, I recently upgraded a WLC 5520 to 8.10.112.0 and didn't face that issue. Can you show the output of "show network summary" command ? Thank you, Léo
... View more
Hello, I am facing an issue and perhaps someone can help me here. I have a SDA fabric with 2 x 9800 in SSO cluster mode, 2 ISE in the LAN; configured for the 802.1x SSIDs (let's say they have IP address 10.0.0.12 and 10.0.0.13). We have configured these 2 ISE on the DNAC and it has been pushed on all our fabric devices, 9800 included. We also have 2 other PSN ISE in the DMZ (let's say 10.0.0.14 and 10.0.0.15) with guest portal, that we want to use for the guest redirection. We configured a template editor with the correct ACL, and we are well redirected, but we are facing Error 400, because the request is always sent to the LAN ISEs and not to the DMZ ISEs, so the portal is never showing. We tried to configure the ISE servers 10.0.0.14 and 10.0.0.15 manually on the 9800, and changed the configuration of the guest SSID to match a specific AAA method list which is linked to the DMZ ISE, but it's never working. On the client session on the 9800, we see that the good redirect URL is sent to the client, with IP address 10.0.0.14:8443, but on the ISE Radius live logs, we see that the 10.0.0.12 is always answering to the request ... Did someone face the same issue ? I hope I explained my issue correctly. Thank you. Léo
... View more
Hello experts, I am facing an issue. We have 2 x c9800-40 in SSO and added into the DNA Center. They are also part of our SDA fabric, running many SSID's as fabric WLANs. Since many days the c9800's are stuck in "partial collection failure" on the DNA Center, we first had an issue with netconf that is solved now, but I really don't get it. DNAC can access over SSH to the 9800s, when running a discovery on the DNA Center there is no problem, but the device still remains in "partial collection failure"... We just added a new c9800-CL to the DNA Center to make N+1 redundancy with the SSO cluster, and we had no issues. Did someone face a similar issue ? c9800 are in the latest IOS version : 16.12.01s. Thank you, Alex
... View more
Hello guys, Here we ave the exact same configuration but with a different VLAN and IP address, no way to get the WLC ping the Gateway... But when I turn interface GigabitEthernet1 to L* with no switchport, and assign the IP address to Gi1 it is working. I am running out of idea... Any idea ? Thank you. A.
... View more
Hello Cyptic, What you can try : - Verify the netconf status and port used (show netconf-yang status) - Try also to disable netconf-yang and reactivate it - test the netconf access from the DNAC Center CLI to the WLC (ssh -p <netconf> port <username@WLC IP address> -s netconf) Alex.
... View more
Hello Jesus.pavon, Well that's interesting, thanks for sharing. I currently have the following "aaa authentication login default group dnac-network-radius-group local" generated dynamically from the DNAC, and "dnac-network-radius-group" pointing to the ISEs. I think you had the same ?
... View more
Hello experts, I have a doubt regarding the Certainty factor on ISE. Let's suppose we have a default profiling rule which is Canon Device with one condition matching the Canon OUI and CF = 10 (Minimum CF = 10) 1st question : Now if I create a custom profiling rule with exactly the same rule, meaning the Canon OUI with CF = 10. Which one will match ? Is it alphabetic order or something else ? 2nd question : How the priority is done ? Let's suppose I have 2 profiling rules : - The first one contains 2 conditions: * the first with Canon OUI (CF = 10) * the second one is the dhcp-class-identifier that has to match ABC (CF = 10) * Minimum CF = 10 - The second one contains 3 conditions: * the first with Canon OUI (CF = 10) * the second one is the dhcp-class-identifier that has to match ABC (CF = 10) * the third one with MAC address starting with XYZ (CF = 10) * Minimum CF = 10 Which profiling rule will win ? I hope I am enough clear :) Thank you, A.
... View more
Hello experts, I plan to migrate a wifi infrastructure from Mobility Express to a controller C9800-CL and I have a doubt concerning the steps to follow. (There are 2 sites including one where I won’t be able to connect to AP’s over console as il is a remote site) Right now all AP’s are ME capable. Do I need to first convert AP’s to lightweight <=> non ME capable ? If yes, what about the AP which is the current WLC ? Can I convert it directly so it will join the C9800 ? I am afraid especially for the remote site, I do not want to loose hand on the AP’s... Thank you, A.
... View more
Hello,
Thank you for your answer. It's a new installation, not a migration from a standard campus to SDA, so it should be "easier". I had a look on the CVD, but there are not so much informations about OTT network.
By third party yes I mean non-cisco controller that will be used especially for a guest WLAN, my idea was to use OTT integration. Can you confirm that with OTT, it's the same as standard WLC integration, meaning the data traffic is going to the WLC over CAPWAP, and from the WLC dynamic interface the traffic should go the this third-party controller, right ?
Thank you.
... View more
.jpg "VIP Advocate"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
