Hello,   I did an upgrade via commands application upgrade prepare ise-upgradebundle-1.4.0.253.x86_64.tar.gz upgrade application upgrade proceed and on the first sight the upgrade went through smoothly. However after reboot I'm getting an error about problems with redirect when accessing the admin page. I tried many different browsers, but the result is still the same. On clean installation from .iso the issue is not there.   Any idea how to fix this?   Thanks! K.   ... View more

Hi All,   has anybody made working SSO between two WLCs on this fw version?   I set it according to many guides available on the on the Internet, SSO enabled:   (czc-hat-mohel-3) >show redundancy summary             Redundancy Mode = SSO ENABLED                 Local State = ACTIVE                  Peer State = STANDBY HOT                        Unit = Primary                     Unit ID = A4:93:4C:B0:D0:E0            Redundancy State = SSO                Mobility MAC = A4:93:4C:B0:D0:E0 Management Gateway Failover = DISABLED             BulkSync Status = Complete Average Redundancy Peer Reachability Latency = 426 Micro Seconds   (czc-hat-mohel-3-Standby) >show redundancy summary             Redundancy Mode = SSO ENABLED                 Local State = STANDBY HOT                  Peer State = ACTIVE                        Unit = Secondary (Inherited AP License Count = 12)                     Unit ID = 7C:0E:CE:63:A8:40            Redundancy State = SSO                Mobility MAC = A4:93:4C:B0:D0:E0 Management Gateway Failover = DISABLED Average Redundancy Peer Reachability Latency = 419 Micro Seconds   But when I issue a command "redundancy force-switchover" it simply does not work.   Ping reply to management interface times out. Primary unit reboots and StandBy unit starts to respond on the management interface in about 30 - 40 seconds later on.   I suppose that it is not supposed to work like that.   Thanks!   K.   ... View more

Hi, does anybody know if there is en replacement for AIR-ANTMNTGKIT which is now EOL? Thanks!   K. ... View more

Hi, has anybody experience with settings DNS based ACL? We need to allow iPads / iPhones to allow Apple App Store, however they are using Akamai network for that. Since WLC support only 64 rules, it's impossible to add all the subnets. So I think, that the DNS based ACL can do it's job here. However it doesn't work as expected.   I put the string into the correct ACL:   URLs configured in this ACL --------------------------- *.apple.co   And when I tried with the client, the access is still denied.   Here is the detail for the client:   Policy Manager State............................. WEBAUTH_REQD Policy Manager Rule Created...................... Yes AAA Override ACL Name............................ MDMOnboarding AAA Override ACL Applied Status.................. Yes AAA Override Flex ACL Name....................... none AAA Override Flex ACL Applied Status............. Unavailable AAA URL redirect................................. https://x.x.x.x/mifs/c/d/clientdownload.html --More-- or (q)uit Audit Session ID................................. 0a9a05e10000072453e89a71 AAA Role Type.................................... none Local Policy Applied............................. none IPv4 ACL Name.................................... NoPrivateNetworks   And the Allowed (URL) IP Addresses are not populated as it should be.   --More-- or (q)uit       DNS server IP ............................. 194.228.41.113       DNS server IP ............................. 8.8.8.8 Assisted Roaming Prediction List details:  Client Dhcp Required:     True Allowed (URL)IP Addresses -------------------------   Does anybody have an idea?   WLC version is 7.6.120.0   Thanks!   K. ... View more