Hey @zax have You found the solution?   I did complete reinstallaton like 5 times already , tried different firepower versions - but no success. All interfaces are administratively down (including management interface) and I have no access to Firewall except console... ... View more

If Your access point is in CAPWAP (not autonomous) mode, by default You can't use SSH or Telnet to connect. Do You have wireless LAN controller for CAPWAP AP to connect? If no, check this guide how to convert AP image to autonomous: https://supportforums.cisco.com/document/57476/lwapp-autonomous-conversion-and-vice-versa-access-points Default console login, as Rasika said: Cisco / Cisco   ... View more

As I see in the bug notes it's written: Affected releases: 8.0(110.0) Probability of 2504s being impacted is significant; probability of 5508/WiSM2 being impacted is much smaller. Workaround:Replace the WLC. Why this release is still not deferred? Our customer lost two WLC 2504 the same day! ... View more

Install MSE 10.0   It was released a week ago. ... View more

Hey Buddy! It works! I just found this discussion like 10 hours ago... rebuild all my lab environment from scratch (except ISE) , tried to replace ISE root CA certificate chain as told, and Internal CA works again! Thank You very much! Great timing! :) ... View more

"I also wanted to know light weight AP's can they be configured through CLI by putting serial cable?" Lightweight APs are managed and configured via WLC. However, Your AP first needs to find WLC. Leo example above, shows how AP can find WLC by using DHCP (dhcp option 43). Through CLI, with serial cable, You can use this command to assign WLC for AP: "capwap ap controller IP address x.x.x.x"   ... View more

Prime Infrastructure 2.2. needs to reach WLC via SNMP. Is this configured? On Prime go to: Services -> Mobility Services -> Synchronize services. Select Your maps, click on "Change MSE assigment" and assign Your MSE. Click on controllers tab on the right, select Your WLC, click on "Change MSE assigment", Select Your MSE and click "synchronize". Go here: Services > Mobility Services Engines > mse> System > Status > NMSP Connection Status > NMSP Connection Status Details . Please check, is NMSP Status "Active" ?     ... View more

Thanks Nicolas! As I understand, FlowSpec is just BGP extension for distributed rules/acl's/blackholing... We should use a FlowSpec server (with NetFlow collector) in order to detect and inject forwarding rules (dynamically when necessary).  Is there a full solution, I mean what server/software we should use here in order to detect and mitigate DDoS attacks? Thanks! ... View more