Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Saravanan Lakshmanan
Stats
Member since
08-20-2011
1136
Posts
1321
Helpful
123
Solutions
Created by
Saravanan Lakshmanan
in Wireless Security and Network Management
in Wireless Security and Network Management
02-13-2018
03:15 PM
02-13-2018
03:15 PM
show msglog, show traplog on wlc shows logs since last log reset.
Message log and traplog holder on WLC is very limited as new logs will append while old logs gets deleted.
https://mrncciew.com/2013/02/06/syslog-msg-log-in-wlc/
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-08-2018
10:55 AM
02-08-2018
10:55 AM
Correct, you got it! please rate useful post and mark as answered to help others, Thanks!
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-08-2018
09:56 AM
02-08-2018
09:56 AM
yes, that's an old document. Follow the steps from 8.0.152.0 release notes. https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn80mr5.html#pgfId-1162565
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-08-2018
09:50 AM
02-08-2018
09:50 AM
On quick search, i see this link from CDW as an example. you can explore, call and check to confirm the product, pricing and support coverage level to find it suit or not. https://www.cdw.com/product/Cisco-Aironet-2802I-wireless-access-point/4098916?RecommendedForEDC=00000001&recoType=RS&cm_sp=Search-_-Session&ProgramIdentifier=3 https://www.cdw.com/product/Cisco-SMARTnet-extended-service-agreement/4099942
... View more
- Tags:
- Thanks.
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-08-2018
09:16 AM
02-08-2018
09:16 AM
Dear Aldebaran18 No need to get angry :) or offended. Its not ethical to ask to share the latest/any image(that require contract purchases) in this community from other members as this forum is controlled and managed by Cisco(with all the agreement that you signed when you signup). It can get you blocked from forum for this behavior! You need the smartnet contract(Ex: Buy from CDW) to download old/new images as CCO documented. Also, with all due respect, please be mindful on your replies! Regards Saravanan
... View more
Re: 1130 and 1242 AP not joining contro...
in Wireless and Mobility
02-08-2018
08:22 AM
02-08-2018
08:22 AM
now try updating vWLC code to 8.0.140.0. Workaround: deploy a new vWLC using an older ova file (i.e. 8.0.121.0 ova file) then upgrade the controller to 8.0.140.0
... View more
Created by
Saravanan Lakshmanan
in Wireless Security and Network Management
in Wireless Security and Network Management
02-08-2018
08:12 AM
02-08-2018
08:12 AM
1) yes. (respective traps needs to be enabled under trap control.) 2) To protect from any infrastructure device that's not-part(cisco/non-cisco) of your network. 3) need to troubleshoot and find out what's going on!
... View more
Created by
Saravanan Lakshmanan
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-08-2018
08:07 AM
02-08-2018
08:07 AM
No, its related to 2800/3800 platform as mentioned in bug caption. CSCve57121 Cisco 3800 AP is not passing traffic CSCvc67005 Cisco 2802 AP drops client ARP packets Please rate useful post to help others. Thanks!
... View more
Re: Continued Re-Association
in Wireless Security and Network Management
02-07-2018
11:28 PM
02-07-2018
11:28 PM
Do we observe rogue containment traps in WLC. check client connectivity traps to understand the impact. With CCX5 and the Cisco MFP, Cisco clients in Cisco networks will be immune against this type of containment.
... View more
Re: 1130 and 1242 AP not joining contro...
in Wireless and Mobility
02-07-2018
11:17 PM
02-07-2018
11:17 PM
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc58140
Bug Search Tool
Bug Search
CSCvc58140
Help | Feedback
1242 APs fails to join vWLC deployed with 8.0.140.0 OVA
CSCvc58140
Description
Symptom: Below errors will be seen on AP console during DTLS establishment: *Nov 11 18:07:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: x.x.x.x peer_port: 5246 *Nov 11 18:07:36.033: Failed to get CF_CERT_ISSUER_NAME_DECODEDPeer certificate verification failed 000B *Nov 11 18:07:36.038: %CAPWAP-3-ERRORLOG: Certificate verification failed! *Nov 11 18:07:36.038: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed! *Nov 11 18:07:36.038: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to x.x.x.x:5246 *Nov 11 18:07:36.039: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to x.x.x.x:5246 *Nov 11 18:07:36.040: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination. Conditions: vWLC deployed with 8.0.140.0 OVA Workaround: deploy a new vWLC using an older ova file (i.e. 8.0.121.0 ova file) then upgrade the controller to 8.0.140.0 Further Problem Description:
Customer Visible
Notifications
Save Bug
Open Support Case
View Bug in CDETS
Was the description about this Bug Helpful?
(0)
Details
Last Modified:
Jan 12,2018
Status:
Terminated
Severity:
3 Moderate
Product:
(1)
Cisco 5500 Series Wireless Controllers
Known Affected Releases:
(1)
8.0(140.0)
Known Fixed Releases:
(0)
No release planned to fix this bug
Download software for Cisco 5500 Series Wireless Controllers
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-07-2018
10:46 PM
02-07-2018
10:46 PM
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-5/b_cisco_mobility_express_8_5/b_cisco_mobility_express_8_5_chapter_0111.html
dding Access Points to Cisco Mobility Express Network
When adding Access Points to Cisco Mobility Express network, the following have to be considered:
Software Version on the Access Point–If the software version of the access point, which is being added, is different than what is on the Master AP, a software download of the code running on the Master Access Point has to happen on the Access Point being added. For the new Access Point to download the code that is running on the Master Access Point, one of the following has to be configured:
TFTP server details and the Access Point images path information has to be configured on the Software Update page.
If the Master AP has 8.3.102.0 or later code, one can configure the Cisco.com login credentials on the Software Update page and the code on the new Access Point will be automatically downloaded from cisco.com when an Access Point joins.
Note
For Software download to take place directly from Cisco.com, the Master AP should be the one with the SMARTNet Contract.
Procedure
Step 1
Download the Access Point image zip file from cisco.com on a TFTP server. The bundle version must be the same as the one running on the Master AP. Unzip the file to extract the individual Access Point images.
Step 2
Navigate to Management > Software Update. Select TFTP for Transfer Mode and configure the TFTP Parameters.
(OR)
Step 3
Navigate to Management > Software Update. Select Cisco.com as the Transfer Mode and configure parameters related to the Cisco.com user account.
Step 4
Connect the AP to the network. When the AP boots up, it obtains an IP address from the DHCP server. If the AP version matches the one on Master AP, it joins. However, if the version on the AP being added is different than then one on the Master AP, it starts to download the image from either the configured TFTP server or cisco.com. After the image download is complete, the AP will reboot and join the Master AP.
Note
During the image download there is no service interruption. After the image download is complete, the AP automatically re-boots and join the Master AP.
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-07-2018
10:21 PM
02-07-2018
10:21 PM
//It appears, AP trying to send discovery to WLC through one of WLC's dynamic interface. //what's the AP trying WLC ip to join --> Is it WLC's mgmt ip or One of its dynamic interface ip configured in WLC. //If AP trying to join the WLC via Dynamic interface ip then on that dynamic interface make sure to enable - "Enable Dynamic AP Management" to activate AP-Management on the dynamic interface, however, it requires AP to have access to both mgmt and dynamic interface OR Make sure AP trying to join via management ip.
... View more
Created by
Saravanan Lakshmanan
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-07-2018
10:40 AM
02-07-2018
10:40 AM
AP#show controller d0/d1 The Band Steering portion of show controller is only displayed when Band Steering is enabled. The following shows typical output for the Band Steering portion of show controller: Probes Active Count Lru Stale Band Assoced 2.4Ghz Blocked Age 1ce6.2bc8.xxxx 0 1 13C536 0 2 0 bc3b.af30.xxxx 0 2 13AA0B 0 2 61 1040.f305.59f0 0 1 13C81B 0 2 Y 0 b079.9497.4f9b 0 1 138C28 0 2 0 001e.6576.4208 0 2 13C6DB 0 2 5 Y 53 a8fa.d801.1689 0 1 123078 0 2 5 0 0016.a4fe.43e1 0 1 137CEB 0 2 0 ace2.1591.b808 0 1 12438B 0 2 0 0026.c66f.6af8 0 1 123425 0 2 0 7c11.be29.2076 0 1 13B3A3 0 2 0 1068.3f3e.d797 0 1 C41A6 0 2 Y 0 Conf rssi 80 interval 200 count 2 age 20 dual age 60 Dual num 3, added 15635, aged 15632, replaced 0 Suppress num 512, aged 8601636, replaced 6028
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-07-2018
09:14 AM
02-07-2018
09:14 AM
Regards shell/devshell access to WLC were there in past for internal access only and removed lately considering security issues/vulnerabilities. We've equivalent external commands these days on critical cases to manage/contain.
... View more
Created by
Saravanan Lakshmanan
in Wireless and Mobility
in Wireless and Mobility
02-07-2018
08:32 AM
02-07-2018
08:32 AM
I've this dump(from past) about AireOS WLC's flash.
(Cisco Controller) >test system disk-usage (Cisco Controller) >test system dir /mnt (Cisco Controller) >test system dir /mnt/ap_bundle (Cisco Controller) >test system dir /mnt/bootsys (Cisco Controller) >test system dir /certs (Cisco Controller) >test system dir /mnt/application (Cisco Controller) >test system dir /mnt/images
**** (Cisco Controller) >test system disk-usage Filesystem Size Used Available Use% Mounted on none 392.6M 80.0k 392.5M 0% /var/run none 392.6M 52.0k 392.5M 0% /var/tmp /dev/cfa3 69.5M 25.4M 40.6M 38% /mnt/application /dev/cfa2 625.4M 387.6M 206.0M 65% /mnt/images /dev/cfa1 247.0M 16.3M 218.2M 7% /mnt/bootsys /dev/loop3 110.0k 51.0k 53.0k 49% /root/.csl /dev/ram3 122.0k 11.0k 111.0k 9% /root/.csl_tmp tmpfs 40.0M 0 40.0M 0% /mnt/ap_bundle
(Cisco Controller) >test system dir /mnt drwxrwxrwt 5 root root 100 Oct 11 18:04 ap_bundle drwxr-xr-x 8 root root 4096 Oct 11 18:04 application drwxr-xr-x 2 root root 4096 Oct 11 14:18 bootsys drwxr-xr-x 2 root root 0 Oct 11 18:04 core drwxr-xr-x 2 root root 0 Jan 1 1970 download drwxr-xr-x 4 root root 4096 Oct 11 13:21 images
(Cisco Controller) >test system dir /mnt/ap_bundle drwxr-xr-x 2 root root 40 Oct 11 18:04 ap.bak drwxr-xr-x 2 root root 40 Oct 11 18:04 ap.pri drwxr-xr-x 2 root root 40 Oct 11 18:04 temp
(ngwc-talwar-01) >test system dir /mnt/bootsys
-rw-r--r-- 1 root root 256 May 22 16:57 System_header.txt
-rw-r--r-- 1 root root 176887 Oct 11 18:01 msgtraplog_file.log -rw------- 1 root root 11776140 May 22 16:54 core =======> Coredump of last crash -rw-r--r-- 1 root root 77 May 22 16:54 coreInfo -rw-r--r-- 1 root root 225 May 22 16:54 core_ftp_prog_info.crash -rw-r--r-- 1 root root 1112 May 22 16:54 last_received_pkts2_DP0.pcap -rw-r--r-- 1 root root 1140 May 16 17:43 last_received_pkts3_DP0.pcap -rw-r--r-- 1 root root 1006 May 14 20:16 last_received_pkts4_DP0.pcap -rw-r--r-- 1 root root 856 May 14 19:43 last_received_pkts5_DP0.pcap -rw-r--r-- 1 root root 131071 May 22 16:54 mwar_dump2.crash ======> Crash log1 -rw-r--r-- 1 root root 45746 May 16 17:43 mwar_dump3.crash ======> Crash log2 -rw-r--r-- 1 root root 44938 May 14 20:17 mwar_dump4.crash ======> Crash log3 -rw-r--r-- 1 root root 131071 May 14 19:44 mwar_dump5.crash ======> Crash log4 -rw-r--r-- 1 root root 1202 May 14 16:22 mwar_exit.log -rw-r--r-- 1 root root 361 May 22 16:54 mwar_ms_deadlock.crash -rw-r--r-- 1 root root 383 May 22 16:54 mwar_rad_deadlock.crash -rw-r--r-- 1 root root 910 May 22 16:54 mwar_seminfo.crash -rw-r--r-- 1 root root 46426 May 22 16:54 talwardp2_DP0.crash ======> DP Crash log1 -rw-r--r-- 1 root root 25153 May 16 17:43 talwardp3_DP0.crash ======> DP Crash log2 -rw-r--r-- 1 root root 25482 May 14 20:16 talwardp4_DP0.crash ======> DP Crash log3 -rw-r--r-- 1 root root 131149 May 14 19:44 talwardp5_DP0.crash ======> DP Crash log4 -rw-r--r-- 1 root root 63265 May 22 16:54 wlc_pow_DP0.crash
#AireOS can keep last 4 CP crash files and last 5 DP crash files. And last coredump of the crash. Ring buffer mechanism is used, the oldest file gets deleted to make room for newer crash.
#To verify coredump and crashlog is properly getting updated or not. There is an way to crash the WLC for testing the same. It simulates control plane crash.
(Cisco Controller) >test system crash
WARNING!! You may lose all unsaved config.. Do you still want to force crash the system? (y/n) y
#How to delete crash files and coredump from wlc's flash.
(Cisco Controller) >clear crash-files ? force Clears WLC crash and core files without prompting.
***********
Web-bundle and certs.
#How to delete webauth bundle from flash?
(Cisco Controller) >clear crash-files force ?
(Cisco Controller) >clear web? webauth-bundle webimage webmessage webtitle (Cisco Controller) >clear webauth-bundle ?
(Cisco Controller) >clear webauth-bundle
#Where to look at certs on flash?
(ngwc-talwar-01) >test system dir /certs -rw-r--r-- 1 root root 1158 May 22 16:56 bsnDefaultBuildCert.crt -rw-r--r-- 1 root root 1155 May 22 16:56 bsnDefaultCaCert.crt -rw-r--r-- 1 root root 1151 May 22 16:56 bsnDefaultIdCert.crt -rw-r--r-- 1 root root 717 May 22 16:56 bsnDefaultIdCert.prv -rw-r--r-- 1 root root 1118 May 22 16:56 bsnDefaultRootCaCert.crt -rw-r--r-- 1 root root 1034 May 22 16:56 bsnOldDefaultCaCert.crt -rw-r--r-- 1 root root 1076 May 22 16:56 bsnOldDefaultIdCert.crt -rw-r--r-- 1 root root 716 May 22 16:56 bsnOldDefaultIdCert.prv -rw-r--r-- 1 root root 1145 May 22 16:56 cscoDefaultIdCert.crt -rw-r--r-- 1 root root 944 May 22 16:56 cscoDefaultIdCert.prv -rw-r--r-- 1 root root 1245 May 22 16:56 cscoDefaultMfgCaCert.crt -rw-r--r-- 1 root root 839 May 22 16:56 cscoDefaultNewRootCaCert.crt -rw-r--r-- 1 root root 1129 May 22 16:56 cscoMfgSha2CaCert.crt -rw-r--r-- 1 root root 791 May 22 16:56 cscoRootSha2CaCert.crt -rw-r--r-- 1 root root 958 May 22 16:56 cscoWatchtowerDevCert.crt
(Cisco Controller) >test system dir /mnt/application
-rw-r--r-- 1 root root 2772 Oct 11 13:56 NaServCaCert_p12.pem ---------- 1 root root 611 Feb 20 09:24 bsnSslWebadminCert.crt ---------- 1 root root 609 Feb 20 09:24 bsnSslWebadminCert.prv ---------- 1 root root 597 May 23 2014 bsnSslWebauthCert.crt ---------- 1 root root 608 May 23 2014 bsnSslWebauthCert.prv
-rw-r--r-- 1 root root 2772 Oct 11 16:25 cert.cmxcloudCA.pem -rw-r--r-- 1 root root 288523 Oct 11 16:26 dc_embedded_profiles.c drwxr-xr-x 5 root root 4096 Oct 11 18:03 flashbin drwxr-xr-x 2 root root 1024 Mar 24 03:26 cfg ---------- 1 root root 1 Mar 24 03:09 fipsmode -rw-r--r-- 1 root root 828 Mar 24 02:19 fsck.crash drwxr-xr-x 2 root root 1024 Mar 24 03:08 ha ---------- 1 root root 4088 May 22 16:56 log.bin ---------- 1 root root 1 May 22 16:57 mcast_ucast_feature drwxr-xr-x 2 root root 1024 May 23 2014 nim -rw-r--r-- 1 root root 422 May 10 20:19 panic_info drwxr-xr-x 2 root root 1024 Mar 24 02:51 rrm -rw-r--r-- 1 root root 2 May 22 16:56 snmpBoots.txt -rw------- 1 root root 668 Feb 20 09:23 ssh_host_dsa_key -rw-r--r-- 1 root root 606 Feb 20 09:23 ssh_host_dsa_key.pub -rw------- 1 root root 531 Feb 20 09:23 ssh_host_key -rw-r--r-- 1 root root 335 Feb 20 09:23 ssh_host_key.pub -rw------- 1 root root 883 Feb 20 09:23 ssh_host_rsa_key -rw-r--r-- 1 root root 226 Feb 20 09:23 ssh_host_rsa_key.pub -rw-r--r-- 1 root root 422 May 10 20:18 watchdog_dump drwxr-xr-x 3 root root 2048 May 10 20:15 xml
(Cisco Controller) >test system dir /mnt/images drwxr-xr-x 2 root root 4096 Oct 6 15:49 ap.bak drwxr-xr-x 3 root root 4096 Oct 11 13:22 ap.pri -rwxr-xr-x 1 root root 3211596 Oct 6 15:48 cavium_main.bak -rwxr-xr-x 1 root root 3286568 Oct 11 13:21 cavium_main.pri -rwxr-xr-x 1 root root 36881800 Oct 6 15:48 linux.bak.img -rwxr-xr-x 1 root root 36333785 Oct 11 13:21 linux.pri.img -rw-r--r-- 1 root root 48 Oct 11 13:21 upgrade.log
... View more
Created by
Saravanan Lakshmanan
in Wireless Security and Network Management
02-13-2018
02-13-2018
show msglog, show traplog on wlc shows logs since last log reset.
Message log and traplog holder on ...
02-08-2018
yes, that's an old document.Follow the steps from 8.0.152.0 release
notes.https://www.cisco.com/c/en...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-08-2018
02-08-2018
On quick search, i see this link from CDW as an example. you can
explore, call and check to confirm ...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-08-2018
02-08-2018
Dear Aldebaran18No need to get angry :) or offended. Its not ethical to
ask to share the latest/any ...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-08-2018
02-08-2018
now try updating vWLC code to 8.0.140.0.Workaround:deploy a new vWLC
using an older ova file (i.e. 8...
Created by
Saravanan Lakshmanan
in Wireless Security and Network Management
02-08-2018
02-08-2018
1) yes. (respective traps needs to be enabled under trap control.)2) To
protect from any infrastruct...
Created by
Saravanan Lakshmanan
in Other Wireless - Mobility Subjects
02-08-2018
02-08-2018
No, its related to 2800/3800 platform as mentioned in bug
caption.CSCve57121 Cisco 3800 AP is not pa...
Created by
Saravanan Lakshmanan
in Wireless Security and Network Management
02-07-2018
02-07-2018
Do we observe rogue containment traps in WLC.check client connectivity
traps to understand the impac...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-07-2018
02-07-2018
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc58140 Bug Search Tool
Bug Search CSCvc58140 Help ...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-07-2018
02-07-2018
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-5/b_cisco_mobility_express_8_5...
02-07-2018
//It appears, AP trying to send discovery to WLC through one of WLC's
dynamic interface.//what's the...
Created by
Saravanan Lakshmanan
in Other Wireless - Mobility Subjects
02-07-2018
02-07-2018
AP#show controller d0/d1The Band Steering portion of show controller is
only displayed when Band Ste...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-07-2018
02-07-2018
Regards shell/devshell access to WLC were there in past for internal
access only and removed lately ...
Created by
Saravanan Lakshmanan
in Wireless and Mobility
02-07-2018
02-07-2018
I've this dump(from past) about AireOS WLC's flash. (Cisco Controller)
>test system disk-usage(Cisco...
Public Statistics
| Date Registered | 08-20-2011 05:51 AM |
| Date Last Visited | 01-15-2020 12:05 AM |
| Total Messages Posted | 1,136 |
| Total Helpful Votes Received | 1321 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 20 | |
| 5 | |
| 5 | |
| 5 | |
| 10 |
.jpg "Hall of Fame Community Legend"){kind=icon}
Helpful Votes From
