Do you have any other APs (from internal network) register to this vWLC ? If not I would check (Time, Licenses,Country code) configured on  your WLC.   First see if you can get register from internal network & then try to use external NAP IP from outside world.   HTH Rasika *** Pls rate all useful responses *** ... View more

I think it is normal.   Rasika ... View more

Pls check what speed those fans are running ? I am running 8.5.140.0 on our 5520 & see below values. If you see higer RPM rates in yours, then upgrade to 8.5.151.0.   (5520-WLC2) >show imm chassis fan FAN1_TACH1 | 0Fh | ok | 29.1 | 4800 RPM FAN1_TACH2 | 10h | ok | 29.1 | 5700 RPM FAN2_TACH1 | 11h | ok | 29.2 | 4800 RPM FAN2_TACH2 | 12h | ok | 29.2 | 5500 RPM FAN3_TACH1 | 13h | ok | 29.3 | 4800 RPM FAN3_TACH2 | 14h | ok | 29.3 | 5700 RPM FAN4_TACH1 | 15h | ok | 29.4 | 4800 RPM FAN4_TACH2 | 16h | ok | 29.4 | 5800 RPM FAN5_TACH1 | 17h | ok | 29.5 | 4800 RPM FAN5_TACH2 | 18h | ok | 29.5 | 5700 RPM FAN6_TACH1 | 19h | ok | 29.6 | 4800 RPM FAN6_TACH2 | 1Ah | ok | 29.6 | 5700 RPM   HTH Rasika *** Pls rate all useful responses *** ... View more

If it is a small scale deployment, you can use Local EAP configuration on WLC to act is as local radius server. Refer below document "Local EAP" section. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/wlan_security.html   But that does not mean WLC can act as full fledge RADIUS server (like Free RADIUS, Microsoft NPS, Cisco ISE, Aruba ClearPass)   HTH Rasika *** Pls rate all useful responses *** ... View more

Then you have to upgrade WLC code, then AP will automatically get image upgraded.   Even you somehow upgrade AP image, when it register to WLC, WLC will overwrite AP image to match WLC code version   HTH Rasika *** Pls rate all useful responses *** ... View more

What exactly you want to do ? Typically once you upgrade WLC code version, it will push required image to APs   HTH Rasika ... View more

Hi Arne, IEEE 802.1X-2010 standard is the one to refer. If implementation comply to that standard, version number is 3.   11.3.1 Protocol Version This one octet field represents an unsigned binary number identifying the EAPOL protocol version supported by the transmitter. An implementation conforming to this specification shall use the value 0x03.   11.5 EAPOL protocol version handling To ensure that backward compatibility is maintained between versions of this protocol, a version A protocol implementation shall interpret a received EAPOL PDU with protocol version number B as follows: a) Where B is greater than or equal to A, the EAPOL PDU shall be interpreted as if it carried the supported version number, A, as follows: 1) All parameters that are defined in version A shall be interpreted in the manner specified for version A of the protocol. 2) All parameters not defined in version A for the given EAPOL Packet Type shall be ignored. 3) All octets that appear in the EAPOL PDU beyond the largest numbered octet defined for version A for the received EAPOL Packet Type shall be ignored. NOTE 1—As a consequence of these rules, a version 1 implementation ignores the version number. The rules allow future specification of protocol extensions, identified as new versions. Subsequent versions can be required to check the version number in order to correctly interpret the received PDU. b) Where B is less than A, the EAPOL PDU shall be interpreted as specified for the version number, B, as follows: 1) All parameters shall be interpreted in the manner specified for version B of the protocol. 2) All parameters not defined in version B for the given EAPOL Packet Type shall be ignored. 3) All octets that appear in the EAPOL PDU beyond the largest numbered octet defined for version B for the received EAPOL Packet Type shall be ignored   HTH Rasika *** Pls rate all useful responses *** ... View more

Only option is to change AP mode to FlexConnect & SSID is configured with Local Switching.   Once you configured AP in FlexConnect mode, even WLC is down, it will operate in "Standalone mode" & able to forward traffic instead of register to a 2nd WLC.   Since you got WLCs in each branch, converting AP onto FlexConnect may not be an ideal approach. Instead you can have a subnet defined in HQ & used it for local branch WLC failure situation. So any branch will fall back to that subnet, in case of local WLC failure & will not have same branch local subnet.   HTH Rasika *** Pls rate all useful responses ***   HTH Rasika ... View more

"but you see what Im asking ? I dont want to go line by line or tab by tab to restore the back up, i just want to know if either way will work via the new WLC GUI" Even though it is bit tedious task, in this way you get to know what CLI commands it accepts & what's not. So I prefer this way specially if you have different software versions between old & new WLC.   1. As long as you are having your new 8510 with the same software version of the old unit, restore backup config should work. However, you need to have initial configuration of new WLC (using CLI wizard) prior to restore Refer below post for some guidance https://mrncciew.com/2013/01/25/backup-restore-wlc-configs/   2. I haven't done that myself, it should work as well.   HTH Rasika *** Pls rate all useful responses *** ... View more

You should be get it resolve by enabling support for required EAP protocols (PEAP, EAP-TLS, EAP-FAST, or any other that client supports) on ISE under Policy -> Policy Elements -> Results -> Allowed Protocols.   HTH Rasika *** Pls rate all useful responses **** ... View more

If it is a 8540-HA setup, do a fail-over & see if that makes any difference.   Rasika ... View more

Hi,   Is it possible to make that Voice SSID to run WPAv2 & advertise only on 5GHz (radio 1, currently it is shutdown) to test ?   dot11 ssid <ssid_name> authentication open authentication key-management wpa version 2 ! interface Dot11Radio1 encryption vlan X mode ciphers aes-ccm   HTH Rasika *** Pls rate all useful responses *** ... View more