Hi Balaji, As far as I know VLAN tag happens only on the trunk links in order to identify which vlan each packets belongs to. If you are trying to monitor the SVI's I would assume you will not be able to see the VLAN tag in-formations on it. Try monitoring the trunk port and you should be able to see the VLAN tag information. Hope that helps. Regards Najaf     ... View more

Hi, That image do support ip routing. Just cross check if you have really enabling L3 feature with "ip routing" command. Going forward you could use "Cisco Feature Navigator" page to confirm any feature availability on IOS. The Cisco Feature Navigator can be accessed through below url http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp Regards Najaf Please rate when applicable or helpful !!! ... View more

Hi Raghu, Hope below link will help you to achieve what you wanted. Depending on the software versions which you are running on your network you could use either of the methods. https://supportforums.cisco.com/discussion/10828436/router-backup Hope that helps. Regards Najaf Please rate when applicable or helpful !!! ... View more

Hi, Yes. AP will be able to register with WLC even if it has higher software version as long as software version is compatible between AP/WLC. During the registration process WLC will downgrade the AP image (if required) to match with WLC's image version. Hope that helps. Regards Najaf ... View more

Hi, Can you enable "debug radius authentication" output please when a client try to connect? Regards Najaf   ... View more

Hi, You could use below logic. http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68097-accesspt.html You will have to apply the acl on the sub interface rather than on physical interface. On the ACL for guest vlan you can deny all production network subnets. I hope that helps. Regards Najaf   ... View more

Hi, Hope you have not modified the running configuration. For some reason i cannot find the radius server ip address any where. I hope you have removed it. Do you have trouble with all wireless clients where they are not doing EAP or is it some clients only? Can you enable "debug radius authentication" output please? Regards Najaf     ... View more

Hi, Which version of SNMP are you using? If you are using v1/v2 you should be using community string rather than local database credentials? Regarding the service port what is the ip address assigned on the service port. From the configuration guide " Prime Infrastructure uses the preferred management IP address from the loop back interface. If the device does not have a loopback interface, Prime Infrastructure uses similar logic to the OSPF algorithm to select the router’s preferred management IP address." Hope that helps. Regards Najaf   ... View more

Hi, It looks like below message is the issue of why AP is not getting registered to WLC *Jan  1 00:04:48.119: %PKI-3-CERTIFICATE_INVALID_NOT_YET_VALID: Certificate chai n validation has failed.  The certificate (SN: 7293410000000021151F) is not yet valid   Validity period starts on 10:36:27 UTC Jan 30 2013Peer certificate verif ication failed 001A Please verify if the AP and WLC time matches close to each other. The above log shows this is not the case. Once you fix the time issue i hope AP should register to WLC. Hope that helps. Regards Najaf Please rate when applicable or helpful !!! ... View more