About Scott Fella

Scott Fella · ‎08-22-2019

Leo is right.... get a survey done so that you know what you are getting. Environments are different along with how one designs for overlap and density which can affect your overall RF.

Scott Fella · ‎08-22-2019

When I tested this a while back, I had an N+1 setup and SSO setup which worked fine. I don’t believe that this is meant for anchoring an SSID to another WLC. If you test the first method I mentioned and it works, your setup if fine, but when you anchor the SSID and it breaks, then I don’t believe that is supported. Anchoring to another wlc always requires the wlan to be configured the same, also with anchoring, the anchor wlc send the reply to radius not the foreign.

Scott Fella · ‎08-22-2019

Any AP can connect to any wlc as long as it has connectivity to join that wlc. So yes you can connect any AP via Ethernet as long as you meet those requirements. For MESH, you would need line of sight and be able to negotiate a link.

Scott Fella · ‎07-23-2019

Make sure you post the output as it helps identify the issue.

Scott Fella · ‎07-23-2019

You need to understand that the device does the roaming and not the AP’s. The device doesn’t have to roam if it still has good signal and is not hitting the minimum threshold the NIC manufacture defines. If you want to tweak your environment, disable the lower data rates, reduce the tx power and you will shrink your ap coverage cell size. Don’t look at the bars on a device, its misleading and makes it look like the wireless is broken. Remember the device does the roaming.

Scott Fella · ‎07-23-2019

The 2702 AP’s are supported in that version, so you will need to look at the AP console output.

Scott Fella · ‎07-23-2019

To add to Leo’s statement, it also depends on what data rates you have set at mandatory/supported/disabled along with the TX power for each radio on the AP. The device is the decision maker and typically the driver has a threshold on when the NIC should start to roam and when to roam. If the signal from the NIC is still within the threshold, the NIC will not roam or scan. So lowering the TX power and or disabling the low data rates helps with making the NIC scan and then eventually roam.

Scott Fella · ‎07-23-2019

DTLS is installed on any OEAP. If your AP is joined to the WLC from the Internet you are fine. You just need to check the box for DTLS on the global AP settings. https://community.cisco.com/t5/wireless-mobility-documents/capwap-encryption-using-dtls/ta-p/3148917

Scott Fella · ‎07-23-2019

You can’t do what you want with that AP or even with a WLC without automation. You would of been better off with a Meraki AP which you can disable/enable SSID on a schedule without purchasing anything. To provide a username/password for every customer and then have it expire sort of ruins the customer experience. If I go work at a coffee shop, I expect to not have to login but once.

Scott Fella · ‎07-23-2019

Typically when you have an AP in bridged mode, the WLC then refers to the Mac filter list for AP authentication. This is for security purposes as you don’t want to all of a sudden have other AP’s joining. Also when you are connecting and AP from the internet, you also want to enable DTLS to encrypt the data. This isn’t needed when the AP is in the internal network, just when visible to the internet. Take a look at some documents and blogs for this type of design to get a better understanding of recommendations and best practices. Changes to the TCP MSS is sometimes required if the AP fails to join, bounces or is behind a VPN. Few things to consider. Search for OEAP behind NAT and you will find information that will help.

Scott Fella · ‎07-22-2019

I have done this many times with WLC but not vWLC’s. So if we start from the beginning, you have to only forward UDP 5246/5247 to the internal management ip. When your AP is joined internal, you should set the high availability to use the wlc hostname, which is case sensitive and the public IP address. That is about it. If your AP is not local mode, then you have to add the MAC address to the Mac filter list, but since you were able to join the AP locally, I’m assuming it’s not FlexConnect or bridged mode.

Scott Fella · ‎06-17-2019

I have not tried that version yet, but the CL is supported, but what model AP's do you have? https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-6/release/notes/cpi_rn.html#41764

Scott Fella · ‎06-17-2019

That is a lot to ask in a forum. You might be better to review each piece separately. It's better to just provide some guides for you to review as each is pretty lengthy. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82135-wlc-authenticate.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/Enterprise-Mobility-8-5-Design-Guide/Enterprise_Mobility_8-5_Deployment_Guide/ch7_HREA.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/WirelessNetwork_GuestAccessService.html

Scott Fella · ‎06-17-2019

Take a look at this link as it should help: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/wireless_quality_of_service.html#d150928e20868a1635

Scott Fella · ‎06-17-2019

I don't think that the 2504 supports SSO, only N+1. The 5508, you were able to have the 75 ap license to make is part of SSO.

Scott Fella · 08-22-2019

Leo is right.... get a survey done so that you know what you are getting. Environments are different...

Scott Fella · 08-22-2019

When I tested this a while back, I had an N+1 setup and SSO setup which worked fine. I don’t believe...

Scott Fella · 08-22-2019

Any AP can connect to any wlc as long as it has connectivity to join that wlc. So yes you can connec...

Scott Fella · 07-23-2019

Make sure you post the output as it helps identify the issue.

Scott Fella · 07-23-2019

You need to understand that the device does the roaming and not the AP’s. The device doesn’t have to...

Scott Fella · 07-23-2019

The 2702 AP’s are supported in that version, so you will need to look at the AP console output.

Scott Fella · 07-23-2019

To add to Leo’s statement, it also depends on what data rates you have set at mandatory/supported/di...

Scott Fella · 07-23-2019

DTLS is installed on any OEAP. If your AP is joined to the WLC from the Internet you are fine. You j...

Scott Fella · 07-23-2019

You can’t do what you want with that AP or even with a WLC without automation. You would of been bet...

Scott Fella · 07-23-2019

Typically when you have an AP in bridged mode, the WLC then refers to the Mac filter list for AP aut...

Scott Fella · 07-22-2019

I have done this many times with WLC but not vWLC’s. So if we start from the beginning, you have to ...

Scott Fella · 06-17-2019

I have not tried that version yet, but the CL is supported, but what model AP's do you have?https://...

Scott Fella · 06-17-2019

That is a lot to ask in a forum. You might be better to review each piece separately. It's better to...

Scott Fella · 06-17-2019

Take a look at this link as it should help:https://www.cisco.com/c/en/us/td/docs/wireless/controller...

Scott Fella · 06-17-2019

I don't think that the 2504 supports SSO, only N+1. The 5508, you were able to have the 75 ap licens...

Date Registered	‎02-28-2002 05:58 PM
Date Last Visited	‎07-24-2019 02:49 AM
Total Messages Posted	22,584
Total Helpful Votes Received	9554

Re: Max mounting height for 3802i AP

Re: Identity Pre-Shared Key (IPSK) and ...

Re: Adding two AP to a WLC over ethern...

Re: APs not joining after Upgrade Cisco...

Re: wifi signal strength issues

Re: APs not joining after Upgrade Cisco...

Re: Lightweight AP - Fail to create CAP...

Re: 1815T office extend vs DTLS license

Re: Online - Offline - Random username ...

Re: AP can't join WLC over the internet

Re: AP can't join WLC over the internet

Re: no APs seen in Cisco Prime Infrastr...

Re: Wireless association

Re: Enabling netflow on a 2504 controll...

Re: Cisco wlc 2504 ha sku configuration...

Re: Max mounting height for 3802i AP

Re: Identity Pre-Shared Key (IPSK) and Mobility Anchor

Re: Adding two AP to a WLC over ethernet

Re: APs not joining after Upgrade Cisco 2504 WLC from 8.2.170.0 to 8.5.140.0

Re: wifi signal strength issues

Re: APs not joining after Upgrade Cisco 2504 WLC from 8.2.170.0 to 8.5.140.0

Re: Lightweight AP - Fail to create CAPWAP/LWAPP connection due to certificate expiration

Re: 1815T office extend vs DTLS license

Re: Online - Offline - Random username and password

Re: AP can't join WLC over the internet

Re: AP can't join WLC over the internet

Re: no APs seen in Cisco Prime Infrastructure 3.6 with WLC 9800-CL

Re: Wireless association

Re: Enabling netflow on a 2504 controller

Re: Cisco wlc 2504 ha sku configuration license question