Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ahk000002
Stats
Member since
04-08-2016
11
Posts
0
Helpful
1
Solution
Created by
ahk000002
in Wireless - Mobility Documents
in Wireless - Mobility Documents
06-14-2018
12:59 AM
06-14-2018
12:59 AM
Hi - I had an issue where my AV was fragmenting my packets so they were malformed when they showed up in Wireshark/Omnipeek. As soon as I disabled the AV everything worked as intended.
See the forum post for solution: https://supportforums.cisco.com/t5/other-wireless-mobility-subjects/ap-in-sniffer-mode-udp-17-quot-ip-fragmented-ip-protocol-quot/m-p/3398065#M84613
Regards
Anders
... View more
Created by
ahk000002
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-14-2018
12:22 AM
06-14-2018
12:22 AM
Hi again!
I managed to solve the issue. Apparently Symantec Endpoint Protection was messing up the packets. The AV is running a local IPS system on the host computers. It is setup under "Network and Host Exploit Mitigation Settings" of your client/server preference.
As soon as I disabled Symantec the packets were no longer fragmented.
Thank you everyone for your inputs and helpful comments!
Regards A
... View more
Created by
ahk000002
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-13-2018
02:32 AM
06-13-2018
02:32 AM
Hi Patoberli!
Thank you for taking your time to help :-)
Yes I am capturing on the wired port on my PC.
See attached screenshot. The packets are just regular IP packets like I would except to see under normal circumstances if I just starts to capture traffic on my wired port .
In the meantime I tried using another 1700 series AP as my sniffer and another laptop as well. It is, sadly, still the issue persists. The packets from the WLC to my client is these wired "UDP/17 - Fragmented IP protocol" packets.
... View more
Created by
ahk000002
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-12-2018
07:20 AM
06-12-2018
07:20 AM
Hi Scott
Thanks for the quick reply! I am trying the capture filter "udp port 5555", but this filter does not show any packages at all.
I see attached screenshot.
Any advise?
Regards
... View more
Created by
ahk000002
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-12-2018
06:51 AM
06-12-2018
06:51 AM
HI everyone
I am trying to sniff 802.11 frames using a 1702i Access Point joined to my controller.
I followed the guide here: https://supportforums.cisco.com/t5/wireless-mobility-documents/collecting-a-wireless-sniffer-trace-using-the-cisco-lightweight/ta-p/3120458
I am using Wireshark.
The output I am receiving on my PC running Wireshark is not shown as intended. It appears to be fragmented. Then I decided to put the WLC, AP (in sniffer-mode) and the PC running Wireshark in the same layer 2, just to make sure my firewall did not fragment the packets, but my Wireshark still shows the packets as "IP Fragmented IP Protocol" UDP/17.
The WLC is running 8.5.120.0 and my Wireshark version is 2.6.1.
I am not using a capture filter.
Please see attached screenshot and drawing of my network.
Regards A
... View more
Labels:
Created by
ahk000002
in Cisco Bug Discussions
in Cisco Bug Discussions
04-16-2018
10:57 PM
04-16-2018
10:57 PM
Did the trick for us as well.
Thanks
... View more
Created by
ahk000002
in Cisco Bug Discussions
in Cisco Bug Discussions
04-03-2018
05:32 AM
04-03-2018
05:32 AM
Hi
I am seeing the same thing. 2504 with 35 APs ( mix of 1832i, 1852i & 1702i). My code is 8.5.110.0 as well.
Did you guys manage to solve this? It appears it should be solved in 8.5.110.0 according to the CSCvg91108, but this is the code I am running and I am still seeing it on my syslog server.
Any suggetions?
Regards Anders
... View more
03-17-2017
02:34 AM
Hi Frank
Did you manage to solve the problem? I am seeing the exact same issue on my Mobility Express setup. I have 3 1832i in the setup.
The clients get randomly disconnected for 5 to 10 mins. On the controller it logs;
Mar 17 10:12:40 188.228.61.242 ph-controller: * apfReceiveTask: Mar 17 11:12:43.788: %APF-4-SUBNET_MISMATCH_IP_ADD_ON_MSCB: apf_foreignap.c:2005 Subnet mismatches while registering IP address 192.168.2.60 with netmask 255.255.255.0 for client ac:2b:6e:3d:b4:bd
The netmask 255.255.255.0 is the correct netmask which matches the DHCP on the DHCP server. The DHCP is a Windows Server 2012R2.
My firmware is 8.3.111.0 which is the most current.
Regards Anders
... View more
09-29-2016
11:21 PM
Hi Snorre
I have this issue as well with the Samsung Xcover phones. Did you mange to find a solution to the issue?
Thanks in advance
//Anders
... View more
04-08-2016
01:44 AM
Hi tjohannessen
Did you manage to solve this by yourself? I too have this issue. I need to ASA to send the NAS Identifier so I can hit the correct policy on my radius server.
Thanks in advance
//Anders
... View more
06-14-2018
Hi - I had an issue where my AV was fragmenting my packets so they were
malformed when they showed u...
Created by
ahk000002
in Other Wireless - Mobility Subjects
06-14-2018
06-14-2018
Hi again! I managed to solve the issue. Apparently Symantec Endpoint
Protection was messing up the p...
Created by
ahk000002
in Other Wireless - Mobility Subjects
06-13-2018
06-13-2018
Hi Patoberli! Thank you for taking your time to help :-) Yes I am
capturing on the wired port on my ...
Created by
ahk000002
in Other Wireless - Mobility Subjects
06-12-2018
06-12-2018
Hi Scott Thanks for the quick reply! I am trying the capture filter "udp
port 5555", but this filter...
Created by
ahk000002
in Other Wireless - Mobility Subjects
06-12-2018
06-12-2018
HI everyone I am trying to sniff 802.11 frames using a 1702i Access
Point joined to my controller. I...
Created by
ahk000002
in Cisco Bug Discussions
04-16-2018
04-16-2018
Did the trick for us as well. Thanks
Created by
ahk000002
in Cisco Bug Discussions
04-03-2018
04-03-2018
Hi I am seeing the same thing. 2504 with 35 APs ( mix of 1832i, 1852i &
1702i). My code is 8.5.110.0...
03-17-2017
Hi Frank Did you manage to solve the problem? I am seeing the exact same
issue on my Mobility Expres...
09-29-2016
Hi Snorre I have this issue as well with the Samsung Xcover phones. Did
you mange to find a solution...
Public Statistics
| Date Registered | 04-08-2016 01:07 AM |
| Date Last Visited | 08-21-2019 12:28 AM |
| Total Messages Posted | 11 |
.jpg "VIP Advocate"){kind=icon}
