The Cisco Document Team has posted an article. This document describes the Internet Protocol Security (IPsec) configuration between 9800 WLC and ISE server to secure Radius & TACACS communication. Know of something that needs d...
Knowledge Base Articles
WLAN Poller provides functionality to: Bulk data/debug collection from Controllers and APs. Execute the commands on regular intervals.DFS statistics and debug collectionIOS AP Flash health check and memory AP cert check with generating reportsThis su...
IntroductionPrerequisitesConfigureBegin the testMore InformationReference Introduction This document describes the steps to correctly perform throughput Wireless speed testing. Testing the maximum speed that can be achieved over Wireless networks w...
The Cisco Document Team has posted an article. This document describes how to upgrade a pair of 9800 wireless controllers in HA SSO using the ISSU (In-Service Software Upgrade) method. Know of something that needs documenting? ...
IntroductionEAP AuthenticationAdvantages of EAP - AKA RequirementsDiagramSample call flow - EAP SIMAbbreviations IntroductionEAP-SIM is an Extensible Authentication Protocol (EAP) [RFC3748] mechanism for authentication and session key distribution us...
The Cisco Document Team has posted an article. This document describes a memory leak in the context of a Cisco Catalyst 9800 Wireless LAN Controller (WLC). Know of something that needs documenting? Share a new document request ...
The Cisco Document Team has posted an article. This document provides a checklist of data for bulk failures of Access Points which is beneficial for TAC to troubleshoot further and perform RMA. Know of something that needs docu...
The Cisco Document Team has posted an article. This document describes maintaining log rotation for monitoring Cisco CG522-e space issues if running on version Cisco IOS® 17.9.5 or lower. Know of something that needs documentin...
The Cisco Document Team has posted an article. his document describes monitoring CPU utilization to Troubleshoot High CPU Usage on the SNMP process. Know of something that needs documenting? Share a new document request to doc-...
The Cisco Document Team has posted an article. This document describes a method to create the necessary certificates to configure RADIUS DTLS between ISE and the 9800 WLC. Know of something that needs documenting? Share a new d...
The Cisco Document Team has posted an article. This document describes the deployment of Point-to-Point mesh links with Ethernet Bridging using Cisco Mobility Express (ME) software. Know of something that needs documenting? Sha...
Introduction802.11 Association Status, 802.11 Deauth Reason codes802.11 Association Status CodesCode802.11 definitionExplanation0Successful 1Unspecified failureFor example : when there is no ssid specified in an association request10Cannot support ...
The Cisco Document Team has posted an article. This document describes a method to create a multi-level CA to create general purpose certificates compatible with Cisco IOS® XE devices. Know of something that needs documenting? ...
Access VLANs and Internet through multiple wireless SSIDs, using Autonomous AP AIR-CAP3702Challenge: Access internet through autonomous Access Point (Air-Cap3702i-e-k9) which populated multiple SSIDs that connected to the VLANs at Remote Office. Diag...
The Cisco Document Team has posted an article. This article demonstrates how to convert a Cisco Catalyst 9000 Series Access Point (9105,9115, 9120, 9130) to an Embedded Wireless Controller (EWC). Know of something that needs do...
Implementing DHCP Option 43 and Option 60 in external MS-DHCP Server using Vendor Class Identifier.
Challenge - How to find Cisco device Vendor Class Identifier
Procedure
Step 1
Implement DHCP Server in Windows Server (Ver. any)
Step 2
Install Wireshark Network Protocol Analyzer (Packet tracer) in the Windows Server machine where the DHCP server is running.
After installation select “Ethernet” connection and start packet capturing.
Step 3
Connect Cisco device (AP/ LWAP/ Switch/ Router). Configure to devices ethernet interfaces “ip address” should be obtained from DHCP server therefore ethernet interface should be configured as “ip address dhcp”
The connected device starts sending broad casting message packets with its MAC address to lease IP address from DHCP server.
Wireshark packet tracer already started and capture ethernet packets, it will show the connected MAC address send broadcast message to DHCP server. DHCP server captured the broadcast message and replied to the device.
If you select the first line of broadcast message of the device in Wireshark packet analyzer, you can easily identify Vendor Class Identifier in left side bottom part of the window.
Implementing DHCP option 43 and 60
The generic vendor class identification option is 43. Each vendor has been given a unique vendor identification number in decimal. “241” is used for Cisco Management controller. When it converts to hexadecimal “F1 or f1”.
Conversion decimal to hexadecimal:
241 ÷ 16 = 15 R 1 —> (0.0625 x 16) = 1 = 1
15 ÷ 16 = 0 R 15 —> (0.9375 x 16) = 15 = f
When it writes to hexadecimal writes to bottom to top as a “f 1”
Internal DHCP pool configuration
Internal DHCP pool in Cisco router or switch can use as follows:
ip dhcp pool VLAN20
network 172.168.10.0 255.255.255.0
default-router 172.168.10.1
dns-server 83.68.72.2
option 43 hex f104aca80a02 <= 04-indicates one controller/aca80a02-“controller ip:172.168.10.2 in hexadecimal”
option 60 ascii “Cisco AP c3700”
External MS_Windows Server DHCP configuration.
Step 1
Open DHCP Server in Windows Server (Ver. any)
Expand the DHCP network scope under IPv4
Select on IPv4 and right click the mouse and chose “Define Vendor Classes”.
Press “Add” button in DHCP Vendor Classes dialog box.
Click “Add” button in Predefined Options and Values dialog box.
Type Name as “WLC-4402” Wireless controller device, select Data type as “IP Address” and mark Array check box, Type Code as 241 (Management Controller) and Type the Description as Management Controller IP address allocation. Press “OK” button. This is an alternative method for DHCP option 43 in DHCP server and in internal DHCP pool in Cisco router or switch.
Then you will be back to the “Predefined Options and Values” dialog box. Press “Edit Array” button. “IP Address Array Editor” dialog box appears and can type number of controllers IP address if more than one WLC controller exist on your network in IP address space. Press “OK” button.
Select “Scope Options” under created network scope and right click on it, then click “Configure Options”.
AIR-CAP3702 console port connected to PC/Laptop USB port and using Cisco CLI analyzer or Putty can read IP status of both devices. (IPs in examples are not real. Above example IP address and below message IP addresses are two different VLANs IP addresses. Don't try to match IP's equality.)
siskum
Spotlight