10-27-2014 06:29 AM - edited 07-05-2021 01:48 AM
Hello,
I am having a simple issue associating to my stand alone Cisco 2702. Debug displays the following output:
*Mar 1 02:07:50.471: 3D75990E r 5 29/34/39/37 63- B000 07F 69E300 D168DC 69E300 F0D0 auth l 17
algorithm 0
sequence 1
status 0
221 - 0 10 18 2 0 0 0 0 0
*Mar 1 02:07:50.471: 3D759B9B t 11 0 - B000 000 D168DC 69E300 69E300 0000 auth l 6
algorithm 0
sequence 2
status 0
*Mar 1 02:07:50.471: 3D759CC2 r 5 30/35/40/39 45- 0000 07F 69E300 D168DC 69E300 F0E0 assreq l 69
cap 31 infra privacy shorthdr
listen interval 15
ssid Truckcam_internal
rates B 96
rsn1 mcst aes ucst aes keymgmt wpa2-psk cap C00
221 - 0 10 18 2 0 0 0 0 0
221 - 0 50 F2 2 0 1 0
*Mar 1 02:07:50.475: 3D759F38 t 11 0 - 1000 000 D168DC 69E300 69E300 0000 assrsp l 8
cap 0
status 25
aid C000
rates
It's a simple one SSID setup with WPA2 PSK. I've tried to connect with both IPhone and Windows 8 PC.
Configuration...
...
dot11 vlan-name SSID vlan 1
!
dot11 ssid SSID
vlan 1
band-select
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
mobility network-id 492
wpa-psk ascii 12345678
information-element ssidl
!
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
broadcast-key vlan 1 change 10000 membership-termination
!
ssid Truckcam_internal
!
antenna gain 0
stbc
speed 5.5 basic-11.0
power local 7
channel 2472
fragment-threshold 2340
station-role root access-point
rts threshold 2312
no cdp enable
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f07f.068d.12ec
ip address 172.20.20.42 255.255.255.0
ipv6 enable
!
ip default-gateway 172.20.20.1
!
Thanks,
Solved! Go to Solution.
10-29-2014 02:17 AM
Hi
Did you erase the previous config & load the given config ? or modified your existing configs.
If you haven't delete your existing config try that first
AP#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
AP#reload
System configuration has been modified. Save? [yes/no]: no
Proceed with reload? [confirm]
Once you load the new config, test each band seperately (ie shutdown radio0 & test, then shut radio1 while enable radio0 & test). See whether issue is in both bands ? Also test with different type of client as well.
HTH
Rasika
**** Pls rate all useful responses ****
10-27-2014 11:20 AM
Hi
You can try a simple configuration like below. Your configuration has some incompatible configs (eg 5.5 & 11Mbps data rate with WPA2/AES)
1. Take a backup of your existing configuration
2. Erase the startup config & reload the AP to come up with zero config.
3. Then configure it like below & give it a try.
dot11 ssid Truckcam_internal
vlan 1
authentication open
authentication key-management wpa version 2
wpa-psk ascii 12345678
mbssid guest-mode
!
interface Dot11Radio0
encryption vlan 1 mode ciphers aes-ccm
ssid Truckcam_internal
mbssid
no shut
!
interface Dot11Radio1
encryption vlan 1 mode ciphers aes-ccm
ssid Truckcam_internal
mbssid
channel width 40-above
no shut
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
!
interface BVI1
ip address 172.20.20.42 255.255.255.0
ip default-gateway 172.20.20.1
HTH
Rasika
**** Pls rate all useful responses ****
10-28-2014 08:36 AM
Hello,
Thanks for your reply! Still the same issue though :(
dot11 vlan-name TruckCam vlan 1
!
dot11 ssid Truckcam_internal
vlan 1
band-select
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
mobility network-id 1
wpa-psk ascii 7 <HIDDEN>
information-element ssidl
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid Truckcam_internal
!
stbc
mbssid
speed basic-1.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2472
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid Truckcam_internal
!
no dfs band block
stbc
mbssid
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. m16. m17. m18. m19. m20. m21. m22. m23. a1ss7 a2ss7 a3ss7
channel width 40-above
channel dfs
station-role root
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f07f.068d.12ec
ip address 172.20.20.42 255.255.255.0
ipv6 enable
!
*Mar 1 03:00:09.547: F891F88B r 1 52/47/47/52 39- B000 13A 69E300 6E0868 69E300 52C0 auth l 17
algorithm 0
sequence 1
status 0
221 - 0 10 18 2 0 0 1 0 0
*Mar 1 03:00:09.547: F891FD04 t 1 0 - B000 2900 6E0868 69E300 69E300 0000 auth l 6
algorithm 0
sequence 2
status 0
*Mar 1 03:00:09.551: F89201B1 r 1 52/47/48/52 48- 0000 13A 69E300 6E0868 69E300 52D0 assreq l 86
cap 431 infra privacy shorthdr
listen interval 10
ssid Truckcam_internal
rates 82 12 18 24 30 48 60 6C
pwr cap min 8 max 17
suppd chans 1 D
rsn1 mcst aes ucst aes keymgmt wpa2-psk cap C00
extrates C
221 - 0 10 18 2 0 0 1 0 0
221 - 0 50 F2 2 0 1 0
*Mar 1 03:00:09.551: F892062D t 1 0 - 1000 000 6E0868 69E300 69E300 0000 assrsp l 8
cap 0
status 25
aid C000
rates
10-29-2014 02:17 AM
Hi
Did you erase the previous config & load the given config ? or modified your existing configs.
If you haven't delete your existing config try that first
AP#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
AP#reload
System configuration has been modified. Save? [yes/no]: no
Proceed with reload? [confirm]
Once you load the new config, test each band seperately (ie shutdown radio0 & test, then shut radio1 while enable radio0 & test). See whether issue is in both bands ? Also test with different type of client as well.
HTH
Rasika
**** Pls rate all useful responses ****
10-31-2014 02:08 AM
Reconfiguration did it. The problem was that the AP was not on premise so I could reset it whitout having a console plugged in.
Funny thing though is that I reloaded it and applied the exact same configuration on it via the CLI. It seems like something happened in the background when I configured via GUI during the first run.
Anyway, now everything works great. Thank you guys... and Cisco for your help! :)
10-31-2014 02:45 AM
Hi
Good to see that you got it working. Thanks for using rating as well
Rasika
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide