client ap Urgent

jcastanos · ‎10-20-2014

I have a UWN architecture with two controllers 2106 and 1242AG access point.

My problem is that when I connect a client ( who is an AP Moxa) is not working properly because users that are connected behind that AP can not connect to the network

What I can do? Do I Convert it to HREAP LAP device? do i Convert all LAP to autonomous and discard WLC?

Rasika Nayanajith · ‎10-21-2014

What is the software version running on your 2106 ? Also if possible attach "show wlan <wlan_ID>" output for the WLAN you having issues

HTH

Rasika

**** Pls rate all useful responses ****

jcastanos · ‎10-21-2014

Versión 6. WLC..

I think problem it's bridging... client AP is a Moxa 1121 , this access point only support CLIENT AP.

Rasika Nayanajith · ‎10-21-2014

Few suggestions

1. Upgrade your WLC to 7.0.250.0 code. Here is the release notes for that version

http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn70mr5.html

2. Instead of using WEP as L2 security, use WPA2/PSK with AES

3. Disable "Client loadbalance" feature on your SSID

If I understand correctly, if you connect a wired client to Moxa 1121, that client cannot communicate to your network via 1242/2106 set up. Is that the issue ?

Pls do not forget to rate our responses if that is useful to you.

HTH

Rasika

jcastanos · ‎10-22-2014

yes,

It's not posible upgrade software WLC . Moxa client i think not support WPA

Rasika Nayanajith · ‎10-22-2014

Hi

As per this Moxa 1121 support WAP2, check with your Moxa support people as well.

http://www.moxa.com/product/AWK-1121_Series.htm

You have to bring WLC to a supported code even if you want to get TAC support. I am sure in 7.0.x you can connect wired client behind a work group bridge to WLC managed AP.

In this example cisco AP used as WGB to connect a wired client to CUWN network running on 7.0.116.0 code.

http://mrncciew.com/2013/04/30/wgb-with-capwap/

HTH

Rasika

**** Pls rate all useful responses ****

jcastanos · ‎10-21-2014

WLAN Identifier.................................. 1

Profile Name..................................... Logis

Network Name (SSID).............................. LOGIS

Status........................................... Enabled

MAC Filtering.................................... Disabled

Broadcast SSID................................... Enabled

AAA Policy Override.............................. Disabled

Network Admission Control

NAC-State...................................... Disabled

Quarantine VLAN................................ 0

Number of Active Clients......................... 3

Exclusionlist Timeout............................ 60 seconds

Session Timeout.................................. 1800 seconds

CHD per WLAN..................................... Enabled

Webauth DHCP exclusion........................... Disabled

Interface........................................ management

WLAN ACL......................................... unconfigured

DHCP Server...................................... Default

DHCP Address Assignment Required................. Disabled

--More-- or (q)uit

Quality of Service............................... Silver (best effort)

Scan Defer Priority.............................. 5,6

Scan Defer Time.................................. 100 milliseconds

WMM.............................................. Allowed

Media Stream Multicast-direct.................... Disabled

CCX - AironetIe Support.......................... Enabled

CCX - Gratuitous ProbeResponse (GPR)............. Disabled

CCX - Diagnostics Channel Capability............. Disabled

Dot11-Phone Mode (7920).......................... Disabled

Wired Protocol................................... None

IPv6 Support..................................... Disabled

Peer-to-Peer Blocking Action..................... Disabled

Radio Policy..................................... All

DTIM period for 802.11a radio.................... 1

DTIM period for 802.11b radio.................... 1

Radius Servers

Authentication................................ Global Servers

Accounting.................................... Global Servers

Dynamic Interface............................. Disabled

Local EAP Authentication......................... Disabled

Security

802.11 Authentication:........................ Open System

Static WEP Keys............................... Enabled

Key Index:...................................... 1

Encryption:..................................... 104-bit WEP

802.1X........................................ Disabled

Wi-Fi Protected Access (WPA/WPA2)............. Disabled

CKIP ......................................... Disabled

Web Based Authentication...................... Disabled

Web-Passthrough............................... Disabled

Conditional Web Redirect...................... Disabled

Splash-Page Web Redirect...................... Disabled

Auto Anchor................................... Disabled

H-REAP Local Switching........................ Disabled

H-REAP Learn IP Address....................... Enabled

Infrastructure MFP protection................. Enabled (Global Infrastructure MFP Disabled)

Client MFP.................................... Optional but inactive (WPA2 not configured)

Tkip MIC Countermeasure Hold-down Timer....... 60

Call Snooping.................................... Disabled

Band Select...................................... Enabled

Load Balancing................................... Enabled

jcastanos · ‎10-21-2014

i feel honored ... you are a wireless GURU.