Detect AP Random WLC & Encryption Cipher

[xZamalek]

Hello Community,

I have have 2 cases which i would like to ask about.

1-Sometimes an AP is disassociated from a Specific WLC and joins a random WLC , this might be for a testing purpose on a huge enterprise with hundreds of controllers, is there any trick to detect which WLC the AP is currently joining from the LAN side? assuming that the telnet/ssh is disabled by default on the access point as well.

2-If we enable AES and TKIP for WPA1 for example , is that a logical and or logical or ? should the device which will connect to the SSID at least support one of them or should support both of them ?

[Scott Fella · Accepted solution]

Well let me try to answer your questions.
1. You will not be able to know from the lan side what controller the ap is joined to.
You should always define the high availability on each ap so that the ap know what is the primary, secondary or tertiary. The only easy way is if you had Prime Infrastructure or an NMS tools that support wireless. You can maybe look at the router and grep to see what IP address is mapped to udp 5246 or 5247. Then you can investigate from there.
2. Never mix and match. You should be using WPA2 with aes. If you need WPA1, then only use tkip. This encryption is not support for 802.11n or newer standards, so you will get legacy speeds.

[xZamalek]

Thank you for support.