cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2376
Views
0
Helpful
5
Replies

Guest Clients don't get DHCP lease

ssjoberg
Level 1
Level 1

I have the typical Guest wireless setup with 2 4402 anchor controllers in a DMZ connected to an ASA55220 with 3 WLCs on the inside network, one 5508 and 2 4404s. The inside WLCs are running the same code -  6.0.188.0 and the anchor contollers are running 6.0.199.4. The issue I am having is the 5508 is working great. The guest clients are getting DHCP addresses and are able to connect to the internet just fine. The 4404s on the other hand are not working. The guest clients are associating but not getting a DHCP address. I have checked the configs, the mobility groups, WLAN, etc. and everything is the same on all 3 inside controllers.

Any ideas on why the 4404s aren't working and the 5508 is?

5 Replies 5

Surendra BG
Cisco Employee
Cisco Employee

Where is the DHCP pool configured?? if its on the Anchor WLC running 6.0.199.4 then here is the bug..

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCth68708

Please move the DHCP to any other L3 device or the DHCP server..

If its not a Internal DHCP.. then disable DHCP proxy on the WLC and see if we are able to conect!!

lemme know if this answered ur question and please dont forget to rate the usefull posts!!

Regards

Surendra

Regards
Surendra BG

The DHCP scope is configured on the Anchor WLCs

I looked into moving DHCP to a server or another L3 device but it wasn't going to be easy. Instead I went another route and upgraded the Ancher WLCs to 6.0.202.0. but I got the same results, the 5508 works and the 4404s don't.

Steve

please post the RUN-config from the anchor and the foreign WLC.. alonmg with the WLAN details.. i will have a look and keep u posted!!

Regards

Surendra

Regards
Surendra BG

Since upgrading the IOS didn't work I moved DHCP to an external L3 router and I am still having the same behavior where the 5508 works and the 4404s don't. So I it looks like it is an issue with the foreign WLC and not the Anchor.

The SSID for WLAN is poly-guest.

Here is the run-config for the foreign WLC

no-ap
System Inventory
NAME: "Chassis"    , DESCR: "4400 Series WLAN Controller:100 APs"
PID: AIR-WLC4404-100-K9,  VID: V03,  SN: FOC1317F043

Burned-in MAC Address............................ 00:24:C4:E6:58:80
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 100

System Information
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 6.0.188.0
RTOS Version..................................... 6.0.188.0
Bootloader Version............................... 4.2.112.0
Emergency Image Version.......................... N/A
Build Type....................................... DATA + WPS

System Name...................................... CR-4404-01
System Location.................................. 1145 Computer Room
System Contact................................... Steve.Sjoberg
System ObjectID.................................. 1.3.6.1.4.1.14179.1.1.4.3
IP Address....................................... 172.25.250.10
System Up Time................................... 470 days 20 hrs 21 mins 21 secs
System Timezone Location......................... (GMT -8:00) Pacific Time (US and Canada)

Configured Country............................... US  - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +30 C

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 5
3rd Party Access Point Support................... Disabled
Number of Active Clients......................... 242
Burned-in MAC Address............................ 00:24:C4:E6:58:80
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 100

Switch Configuration
802.3x Flow Control Mode......................... Disable
FIPS prerequisite features....................... Disabled
secret obfuscation............................... Enabled

Network Information
RF-Network Name............................. Poly-Mobility
Web Mode.................................... Enable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Enable
Secure Shell (ssh).......................... Enable
Telnet...................................... Enable
Ethernet Multicast Mode..................... Disable
Ethernet Broadcast Mode..................... Disable
AP Multicast Mode........................... Unicast
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
User Idle Timeout........................... 300 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Disable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
Apple Talk ................................. Disable
AP Fallback ................................ Enable
Web Auth Redirect Ports .................... 80
Fast SSID Change ........................... Disabled
802.3 Bridging ............................. Disable
IP/MAC Addr Binding Check .................. Enabled

Port Summary
           STP   Admin   Physical   Physical   Link   Link    Mcast     
Pr  Type   Stat   Mode     Mode      Status   Status  Trap   Appliance   POE 
-- ------- ---- ------- ---------- ---------- ------ ------- --------- -------
1  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A    
2  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A    
3  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A    
4  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A    

AP Summary
Number of APs.................................... 52

Global AP User Name.............................. poly
Global AP Dot1x User Name........................ Not Configured

AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
------------------  -----  -------------------  -----------------  ----------------  ----  -------  ------
1145S-01-669-GI1/0/37  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:5f  default location  2     US       1
1145S-01-682-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:e6  default location  2     US       1
1145S-01-676-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:3d  default location  3     US       1
1145N-01-241-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:11  default location  2     US       1
1145N-P6-68-GI1/0/40  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:f7  default location  2     US       1
1145N-P6-96-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:76  default location  4     US       1
1145N-P6-95-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:86  default location  1     US       1
1145N-01-189-GI1/0/39  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:1e  default location  3     US       1
1145N-03-351-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:93  default location  2     US       1
1145N-01-193-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:4c  default location  4     US       1
1145N-P6-71-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:33  default location  2     US       1
1145N-02-327-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:38  default location  2     US       1
1145N-01-192-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:33:ff  default location  1     US       1
1145N-02-325-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:54  default location  4     US       1
1145N-01-240-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:35  default location  2     US       1
1145S-01-675-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:11  default location  4     US       1
1145N-02-333-gi1/0/40  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:74  default location  2     US       1
1145N-02-323-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:93  default location  1     US       1
1145N-01-239-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:5e  default location  4     US       1
1145N-P6-69-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:2b  default location  1     US       1
1145S-01-674-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:7d  default location  1     US       1
1145S-01-677-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:2e  default location  1     US       1
1145S-01-668-GI1/0/36  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:2f  default location  1     US       1
1145N-02-324-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:14  default location  1     US       1
1145S-01-673-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:f4  default location  1     US       1
1145N-02-326-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:fe  default location  1     US       1
1145N-P6-70-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:43  default location  1     US       1
1145S-01-679-GI1/0/35  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:9e  default location  1     US       1
1145N-P6-72-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:fc  default location  4     US       1
1145S-01-672-GI1/0/40  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:32  default location  1     US       1
1145S-01-670-GI1/0/38  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:56  default location  3     US       1
1145S-01-671-GI1/0/39  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:f0  default location  3     US       1
1145S-02-609-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:f1  default location  4     US       1
1145S-02-611-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:f9  default location  4     US       1
1145N-01-238-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:36  default location  2     US       1
1145N-02-322-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:cc  default location  2     US       1
1145S-02-608-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:27  default location  3     US       1
1145S-02-601-GI1/0/36  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:29  default location  3     US       1
1145S-02-607-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:36:03  default location  3     US       1
1145N-03-353-GI1/0/43  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:46  default location  3     US       1
1145N-03-354-GI1/0/44  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:55  default location  4     US       1
1145N-03-355-GI1/0/45  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:fb  default location  2     US       1
1145N-03-356-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:6c  default location  3     US       1
1145N-03-352-GI1/0/42  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:70  default location  4     US       1
1145S-02-602-GI1/0/37  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:7d  default location  2     US       1
1145S-02-606-GI1/0/41  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:0a  default location  3     US       1
1145S-02-603-GI1/0/38  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:92  default location  3     US       1
1145S-02-604-GI1/0/39  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:97  default location  2     US       1
1145S-02-605-GI1/0/40  2     AIR-LAP1142N-A-K9    00:22:bd:19:f1:80  default location  3     US       1
1145S-02-612-GI1/0/46  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:c7  default location  3     US       1
1145S-02-620-GI1/0/34  2     AIR-LAP1142N-A-K9    00:22:bd:18:34:be  default location  4     US       1
1145N-P5-57-FA1/0/40  2     AIR-LAP1142N-A-K9    00:22:bd:18:35:56  default location  4     US       1

802.11a Configuration
802.11a Network.................................. Enabled
11nSupport....................................... Disabled
      802.11a Low Band........................... Enabled
      802.11a Mid Band........................... Enabled
      802.11a High Band.......................... Enabled
802.11a Operational Rates
    802.11a 6M Rate.............................. Supported
    802.11a 9M Rate.............................. Supported
    802.11a 12M Rate............................. Mandatory
    802.11a 18M Rate............................. Supported
    802.11a 24M Rate............................. Mandatory
    802.11a 36M Rate............................. Supported
    802.11a 48M Rate............................. Supported
    802.11a 54M Rate............................. Supported
Beacon Interval.................................. 100
CF Pollable mandatory............................ Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 36
Default Tx Power Level........................... 0
DTPC  Status..................................... Enabled
Fragmentation Threshold.......................... 2346
TI Threshold..................................... -50
Legacy Tx Beamforming setting.................... Enabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admision Control (CAC) configuration
Voice AC:
   Voice AC - Admission control (ACM)............ Disabled
   Voice max RF bandwidth........................ 75
   Voice reserved roaming bandwidth.............. 6
   Voice load-based CAC mode..................... Disabled
   Voice tspec inactivity timeout................ Disabled
   Voice Stream-Size............................. 84000
   Voice Max-Streams............................. 2
Video AC:
   Video AC - Admission control (ACM)............ Disabled
   Video max RF bandwidth........................ Infinite
   Video reserved roaming bandwidth.............. 0

802.11a Advanced Configuration
AP Name                          MAC Address        Admin State  Operation State   Channel TxPower
-------------------------------- ------------------ ------------ ----------------- ------- --------
1145S-01-669-GI1/0/37            00:25:84:87:a7:90    ENABLED      UP                (132,136)*   2(*)
1145S-01-682-GI1/0/46            00:25:84:87:a0:40    ENABLED      UP                (149,153)*   2(*)
1145S-01-676-GI1/0/44            00:25:84:87:a7:60    ENABLED      UP                (149,153)*   2(*)
1145N-01-241-GI1/0/46            00:25:84:87:92:e0    ENABLED      UP                (112,108)*   2(*)
1145N-P6-68-GI1/0/40             00:25:84:87:a2:20    ENABLED      UP                (149,153)*   1(*)
1145N-P6-96-GI1/0/46             00:25:84:87:9a:20    ENABLED      UP                (100,104)*   2(*)
1145N-P6-95-GI1/0/45             00:25:84:87:9a:b0    ENABLED      UP                (149,153)*   1(*)
1145N-01-189-GI1/0/39            00:25:84:87:a4:00    ENABLED      UP                (132,136)*   1(*)
1145N-03-351-GI1/0/41            00:25:84:87:9c:00    ENABLED      UP                (149,153)*   1(*)
1145N-01-193-GI1/0/42            00:25:84:87:a7:30    ENABLED      UP                (36,40)*   1(*)
1145N-P6-71-GI1/0/43             00:25:84:87:a5:20    ENABLED      UP                (36,40)*   1(*)
1145N-02-327-GI1/0/46            00:25:84:87:5c:70    ENABLED      UP                (64,60)*   1(*)
1145N-01-192-GI1/0/41            00:25:84:87:92:60    ENABLED      UP                (100,104)*   1(*)
1145N-02-325-GI1/0/44            00:25:84:87:a7:10    ENABLED      UP                (100,104)*   1(*)
1145N-01-240-GI1/0/45            00:25:84:87:a5:60    ENABLED      UP                (149,153)*   2(*)
1145S-01-675-GI1/0/43            00:25:84:87:a2:e0    ENABLED      UP                (64,60)*   1(*)
1145N-02-333-gi1/0/40            00:25:84:87:a9:00    ENABLED      UP                (36,40)*   1(*)
1145N-02-323-GI1/0/42            00:25:84:87:aa:40    ENABLED      UP                (52,56)*   2(*)
1145N-01-239-GI1/0/44            00:25:84:87:a8:30    ENABLED      UP                (44,48)*   1(*)
1145N-P6-69-GI1/0/41             00:25:84:87:a4:60    ENABLED      UP                (112,108)*   1(*)
1145S-01-674-GI1/0/42            00:25:84:87:99:20    ENABLED      UP                (149,153)*   1(*)
1145S-01-677-GI1/0/45            00:25:84:87:a4:70    ENABLED      UP                (36,40)*   1(*)
1145S-01-668-GI1/0/36            00:25:84:87:a4:90    ENABLED      UP                (149,153)*   1(*)
1145N-02-324-GI1/0/43            00:25:84:87:93:d0    ENABLED      UP                (136,132)*   2(*)
1145S-01-673-GI1/0/41            00:25:84:87:a2:10    ENABLED      UP                (132,136)*   1(*)
1145N-02-326-GI1/0/45            00:25:84:87:a1:f0    ENABLED      UP                (161,157)*   3(*)
1145N-P6-70-GI1/0/42             00:25:84:87:a6:50    ENABLED      UP                (132,136)*   1(*)
1145S-01-679-GI1/0/35            00:25:84:87:9c:d0    ENABLED      UP                (64,60)*   1(*)
1145N-P6-72-GI1/0/44             00:25:84:87:b0:d0    ENABLED      UP                (64,60)*   1(*)
1145S-01-672-GI1/0/40            00:25:84:87:a4:f0    ENABLED      UP                (64,60)*   1(*)
1145S-01-670-GI1/0/38            00:25:84:87:97:90    ENABLED      UP                (36,40)*   1(*)
1145S-01-671-GI1/0/39            00:25:84:87:b0:30    ENABLED      UP                (100,104)*   1(*)
1145S-02-609-GI1/0/44            00:25:84:87:a0:d0    ENABLED      UP                (64,60)*   2(*)
1145S-02-611-GI1/0/45            00:25:84:87:a1:70    ENABLED      UP                (132,136)*   2(*)
1145N-01-238-GI1/0/43            00:25:84:87:a5:30    ENABLED      UP                (64,60)*   1(*)
1145N-02-322-GI1/0/41            00:25:84:87:9e:c0    ENABLED      UP                (161,157)*   2(*)
1145S-02-608-GI1/0/43            00:25:84:87:a4:b0    ENABLED      UP                (132,136)*   1(*)
1145S-02-601-GI1/0/36            00:25:84:87:a4:80    ENABLED      UP                (100,104)*   2(*)
1145S-02-607-GI1/0/42            00:25:84:87:b1:80    ENABLED      UP                (100,104)*   2(*)
1145N-03-353-GI1/0/43            00:25:84:87:a6:20    ENABLED      UP                (149,153)*   1(*)
1145N-03-354-GI1/0/44            00:25:84:87:98:a0    ENABLED      UP                (149,153)*   1(*)
1145N-03-355-GI1/0/45            00:25:84:87:a1:50    ENABLED      UP                (108,112)*   1(*)
1145N-03-356-GI1/0/46            00:25:84:87:a8:60    ENABLED      UP                (100,104)*   1(*)
1145N-03-352-GI1/0/42            00:25:84:87:99:10    ENABLED      UP                (64,60)*   1(*)
1145S-02-602-GI1/0/37            00:25:84:87:a9:20    ENABLED      UP                (149,153)*   1(*)
1145S-02-606-GI1/0/41            00:25:84:87:a2:70    ENABLED      UP                (161,157)*   1(*)
1145S-02-603-GI1/0/38            00:25:84:87:9c:50    ENABLED      UP                (132,136)*   1(*)
1145S-02-604-GI1/0/39            00:25:84:87:9d:10    ENABLED      UP                (149,153)*   1(*)
1145S-02-605-GI1/0/40            00:26:cb:41:89:d0    ENABLED      UP                (149,153)*   1(*)
1145S-02-612-GI1/0/46            00:25:84:87:9e:10    ENABLED      UP                (161,157)*   1(*)
1145S-02-620-GI1/0/34            00:25:84:87:9d:80    ENABLED      UP                (161,157)*   2(*)
1145N-P5-57-FA1/0/40             00:25:84:87:a7:00    ENABLED      UP                (132,136)*   1(*)

802.11a Airewave Director Configuration
RF Event and Performance Logging
  Channel Update Logging......................... Off
  Coverage Profile Logging....................... Off
  Foreign Profile Logging........................ Off
  Load Profile Logging........................... Off
  Noise Profile Logging.......................... Off
  Performance Profile Logging.................... Off
  TxPower Update Logging......................... Off
Default 802.11a AP performance profiles
  802.11a Global Interference threshold.......... 10 %
  802.11a Global noise threshold................. -70 dBm
  802.11a Global RF utilization threshold........ 80 %
  802.11a Global throughput threshold............ 1000000 bps
  802.11a Global clients threshold............... 30 clients
Default 802.11a AP monitoring
  802.11a Monitor Mode........................... enable
  802.11a Monitor Mode for Mesh AP Backhaul...... disable
  802.11a Monitor Channels....................... All channels
  802.11a AP Coverage Interval................... 180 seconds
  802.11a AP Load Interval....................... 60 seconds
  802.11a AP Noise Interval...................... 180 seconds
  802.11a AP Signal Strength Interval............ 60 seconds
Automatic Transmit Power Assignment
  Transmit Power Assignment Mode................. AUTO
  Transmit Power Update Interval................. 600 seconds
  Transmit Power Threshold....................... -70 dBm
  Transmit Power Neighbor Count.................. 3 APs
  Min Transmit Power............................. -100 dBm
  Max Transmit Power............................. 100 dBm
  Transmit Power Update Contribution............. SNI.
  Transmit Power Assignment Leader............... 00:24:c4:e6:58:80
  Last Run....................................... 277 seconds ago
Coverage Hole Detection
  802.11a Coverage Hole Detection Mode........... Enabled
  802.11a Coverage Voice Packet Count............ 100 packets
  802.11a Coverage Voice Packet Percentage....... 50%
  802.11a Coverage Voice RSSI Threshold.......... -80 dBm
  802.11a Coverage Data Packet Count............. 50 packets
  802.11a Coverage Data Packet Percentage........ 50%
  802.11a Coverage Data RSSI Threshold........... -80 dBm
  802.11a Global coverage exception level........ 25 %
  802.11a Global client minimum exception lev.... 3 clients
Automatic Channel Assignment
  Channel Assignment Mode........................ AUTO
  Channel Update Interval........................ 600 seconds
  Anchor time (Hour of the day).................. 0
  Channel Update Contribution.................... SNI.
  Channel Assignment Leader...................... 00:24:c4:e6:58:80
  Last Run....................................... 277 seconds ago
  DCA Sensitivity Level.......................... MEDIUM (15 dB)
  DCA 802.11n Channel Width...................... 40 MHz
  DCA Minimum Energy Limit....................... -95 dBm
  Channel Energy Levels
    Minimum...................................... -94 dBm
    Average...................................... -86 dBm
    Maximum...................................... -84 dBm
  Channel Dwell Times
    Minimum...................................... 16 days, 09 h 39 m 29 s
    Average...................................... 63 days, 20 h 43 m 43 s
    Maximum...................................... 72 days, 17 h 18 m 32 s
  802.11a 5 GHz Auto-RF Channel List
    Allowed Channel List......................... 36,40,44,48,52,56,60,64,100,
                                                  104,108,112,116,132,136,140,
                                                  149,153,157,161
    Unused Channel List.......................... 165
  802.11a 4.9 GHz Auto-RF Channel List
    Allowed Channel List.........................
    Unused Channel List.......................... 1,2,3,4,5,6,7,8,9,10,11,12,
                                                  13,14,15,16,17,18,19,20,21,
                                                  22,23,24,25,26
  DCA Outdoor AP option.......................... Disabled
Radio RF Grouping
  802.11a Group Mode............................. AUTO
  802.11a Group Update Interval.................. 600 seconds
  802.11a Group Leader........................... 00:24:c4:e6:58:80
    802.11a Group Member......................... 00:24:c4:e6:58:80
  802.11a Last Run............................... 277 seconds ago

802.11b Configuration
802.11b Network.................................. Enabled
11gSupport....................................... Enabled
11nSupport....................................... Enabled
802.11b/g Operational Rates
    802.11b/g 1M Rate............................ Disabled
    802.11b/g 2M Rate............................ Disabled
    802.11b/g 5.5M Rate.......................... Disabled
    802.11b/g 11M Rate........................... Mandatory
    802.11g 6M Rate.............................. Disabled
    802.11g 9M Rate.............................. Disabled
    802.11g 12M Rate............................. Supported
    802.11g 18M Rate............................. Supported
    802.11g 24M Rate............................. Supported
    802.11g 36M Rate............................. Supported
    802.11g 48M Rate............................. Supported
    802.11g 54M Rate............................. Supported
802.11n MCS Settings:
    MCS 0........................................ Supported
    MCS 1........................................ Supported
    MCS 2........................................ Supported
    MCS 3........................................ Supported
    MCS 4........................................ Supported
    MCS 5........................................ Supported
    MCS 6........................................ Supported
    MCS 7........................................ Supported
    MCS 8........................................ Supported
    MCS 9........................................ Supported
    MCS 10....................................... Supported
    MCS 11....................................... Supported
    MCS 12....................................... Supported
    MCS 13....................................... Supported
    MCS 14....................................... Supported
    MCS 15....................................... Supported
802.11n Status:
    A-MPDU Tx:
        Priority 0............................... Enabled
        Priority 1............................... Disabled
        Priority 2............................... Disabled
        Priority 3............................... Disabled
        Priority 4............................... Disabled
        Priority 5............................... Disabled
        Priority 6............................... Disabled
        Priority 7............................... Disabled
Beacon Interval.................................. 100
CF Pollable mode................................. Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 1
Default Tx Power Level........................... 0
DTPC  Status..................................... Enabled
Call Admission Limit  ........................... 105
G711 CU Quantum ................................. 15
ED Threshold..................................... -50
Fragmentation Threshold.......................... 2346
PBCC mandatory................................... Disabled
RTS Threshold.................................... 2347
Short Preamble mandatory......................... Enabled
Short Retry Limit................................ 7
Legacy Tx Beamforming setting.................... Enabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
Faster Carrier Tracking Loop..................... Disabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admision Control (CAC) configuration
   Voice AC - Admission control (ACM)............ Disabled
   Voice Stream-Size............................. 84000
   Voice Max-Streams............................. 2
   Voice max RF bandwidth........................ 75
   Voice reserved roaming bandwidth.............. 6
   Voice load-based CAC mode..................... Disabled
   Voice tspec inactivity timeout................ Disabled
   Video AC - Admission control (ACM)............ Disabled
   Video max RF bandwidth........................ 50
   Video reserved roaming bandwidth.............. 0

802.11b Advanced Configuration
AP Name                          MAC Address        Admin State  Operation State   Channel TxPower
-------------------------------- ------------------ ------------ ----------------- ------- --------
1145S-01-669-GI1/0/37            00:25:84:87:a7:90    ENABLED      UP                6*       5(*)
1145S-01-682-GI1/0/46            00:25:84:87:a0:40    ENABLED      UP                1*       3(*)
1145S-01-676-GI1/0/44            00:25:84:87:a7:60    ENABLED      UP                6*       4(*)
1145N-01-241-GI1/0/46            00:25:84:87:92:e0    ENABLED      UP                11*      3(*)
1145N-P6-68-GI1/0/40             00:25:84:87:a2:20    ENABLED      UP                11*      2(*)
1145N-P6-96-GI1/0/46             00:25:84:87:9a:20    ENABLED      UP                1*       4(*)
1145N-P6-95-GI1/0/45             00:25:84:87:9a:b0    ENABLED      UP                1*       2(*)
1145N-01-189-GI1/0/39            00:25:84:87:a4:00    ENABLED      UP                6*       2(*)
1145N-03-351-GI1/0/41            00:25:84:87:9c:00    ENABLED      UP                11*      4(*)
1145N-01-193-GI1/0/42            00:25:84:87:a7:30    ENABLED      UP                1*       5(*)
1145N-P6-71-GI1/0/43             00:25:84:87:a5:20    ENABLED      UP                11*      3(*)
1145N-02-327-GI1/0/46            00:25:84:87:5c:70    ENABLED      UP                1*       4(*)
1145N-01-192-GI1/0/41            00:25:84:87:92:60    ENABLED      UP                6*       4(*)
1145N-02-325-GI1/0/44            00:25:84:87:a7:10    ENABLED      UP                11*      2(*)
1145N-01-240-GI1/0/45            00:25:84:87:a5:60    ENABLED      UP                6*       4(*)
1145S-01-675-GI1/0/43            00:25:84:87:a2:e0    ENABLED      UP                1*       4(*)
1145N-02-333-gi1/0/40            00:25:84:87:a9:00    ENABLED      UP                6*       4(*)
1145N-02-323-GI1/0/42            00:25:84:87:aa:40    ENABLED      UP                6*       5(*)
1145N-01-239-GI1/0/44            00:25:84:87:a8:30    ENABLED      UP                11*      5(*)
1145N-P6-69-GI1/0/41             00:25:84:87:a4:60    ENABLED      UP                6*       4(*)
1145S-01-674-GI1/0/42            00:25:84:87:99:20    ENABLED      UP                6*       3(*)
1145S-01-677-GI1/0/45            00:25:84:87:a4:70    ENABLED      UP                11*      4(*)
1145S-01-668-GI1/0/36            00:25:84:87:a4:90    ENABLED      UP                6*       3(*)
1145N-02-324-GI1/0/43            00:25:84:87:93:d0    ENABLED      UP                1*       4(*)
1145S-01-673-GI1/0/41            00:25:84:87:a2:10    ENABLED      UP                11*      3(*)
1145N-02-326-GI1/0/45            00:25:84:87:a1:f0    ENABLED      UP                11*      5(*)
1145N-P6-70-GI1/0/42             00:25:84:87:a6:50    ENABLED      UP                11*      3(*)
1145S-01-679-GI1/0/35            00:25:84:87:9c:d0    ENABLED      UP                1*       4(*)
1145N-P6-72-GI1/0/44             00:25:84:87:b0:d0    ENABLED      UP                1*       3(*)
1145S-01-672-GI1/0/40            00:25:84:87:a4:f0    ENABLED      UP                6*       2(*)
1145S-01-670-GI1/0/38            00:25:84:87:97:90    ENABLED      UP                1*       4(*)
1145S-01-671-GI1/0/39            00:25:84:87:b0:30    ENABLED      UP                11*      3(*)
1145S-02-609-GI1/0/44            00:25:84:87:a0:d0    ENABLED      UP                6*       4(*)
1145S-02-611-GI1/0/45            00:25:84:87:a1:70    ENABLED      UP                11*      4(*)
1145N-01-238-GI1/0/43            00:25:84:87:a5:30    ENABLED      UP                11*      3(*)
1145N-02-322-GI1/0/41            00:25:84:87:9e:c0    ENABLED      UP                1*       4(*)
1145S-02-608-GI1/0/43            00:25:84:87:a4:b0    ENABLED      UP                1*       3(*)
1145S-02-601-GI1/0/36            00:25:84:87:a4:80    ENABLED      UP                1*       4(*)
1145S-02-607-GI1/0/42            00:25:84:87:b1:80    ENABLED      UP                1*       3(*)
1145N-03-353-GI1/0/43            00:25:84:87:a6:20    ENABLED      UP                11*      3(*)
1145N-03-354-GI1/0/44            00:25:84:87:98:a0    ENABLED      UP                1*       2(*)
1145N-03-355-GI1/0/45            00:25:84:87:a1:50    ENABLED      UP                11*      3(*)
1145N-03-356-GI1/0/46            00:25:84:87:a8:60    ENABLED      UP                6*       3(*)
1145N-03-352-GI1/0/42            00:25:84:87:99:10    ENABLED      UP                1*       4(*)
1145S-02-602-GI1/0/37            00:25:84:87:a9:20    ENABLED      UP                11*      4(*)
1145S-02-606-GI1/0/41            00:25:84:87:a2:70    ENABLED      UP                11*      3(*)
1145S-02-603-GI1/0/38            00:25:84:87:9c:50    ENABLED      UP                6*       3(*)
1145S-02-604-GI1/0/39            00:25:84:87:9d:10    ENABLED      UP                1*       2(*)
1145S-02-605-GI1/0/40            00:26:cb:41:89:d0    ENABLED      UP                1*       2(*)
1145S-02-612-GI1/0/46            00:25:84:87:9e:10    ENABLED      UP                11*      2(*)
1145S-02-620-GI1/0/34            00:25:84:87:9d:80    ENABLED      UP                6*       4(*)
1145N-P5-57-FA1/0/40             00:25:84:87:a7:00    ENABLED      UP                11*      1(*)

802.11b Airewave Director Configuration
RF Event and Performance Logging
  Channel Update Logging......................... Off
  Coverage Profile Logging....................... Off
  Foreign Profile Logging........................ Off
  Load Profile Logging........................... Off
  Noise Profile Logging.......................... Off
  Performance Profile Logging.................... Off
  Transmit Power Update Logging.................. Off
Default 802.11b AP performance profiles
  802.11b Global Interference threshold.......... 10 %
  802.11b Global noise threshold................. -70 dBm
  802.11b Global RF utilization threshold........ 80 %
  802.11b Global throughput threshold............ 1000000 bps
  802.11b Global clients threshold............... 12 clients
Default 802.11b AP monitoring
  802.11b Monitor Mode........................... enable
  802.11b Monitor Channels....................... Country channels
  802.11b AP Coverage Interval................... 180 seconds
  802.11b AP Load Interval....................... 60 seconds
  802.11b AP Noise Interval...................... 180 seconds
  802.11b AP Signal Strength Interval............ 60 seconds
Automatic Transmit Power Assignment
  Transmit Power Assignment Mode................. AUTO
  Transmit Power Update Interval................. 600 seconds
  Transmit Power Threshold....................... -70 dBm
  Transmit Power Neighbor Count.................. 3 APs
  Min Transmit Power............................. -100 dBm
  Max Transmit Power............................. 100 dBm
  Transmit Power Update Contribution............. SNI.
  Transmit Power Assignment Leader............... 00:24:c4:e6:58:80
  Last Run....................................... 402 seconds ago
Coverage Hole Detection
  802.11b Coverage Hole Detection Mode........... Enabled
  802.11b Coverage Voice Packet Count............ 100 packets
  802.11b Coverage Voice Packet Percentage....... 50%
  802.11b Coverage Voice RSSI Threshold.......... -80 dBm
  802.11b Coverage Data Packet Count............. 50 packets
  802.11b Coverage Data Packet Percentage........ 50%
  802.11b Coverage Data RSSI Threshold........... -80 dBm
  802.11b Global coverage exception level........ 25 %
  802.11b Global client minimum exception lev.... 3 clients
Automatic Channel Assignment
  Channel Assignment Mode........................ AUTO
  Channel Update Interval........................ 600 seconds
  Anchor time (Hour of the day).................. 0
  Channel Update Contribution.................... SNI.
  Channel Assignment Leader...................... 00:24:c4:e6:58:80
  Last Run....................................... 402 seconds ago

  DCA Sensitivity Level: ...................... MEDIUM (10 dB)
  DCA Minimum Energy Limit....................... -95 dBm
  Channel Energy Levels
    Minimum...................................... -82 dBm
    Average...................................... -74 dBm
    Maximum...................................... -64 dBm
  Channel Dwell Times
    Minimum...................................... 2 days, 23 h 55 m 25 s
    Average...................................... 42 days, 07 h 51 m 31 s
    Maximum...................................... 72 days, 17 h 18 m 33 s
  802.11b Auto-RF Allowed Channel List........... 1,6,11
  Auto-RF Unused Channel List.................... 2,3,4,5,7,8,9,10
Radio RF Grouping
  802.11b Group Mode............................. AUTO
  802.11b Group Update Interval.................. 600 seconds
  802.11b Group Leader........................... 00:24:c4:e6:58:80
    802.11b Group Member......................... 00:24:c4:e6:58:80
  802.11b Last Run............................... 402 seconds ago

Mobility Configuration
Symmetric Mobility Tunneling (current) .......... Enabled
Symmetric Mobility Tunneling (after reboot) ..... Enabled
Mobility Protocol Port........................... 16666
Default Mobility Domain.......................... Poly-Mobility
Multicast Mode .................................. Disabled
Mobility Domain ID for 802.11r................... 0x4c8
Mobility Keepalive Interval...................... 10
Mobility Keepalive Count......................... 3
Mobility Group Members Configured................ 4
Mobility Control Message DSCP Value.............. 0

Controllers configured in the Mobility Group
MAC Address        IP Address       Group Name                        Multicast IP     Status
00:24:c4:e6:54:00  172.25.251.10    Poly-Mobility                     0.0.0.0          Control Path Down
00:24:c4:e6:58:80  172.25.250.10    Poly-Mobility                     0.0.0.0          Up
f8:66:f2:e1:ab:60  192.168.252.21   Guest-Mobility                    0.0.0.0          Up
f8:66:f2:e1:b2:40  192.168.252.19   Guest-Mobility                    0.0.0.0          Up

Advanced Configuration
Probe request filtering..........................  Enabled
Probes fwd to controller per client per radio....  2
Probe request rate-limiting interval.............  500 msec

EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 1000
EAPOL-Key Max Retries............................ 2

dot11-padding.................................... Disabled

Authentication Response Timeout (seconds)........ 10
Rogue Entry Timeout (seconds).................... 1200
AP Heart Beat Timeout (seconds).................. 30
AP Discovery Timeout (seconds)................... 10
AP Local mode Fast Heartbeat (seconds)........... disable
AP Hreap mode Fast Heartbeat (seconds)........... disable


AP Primary Discovery Timeout (seconds)........... 120
AP Primed Join Timeout (seconds)................. 0


Location Configuration
RFID Tag data Collection......................... Enabled
RFID  timeout.................................... 1200 seconds
RFID mobility.................................... Oui:00:14:7e : Vendor:pango  State:Disabled


Interface Configuration
Interface Name................................... ap-manager
MAC Address...................................... 00:24:c4:e6:58:83
IP Address....................................... 172.25.250.5
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 172.25.250.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 600      
Active Physical Port............................. 1        
Primary Physical Port............................ 1        
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No

Interface Name................................... ap-manager 2
MAC Address...................................... 00:24:c4:e6:58:84
IP Address....................................... 172.25.250.6
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 172.25.250.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 600      
Active Physical Port............................. 2        
Primary Physical Port............................ 2        
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No

Interface Name................................... ap-manager 3
MAC Address...................................... 00:24:c4:e6:58:85
IP Address....................................... 172.25.250.7
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 172.25.250.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 600      
Active Physical Port............................. 3        
Primary Physical Port............................ 3        
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No

Interface Name................................... ap-manager 4
MAC Address...................................... 00:24:c4:e6:58:86
IP Address....................................... 172.25.250.8
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 172.25.250.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 600      
Active Physical Port............................. 4        
Primary Physical Port............................ 4        
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No

Interface Name................................... general user
MAC Address...................................... 00:24:c4:e6:58:83
IP Address....................................... 172.26.240.10
IP Netmask....................................... 255.255.254.0
IP Gateway....................................... 172.26.240.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 610      
Quarantine-vlan.................................. 0
Active Physical Port............................. 1        
Primary Physical Port............................ 1        
Backup Physical Port............................. 2        
Primary DHCP Server.............................. 172.26.2.70
Secondary DHCP Server............................ 172.26.4.70
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... management
MAC Address...................................... 00:24:c4:e6:58:80
IP Address....................................... 172.25.250.10
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 172.25.250.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 600      
Quarantine-vlan.................................. 0
Active Physical Port............................. 1        
Primary Physical Port............................ 1        
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. 172.26.2.70
Secondary DHCP Server............................ 172.26.4.70
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... polynull
MAC Address...................................... 00:24:c4:e6:58:83
IP Address....................................... 2.2.2.1
IP Netmask....................................... 255.255.255.192
IP Gateway....................................... 2.2.2.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 11       
Quarantine-vlan.................................. 0
Active Physical Port............................. 1        
Primary Physical Port............................ 1        
Backup Physical Port............................. 2        
Primary DHCP Server.............................. 3.3.3.3
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... service-port
MAC Address...................................... 00:24:c4:e6:58:81
IP Address....................................... 172.26.251.254
IP Netmask....................................... 255.255.254.0
DHCP Option 82................................... Disabled
DHCP Protocol.................................... Disabled
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... tablets
MAC Address...................................... 00:24:c4:e6:58:83
IP Address....................................... 172.26.242.10
IP Netmask....................................... 255.255.254.0
IP Gateway....................................... 172.26.242.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 611      
Quarantine-vlan.................................. 0
Active Physical Port............................. 1        
Primary Physical Port............................ 1        
Backup Physical Port............................. 2        
Primary DHCP Server.............................. 172.26.2.70
Secondary DHCP Server............................ 172.26.4.70
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... virtual
MAC Address...................................... 00:24:c4:e6:58:80
IP Address....................................... 1.1.1.1
DHCP Option 82................................... Disabled
Virtual DNS Host Name............................ Disabled
AP Manager....................................... No
Guest Interface.................................. No

WLAN Configuration

WLAN Identifier.................................. 1
Profile Name..................................... General Inside Users
Network Name (SSID).............................. @Ins1d3@
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control

  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 2
Exclusionlist Timeout............................ 300 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ general user
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled

Enabled
............... management

Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11b and 802.11g only
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ 172.26.202.85 1812
   Authentication................................ 172.26.2.70 1812
   Accounting.................................... Global Servers
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System


   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      Auth Key Management
         802.1x.................................. Enabled
         PSK..................................... Disabled
         CCKM.................................... Enabled
         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled


   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Enabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List
WLAN ID     IP Address            Status
-------     ---------------       ------


WLAN Identifier.................................. 2
Profile Name..................................... Tablets
Network Name (SSID).............................. !T@bl3ts!
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control

  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 300 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ tablets
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled


Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11a only
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ 172.26.2.22 1812
   Authentication................................ 172.26.4.22 1812
   Accounting.................................... Global Servers
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      Auth Key Management
         802.1x.................................. Enabled
         PSK..................................... Disabled
         CCKM.................................... Enabled


         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Enabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List


WLAN ID     IP Address            Status
-------     ---------------       ------


WLAN Identifier.................................. 3
Profile Name..................................... New-Tablets
Network Name (SSID).............................. Ptablets
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control

  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 197
Exclusionlist Timeout............................ 600 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ tablets
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default


DHCP Address Assignment Required................. Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11a only
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ 172.26.202.85 1812
   Authentication................................ 172.26.2.70 1812
   Accounting.................................... Global Servers
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      Auth Key Management
         802.1x.................................. Enabled
         PSK..................................... Disabled
         CCKM.................................... Enabled
         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled


   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Disabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List
WLAN ID     IP Address            Status
-------     ---------------       ------


WLAN Identifier.................................. 4
Profile Name..................................... Poly Test
Network Name (SSID).............................. P0lyT3st
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled


Network Admission Control

  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. Infinity
CHD per WLAN..................................... Webauth DHCP exclusion........................... Disabled
Interface........................................ tablets
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled


Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Global Servers
   Accounting.................................... Global Servers
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
      Auth Key Management
         802.1x.................................. Disabled
         PSK..................................... Enabled
         CCKM.................................... Disabled
         FT(802.11r)............................. Disabled


         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Enabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List
WLAN ID     IP Address            Status


-------     ---------------       ------


WLAN Identifier.................................. 5
Profile Name..................................... Polyclinic
Network Name (SSID).............................. Poly-Guest
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 25
Exclusionlist.................................... Disabled
Session Timeout.................................. 64800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface.........................WLAN
ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Enabled
Quality of Service............................... Bronze (background)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... 802.11b and 802.11g only
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Disabled
   Accounting.................................... Disabled
Local EAP Authentication......................... Disabled
Security
   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Disabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Enabled
ACL............................................. Unconfigured
Email Input..................................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Disabled
   Client MFP.................................... Optional but inactive (WPA2 not configured)
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List
WLAN ID     IP Address            Status


-------     ---------------       ------

ACL Configuration


CPU ACL Configuration

CPU Acl Name................................ NOT CONFIGURED
Wireless Traffic............................ Disabled
Wired Traffic............................... Disabled

RADIUS Configuration
Vendor Id Backward Compatibility................. Disabled
Call Station Id Case............................. lower
Call Station Id Type............................. IP Address
Aggressive Failover.............................. Enabled
Keywrap.......................................... Disabled
Fallback Test:
    Test Mode.................................... Off
    Probe User Name.............................. cisco-probe
    Interval (in seconds)........................ 300
MAC Delimiter for Authentication Messages........ hyphen
MAC Delimiter for Accounting Messages............ hyphen

Authentication Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------
1    NM    172.26.2.22       1812    Enabled   4     Enabled   Disabled - none/unknown/group-0/0 none/none
2    NM    172.26.4.22       1812    Enabled   4     Enabled   Disabled - none/unknown/group-0/0 none/none
3    NM    172.26.2.70       1812    Enabled   2     Enabled   Disabled - none/unknown/group-0/0 none/none
4    NM    172.26.4.70       1812    Enabled   2     Enabled   Disabled - none/unknown/group-0/0 none/none
5    NM    172.26.202.85     1812    Enabled   2     Disabled  Disabled - none/unknown/group-0/0 none/none

Accounting Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------


TACACS Configuration
Authentication Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----

Authorization Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----

Accounting Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----


LDAP Configuration


Local EAP Configuration
User credentials database search order:
    Primary ..................................... Local DB

Timer:
    Active timeout .............................. 300

Configured EAP profiles:

EAP Method configuration:
    EAP-FAST:
      Server key ................................
      TTL for the PAC ........................... 10
      Anonymous provision allowed ............... Yes
      Authority ID .............................. 436973636f0000000000000000000000
      Authority Information ..................... Cisco A-ID


HREAP Group Summary

HREAP Group Summary: Count: 0
Group Name                # Aps


HREAP Group Detail


Route  Info
Number of Routes................................. 2

Destination Network          Netmask               Gateway
-------------------    -------------------   -------------------
172.25.0.0             255.255.0.0           172.26.250.1        
172.26.0.0             255.255.0.0           172.26.250.1        


Qos Queue Length Info
Platinum queue length............................ 100
Gold queue length................................  75
Silver queue length..............................  50
Bronze queue length..............................  25


Mac Filter Info


Authorization List

Authorize MIC APs against AAA ................... disabled
Authorize LSC APs against Auth-List ............. disabled

Allow APs with MIC - Manufactured Installed C.... disabled
Allow APs with SSC - Self-Signed Certificate..... disabled
Allow APs with LSC - Locally Significant Cert.... disabled


Load Balancing Info
Aggressive Load Balancing........................ Enabled
Aggressive Load Balancing Window................. 5 clients
Aggressive Load Balancing Denial Count........... 3

Statistics
Total Denied Count............................... 195623 clients
Total Denial Sent................................ 384679 messages
Exceeded Denial Max Limit Count.................. 85504 times
None 5G Candidate Count.......................... 91450 times
None 2.4G Candidate Count........................ 2321296 times


Dhcp Scope Info

Exclusion List ConfigurationUnable to retrieve exclusion-list entry

CDP Configuration


Country Channels Configuration

Configured Country............................. US  - United States
      KEY: * = Channel is legal in this country and may be configured manually.
           A = Channel is the Auto-RF default in this country.
           . = Channel is not legal in this country.
           C = Channel has been configured for use by Auto-RF.
           x = Channel is available to be configured for use by Auto-RF.
         (-,-) = (indoor, outdoor) regulatory doamin allowed by this country.
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
    802.11bg     :                           
    Channels     :                   1 1 1 1 1
                 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): A * * * * A * * * * A . . .
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
    802.11a      :                         1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
    Channels     : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 5 5 6 6
                 : 4 6 8 0 2 4 6 8 2 6 0 4 0 4 8 2 6 0 4 8 2 6 0 9 3 7 1 5
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): . A . A . A . A A A A A * * * * * . . . * * * A A A A *
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-


4.9GHz 802.11a  :                                                   
    Channels     :                   1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2
                 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): * * * * * * * * * * * * * * * * * * * A * * * * * A
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-


WPS Configuration Summary

Auto-Immune
  Auto-Immune.................................... Disabled

Client Exclusion Policy
  Excessive 802.11-association failures.......... Disabled
  Excessive 802.11-authentication failures....... Disabled
  Excessive 802.1x-authentication................ Enabled
  IP-theft....................................... Enabled
  Excessive Web authentication failure........... Enabled

Signature Policy
  Signature Processing........................... Enabled

Spanning Tree Switch Configuration

STP Specification...................... IEEE 802.1D
STP Base MAC Address................... 00:24:C4:E6:58:80
Spanning Tree Algorithm................ Disable
STP Bridge Priority.................... 32768
STP Bridge Max. Age (seconds).......... 20
STP Bridge Hello Time (seconds)........ 2
STP Bridge Forward Delay (seconds)..... 15

Spanning Tree Port Configuration

STP Port ID................................. 8001
STP Port State.............................. Forwarding
STP Port Administrative Mode................ 802.1D
STP Port Priority........................... 128
STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto


STP Port ID................................. 8002
STP Port State.............................. Forwarding
STP Port Administrative Mode................ 802.1D
STP Port Priority........................... 128
STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto


STP Port ID................................. 8003
STP Port State.............................. Forwarding
STP Port Administrative Mode................ 802.1D
STP Port Priority........................... 128


STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto


STP Port ID................................. 8004
STP Port State.............................. Forwarding
STP Port Administrative Mode................ 802.1D
STP Port Priority........................... 128
STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto

Custom Web Configuration

Radius Authentication Method..................... PAP
Cisco Logo....................................... Enabled
CustomLogo....................................... None
Custom Title..................................... None
Custom Message................................... None
Custom Redirect URL.............................. None
Web Authentication Type.......................... Internal Default
External Web Authentication URL.................. None
External Web Server list
    Index      IP Address
    -----    ---------------
        1            0.0.0.0
        2            0.0.0.0
        3            0.0.0.0
        4            0.0.0.0
        5            0.0.0.0
        6            0.0.0.0
        7            0.0.0.0
        8            0.0.0.0
        9            0.0.0.0


       10            0.0.0.0
       11            0.0.0.0
       12            0.0.0.0
       13            0.0.0.0
       14            0.0.0.0
       15            0.0.0.0
       16            0.0.0.0
       17            0.0.0.0
       18            0.0.0.0
       19            0.0.0.0
       20            0.0.0.0

Configuration Per Profile:

WLAN ID: 5
   WLAN Status................................... Enabled
   Web Security Policy........................... Web-Passthrough
   Global Status................................. Enabled
   WebAuth Type.................................. Internal

Rogue AP Configuration

Rogue Location Discovery Protocol................ Disabled
Rogue on wire Auto-Contain....................... Disabled
Rogue using our SSID Auto-Contain................ Disabled
Valid client on rogue AP Auto-Contain............ Disabled
Rogue AP timeout................................. 1200

MAC Address        Classification     # APs # Clients Last Heard            
-----------------  ------------------ ----- --------- -----------------------
00:08:9f:bd:77:fc  Unclassified       2     0         Tue Jul 12 11:00:44 2011
00:0b:6c:c0:9e:9f  Unclassified       16    0         Tue Jul 12 11:01:11 2011
00:0f:66:b1:9d:00  Unclassified       1     0         Tue Jul 12 10:55:09 2011
00:11:5c:44:2b:90  Friendly           0     0         Not Heard
00:11:5c:44:39:50  Friendly           0     0         Not Heard
00:12:17:80:01:fa  Unclassified       1     0         Tue Jul 12 10:52:58 2011
00:12:5f:03:46:54  Unclassified       1     0         Tue Jul 12 10:56:12 2011
00:13:10:86:8d:7b  Unclassified       1     0         Tue Jul 12 10:53:53 2011
00:14:bf:ad:d3:c3  Unclassified       4     0         Tue Jul 12 11:00:59 2011
00:15:05:e6:14:14  Unclassified       15    0         Tue Jul 12 11:01:09 2011
00:16:9c:b8:e1:f1  Friendly           0     0         Not Heard
00:17:0f:34:2a:a3  Friendly           0     0         Not Heard

--More-- or (q)uit
00:17:0f:34:2a:a6  Friendly           0     0         Not Heard
00:17:0f:34:2a:a7  Friendly           0     0         Not Heard
00:18:d2:00:7f:b4  Unclassified       4     0         Tue Jul 12 10:43:09 2011
00:18:d2:00:80:9c  Unclassified       1     0         Tue Jul 12 10:56:12 2011
00:18:e7:d2:97:56  Unclassified       1     0         Tue Jul 12 10:42:36 2011
00:18:e7:e5:71:1e  Friendly           0     0         Not Heard
00:19:e4:1f:c2:19  Unclassified       7     1         Tue Jul 12 10:59:12 2011
00:1a:2b:80:5e:1d  Unclassified       5     0         Tue Jul 12 10:58:11 2011
00:1a:70:d8:68:9d  Unclassified       8     0         Tue Jul 12 11:00:44 2011
00:1a:a2:c0:56:b1  Friendly           0     0         Not Heard
00:1a:a2:c0:56:b3  Friendly           0     0         Not Heard
00:1a:a2:c0:56:b4  Friendly           0     0         Not Heard
00:1a:a2:c0:5f:e1  Friendly           0     0         Not Heard
00:1a:a2:c0:5f:e2  Friendly           0     0         Not Heard
00:1a:a2:c0:5f:e3  Friendly           0     0         Not Heard
00:1a:a2:c0:5f:e4  Friendly           0     0         Not Heard
00:1a:a2:c0:6a:d1  Friendly           1     0         Tue Jul 12 10:59:53 2011
00:1a:a2:c0:6a:d2  Friendly           0     0         Not Heard
00:1a:a2:c0:6a:d3  Friendly           0     0         Not Heard
00:1a:a2:c0:6a:d4  Friendly           0     0         Not Heard
00:1a:a2:c1:57:51  Friendly           1     0         Tue Jul 12 10:59:53 2011
00:1a:a2:c1:57:54  Friendly           1     0         Tue Jul 12 10:59:53 2011
00:1b:11:bf:95:ed  Unclassified       1     0         Tue Jul 12 10:43:38 2011

--More-- or (q)uit
00:1b:63:2b:43:38  Unclassified       1     0         Tue Jul 12 10:41:53 2011
00:1b:63:2b:8a:c2  Unclassified       1     0         Tue Jul 12 10:55:38 2011
00:1f:33:fd:1c:76  Unclassified       11    0         Tue Jul 12 11:01:08 2011
00:1f:5b:89:20:b9  Unclassified       5     0         Tue Jul 12 11:00:55 2011
00:21:29:a4:40:c2  Unclassified       1     0         Tue Jul 12 10:47:12 2011
00:21:29:da:d0:13  Unclassified       1     0         Tue Jul 12 10:52:58 2011
00:22:6b:a2:b2:07  Unclassified       2     1         Tue Jul 12 10:59:49 2011
00:23:69:05:d0:8e  Unclassified       4     0         Tue Jul 12 10:56:49 2011
00:23:75:24:7c:20  Unclassified       8     0         Tue Jul 12 11:00:04 2011
00:23:a3:7d:5c:e0  Unclassified       8     0         Tue Jul 12 11:01:08 2011
00:24:36:ea:3f:c5  Unclassified       2     0         Tue Jul 12 10:49:58 2011
00:24:37:89:27:60  Unclassified       7     1         Tue Jul 12 11:00:55 2011
00:24:37:a7:82:b0  Unclassified       9     1         Tue Jul 12 11:01:06 2011
00:24:7b:66:c0:38  Unclassified       3     0         Tue Jul 12 11:01:08 2011
00:24:7b:68:33:78  Unclassified       1     0         Tue Jul 12 10:46:38 2011
00:24:7b:69:eb:82  Unclassified       8     0         Tue Jul 12 10:59:53 2011
00:24:7b:a9:b0:cc  Unclassified       1     0         Tue Jul 12 10:46:38 2011
00:24:7b:fe:96:44  Unclassified       3     0         Tue Jul 12 10:58:09 2011
00:24:b2:56:cf:62  Pending            1     0         Tue Jul 12 10:58:38 2011
00:24:b2:99:67:a6  Unclassified       9     0         Tue Jul 12 11:01:08 2011
00:a0:f8:6b:59:79  Unclassified       2     0         Tue Jul 12 10:47:53 2011
00:a0:f8:6b:59:7a  Unclassified       2     0         Tue Jul 12 10:59:53 2011
00:a0:f8:6b:59:7b  Unclassified       2     1         Tue Jul 12 10:56:53 2011

--More-- or (q)uit
40:4a:03:de:db:3c  Unclassified       4     0         Tue Jul 12 11:00:55 2011
40:4a:03:df:5f:59  Unclassified       5     0         Tue Jul 12 11:01:20 2011
68:7f:74:37:6b:b5  Unclassified       9     0         Tue Jul 12 10:58:52 2011
98:fc:11:43:ce:ca  Unclassified       1     0         Tue Jul 12 10:42:43 2011
98:fc:11:43:ce:cb  Unclassified       1     0         Tue Jul 12 10:42:43 2011
a0:21:b7:77:10:f9  Unclassified       3     0         Tue Jul 12 11:01:00 2011
a0:21:b7:77:10:fa  Unclassified       15    1         Tue Jul 12 10:59:12 2011
c0:3f:0e:d0:91:aa  Unclassified       1     0         Tue Jul 12 10:58:38 2011
c4:3d:c7:ae:73:88  Unclassified       1     0         Tue Jul 12 10:56:12 2011
d8:5d:4c:bb:7d:5a  Unclassified       6     0         Tue Jul 12 10:54:42 2011
e0:91:f5:86:ef:0e  Unclassified       1     0         Tue Jul 12 10:40:08 2011

Adhoc Rogue Configuration

Detect and report Ad-Hoc Networks................ Enabled
Auto-Contain Ad-Hoc Networks..................... Disabled

Client MAC Address  Adhoc BSSID         State              # APs   Last Heard            
------------------  ------------------  -----------------  ------  -----------------------
00:26:5e:55:be:b7   ea:cc:5f:31:05:75   Alert              1        Tue Jul 12 11:01:20 2011
02:25:84:09:46:25   02:25:84:09:46:25   Alert              8        Tue Jul 12 11:01:20 2011
d8:d3:85:f4:a6:cb   2e:22:64:dd:d3:fe   Alert              5        Tue Jul 12 10:59:53 2011


--More-- or (q)uit
Rogue Client Configuration

Validate rogue clients against AAA............... Disabled

MAC Address        State              # APs Last Heard            
-----------------  ------------------ ----- -----------------------
00:18:f3:98:e8:09  Alert              4     Tue Jul 12 10:43:34 2011
00:25:00:48:a0:6c  Alert              3     Tue Jul 12 11:00:55 2011
00:a0:f8:64:d2:38  Alert              3     Tue Jul 12 10:55:54 2011
04:1e:64:ec:29:08  Alert              1     Tue Jul 12 10:55:58 2011
20:7c:8f:18:9a:14  Alert              1     Tue Jul 12 10:46:34 2011
28:ef:01:17:e4:35  Alert              1     Tue Jul 12 11:00:36 2011

Ignore List Configuration

MAC Address      
-----------------

Rogue Rule Configuration

Priority Rule Name               State    Type          Match Hit Count
-------- ----------------------- -------- ------------- ----- ---------

 

Here is the run-config for the anchor WLC

System Inventory
NAME: "Chassis"    , DESCR: "4400 Series WLAN Controller:12 APs"
PID: AIR-WLC4402-12-K9,  VID: V04,  SN: FOC1443F06Y

Burned-in MAC Address............................ F8:66:F2:E1:B2:40
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Absent
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 12

System Information
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 6.0.202.0
RTOS Version..................................... 6.0.202.0
Bootloader Version............................... 6.0.199.4
Emergency Image Version.......................... 6.0.199.4
Build Type....................................... DATA + WPS

System Name...................................... Guest-4402-1
System Location.................................. 1145 Phone Room
System Contact................................... Brian Schott
System ObjectID.................................. 1.3.6.1.4.1.14179.1.1.4.3
IP Address....................................... 192.168.252.19
System Up Time................................... 0 days 23 hrs 54 mins 58 secs
System Timezone Location.........................

Configured Country............................... US  - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +38 C

State of 802.11b Network......................... Disabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 1
3rd Party Access Point Support................... Disabled
Number of Active Clients......................... 6

Burned-in MAC Address............................ F8:66:F2:E1:B2:40
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Absent
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 12

Switch Configuration
802.3x Flow Control Mode......................... Disable
FIPS prerequisite features....................... Disabled
secret obfuscation............................... Enabled

Network Information
RF-Network Name............................. Guest-Mobility
Web Mode.................................... Enable
Secure Web Mode............................. Disable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Enable
Secure Shell (ssh).......................... Enable
Telnet...................................... Enable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
AP Multicast/Broadcast Mode................. Unicast
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
User Idle Timeout........................... 28800 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Disable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable


Apple Talk ................................. Disable
AP Fallback ................................ Disable
Web Auth Redirect Ports .................... 80
Fast SSID Change ........................... Enabled
802.3 Bridging ............................. Disable
IP/MAC Addr Binding Check .................. Enabled

Port Summary
           STP   Admin   Physical   Physical   Link   Link    Mcast
Pr  Type   Stat   Mode     Mode      Status   Status  Trap   Appliance   POE
-- ------- ---- ------- ---------- ---------- ------ ------- --------- -------
1  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A
2  Normal  Forw Enable  Auto       1000 Full  Up     Enable  Enable     N/A

AP Summary
Number of APs.................................... 0

Global AP User Name.............................. Not Configured
Global AP Dot1x User Name........................ Not Configured

AP Name             Slots  AP Model             Ethernet MAC       Location
     Port  Country  Priority
------------------  -----  -------------------  -----------------  -------------
---  ----  -------  ------

AP Location
Site Name........................................ default-group
Site Description.................................

WLAN ID          Interface          Network Admission Control
-------         -----------        --------------------------
1               poly-guest           Disabled

AP Name             Slots  AP Model             Ethernet MAC       Location
     Port  Country  Priority  GroupName
------------------  -----  -------------------  -----------------  -------------
---  ----  -------  --------  --------------------------

AP Config


AP Airewave Director Configuration

802.11a Configuration
802.11a Network.................................. Disabled
11nSupport....................................... Enabled
      802.11a Low Band........................... Enabled
      802.11a Mid Band........................... Enabled
      802.11a High Band.......................... Enabled
802.11a Operational Rates
    802.11a 6M Rate.............................. Mandatory
    802.11a 9M Rate.............................. Supported
    802.11a 12M Rate............................. Mandatory
    802.11a 18M Rate............................. Supported
    802.11a 24M Rate............................. Mandatory
    802.11a 36M Rate............................. Supported
    802.11a 48M Rate............................. Supported
    802.11a 54M Rate............................. Supported
802.11n MCS Settings:
    MCS 0........................................ Supported
    MCS 1........................................ Supported
    MCS 2........................................ Supported
    MCS 3........................................ Supported
    MCS 4........................................ Supported
    MCS 5........................................ Supported
    MCS 6........................................ Supported


    MCS 7........................................ Supported
    MCS 8........................................ Supported
    MCS 9........................................ Supported
    MCS 10....................................... Supported
    MCS 11....................................... Supported
    MCS 12....................................... Supported
    MCS 13....................................... Supported
    MCS 14....................................... Supported
    MCS 15....................................... Supported
802.11n Status:
    A-MPDU Tx:
        Priority 0............................... Enabled
        Priority 1............................... Disabled
        Priority 2............................... Disabled
        Priority 3............................... Disabled
        Priority 4............................... Disabled
        Priority 5............................... Disabled
        Priority 6............................... Disabled
        Priority 7............................... Disabled
    A-MSDU Tx:
        Priority 0............................... Enabled
        Priority 1............................... Enabled
        Priority 2............................... Enabled


        Priority 3............................... Enabled
        Priority 4............................... Enabled
        Priority 5............................... Enabled
        Priority 6............................... Disabled
        Priority 7............................... Disabled
    Rifs Rx ..................................... Enabled
Beacon Interval.................................. 100
CF Pollable mandatory............................ Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 36
Default Tx Power Level........................... 5
DTPC  Status..................................... Enabled
Fragmentation Threshold.......................... 2346
TI Threshold..................................... -50
Legacy Tx Beamforming setting.................... Disabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admision Control (CAC) configuration


Voice AC:
   Voice AC - Admission control (ACM)............ Disabled
   Voice max RF bandwidth........................ 75
   Voice reserved roaming bandwidth.............. 6
   Voice load-based CAC mode..................... Disabled
   Voice tspec inactivity timeout................ Disabled
   Voice Stream-Size............................. 84000
   Voice Max-Streams............................. 2
Video AC:
   Video AC - Admission control (ACM)............ Disabled
   Video max RF bandwidth........................ Infinite
   Video reserved roaming bandwidth.............. 0

802.11a Advanced Configuration

802.11a Airewave Director Configuration
RF Event and Performance Logging
  Channel Update Logging......................... Off
  Coverage Profile Logging....................... Off
  Foreign Profile Logging........................ Off
  Load Profile Logging........................... Off
  Noise Profile Logging.......................... Off
  Performance Profile Logging.................... Off
  TxPower Update Logging......................... Off
Default 802.11a AP performance profiles
  802.11a Global Interference threshold.......... 10 %
  802.11a Global noise threshold................. -70 dBm
  802.11a Global RF utilization threshold........ 80 %
  802.11a Global throughput threshold............ 1000000 bps
  802.11a Global clients threshold............... 12 clients
Default 802.11a AP monitoring
  802.11a Monitor Mode........................... enable
  802.11a Monitor Mode for Mesh AP Backhaul...... disable
  802.11a Monitor Channels....................... Country channels
  802.11a AP Coverage Interval................... 180 seconds
  802.11a AP Load Interval....................... 60 seconds
  802.11a AP Noise Interval...................... 180 seconds


  802.11a AP Signal Strength Interval............ 60 seconds
Automatic Transmit Power Assignment
  Transmit Power Assignment Mode................. OFF
  Transmit Power Update Interval................. 600 seconds
  Transmit Power Threshold....................... -70 dBm
  Transmit Power Neighbor Count.................. 3 APs
  Min Transmit Power............................. -10 dBm
  Max Transmit Power............................. 30 dBm
  Transmit Power Update Contribution............. SNI.
  Transmit Power Assignment Leader............... f8:66:f2:e1:b2:40
  Last Run....................................... 260 seconds ago
Coverage Hole Detection
  802.11a Coverage Hole Detection Mode........... Enabled
  802.11a Coverage Voice Packet Count............ 100 packets
  802.11a Coverage Voice Packet Percentage....... 50%
  802.11a Coverage Voice RSSI Threshold.......... -80 dBm
  802.11a Coverage Data Packet Count............. 50 packets
  802.11a Coverage Data Packet Percentage........ 50%
  802.11a Coverage Data RSSI Threshold........... -80 dBm
  802.11a Global coverage exception level........ 25 %
  802.11a Global client minimum exception lev.... 3 clients
Automatic Channel Assignment
  Channel Assignment Mode........................ AUTO


  Channel Update Interval........................ 600 seconds
  Anchor time (Hour of the day).................. 0
  Channel Update Contribution.................... S...
  Channel Assignment Leader...................... f8:66:f2:e1:b2:40
  Last Run....................................... 260 seconds ago
  DCA Sensitivity Level.......................... MEDIUM (15 dB)
  DCA 802.11n Channel Width...................... 20 MHz
  DCA Minimum Energy Limit....................... -95 dBm
  Channel Energy Levels
    Minimum...................................... unknown
    Average...................................... unknown
    Maximum...................................... unknown
  Channel Dwell Times
    Minimum...................................... unknown
    Average...................................... unknown
    Maximum...................................... unknown
  802.11a 5 GHz Auto-RF Channel List
    Allowed Channel List......................... 36,40,44,48,52,56,60,64,149,
                                                  153,157,161
    Unused Channel List.......................... 100,104,108,112,116,132,136,
                                                  140,165
  802.11a 4.9 GHz Auto-RF Channel List
    Allowed Channel List.........................


    Unused Channel List.......................... 1,2,3,4,5,6,7,8,9,10,11,12,
                                                  13,14,15,16,17,18,19,20,21,
                                                  22,23,24,25,26
  DCA Outdoor AP option.......................... Disabled
Radio RF Grouping
  802.11a Group Mode............................. AUTO
  802.11a Group Update Interval.................. 600 seconds
  802.11a Group Leader........................... f8:66:f2:e1:b2:40
    802.11a Group Member......................... f8:66:f2:e1:b2:40
  802.11a Last Run............................... 260 seconds ago

802.11b Configuration
802.11b Network.................................. Disabled
11gSupport....................................... Enabled
11nSupport....................................... Enabled
802.11b/g Operational Rates
    802.11b/g 1M Rate............................ Mandatory
    802.11b/g 2M Rate............................ Mandatory
    802.11b/g 5.5M Rate.......................... Mandatory
    802.11b/g 11M Rate........................... Mandatory
    802.11g 6M Rate.............................. Supported
    802.11g 9M Rate.............................. Supported
    802.11g 12M Rate............................. Supported
    802.11g 18M Rate............................. Supported
    802.11g 24M Rate............................. Supported
    802.11g 36M Rate............................. Supported
    802.11g 48M Rate............................. Supported
    802.11g 54M Rate............................. Supported
802.11n MCS Settings:
    MCS 0........................................ Supported
    MCS 1........................................ Supported
    MCS 2........................................ Supported
    MCS 3........................................ Supported
    MCS 4........................................ Supported


    MCS 5........................................ Supported
    MCS 6........................................ Supported
    MCS 7........................................ Supported
    MCS 8........................................ Supported
    MCS 9........................................ Supported
    MCS 10....................................... Supported
    MCS 11....................................... Supported
    MCS 12....................................... Supported
    MCS 13....................................... Supported
    MCS 14....................................... Supported
    MCS 15....................................... Supported
802.11n Status:
    A-MPDU Tx:
        Priority 0............................... Enabled
        Priority 1............................... Disabled
        Priority 2............................... Disabled
        Priority 3............................... Disabled
        Priority 4............................... Disabled
        Priority 5............................... Disabled
        Priority 6............................... Disabled
        Priority 7............................... Disabled
    A-MSDU Tx:
        Priority 0............................... Enabled


        Priority 1............................... Enabled
        Priority 2............................... Enabled
        Priority 3............................... Enabled
        Priority 4............................... Enabled
        Priority 5............................... Enabled
        Priority 6............................... Disabled
        Priority 7............................... Disabled
    Rifs Rx ..................................... Enabled
Beacon Interval.................................. 100
CF Pollable mode................................. Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 1
Default Tx Power Level........................... 0
DTPC  Status..................................... Enabled
Call Admission Limit  ........................... 105
G711 CU Quantum ................................. 15
ED Threshold..................................... -50
Fragmentation Threshold.......................... 2346
PBCC mandatory................................... Disabled
RTS Threshold.................................... 2347
Short Preamble mandatory......................... Enabled


Short Retry Limit................................ 7
Legacy Tx Beamforming setting.................... Disabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
Faster Carrier Tracking Loop..................... Disabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admision Control (CAC) configuration
   Voice AC - Admission control (ACM)............ Disabled
   Voice Stream-Size............................. 84000
   Voice Max-Streams............................. 2
   Voice max RF bandwidth........................ 75
   Voice reserved roaming bandwidth.............. 6
   Voice load-based CAC mode..................... Disabled
   Voice tspec inactivity timeout................ Disabled
   Video AC - Admission control (ACM)............ Disabled
   Video max RF bandwidth........................ 50
   Video reserved roaming bandwidth.............. 0

802.11b Advanced Configuration

802.11b Airewave Director Configuration
RF Event and Performance Logging
  Channel Update Logging......................... Off
  Coverage Profile Logging....................... Off
  Foreign Profile Logging........................ Off
  Load Profile Logging........................... Off
  Noise Profile Logging.......................... Off
  Performance Profile Logging.................... Off
  Transmit Power Update Logging.................. Off
Default 802.11b AP performance profiles
  802.11b Global Interference threshold.......... 10 %
  802.11b Global noise threshold................. -70 dBm
  802.11b Global RF utilization threshold........ 80 %
  802.11b Global throughput threshold............ 1000000 bps
  802.11b Global clients threshold............... 12 clients
Default 802.11b AP monitoring
  802.11b Monitor Mode........................... enable
  802.11b Monitor Channels....................... Country channels
  802.11b AP Coverage Interval................... 180 seconds
  802.11b AP Load Interval....................... 60 seconds
  802.11b AP Noise Interval...................... 180 seconds
  802.11b AP Signal Strength Interval............ 60 seconds


Automatic Transmit Power Assignment
  Transmit Power Assignment Mode................. AUTO
  Transmit Power Update Interval................. 600 seconds
  Transmit Power Threshold....................... -70 dBm
  Transmit Power Neighbor Count.................. 3 APs
  Min Transmit Power............................. -10 dBm
  Max Transmit Power............................. 30 dBm
  Transmit Power Update Contribution............. SNI.
  Transmit Power Assignment Leader............... f8:66:f2:e1:b2:40
  Last Run....................................... 311 seconds ago
Coverage Hole Detection
  802.11b Coverage Hole Detection Mode........... Enabled
  802.11b Coverage Voice Packet Count............ 100 packets
  802.11b Coverage Voice Packet Percentage....... 50%
  802.11b Coverage Voice RSSI Threshold.......... -80 dBm
  802.11b Coverage Data Packet Count............. 50 packets
  802.11b Coverage Data Packet Percentage........ 50%
  802.11b Coverage Data RSSI Threshold........... -80 dBm
  802.11b Global coverage exception level........ 25 %
  802.11b Global client minimum exception lev.... 3 clients
Automatic Channel Assignment
  Channel Assignment Mode........................ AUTO
  Channel Update Interval........................ 600 seconds


  Anchor time (Hour of the day).................. 0
  Channel Update Contribution.................... SNI.
  Channel Assignment Leader...................... f8:66:f2:e1:b2:40
  Last Run....................................... 311 seconds ago

  DCA Sensitivity Level: ...................... MEDIUM (10 dB)
  DCA Minimum Energy Limit....................... -95 dBm
  Channel Energy Levels
    Minimum...................................... unknown
    Average...................................... unknown
    Maximum...................................... unknown
  Channel Dwell Times
    Minimum...................................... unknown
    Average...................................... unknown
    Maximum...................................... unknown
  802.11b Auto-RF Allowed Channel List........... 1,6,11
  Auto-RF Unused Channel List.................... 2,3,4,5,7,8,9,10
Radio RF Grouping
  802.11b Group Mode............................. AUTO
  802.11b Group Update Interval.................. 600 seconds
  802.11b Group Leader........................... f8:66:f2:e1:b2:40
    802.11b Group Member......................... f8:66:f2:e1:b2:40
  802.11b Last Run............................... 311 seconds ago

Mobility Configuration
Symmetric Mobility Tunneling (current) .......... Enabled
Symmetric Mobility Tunneling (after reboot) ..... Enabled
Mobility Protocol Port........................... 16666
Default Mobility Domain.......................... Guest-Mobility
Multicast Mode .................................. Disabled
Mobility Domain ID for 802.11r................... 0x2b40
Mobility Keepalive Interval...................... 10
Mobility Keepalive Count......................... 3
Mobility Group Members Configured................ 4
Mobility Control Message DSCP Value.............. 0

Controllers configured in the Mobility Group
MAC Address        IP Address       Group Name                        Multicast
IP     Status
00:24:97:69:86:40  172.25.251.20    Poly-Mobility                     0.0.0.0
        Up
00:24:c4:14:03:00  172.25.251.10    Poly-Mobility                     0.0.0.0
        Up
00:24:c4:e6:58:80  172.25.250.10    Poly-Mobility                     0.0.0.0
        Up
f8:66:f2:e1:b2:40  192.168.252.19   Guest-Mobility                    0.0.0.0
        Up

Advanced Configuration
Probe request filtering..........................  Enabled
Probes fwd to controller per client per radio....  0
Probe request rate-limiting interval.............  500 msec

EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 1000
EAPOL-Key Max Retries............................ 2

dot11-padding.................................... Disabled

Authentication Response Timeout (seconds)........ 10
Rogue Entry Timeout (seconds).................... 1200
AP Heart Beat Timeout (seconds).................. 30
AP Discovery Timeout (seconds)................... 10
AP Local mode Fast Heartbeat (seconds)........... disable
AP Hreap mode Fast Heartbeat (seconds)........... disable


AP Primary Discovery Timeout (seconds)........... 120
AP Primed Join Timeout (seconds)................. 0

Location Configuration
RFID Tag data Collection......................... Enabled
RFID  timeout.................................... 1200 seconds
RFID mobility.................................... Oui:00:14:7e : Vendor:pango  S
tate:Disabled


Interface Configuration
Interface Name................................... ap-manager
MAC Address...................................... f8:66:f2:e1:b2:43
IP Address....................................... 192.168.252.18
IP Netmask....................................... 255.255.255.240
IP Gateway....................................... 192.168.252.17
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 205
Active Physical Port............................. 1
Primary Physical Port............................ 1
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No

Interface Name................................... management
MAC Address...................................... f8:66:f2:e1:b2:40
IP Address....................................... 192.168.252.19
IP Netmask....................................... 255.255.255.240
IP Gateway....................................... 192.168.252.17
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 205
Quarantine-vlan.................................. 0
Active Physical Port............................. 1
Primary Physical Port............................ 1
Backup Physical Port............................. 2
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... poly-guest
MAC Address...................................... f8:66:f2:e1:b2:43
IP Address....................................... 10.26.200.2
IP Netmask....................................... 255.255.248.0
IP Gateway....................................... 10.26.200.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 206
Quarantine-vlan.................................. 0
Active Physical Port............................. 1
Primary Physical Port............................ 1
Backup Physical Port............................. 2
Primary DHCP Server.............................. 10.26.200.1
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... service-port
MAC Address...................................... f8:66:f2:e1:b2:41
IP Address....................................... 172.26.106.5
IP Netmask....................................... 255.255.255.240
DHCP Option 82................................... Disabled
DHCP Protocol.................................... Disabled
AP Manager....................................... No
Guest Interface.................................. No

Interface Name................................... virtual
MAC Address...................................... f8:66:f2:e1:b2:40
IP Address....................................... 1.1.1.1
DHCP Option 82................................... Disabled
Virtual DNS Host Name............................ Disabled
AP Manager....................................... No
Guest Interface.................................. No


WLAN Configuration

WLAN Identifier.................................. 1
Profile Name..................................... Poly-Guest
Network Name (SSID).............................. Poly-Guest
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
  NAC-State...................................... Disabled
  Quarantine VLAN................................ 0
Number of Active Clients......................... 7
Exclusionlist.................................... Disabled
Session Timeout.................................. 28800 seconds
CHD per WLAN..................................... Disabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ poly-guest
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Enabled
Quality of Service............................... Bronze (background)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Forward-Upstream
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Disabled
   Accounting.................................... Disabled
   Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security

   802.11 Authentication:........................ Open System


   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Disabled
   CKIP ......................................... Disabled
   IP Security................................... Disabled
   IP Security Passthru.......................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Enabled
        ACL............................................. Unconfigured
        Email Input..................................... Disabled

   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Enabled
   H-REAP Local Switching........................ Disabled
   H-REAP Learn IP Address....................... Enabled
   Infrastructure MFP protection................. Disabled
   Client MFP.................................... Optional but inactive (WPA2 no
t configured)
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Band Select...................................... Enabled
Load Balancing................................... Enabled

Mobility Anchor List
WLAN ID     IP Address            Status
-------     ---------------       ------
1           172.25.251.20         Up

ACL Configuration

CPU ACL Configuration

CPU Acl Name................................ NOT CONFIGURED
Wireless Traffic............................ Disabled
Wired Traffic............................... Disabled


RADIUS Configuration
Vendor Id Backward Compatibility................. Disabled
Call Station Id Case............................. lower
Call Station Id Type............................. IP Address
Aggressive Failover.............................. Enabled
Keywrap.......................................... Disabled
Fallback Test:
    Test Mode.................................... Off
    Probe User Name.............................. cisco-probe
    Interval (in seconds)........................ 300
MAC Delimiter for Authentication Messages........ hyphen
MAC Delimiter for Accounting Messages............ hyphen

Authentication Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/P
hase1/Group/Lifetime/Auth/Encr
---  ----  ----------------  ------  --------  ----  -------  ------------------
------------------------------

Accounting Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/P
hase1/Group/Lifetime/Auth/Encr
---  ----  ----------------  ------  --------  ----  -------  ------------------
------------------------------

TACACS Configuration
Authentication Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----

Authorization Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----

Accounting Servers

Idx  Server Address    Port    State     Tout
---  ----------------  ------  --------  ----

LDAP Configuration

Local EAP Configuration
User credentials database search order:
    Primary ..................................... Local DB

Timer:
    Active timeout .............................. 300

Configured EAP profiles:

EAP Method configuration:
    EAP-FAST:
      Server key ................................
      TTL for the PAC ........................... 10
      Anonymous provision allowed ............... Yes
      Authority ID .............................. 436973636f00000000000000000000
00
      Authority Information ..................... Cisco A-ID

HREAP Group Summary

HREAP Group Summary: Count: 0
Group Name                # Aps

HREAP Group Detail


Route  Info
Number of Routes................................. 1

Destination Network          Netmask               Gateway
-------------------    -------------------   -------------------
172.26.0.0             255.255.0.0           172.26.106.1

Qos Queue Length Info
Platinum queue length............................ 100
Gold queue length................................  75
Silver queue length..............................  50
Bronze queue length..............................  25

Mac Filter Info

Authorization List

Authorize MIC APs against AAA ................... disabled
Authorize LSC APs against Auth-List ............. disabled

Allow APs with MIC - Manufactured Installed C.... disabled
Allow APs with SSC - Self-Signed Certificate..... disabled
Allow APs with LSC - Locally Significant Cert.... disabled

Load Balancing Info
Aggressive Load Balancing........................ Disabled
Aggressive Load Balancing Window................. 5 clients
Aggressive Load Balancing Denial Count........... 3

                                                    Statistics
Total Denied Count............................... 0 clients
Total Denial Sent................................ 0 messages
Exceeded Denial Max Limit Count.................. 0 times
None 5G Candidate Count.......................... 0 times
None 2.4G Candidate Count........................ 0 times

Dhcp Scope Info
               Scope: Poly_guest_scope

Enabled.......................................... Yes
Lease Time....................................... 28800 (8 hours )
Pool Start....................................... 10.26.200.10
Pool End......................................... 10.26.203.254
Network.......................................... 10.26.200.0
Netmask.......................................... 255.255.248.0
Default Routers.................................. 10.26.200.1  0.0.0.0  0.0.0.0
DNS Domain.......................................
DNS.............................................. 205.171.2.65  205.171.3.65  0.
0.0.0
Netbios Name Servers............................. 0.0.0.0  0.0.0.0  0.0.0.0

Exclusion List ConfigurationUnable to retrieve exclusion-list entry


CDP Configuration

Country Channels Configuration

Configured Country............................. US  - United States
      KEY: * = Channel is legal in this country and may be configured manually.
           A = Channel is the Auto-RF default in this country.
           . = Channel is not legal in this country.
           C = Channel has been configured for use by Auto-RF.
           x = Channel is available to be configured for use by Auto-RF.
         (-,-) = (indoor, outdoor) regulatory doamin allowed by this country.
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
    802.11bg     :
    Channels     :                   1 1 1 1 1
                 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): A * * * * A * * * * A . . .
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
    802.11a      :                         1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
    Channels     : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 5 5 6 6
                 : 4 6 8 0 2 4 6 8 2 6 0 4 0 4 8 2 6 0 4 8 2 6 0 9 3 7 1 5
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): . A . A . A . A A A A A * * * * * . . . * * * A A A A *
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-


4.9GHz 802.11a  :
    Channels     :                   1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2
                 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A   ,-AB  ): * * * * * * * * * * * * * * * * * * * A * * * * * A
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-

WPS Configuration Summary

Auto-Immune
  Auto-Immune.................................... Disabled

Client Exclusion Policy
  Excessive 802.11-association failures.......... Enabled
  Excessive 802.11-authentication failures....... Enabled
  Excessive 802.1x-authentication................ Enabled
  IP-theft....................................... Enabled
  Excessive Web authentication failure........... Enabled

Signature Policy
  Signature Processing........................... Enabled


Spanning Tree Switch Configuration

STP Specification...................... IEEE 802.1D
STP Base MAC Address................... F8:66:F2:E1:B2:40
Spanning Tree Algorithm................ Disable
STP Bridge Priority.................... 32768
STP Bridge Max. Age (seconds).......... 20
STP Bridge Hello Time (seconds)........ 2
STP Bridge Forward Delay (seconds)..... 15


Spanning Tree Port Configuration

STP Port ID................................. 8001
STP Port State.............................. Forwarding
STP Port Administrative Mode................ Off
STP Port Priority........................... 128
STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto


STP Port ID................................. 8002
STP Port State.............................. Forwarding
STP Port Administrative Mode................ Off
STP Port Priority........................... 128
STP Port Path Cost.......................... 4
STP Port Path Cost Mode..................... Auto


Custom Web Configuration

Radius Authentication Method..................... PAP
Cisco Logo....................................... Disabled
CustomLogo....................................... None
Custom Title..................................... Welcome to The Polyclinic Publ
ic Access Network
Custom Message...................................
Custom Redirect URL.............................. http://www.polyclinic.com
Web Authentication Type.......................... Internal Default
External Web Authentication URL.................. www.polyclinc.com
External Web Server list
    Index      IP Address
    -----    ---------------
        1     172.26.202.199
        2            0.0.0.0
        3            0.0.0.0
        4            0.0.0.0
        5            0.0.0.0
        6            0.0.0.0
        7            0.0.0.0
        8            0.0.0.0
        9            0.0.0.0


       10            0.0.0.0
       11            0.0.0.0
       12            0.0.0.0
       13            0.0.0.0
       14            0.0.0.0
       15            0.0.0.0
       16            0.0.0.0
       17            0.0.0.0
       18            0.0.0.0
       19            0.0.0.0
       20            0.0.0.0

Configuration Per Profile:

WLAN ID: 1
   WLAN Status................................... Enabled
   Web Security Policy........................... Web-Passthrough
   Global Status................................. Enabled
   WebAuth Type.................................. Internal


Rogue AP Configuration

Rogue Location Discovery Protocol................ Disabled
Rogue on wire Auto-Contain....................... Disabled
Rogue using our SSID Auto-Contain................ Disabled
Valid client on rogue AP Auto-Contain............ Disabled
Rogue AP timeout................................. 1200

MAC Address        Classification     # APs # Clients Last Heard
-----------------  ------------------ ----- --------- -----------------------

Adhoc Rogue Configuration

Detect and report Ad-Hoc Networks................ Enabled
Auto-Contain Ad-Hoc Networks..................... Disabled

Client MAC Address  Adhoc BSSID         State              # APs   Last Heard

------------------  ------------------  -----------------  ------  -------------
----------

Rogue Client Configuration

Validate rogue clients against AAA............... Disabled

--More-- or (q)uit

MAC Address        State              # APs Last Heard
-----------------  ------------------ ----- -----------------------

Ignore List Configuration

MAC Address
-----------------

Rogue Rule Configuration

Priority Rule Name               State    Type          Match Hit Count
-------- ----------------------- -------- ------------- ----- ---------


(Cisco Controller) >

Surendra,

I figured out my issue with the 4404s. It had to do with mobility anchors associated with the guest WLAN. The controllers were connected but not the WLAN. When I activated the mobility anchors on the foreign WLC it started working.

Thanks very much for you help

Steve

Review Cisco Networking for a $25 gift card