IOS based wireless lan controller

[sobin peter]

Hi I have a WS-C3650-48PS with 03.06.06E (IOS based wireless lan controller) Can someone send me the configuration guide or quick start guide.

[sobin peter]

If i get some video link to set up from the beginning then that would be really helpful.

[Ric Beeching]

Rasika has some good guides for 3850 which is pretty much identical config: https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

Otherwise Youtube is your friend!

Ric

[sobin peter]

Thanks Rasika. I was looking for 3650 but i think the commands might be similar for both. Let me try to do it and I will keep you posted updates. 

[Ric Beeching]

No probs,if you have any issues with specific config tasks let us know!

Ric

[sobin peter]

Hi Ric,

The configuration is done, but there is an error while connecting the AP702i. Logs below. Configuration and logs and version details attached. Kindly help.

*May 9 05:13:06.211: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]
*May 9 05:13:55.130: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:13:55.130: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event () and state (CAPWAP Join Response) combination
*May 9 05:14:00.716: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:31.251: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:31.251: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LWAPP-3-VENDOR_PLD_VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload(155) with length=10 failed - AP f0:78:16:3c:af:40
*May 9 05:14:31.252: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-AB for AP f078.163c.af40
*May 9 05:14:31.254: %CAPWAP-3-AP_PORT_CFG: AP connected port Gi1/0/2 is not an access port.
*May 9 05:14:31.254: *%CAPWAP-3-POST_DECODE_ERR: 1 wcm: Post decode processing failed for Config status from AP f078.163c.af40
*May 9 05:14:31.255: *%CAPWAP-3-DATA_TUNNEL_CREATE_ERR2: 1 wcm: Failed to create CAPWAP data tunnel with interface id: 0xd05e400000000e for AP: f078.163c.af40 Error Reason: Capwap Data Tunnel create retry exceeded max retry count.
*May 9 05:14:31.353: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:51.354: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]

But i can see the AP registered. 

FASCO-WLC-SW#sh ap summary
Number of APs: 1

Global AP User Name: Not configured
Global AP Dot1x User Name: Not configured

AP Name AP Model Ethernet MAC Radio MAC State
----------------------------------------------------------------------------------------
APdceb.94bf.f034 702I dceb.94bf.f034 f078.163c.af40 Registered

[sobin peter]

FASCO-WLC-SW#show wireless mobility summary

Mobility Controller Summary:

Mobility Role : Mobility Controller
Mobility Protocol Port : 16666
Mobility Group Name : default
Mobility Oracle Configured Mode : Disabled
Mobility Oracle IP Address : 0.0.0.0
DTLS Mode : Enabled
Mobility Domain ID for 802.11r : 0xac34
Mobility Keepalive Interval : 10
Mobility Keepalive Count : 3
Mobility Control Message DSCP Value : 48
Mobility Domain Member Count : 1

Link Status is Control Link Status : Data Link Status

Controllers configured in the Mobility Domain:

IP Public IP Group Name Multicast IP Link Status
-------------------------------------------------------------------------------
10.1.1.1 N/A default 0.0.0.0 N/A

FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
*May 9 05:27:11.090: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#show run | in wireless
wireless mobility controller
wireless management interface Vlan999
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#sh cdp neighbors | in AIR
APdceb.94bf.f034 Gig 1/0/2 175 T B I AIR-CAP70 Gig 0

[sobin peter]

Hi Sandeep,

FASCO-WLC-SW#show wireless country configured
*May 9 12:10:48.751: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]

Configured Country.............................: US - United States
Configured Country Codes
US - United States : 802.11a Indoor,Outdoor/ 802.11b / 802.11g

FASCO-WLC-SW#

=======================================================

APdceb.94bf.f034#sh ver
Cisco IOS Software, C702 Software (ap1g1-K9W8-M), Version 15.3(3)JN11, RELEASE S OFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 16-Dec-16 05:59 by prod_rel_team

ROM: Bootstrap program is C702 boot loader
BOOTLDR: C702 Boot Loader (ap1g1-BOOT-M) Version 15.2(4)JA, RELEASE SOFTWARE (fc 1)

APdceb.94bf.f034 uptime is 6 hours, 51 minutes
System returned to ROM by power-on
System image file is "flash:/ap1g1-k9w8-mx.153-3.JN11/ap1g1-k9w8-mx.153-3.JN11"
Last reload reason: Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP702I-E-K9 (MIPS74k) processor (revision 01) with 86016K/45056K bytes of memory.
Processor board ID KWC19310465
MIPS74k CPU at 560Mhz, revision number 0x0000
Last reset from power-on
LWAPP image version 10.2.160.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: DC:EB:94:BF:F0:34
Part Number : 74-11077-02
PCA Assembly Number : 000-00000-00
PCA Revision Number :
--More--
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.25PCB Serial Number : KWC19310465
Top Assembly Part Number : 000-00000-00
Top Assembly Serial Number : KWC19310465
Top Revision Number : 01
Product/Model Number : AIR-CAP702I-E-K9

Configuration register is 0xF
APdceb.94bf.f034#

[Sandeep Choudhary]

Hi,

WLC Country configured: US 

AP Product/Model Number : AIR-CAP702I-E-K9 --> Its for European Domain

Means there is mismatch between domians........

You must buy a AP with -B- Regulatory domain. (Ask your supplier to change it with correct domain)

Check the compliance status here:

http://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html

Regards

Dont forget to rate helpful posts

[sobin peter]

Attached the screen shot of wireless GUI. Configuration tab is not shown in this. Is there any IOS related issue. 

Current version is Version 03.06.06E

[sobin peter]

Hi Sandeep/Ric/Rasika,

It started working now. Thanks for your help and support!!!!!

I have attached a screen shot for wireless GUI, there is no configuration tab near the monitor. Can you suggest the solution or it will not be available in the 3650 series?

Thanks!!

[Ric Beeching · Accepted solution]

There is a bug with the IOS-XE switches. Make sure if you are using a locally defined user it is set to privilege level 15 and enable secure browsing:

username x privilege 15 password x

ip http secure-server

When using a browser some people have had varying success with navigating to the initial page before selecting wireless. Similarly if you are already using that method, try browsing directly to the wireless page. E.g if your switch is 10.0.0.5 it would be

https://10.0.0.5 then logon, select wireless and potentially log on again. If that does not work, open a different browser and try going directly to the wireless page:

https://10.0.0.5/wireless

Cheers,

Ric

[sobin peter]

Working fine... Thank you....!

Cheers !!

[Ric Beeching]

As Sandeep has covered, your AP is for the European indicated by the E in its Model number: AIR-CAP702I-E-K9 and your WLC is configured to use United States which is the default.

If you are in Europe then this can be rectified by issuing the following commands on your switch (note, this will shutdown all wireless networks)

ap dot11 24ghz shut

ap dot11 5gh shut

ap country E (might be EU for europe)

no ap dot11 24ghz shut

no ap dot11 5ghz shut

If you aren't in Europe then what Sandeep says is the next step as it is not a good idea to run multiple country codes on a WLC and I'm not even sure you can with IOS-XE.

Ric

[sobin peter]

Hi Ric,

I tried but its shows me invalid country code:

FASCO-WLC-SW(config)#ap country E
Changing country code could reset channel and RRM grouping configuration. If running in RRM One-Time mode, reassign channels after this command. Check customized APs for valid channel values after this command.
Are you sure you want to continue? (y/n)[y]: y
% switch-1:wcm:Unsupported country code.
FASCO-WLC-SW(config)#

Both AP and switch purchased separately and it has to be used in Oman.

Is there any possible way to change the country code of AP. or any other workaround.