09-19-2012 02:37 PM - edited 07-03-2021 10:41 PM
Hi, we have setup a wireless network available for our customers with Web-Passthrough security. We have no issues with any customers' laptop and certain Blackberry devices but we do have issues with customers' ipad2 and some of newer Blackberry models (like Bold 9900). These units can see the wireless network, attempting to connect but with no success. Ipad3 have no issues. Majority of our customers are having ipad2 so wondering what could be done to solve this issue.
Appreciate your help and input.
09-19-2012 02:41 PM
Can you post your show WLAN
I would like to see how your WLAN is configured.
Sent from Cisco Technical Support iPhone App
09-19-2012 02:48 PM
Here it goes:
(Cisco Controller) >show wlan 10
WLAN Identifier.................................. 10
Profile Name..................................... Public WIFI
Network Name (SSID).............................. PublicWiFi
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 46
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 28800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
--More-- or (q)uit
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Bronze (background)
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ Global Servers
--More-- or (q)uit
Accounting.................................... Global Servers
Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Enabled
ACL............................................. Unconfigured
Email Input..................................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
H-REAP Local Switching........................ Enabled
H-REAP Local Authentication................... Disabled
H-REAP Learn IP Address....................... Enabled
Client MFP.................................... Optional but inactive (WPA2 not configured)
Tkip MIC Countermeasure Hold-down Timer....... 60
--More-- or (q)uit
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Mobility Anchor List
WLAN ID IP Address Status
------- --------------- ------
(Cisco Controller) >?
09-19-2012 02:51 PM
So is the issue with local mode ap's or flexconnect or both? Are these ipads also connecting to other ssids or just this one?
Sent from Cisco Technical Support iPad App
09-19-2012 02:56 PM
All APs are in H-reap mode; this wlan is for public use (available to our cusotmers) so "public" ipads are conencting only to this ssid.
Other SSID are not used for public. At this point we do not allow corporate ipads or BYOD in our environment.
09-19-2012 03:01 PM
Can you debug one of the clients? debug client mac adress
Im guessing the client is failing to associate correct or fail to get a dhcp?
Sent from Cisco Technical Support iPad App
09-19-2012 03:01 PM
What wlc model, code and ap model?
Sent from Cisco Technical Support iPad App
09-19-2012 03:07 PM
WLC = AIR-CT5508-K9
AP = AIR-LAP1142N-A-K9 (300+ APs)
AP = AIR-CAP3502I-A-K9 (3 APs)
Code = 7.0.116.0
09-19-2012 03:08 PM
I will try to get someone on site to troubleshoot client association tomorrow.
09-19-2012 03:11 PM
I have an ipad2 and ipad3 with no issues which is weird that you are having issues. Is it all ipad2 or just some?
Sent from Cisco Technical Support iPad App
09-19-2012 03:14 PM
Okay.. one more question... are they getting the splash page?
Sent from Cisco Technical Support iPad App
09-19-2012 03:19 PM
Sorry, I am not familiar with splash page - what is this?
09-19-2012 03:34 PM
Well your WLAN is setup for passthrough so the users must get a splash page in which they hit the accept or okay button.
Sent from Cisco Technical Support iPhone App
09-19-2012 03:23 PM
Well, majority of ipad2 are not able to conenct but i dont have enough details to assume that all ipad2 are not working. I will have users on site tomorrow with ipads to test.
09-19-2012 03:17 PM
I got some wireless clients that get IP Address from DHCP server:
10.65.56.101 01d8.b377.322f.38 Sep 20 2012 03:12 PM Automatic
10.65.56.125 9cd2.4bf1.766b Sep 20 2012 05:50 AM Automatic
10.65.56.135 0180.6007.211a.06 Sep 20 2012 03:12 PM Automatic
10.65.56.138 0158.946b.7065.28 Sep 20 2012 04:57 AM Automatic
10.65.56.177 0164.a769.7623.57 Sep 20 2012 02:54 PM Automatic
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide