Motorola Scanners can't see Cisco WLAN

[PurelyComputing]

Hi,

I've implemented a WLAN using WLC 5508 and 3602e APs with ISE and Prime Infrastructure to manage. I have implemented the CleanAir Configuration Templates and deployed to the Controllers but now the Motorola Scanners can't see the WLAN, they can see other WLANs but not this one.

I'm struggling to find a reason why they can't see it, has anyone got any ideas?                  

[Scott Fella]

Well what are the requirements for the Motorola Scanners?  ISE and Prime will not have any affect on this unless your are using 802.1x on the scanners and the authentication is failing.  Post your show wlan and also post the other show wlans that these scanners see?  Maybe its because you don't have the SSID broadcasted.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[PurelyComputing]

Hi Scott,

I am using 802.1x and the authentication method for the scanners is WPA2-Enterprise with MS Chap v2, however, they don't get that far becasue they can't see the WLAN SSID. The other SSID they can see are non Cisco

Here is the output from sh wlan

WLAN Identifier.................................. 1
Profile Name..................................... DEPOT
Network Name (SSID).............................. DEPOT
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
  Client Profiling Status ....................... Enabled
   DHCP ......................................... Enabled
   HTTP ......................................... Disabled
  Radius-NAC State............................... Disabled
  SNMP-NAC State................................. Disabled
  Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ 300 seconds
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... Cisco_dc:41:04
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
DHCP Address Assignment Required................. Enabled
Static IP client tunneling....................... Disabled
PMIPv6 Mobility Type............................. none
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-Client Rate Limits........................... Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ x.x.x.x 1812
   Accounting.................................... x.x.x.x 1813
      Interim Update............................. Disabled
   Dynamic Interface............................. Disabled
   Dynamic Interface Priority.................... wlan
Local EAP Authentication......................... Disabled
Security
   802.11 Authentication:........................ Open System
   FT Support.................................... Disabled
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Enabled
                                                               Auth Key Management
         802.1x.................................. Enabled
         PSK..................................... Disabled
         CCKM.................................... Disabled
         FT-1X(802.11r).......................... Disabled
         FT-PSK(802.11r)......................... Disabled
         PMF-1X(802.11w)......................... Disabled
         PMF-PSK(802.11w)........................ Disabled
      FT Reassociation Timeout................... 20
      FT Over-The-DS mode........................ Enabled
      GTK Randomization.......................... Disabled
      SKC Cache Support.......................... Disabled
      CCKM TSF Tolerance......................... 1000
   WAPI.......................................... Disabled
   Wi-Fi Direct policy configured................ Disabled
   EAP-Passthrough............................... Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   FlexConnect Local Switching................... Disabled
   flexconnect Central Dhcp Flag................. Disabled
   flexconnect nat-pat Flag...................... Disabled
   flexconnect Dns Override Flag................. Disabled
   FlexConnect Vlan based Central Switching ..... Disabled
   FlexConnect Local Authentication.............. Disabled
   FlexConnect Learn IP Address.................. Enabled
   Client MFP.................................... Disabled
   PMF........................................... Disabled
   PMF Association Comeback Time................. 1
   PMF SA Query RetryTimeout..................... 200
   Tkip MIC Countermeasure Hold-down Timer....... 60
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled

Mobility Anchor List
WLAN ID     IP Address            Status
-------     ---------------       ------

802.11u........................................ Disabled

MSAP Services.................................. Disabled

[Scott Fella]

You need to uncheck TKIP. Since your using WPA2, you need to enable AES. This is a IEEE standard. When using WPA v1, you use TKIP only. Don't mix or match or have both defined. Devices only can do one type. So match the encryption with what your device is using.

(WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Enabled
AES Cipher.............................. Enabled

Sent from Cisco Technical Support iPhone App

[PurelyComputing]

Thanks.

Unfortunaltely the scanners still can't see the broadcast SSID, any ideas?

[Scott Fella]

Can you phone or laptop connect to the ssid? What is the encryption you have configured on the Motorola scanner? When you say the scanners can see the other SSID's, these other SSID's are in the WLC also right? Your not a mixed environment.

Sent from Cisco Technical Support iPhone App

[PurelyComputing]

The other SSIDs are not on the WLC they are other companies in the area. Yes I can see it and connect to it from my phone and laptop.

[Scott Fella]

So please provide more info... has this been working at all or is this a new setup for that location.  If you can connect to that ssid from a laptop, well you configuration on the scanner is wrong.  Start to eliminate things one by one.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[PurelyComputing]

Yes this was working fine, the scanners could see the network and authenticate correctly, today they dont't see the network.

I can only think that it's the cleanair stuff that's stopped it but I can;t see how.

[Scott Fella]

Attach your show run-config

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[George Stefanick]

If it goes from working to not working what changed ?

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[George Stefanick]

On the controller CLI do:

>show client detail

Do you see anything ?

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[Scott Fella]

Disable client exclusion also for now.

Sent from Cisco Technical Support iPhone App