cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1073
Views
0
Helpful
2
Replies

MSE wIPS - Unable to apply wIPS profile

Ivanov Artem
Level 1
Level 1

Good afternoon.

I have a problem assigning a wIPS profile to a WLCs.

 

The environment consist of MSE 8.0.150 , PI 3.7.0, Primary and Secondary WLCs 5520 8.10.151, APs 4800 in wIPS submode. We have all required licenses for MSE wIPS (ELM and MM both) , for PI and APs on WLCs. 

It was working well, but some tome ago it broke and we can't make in work again.

 

The problem happens when we try to apply a wIPS profile to the WLCs from the PI.

Снимок.PNG

It fails for both WLCs associated with wIPS service. At the moment of the attempt, ome WLC is primary and holds all APs, another one is secondary and has 0 APs. Both WLCs have active NMSP connection with the MSE.

2.PNG

The third WLC on the screenshot is Anchor WLC which is not important, don't be confused. BTW it has the same error if we try to associate it with the wIPS profile. 

3.PNG

 

We found several errors on the MSE:

 

4.PNG

But we do not understand if it address our issue.

 

Here is one more weird thing we noticed - wIPS service does not find any WLC:

5.PNG

 

So, the MSE has an active NMSP connection with the WLCs but the wIPS service running on this MSE can't see the WLCs. We double-checked licensing limits, and it was fine, but usage was "0".

We have tried disabling and enabling wIPS service, MSE restart, and also cleared the history logs, since it caused a bit perfomance problems. But nothing helped, the wIPS service doesn't see WLCs.

 

It looks like a cause for the error we can see in the PI when we try appliyng wIPS profile, but we need some guidance how to troubleshoot it further.

 

 

Thank you!

 

2 Replies 2

ammahend
VIP Alumni
VIP Alumni

the WLC version 8.10 has limited support, see table 13 for limitations, only selected signatures are supported so one thing to verify is your profile does not contain unsupported signatures.

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#mse-rls_75x_8x

 

secondly try this debug on wlc and see if you are seeing any communication from MSE, may be it will give some hint.

debug nmsp all

-hope this helps-

Hello @ammahend , thank you for the reply.

We tried to bind a new profile with only one signature ("AirDrop Session detected" which is supported, by the "Software Compatibility Matrix"). That didn't work "...Error: Can not find controller(s)".

NMSP communication works, a lot of logs from *apfLbsTask:,  *apfRogueTask_0:,  *spectrumNMSPTask:,  *nmspTxServerTask:. 

 

 

 

Review Cisco Networking for a $25 gift card