no internet access only on 1 ssid - wlc 5508

pronko8901 · ‎02-12-2023

hi

need assistance and advise.

we are using wlc 5508, recently upgraded to 8.5.182.0 and since then clients are having issues on Wi-Fi- the corp Wi-Fi (SSID)

1. connection is dropping a lot

2.connected but no internet access

this is only happening since the upgrade , my observations thus far are that the upgrade must have changed something.

Gaurav Kansal · ‎02-12-2023

Dear Pronko,

What series of access points you are using in your topology.?

pronko8901 · ‎02-12-2023

hi , we use AIR-AP3802I-E-K9

Gaurav Kansal · ‎02-12-2023

Dear Pronko,

You are most probably hitting to bug CSCvp00688 (Cisco 2800, 3800 AP radio reloads unexpectedly). Please read open caveats of your controller's current version.

Please read your release note: https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn85mr8.html

pronko8901 · ‎02-13-2023

thank you, i will check and come back

Rich R · ‎02-13-2023

What version did you upgrade from?
Have you compared the WLC config from before and after the upgrade?
You should consider upgrading to 8.5.182.7 (link below) which has a number of additional fixes including https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa73245

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.190.0, latest 9800 releases, 8.5.182.11 (8.5 mainline) and 8.5.182.108 (8.5 IRCM)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs

pronko8901 · ‎02-14-2023

We upgraded from 8.5.171.0

No we didn't check before the upgrade and after

Thanks I will definitely take that recommendation, as I noticed there is no fix for the bug CSCvp00688

Rich R · ‎02-14-2023

CSCvp00688 is a radio crash so would affect all SSIDs/clients.

You should do a client debug on one of the affected client MAC address and use https://cway.cisco.com/wireless-debug-analyzer/

Also check your WLC config (show run-config) with https://cway.cisco.com/wireless-config-analyzer/

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.190.0, latest 9800 releases, 8.5.182.11 (8.5 mainline) and 8.5.182.108 (8.5 IRCM)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs

pronko8901 · ‎07-27-2023

thank you so much this was helpful , we did not upgrade the software but on the debugs we kept getting a lot of helpful information as advised by cisco we to change the FT to adaptive

information like the client keeps requesting for authentication , this will happen after they connected and got an ip address then connection drops , the client reauthenticates.