Random destinations are not accessable from wifi

[Darren Thompson]

I am having a wireless issue where random destinations are being blocked. I am running a Cisco 5508 WLC version 8.5.171.0   If user A is on computer A, A cannot access site 123, but can reach other sites via Wi-Fi.  If user A goes to computer B site 123 is accessible on Wi-Fi with no issues..    If I take computer A and hard wire it on the same Vlan as the Wi-Fi, then site 123 loads no problem.  What started as just one site but now has grown to multiple sites randomly not being accessible on selected computers while others can reach it with no issues.  When it blocks it, you cannot even ping the Ip address of the site in question.  Our work around for now is to hard wire what we can but still leaves a number of systems not connecting.  Curious to see if anyone has seen this before

[marce1000]

 - Have a basic check, meaning is the wireless client (even) still connected to the (an) access point ?  Have a checkup of the controller configuration : 1. Type "config paging disable" in priviledged mode to set your terminal to display without any breaks. 2. Type "show run-config" to display the config. Have the output analyzed with : https://cway.cisco.com/wireless-config-analyzer
   Also use and or upgrade to https://software.cisco.com/download/home/282600534/type/280926587/release/8.5.182.0 , the last release that can run on the  5508 model , 

 M.

[Rich R · Accepted solution]

NO! Don't upgrade to 8.5.182.0 especially if you (probably) have IOS APs because they will be stuck in download loop forever.

You will need to use 8.5.182.7 as per the link below - see the field notice for full details.

Amongst hundreds of other bug fixes you will get the fixes for https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv78719 and https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa73245 which might be related to your problem.  Note that CSCwa73245 is not fixed in 8.5.182.0 either - another reason to go for 8.5.182.7 instead.

[Darren Thompson]

Thanks!  We ended up upgrading to 8.5.182.8.  Called Cisco and they gave me a newer update.  Seems our HA was fighting with each other somewhere.  The primary once backed up never went back to Primary once the Secondary was updated and rebooted.  We left the Secondary as lead and things are working fine. Thanks again!

[Rich R]

Thanks for the update @Darren Thompson. What extra bug fixes does 8.5.182.8 have since 8.5.182.7 ? (presuming it came with a release note which they usually do for an escalation release)

[Arshad Safrulla]

Can you check under the SSID config what action is set to P2P blocking?

[Scott Fella]

Is the issue with a single device or all devices?  Or is the issue with a specific user or users?  Since it seems you can replicate it, has there been any network changes or something added on the device?