cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
570
Views
2
Helpful
1
Replies

Want to remove 0day initial setup and go to advance gui mode.

adi86sharma2007
Level 1
Level 1

Hi Team, 

I configured below config on my WLC (9800 L) and try to connect on GUI... but i am getting day 0 initial page everytime. After putting details through GUI during submit.. getting error configuration. Can you help and guide us...

 

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2023.03.23 20:38:43 =~=~=~=~=~=~=~=~=~=~=~=

Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server

 

NEW-WLC#sh run
Building configuration...

Current configuration : 10807 bytes
!
! Last configuration change at 20:27:53 India Thu Mar 23 2023 by admin
! NVRAM config last updated at 20:37:16 India Thu Mar 23 2023 by admin
!
version 17.3
service timestamps debug datetime msec
service timestamps log datetime msec
! Call-home is enabled by Smart-Licensing.
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname NEW-WLC
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
!
address-family ipv4
--More--   exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret
!
no aaa new-model
clock timezone India 0 0
!
!
!
!
!
!
!
ip name-server 8.8.8.8
no ip domain lookup
!
!
!
login on-success log
!
--More--  !
!
!
!
!
!
subscriber templating
!
!
!
!
!
!
parameter-map type webauth global
virtual-ip ipv4 192.0.2.1
secure-webauth-disable
webauth-http-enable
!
no device-tracking logging theft
access-session mac-move deny
multilink bundle-name authenticated
!
!
--More--  !
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-3755938875
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3755938875
revocation-check none
rsakeypair TP-self-signed-3755938875
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-3755938875
certificate self-signed 01
30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33373535 39333838 3735301E 170D3233 30333233 31373237
--More--   30315A17 0D333330 33323231 37323730 315A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 37353539
33383837 35308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
0A028201 0100A96F 2E4CA7A3 06FCDC6A FC536A56 F28CF4B5 477800E9 01FB8DCC
597ED4D3 735A4148 20079413 1539FC49 988C210E 9FB8C403 7D9139B7 28AF7D32
EFA9F4A8 AE499157 003CAB2B 4A77925F 615F51A4 EA43B84D F689EF9D 3383D437
6719C1A9 2F01E738 545D4DC4 5CB42B22 BCC9140C 2F137CAF F6515143 76858932
7BD48178 B448CE28 92A8B723 5AC02E09 B623585D 5F401C63 10ACCBF2 3512EA3C
71FA8392 CF70C42D E7D9816C A8355C66 3F45C796 13F230FE B0BBD1F4 5D01C3B2
F9844DA5 D848934C D64929F7 062472A3 3805DB2E 19A0EBF0 9F721D8C E5F1AA20
CE443DCF EF399AE3 30D60C88 79D024E3 57461380 B43135A4 DC426217 0ED6112F
B27779B5 AFED0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
301F0603 551D2304 18301680 14789CF8 A98D47D1 4B92CD2D F9AF3D8E 6365173E
B4301D06 03551D0E 04160414 789CF8A9 8D47D14B 92CD2DF9 AF3D8E63 65173EB4
300D0609 2A864886 F70D0101 05050003 82010100 034D73E1 3D33CC99 CA3BAC6B
636007CF A8B8750B 18D4F54D E69F1FCB 50CA42B7 18923032 A006C51E EB80ACC8
B162065B 53D277D4 528C65A9 570617E3 47EA57E9 07D2A17F BBC38B94 41B073E1
8E687535 369CCD8D 49819608 75C83024 53AB317C 010ADD08 33B6C4CC BD6BE744
584C8450 0A31CC95 3D34FE61 ED5F4911 13E93EE7 56246997 6CCA79E7 9F42641C
8D59C297 9E469371 B1ED4D15 DBDE26B5 C0C4837B 845636F3 F9BC7769 9804B28E
D013F6D7 01155D05 D9D86207 56266090 8AB7B154 3D7F009D 913B18A6 69DA70A1
CA824C80 1F8745BB 61527947 F4777C96 BD1FF9CE 9E8BF1A8 F8447C96 FA8BE809
26361034 688C1D3D 7EE8BF27 C197B4A3 809854BE
--More--   quit
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
--More--   467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
!
!
license udi pid C9800-L-C-K9 sn FCL264900B2
memory free low-watermark processor 170271
!
service-template DEFAULT_LINKSEC_POLICY_MUST_SECURE
linksec policy must-secure
service-template DEFAULT_LINKSEC_POLICY_SHOULD_SECURE
linksec policy should-secure
service-template DEFAULT_CRITICAL_VOICE_TEMPLATE
voice vlan
service-template DEFAULT_CRITICAL_DATA_TEMPLATE
service-template webauth-global-inactive
inactivity-timer 3600
diagnostic bootup level minimal
!
--More--  username admin privilege
!
redundancy
mode sso
!
!
!
!
!
vlan internal allocation policy ascending
!
!
!
class-map match-any AVC-Reanchor-Class
match protocol cisco-jabber-audio
match protocol cisco-jabber-video
match protocol webex-media
match protocol webex-app-sharing
match protocol webex-control
match protocol webex-meeting
match protocol wifi-calling
!
!
--More--  !
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface TwoGigabitEthernet0/0/0
switchport trunk native vlan 100
switchport mode trunk
negotiation auto
no snmp trap link-status
!
interface TwoGigabitEthernet0/0/1
negotiation auto
--More--   no snmp trap link-status
!
interface TwoGigabitEthernet0/0/2
negotiation auto
no snmp trap link-status
!
interface TwoGigabitEthernet0/0/3
negotiation auto
no snmp trap link-status
!
interface TenGigabitEthernet0/1/0
negotiation auto
no snmp trap link-status
!
interface TenGigabitEthernet0/1/1
negotiation auto
no snmp trap link-status
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
negotiation auto
no mop enabled
--More--  !
interface Vlan1
no ip address
!
interface Vlan100
ip address 10.168.10.101 255.255.255.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip route 0.0.0.0 0.0.0.0 10.168.10.254
!
!
!
!
!
!
control-plane
!
!
!
--More--  !
!
!
line con 0
password
login
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login local
transport input ssh
line vty 5 15
login local
transport input ssh
!
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
--More--   active
destination transport-method http
!
!
!
!
!
!
wireless aaa policy default-aaa-policy
wireless cts-sxp profile default-sxp-profile
wireless management interface GigabitEthernet0
wireless profile airtime-fairness default-atf-policy 0
wireless profile flex default-flex-profile
description "default flex profile"
wireless profile mesh default-mesh-profile
description "default mesh profile"
wireless profile policy default-policy-profile
description "default policy profile"
wireless tag site default-site-tag
description "default site tag"
wireless tag policy default-policy-tag
description "default policy-tag"
wlan TEST policy default-policy-profile
--More--  wireless tag rf default-rf-tag
description "default RF tag"
wireless fabric control-plane default-control-plane
wlan TEST 1 TEST
security wpa psk set-key ascii 0 Cisco@6500
no security wpa akm dot1x
security wpa akm psk
no shutdown
ap dot11 24ghz rf-profile Low_Client_Density_rf_24gh
coverage data rssi threshold -90
coverage level 2
coverage voice rssi threshold -90
description "pre configured Low Client Density rfprofile for 2.4gh radio"
high-density rx-sop threshold low
rate RATE_12M supported
rate RATE_24M supported
rate RATE_6M supported
tx-power v1 threshold -65
no shutdown
ap dot11 24ghz rf-profile High_Client_Density_rf_24gh
description "pre configured High Client Density rfprofile for 2.4gh radio"
high-density rx-sop threshold medium
rate RATE_11M disable
--More--   rate RATE_12M mandatory
rate RATE_1M disable
rate RATE_24M supported
rate RATE_2M disable
rate RATE_5_5M disable
rate RATE_6M disable
tx-power min 7
no shutdown
ap dot11 24ghz rf-profile Typical_Client_Density_rf_24gh
description "pre configured Typical Client Density rfprofile for 2.4gh radio"
rate RATE_11M disable
rate RATE_12M mandatory
rate RATE_1M disable
rate RATE_24M supported
rate RATE_2M disable
rate RATE_5_5M disable
rate RATE_6M disable
no shutdown
ap dot11 24ghz rate RATE_12M supported
ap dot11 24ghz rate RATE_24M supported
ap dot11 24ghz rate RATE_6M supported
ap dot11 5ghz rf-profile Low_Client_Density_rf_5gh
coverage data rssi threshold -90
--More--   coverage level 2
coverage voice rssi threshold -90
description "pre configured Low Client Density rfprofile for 5gh radio"
high-density rx-sop threshold low
rate RATE_12M mandatory
rate RATE_24M mandatory
rate RATE_6M mandatory
tx-power v1 threshold -60
no shutdown
ap dot11 5ghz rf-profile High_Client_Density_rf_5gh
description "pre configured High Client Density rfprofile for 5gh radio"
high-density rx-sop threshold medium
rate RATE_12M mandatory
rate RATE_24M mandatory
rate RATE_6M disable
rate RATE_9M disable
tx-power min 7
tx-power v1 threshold -65
no shutdown
ap dot11 5ghz rf-profile Typical_Client_Density_rf_5gh
description "pre configured Typical Density rfprofile for 5gh radio"
rate RATE_12M mandatory
rate RATE_24M mandatory
--More--   rate RATE_6M mandatory
no shutdown
ap dot11 5ghz rate RATE_12M mandatory
ap dot11 5ghz rate RATE_24M mandatory
ap dot11 5ghz rate RATE_6M mandatory
ap tag-source-priority 2 source filter
ap tag-source-priority 3 source ap
ap profile default-ap-profile
description "default ap profile"
trapflags ap crash
trapflags ap noradiocards
trapflags ap register
end

NEW-WLC#
NEW-WLC#
NEW-WLC#
NEW-WLC#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Tw0/0/0 unassigned YES unset up up
Tw0/0/1 unassigned YES unset down down
Tw0/0/2 unassigned YES unset down down
Tw0/0/3 unassigned YES unset down down
Te0/1/0 unassigned YES unset down down
Te0/1/1 unassigned YES unset down down
GigabitEthernet0 unassigned YES manual down down
Vlan1 unassigned YES unset up up
Vlan100 10.168.10.101 YES manual up up
NEW-WLC#
NEW-WLC#
NEW-WLC#
NEW-WLC#sh vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Tw0/0/1, Tw0/0/2, Tw0/0/3
Te0/1/0, Te0/1/1
4 VLAN0004 active
9 VLAN0009 active
100 MGMT active
200 Server active
300 Data-User active
500 Corp-Wi-Fi active
600 Guest-Wi-Fi active
900 Guestnet active
901 IOT active
903 ODW active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
--More--  
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
4 enet 100004 1500 - - - - - 0 0
9 enet 100009 1500 - - - - - 0 0
100 enet 100100 1500 - - - - - 0 0
200 enet 100200 1500 - - - - - 0 0
300 enet 100300 1500 - - - - - 0 0
500 enet 100500 1500 - - - - - 0 0
600 enet 100600 1500 - - - - - 0 0
900 enet 100900 1500 - - - - - 0 0
901 enet 100901 1500 - - - - - 0 0
903 enet 100903 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - srb 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

NEW-WLC# exit

1 Accepted Solution

Accepted Solutions

Scott Fella
Hall of Fame
Hall of Fame

Search around for Cisco 9800 day zero loop.  It is because you need to define the country code using the cli.  Hope this helps.

WLC(config)# ap dot11 5ghz shutdown
Disabling the 802.11a network may stand mesh APs
Are you sure you want to continue? (y/n)[y]:

WLC(config)# ap dot11 24ghz shutdown
Disabling the 802.11b network may stand mesh APs
Are you sure you want to continue? (y/n)[y]:

WLC(config)# ap country <Country_Code>

-Scott
*** Please rate helpful posts ***

View solution in original post

1 Reply 1

Scott Fella
Hall of Fame
Hall of Fame

Search around for Cisco 9800 day zero loop.  It is because you need to define the country code using the cli.  Hope this helps.

WLC(config)# ap dot11 5ghz shutdown
Disabling the 802.11a network may stand mesh APs
Are you sure you want to continue? (y/n)[y]:

WLC(config)# ap dot11 24ghz shutdown
Disabling the 802.11b network may stand mesh APs
Are you sure you want to continue? (y/n)[y]:

WLC(config)# ap country <Country_Code>

-Scott
*** Please rate helpful posts ***
Review Cisco Networking products for a $25 gift card