WiSM rebooting randomly

[Victor Fabian]

I have 3 WiSMs two of them (WiSM-a and WiSM-b) are seated on the CORE1 switch (6509) and the WiSM-c is seated on CORE2 also a 6509 .

One of the controllers from WiSM-a/b keeps rebooting let's called it Con-1a and Con-2b reboots but usually more than the other one the controllers (WiSM located on CORE2 never reboot .

Both COREs have the same software code. The WiSM have been online for about a year with 4.2.99.0 version and they never rebooted until 3 months from now so a Cisco Tech suggested upgrading to 4.2.176.0 but it keeps doing it .

""IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF9, REL"

Thank you

Vic

[b.smeets]

Suppose your wireless clients are in 10.13.15.0/24 and the controller's address in this subnet is 10.13.15.1. Then the 'destination IP/Mask' in the ACL rule should be 10.13.15.1/255/255/255/255.

[Victor Fabian]

So do you mean that if i have 5 segments for the client side i need to put the IP address of the controller from each segment ??

Thank you

VIc

[b.smeets]

Correct, you'll have 5 deny-rules then.

[Victor Fabian]

Do you know by any chance :

What ssh traffics is generated into the wlc

in another word where is it coming from?

Thank you

Vic

[b.smeets]

We saw it coming from random addresses in the Internet, and not from the wireless clients. The only explanation is hackers, ssl'ing to this interface simple doesn't make sense.

[exlikhov]

Do you think disabling SSH access on the controllers will have the same affect?

[b.smeets]

Probably yes, but this was no option in out case because the network managers themselves do want to ssh to the controllers. We disabled telnet to the controllers for security reasons.

[b.smeets]

Probably yes. But then you must use telnet to log in into the controllers, which isn't secure.

[ericgarnel]

4.2.205.0 is now available for download.

I haven't read the rel notes yet, but it may be worth checking into