cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5129
Views
0
Helpful
7
Replies

WLC Issue

vikas01234das
Level 2
Level 2

A one SSID is created in WLC .I am trying to connect SSID through mobile ,it is redirecting to chrome and than showing some error which is "

1.1.1.1 uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH
 
 
So please help me on it.

 

2 Accepted Solutions

Accepted Solutions

Actually The issue is coming in chrome browser only. 

In Laptop & Mobile-When we click in ssid ,it is redirect to chrome and showing error.

but if we paste the url to IE in laptop than it is working and asking for credential. 

 

In laptop we can paste the URL to IE 

but in mobile we don't have IE .

So i want to access web  authentication page in chrome. 

 

 

View solution in original post

Rich R
VIP
VIP

You are running a very old version of AireOS which does not support TLS 1.2

Refer to https://community.cisco.com/t5/wireless/tls-1-2-on-wlc-gui-management-interface/td-p/2906432 for a discussion about this subject.

If you want that to work you need to use at least version 8.2.100.0

Refer to https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html for recommended releases but make sure your APs are supported before upgrading to a new release.

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#ctr-ap_support

 

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

View solution in original post

7 Replies 7

johnd2310
Level 11
Level 11

Hi,

 

What is the software version and model of WLC?

 

 

Thanks

John

**Please rate posts you find helpful**

Below are the details


Software Version 8.0.135.0

Model
AIR-CT5508-K9

balaji.bandi
Hall of Fame
Hall of Fame

Looks like you need TLS1.2 

BB

=====️ Preenayamo Vasudevam ️=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hy balaji.bandi (VIP Guru)

TLS 1.2 is already checked in .Any other suggestions?

Thank you for the input, is this checked on user browser or WLC ?

is the issue only wth Mobile device (any specific model) , how about when you connect to that SSID using your Laptop ?

 

 

BB

=====️ Preenayamo Vasudevam ️=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Actually The issue is coming in chrome browser only. 

In Laptop & Mobile-When we click in ssid ,it is redirect to chrome and showing error.

but if we paste the url to IE in laptop than it is working and asking for credential. 

 

In laptop we can paste the URL to IE 

but in mobile we don't have IE .

So i want to access web  authentication page in chrome. 

 

 

Rich R
VIP
VIP

You are running a very old version of AireOS which does not support TLS 1.2

Refer to https://community.cisco.com/t5/wireless/tls-1-2-on-wlc-gui-management-interface/td-p/2906432 for a discussion about this subject.

If you want that to work you need to use at least version 8.2.100.0

Refer to https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html for recommended releases but make sure your APs are supported before upgrading to a new release.

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#ctr-ap_support

 

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390
Review Cisco Networking for a $25 gift card