10-14-2008 07:23 PM - edited 07-03-2021 04:37 PM
Hello!
I upgraded 1121 to lightweight with upgrade tool.
Now I want it to be joined to 2106.
In debug packet I see that 1121 sends discovery request (broadcast, or, after I addedd dns record unicast) to 2106 and 2106 replies.
Then there is no join request from AP.
2106 is in master mode.
What can be wrong?
10-15-2008 05:25 AM
Did you add the SSC to the WLC after you did the upgrade?
10-16-2008 07:35 PM
But there is no certificate!
upgrade tool generates csv file with 0 size, I tried this several times...
10-31-2008 11:17 PM
Hello!
I still can't solve this problem.
Anybody can help?
11-01-2008 09:29 AM
Hi Dmitry,
I have worked with some other NetPros where this happened (no SSC created) they had to downgrade the AP to Autonomous and run the upgrade to LWAPP over again. Then it worked properly;
Using a TFTP Server to Return to a Previous Release
--------------------------------------------------------------------------------
Note This section does not apply to Cisco C3201WMIC and Cisco C3201LAP.
--------------------------------------------------------------------------------
Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
--------------------------------------------------------------------------------
Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.
Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.
Step 3 On the PC where the TFTP server is located, perform these steps:
a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.
b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View > Show hidden files and folders.
Step 4 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.
Step 5 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.
Step 6 Disconnect power from the access point.
Step 7 Press and hold MODE while you reconnect power to the access point.
Step 8 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.
Step 9 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.
Step 10 After the access point reboots, reconfigure it using the GUI or the CLI.
Hope this helps!
Rob
01-18-2009 08:49 PM
Hello!
I have time to this again ;-)
I tried to convert 1121 to lwapp again, and see in log that it has MIC , this is why SSC is not created, so I added 1121 mac to 2106 with MIC , but AP still doesn't join to controller.
Looks like problem is not in certificate.
But where?
01-18-2009 09:02 PM
can you post the logs of the AP when it tries to join.
You mentioned the join request, but it would be nice to see all of the entries.
Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?
Better yet, are any of your APs working or is it just this one that doesn't join?
What Version of WLC?
01-18-2009 09:19 PM
Hello!
>can you post the logs of the AP when it tries to join.
Could you tell me how can I get logs from AP?
>Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?
Well, I tried this- I don't see join request from AP.
>Better yet, are any of your APs working or is it just this one that doesn't join?
There are no working APs, I'm trying to add one AP (of 2 I have) to controller
>What Version of WLC?
I tried several, now it is 4.2.
01-18-2009 09:31 PM
If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log. I don't have access to an AP right now but I think there should be some kind of debug command accessible from the console to indicate the LWAPP events...
Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?
Could you post the run-config of your WLC?
01-18-2009 09:49 PM
>If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log.
unfortunately, there is no serial console on 1121 :-(
>Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?
They are in the same subnet, and I tried to connect them using one switch.
>Could you post the run-config of your WLC?
(Cisco Controller) >show running-config
802.11a cac voice tspec-inactivity-timeout ignore
802.11a cac voice stream-size 84000 max-streams 2
802.11b cac voice tspec-inactivity-timeout ignore
802.11b cac voice stream-size 84000 max-streams 2
aaa auth mgmt local radius
advanced 802.11a channel add 100
advanced 802.11a channel add 104
advanced 802.11a channel add 108
advanced 802.11a channel add 112
advanced 802.11a channel add 116
advanced 802.11a channel add 120
--More-- or (q)uit
advanced 802.11a channel add 124
advanced 802.11a channel add 128
advanced 802.11a channel add 132
advanced 802.11a channel add 136
advanced 802.11a channel add 140
advanced 802.11a channel add 149
advanced 802.11a channel add 153
advanced 802.11a channel add 157
advanced 802.11a channel add 161
advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0
advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0
advanced 802.11a receiver pico-cell-V2 sta_tx_pwr 0 0 0
--More-- or (q)uit
advanced 802.11b tx-power-control-thresh -65
Location Summary
Algorithm used: Average
Client
RSSI expiry timeout: 5 sec
Half life: 0 sec
Notify Threshold: 0 db
Calibrating Client
RSSI expiry timeout: 5 sec
Half life: 0 sec
Rogue AP
RSSI expiry timeout: 5 sec
Half life: 0 sec
Notify Threshold: 0 db
RFID Tag
RSSI expiry timeout: 5 sec
Half life: 0 sec
Notify Threshold: 0 db
--More-- or (q)uit
location rssi-half-life tags 0
location rssi-half-life client 0
location rssi-half-life rogue-aps 0
location expiry tags 5
location expiry client 5
location expiry calibrating-client 5
location expiry rogue-aps 5
Cisco Public Safety is not allowed to set in this domain
ap syslog host global 255.255.255.255
auth-list ap-policy ssc enable
auth-list add mic 00:21:55:74:af:82
country RU
--More-- or (q)uit
dhcp proxy disable
local-auth method fast server-key *****
interface address ap-manager 192.168.22.19 255.255.255.0 192.168.22.221
interface address management 192.168.22.18 255.255.255.0 192.168.22.221
interface address virtual 1.1.1.1
interface dhcp ap-manager primary 192.168.22.220
interface dhcp management primary 192.168.22.220
interface port ap-manager 2
interface port management 1
load-balancing window 5
logging buffered 7
--More-- or (q)uit
logging console 7
memory monitor error disable
memory monitor leak thresholds 10000 30000
mesh security eap
mgmtuser add cisco **** read-write
mobility group domain Belkam
network webmode enable
network telnet enable
network multicast mode multicast 0.0.0.0
network mgmt-via-dynamic-interface enable
network otap-mode disable
network rf-network-name Belkam
--More-- or (q)uit
snmp version v2c enable
snmp version v3 enable
sysname WLC2106
time ntp interval 28800
time ntp server 1 192.168.22.99
trapflags 802.11-Security ids-sig-attack disable
802.11a disable network
01-19-2009 01:55 AM
btw, this is what I get on controller with
debug lwapp events enable
Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '1'
Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 1
Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '2'
Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 2
01-18-2009 09:56 PM
Can LAP1121 ping the Management IP Address of the 2106?
If yes, then try the following command on the LAP1121:
lwapp ap controller ip address
Does this help?
01-18-2009 11:44 PM
I don't know can 1121 ping controller or not- I can't ping 1121. but I can't telnet to it, when it has lwapp image.
How can I see what is happening on 1121?
01-19-2009 01:56 AM
>If yes, then try the following command on the LAP1121:
>lwapp ap controller ip address
Sorry for silly question-
Should I do this before upgrade to lwapp from autonomous?
01-19-2009 01:01 PM
Yes. Console to the LAP1121 and verify if you can ping the Management Interface IP Address or not. If YES, then type the command from the LAP1121:
lwapp ap controller ip address
Does this help?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: