cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1440
Views
0
Helpful
18
Replies

AP-1121G do not even try to join to WLC-1206

dm
Level 1
Level 1

Hello!

I upgraded 1121 to lightweight with upgrade tool.

Now I want it to be joined to 2106.

In debug packet I see that 1121 sends discovery request (broadcast, or, after I addedd dns record unicast) to 2106 and 2106 replies.

Then there is no join request from AP.

2106 is in master mode.

What can be wrong?

18 Replies 18

Scott Fella
Hall of Fame
Hall of Fame

Did you add the SSC to the WLC after you did the upgrade?

-Scott
*** Please rate helpful posts ***

But there is no certificate!

upgrade tool generates csv file with 0 size, I tried this several times...

Hello!

I still can't solve this problem.

Anybody can help?

Rob Huffman
Hall of Fame
Hall of Fame

Hi Dmitry,

I have worked with some other NetPros where this happened (no SSC created) they had to downgrade the AP to Autonomous and run the upgrade to LWAPP over again. Then it worked properly;

Using a TFTP Server to Return to a Previous Release

--------------------------------------------------------------------------------

Note This section does not apply to Cisco C3201WMIC and Cisco C3201LAP.

--------------------------------------------------------------------------------

Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:

--------------------------------------------------------------------------------

Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.

Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.

Step 3 On the PC where the TFTP server is located, perform these steps:

a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.

b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View > Show hidden files and folders.

Step 4 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.

Step 5 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.

Step 6 Disconnect power from the access point.

Step 7 Press and hold MODE while you reconnect power to the access point.

Step 8 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.

Step 9 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.

Step 10 After the access point reboots, reconfigure it using the GUI or the CLI.

http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918

Hope this helps!

Rob

Hello!

I have time to this again ;-)

I tried to convert 1121 to lwapp again, and see in log that it has MIC , this is why SSC is not created, so I added 1121 mac to 2106 with MIC , but AP still doesn't join to controller.

Looks like problem is not in certificate.

But where?

can you post the logs of the AP when it tries to join.

You mentioned the join request, but it would be nice to see all of the entries.

Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?

Better yet, are any of your APs working or is it just this one that doesn't join?

What Version of WLC?

Hello!

>can you post the logs of the AP when it tries to join.

Could you tell me how can I get logs from AP?

>Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?

Well, I tried this- I don't see join request from AP.

>Better yet, are any of your APs working or is it just this one that doesn't join?

There are no working APs, I'm trying to add one AP (of 2 I have) to controller

>What Version of WLC?

I tried several, now it is 4.2.

If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log. I don't have access to an AP right now but I think there should be some kind of debug command accessible from the console to indicate the LWAPP events...

Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?

Could you post the run-config of your WLC?

>If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log.

unfortunately, there is no serial console on 1121 :-(

>Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?

They are in the same subnet, and I tried to connect them using one switch.

>Could you post the run-config of your WLC?

(Cisco Controller) >show running-config

802.11a cac voice tspec-inactivity-timeout ignore

802.11a cac voice stream-size 84000 max-streams 2

802.11b cac voice tspec-inactivity-timeout ignore

802.11b cac voice stream-size 84000 max-streams 2

aaa auth mgmt local radius

advanced 802.11a channel add 100

advanced 802.11a channel add 104

advanced 802.11a channel add 108

advanced 802.11a channel add 112

advanced 802.11a channel add 116

advanced 802.11a channel add 120

--More-- or (q)uit

advanced 802.11a channel add 124

advanced 802.11a channel add 128

advanced 802.11a channel add 132

advanced 802.11a channel add 136

advanced 802.11a channel add 140

advanced 802.11a channel add 149

advanced 802.11a channel add 153

advanced 802.11a channel add 157

advanced 802.11a channel add 161

advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0

advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0

advanced 802.11a receiver pico-cell-V2 sta_tx_pwr 0 0 0

--More-- or (q)uit

advanced 802.11b tx-power-control-thresh -65

Location Summary

Algorithm used: Average

Client

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

Calibrating Client

RSSI expiry timeout: 5 sec

Half life: 0 sec

Rogue AP

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

RFID Tag

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

--More-- or (q)uit

location rssi-half-life tags 0

location rssi-half-life client 0

location rssi-half-life rogue-aps 0

location expiry tags 5

location expiry client 5

location expiry calibrating-client 5

location expiry rogue-aps 5

Cisco Public Safety is not allowed to set in this domain

ap syslog host global 255.255.255.255

auth-list ap-policy ssc enable

auth-list add mic 00:21:55:74:af:82

country RU

--More-- or (q)uit

dhcp proxy disable

local-auth method fast server-key *****

interface address ap-manager 192.168.22.19 255.255.255.0 192.168.22.221

interface address management 192.168.22.18 255.255.255.0 192.168.22.221

interface address virtual 1.1.1.1

interface dhcp ap-manager primary 192.168.22.220

interface dhcp management primary 192.168.22.220

interface port ap-manager 2

interface port management 1

load-balancing window 5

logging buffered 7

--More-- or (q)uit

logging console 7

memory monitor error disable

memory monitor leak thresholds 10000 30000

mesh security eap

mgmtuser add cisco **** read-write

mobility group domain Belkam

network webmode enable

network telnet enable

network multicast mode multicast 0.0.0.0

network mgmt-via-dynamic-interface enable

network otap-mode disable

network rf-network-name Belkam

--More-- or (q)uit

snmp version v2c enable

snmp version v3 enable

sysname WLC2106

time ntp interval 28800

time ntp server 1 192.168.22.99

trapflags 802.11-Security ids-sig-attack disable

802.11a disable network

btw, this is what I get on controller with

debug lwapp events enable

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '1'

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 1

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '2'

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 2

Leo Laohoo
Hall of Fame
Hall of Fame

Can LAP1121 ping the Management IP Address of the 2106?

If yes, then try the following command on the LAP1121:

lwapp ap controller ip address

Does this help?

I don't know can 1121 ping controller or not- I can't ping 1121. but I can't telnet to it, when it has lwapp image.

How can I see what is happening on 1121?

>If yes, then try the following command on the LAP1121:

>lwapp ap controller ip address

Sorry for silly question-

Should I do this before upgrade to lwapp from autonomous?

Yes. Console to the LAP1121 and verify if you can ping the Management Interface IP Address or not. If YES, then type the command from the LAP1121:

lwapp ap controller ip address

Does this help?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: