Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

dm
New Member

AP-1121G do not even try to join to WLC-1206

Hello!

I upgraded 1121 to lightweight with upgrade tool.

Now I want it to be joined to 2106.

In debug packet I see that 1121 sends discovery request (broadcast, or, after I addedd dns record unicast) to 2106 and 2106 replies.

Then there is no join request from AP.

2106 is in master mode.

What can be wrong?

18 REPLIES
Hall of Fame Super Silver

Re: AP-1121G do not even try to join to WLC-1206

Did you add the SSC to the WLC after you did the upgrade?

-Scott
*** Please rate helpful posts ***
dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

But there is no certificate!

upgrade tool generates csv file with 0 size, I tried this several times...

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

Hello!

I still can't solve this problem.

Anybody can help?

Hall of Fame Super Red

Re: AP-1121G do not even try to join to WLC-1206

Hi Dmitry,

I have worked with some other NetPros where this happened (no SSC created) they had to downgrade the AP to Autonomous and run the upgrade to LWAPP over again. Then it worked properly;

Using a TFTP Server to Return to a Previous Release

--------------------------------------------------------------------------------

Note This section does not apply to Cisco C3201WMIC and Cisco C3201LAP.

--------------------------------------------------------------------------------

Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:

--------------------------------------------------------------------------------

Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.

Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.

Step 3 On the PC where the TFTP server is located, perform these steps:

a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.

b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View > Show hidden files and folders.

Step 4 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.

Step 5 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.

Step 6 Disconnect power from the access point.

Step 7 Press and hold MODE while you reconnect power to the access point.

Step 8 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.

Step 9 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.

Step 10 After the access point reboots, reconfigure it using the GUI or the CLI.

http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp160918

Hope this helps!

Rob

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

Hello!

I have time to this again ;-)

I tried to convert 1121 to lwapp again, and see in log that it has MIC , this is why SSC is not created, so I added 1121 mac to 2106 with MIC , but AP still doesn't join to controller.

Looks like problem is not in certificate.

But where?

Bronze

Re: AP-1121G do not even try to join to WLC-1206

can you post the logs of the AP when it tries to join.

You mentioned the join request, but it would be nice to see all of the entries.

Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?

Better yet, are any of your APs working or is it just this one that doesn't join?

What Version of WLC?

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

Hello!

>can you post the logs of the AP when it tries to join.

Could you tell me how can I get logs from AP?

>Furthermore, you should be able to debug on the WLC to see what it says about this AP. Maybe debug the MAC of the AP will show you something?

Well, I tried this- I don't see join request from AP.

>Better yet, are any of your APs working or is it just this one that doesn't join?

There are no working APs, I'm trying to add one AP (of 2 I have) to controller

>What Version of WLC?

I tried several, now it is 4.2.

Bronze

Re: AP-1121G do not even try to join to WLC-1206

If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log. I don't have access to an AP right now but I think there should be some kind of debug command accessible from the console to indicate the LWAPP events...

Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?

Could you post the run-config of your WLC?

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

>If you physically console into the AP (is that available on an 1121?) and I think password is like "Cisco" on most APs, you should be able to see the log.

unfortunately, there is no serial console on 1121 :-(

>Is the controller and AP in the same VLAN/Subnet? Same switch? Is it the same VLAN/Subnet as other working devices?

They are in the same subnet, and I tried to connect them using one switch.

>Could you post the run-config of your WLC?

(Cisco Controller) >show running-config

802.11a cac voice tspec-inactivity-timeout ignore

802.11a cac voice stream-size 84000 max-streams 2

802.11b cac voice tspec-inactivity-timeout ignore

802.11b cac voice stream-size 84000 max-streams 2

aaa auth mgmt local radius

advanced 802.11a channel add 100

advanced 802.11a channel add 104

advanced 802.11a channel add 108

advanced 802.11a channel add 112

advanced 802.11a channel add 116

advanced 802.11a channel add 120

--More-- or (q)uit

advanced 802.11a channel add 124

advanced 802.11a channel add 128

advanced 802.11a channel add 132

advanced 802.11a channel add 136

advanced 802.11a channel add 140

advanced 802.11a channel add 149

advanced 802.11a channel add 153

advanced 802.11a channel add 157

advanced 802.11a channel add 161

advanced 802.11a receiver pico-cell-V2 rx_sense_thrld 0 0 0

advanced 802.11a receiver pico-cell-V2 cca_sense_thrld 0 0 0

advanced 802.11a receiver pico-cell-V2 sta_tx_pwr 0 0 0

--More-- or (q)uit

advanced 802.11b tx-power-control-thresh -65

Location Summary

Algorithm used: Average

Client

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

Calibrating Client

RSSI expiry timeout: 5 sec

Half life: 0 sec

Rogue AP

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

RFID Tag

RSSI expiry timeout: 5 sec

Half life: 0 sec

Notify Threshold: 0 db

--More-- or (q)uit

location rssi-half-life tags 0

location rssi-half-life client 0

location rssi-half-life rogue-aps 0

location expiry tags 5

location expiry client 5

location expiry calibrating-client 5

location expiry rogue-aps 5

Cisco Public Safety is not allowed to set in this domain

ap syslog host global 255.255.255.255

auth-list ap-policy ssc enable

auth-list add mic 00:21:55:74:af:82

country RU

--More-- or (q)uit

dhcp proxy disable

local-auth method fast server-key *****

interface address ap-manager 192.168.22.19 255.255.255.0 192.168.22.221

interface address management 192.168.22.18 255.255.255.0 192.168.22.221

interface address virtual 1.1.1.1

interface dhcp ap-manager primary 192.168.22.220

interface dhcp management primary 192.168.22.220

interface port ap-manager 2

interface port management 1

load-balancing window 5

logging buffered 7

--More-- or (q)uit

logging console 7

memory monitor error disable

memory monitor leak thresholds 10000 30000

mesh security eap

mgmtuser add cisco **** read-write

mobility group domain Belkam

network webmode enable

network telnet enable

network multicast mode multicast 0.0.0.0

network mgmt-via-dynamic-interface enable

network otap-mode disable

network rf-network-name Belkam

--More-- or (q)uit

snmp version v2c enable

snmp version v3 enable

sysname WLC2106

time ntp interval 28800

time ntp server 1 192.168.22.99

trapflags 802.11-Security ids-sig-attack disable

802.11a disable network

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

btw, this is what I get on controller with

debug lwapp events enable

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '1'

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 1

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Received LWAPP DISCOVERY REQUEST from AP 00:21:55:74:af:82 to ff:ff:ff:ff:ff:ff on port '2'

Mon Jan 19 09:42:22 2009: 00:21:55:74:af:82 Successful transmission of LWAPP Discovery Response to AP 00:21:55:74:af:82 on port 2

Hall of Fame Super Gold

Re: AP-1121G do not even try to join to WLC-1206

Can LAP1121 ping the Management IP Address of the 2106?

If yes, then try the following command on the LAP1121:

lwapp ap controller ip address

Does this help?

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

I don't know can 1121 ping controller or not- I can't ping 1121. but I can't telnet to it, when it has lwapp image.

How can I see what is happening on 1121?

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

>If yes, then try the following command on the LAP1121:

>lwapp ap controller ip address

Sorry for silly question-

Should I do this before upgrade to lwapp from autonomous?

Hall of Fame Super Gold

Re: AP-1121G do not even try to join to WLC-1206

Yes. Console to the LAP1121 and verify if you can ping the Management Interface IP Address or not. If YES, then type the command from the LAP1121:

lwapp ap controller ip address

Does this help?

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

>Yes. Console to the LAP1121 and verify if you can ping the Management Interface IP Address or not

I can ping from 1121 with IOS (not LWAPP!)

ap#ping 192.168.22.18

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.22.18, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms

but there is no such command:

ap#conf t

Enter configuration commands, one per line. End with CNTL/Z.

ap(config)#lwapp ap controller ip address 192.168.22.18

^

% Invalid input detected at '^' marker.

ap(config)#exit

ap#lwapp ap controller ip address 192.168.22.18

^

% Invalid input detected at '^' marker.

dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

And I can't telnet to 1121 if it has LWAPP image, I can only ping it... :-(

Hall of Fame Super Silver

Re: AP-1121G do not even try to join to WLC-1206

Just for kicks... can you place the ap-manager in port 1 instead of port 2 and see if the ap joins. If so, then you have an issues with your switch port configuration.

Also, can you post the switch port configuration of the ports the wlc is connected to.

-Scott
*** Please rate helpful posts ***
dm
New Member

Re: AP-1121G do not even try to join to WLC-1206

Thank you!

Problem was in switch - I connected controller and ap to catalyst 2560G and 1121 registered in 2106, previously I connected them to non-cisco switch :-(

593
Views
0
Helpful
18
Replies
CreatePlease to create content