getXML('General7103 Robert.N.BarrettNov 17, 2009, 8:36am PSTI've done a fair amount of outdoor wireless surveys, but they've always been for clients with existing wireless networks. Now I have my first opportunity to perform my an outdoor wireless survey where there is no existing WLAN. <br /><br />I have my AirMagnet, AP and antennas that we plan to deploy (test what you use, use what you test), power source, potential AP locations, GPS, maps, etc. The thing I don't have is a way to mount the antennas temporarily for the survey. Anyone know of an easy way to adapt the AIR-2465P-R and/or the AIR-2485P-R to a camera tripod? Ideally, I'm going to "stick" the antennas to the building walls where we plan to mount the antennas, but I'm looking for alternatives... 30petenugentNov 17, 2009, 8:46am PSTRob<br /><br />Ive always used a tripod of the stage lighting type, aluminium pretty lightweight and 3.5metres.<br /><br />To attach the ap and antenna always used cable ties. Quick and easy to get off and back in the car. String a few together if you need longer lengths nehenzlerNov 16, 2009, 9:51pm PSTI cannot determine why the above autonomous AP + directional patch antenna would not work together but the antenna is not listed on the spec sheet (attached). Any suggestions before I place an order?<br /><br /><b>Attachment Keywords : </b> <br />1) 1240hig2_book.pdf<br /> 1240hig2_book.pdf123663application/pdfpdf347510111/16/2014no30jeff.kishNov 17, 2009, 6:43am PSTThis antenna would work fine. No clue why it isn't listed. As long as it's RP-TNC, you're good to go. nehenzlerNov 17, 2009, 7:11am PSTGreat, thanks for the confirmation. nehenzlerNov 17, 2009, 7:12am PSTGreat, thanks for the confirmation. rob.huffmanNov 17, 2009, 7:07am PSTHi Neal,<br /><br />Just to add a reference to the great tips from Jeff (+5 points here Jeff :)<br /><br />The AIR-ANT2465P-R Antenna is shown as supported in this AP1240 doc;<br /><br />Cisco Aironet 1240 AG Series<br /><br />Cisco Aironet 2.4 GHz and 5 GHz Antennas and Accessories<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/product_data_sheet09186a008022b11b_ps6521_Products_Data_Sheet.html')">http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/product_data_sheet09186a008022b11b_ps6521_Products_Data_Sheet.html</A><br /><br /><br />Hope this helps! <br />Rob <br />Robert.N.BarrettNov 17, 2009, 7:34am PSTJust to pile on the information, I think the AIR-ANT2465P-R is a replacement for the AIR-ANT2012, which is no longer available through Cisco.<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/prod_end-of-life_notice0900aecd80490c5b.html')">http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/prod_end-of-life_notice0900aecd80490c5b.html</A><br />Robert.N.BarrettNov 17, 2009, 7:42am PSTHey, Rob - just wondering your opinion on the "legality" of using other Cisco antennas on a 1250. In the 1250 guide, it states specifically:<br />The access point has been designed to operate with the antennas listed below and having a maximum gain of 10 dBi for 2.4 GHz and 6 dBi for 5 GHz. Antennas not included in this list or having a higher gain are strictly prohibited for use with the access point. The required antenna impedance is 50 ohms. <br /><br />However, in the link you provided, it states:<br />Cisco has developed antennas specifically for use with the Cisco Aironet 1250 Series Access Points but most existing antennas can also be used (Table 4).<br /><br />I guess they mean you can use any of these existing Cisco antennas that don't exceed 10/6 dBi for 2.4/5Ghz respectively? Clear as mud?jeff.kishNov 17, 2009, 8:02am PSTI can at least say that the FCC restricts antenna usage to only that of what the manufacturer makes or below. So if Cisco makes an antenna of a certain type and at a certain dB, you can use any other antenna of that type at or below that dB level.<br /><br />So yeah... clear as mud -_- bbxieNov 16, 2009, 9:55pm PSTHi, has anybody seen the same issue previously:<br />1. WiSM 5.2.193/AP1252/ACS5.0/WINDOWS7 laptop/EAP-TLS authentication for the WLAN<br />2. Each time the client try to join the WLAN failed, there's no Radius authentication report for this failed connection in ACS5.0<br />3. When debug client xxxx in WLC, it says:<br />Sending EAP-Request/Identity to mobile <br />Received EAPOL EAPPKT from mobile <br />Received EAP Response packet with mismatching id (currentid=2, eapid=1) from mobile <br /><br />It seems the client failed in the phase one of EAP-TLS(setup the TLS link).<br /><br />I suspect that the client/server/CA certificates have some problem because these certs are used in the EAP-TLS phase one TLS setup. However I've been told the certs have no problem, their CA server engineer had checked. I don't have more evidence on showing the customer the certs had problem.<br /><br />Now I can't get the support bundle from ACS and don't have other Laptop(XP or Vista)for testing.<br /><br />Any idea on it? Any feedback will be appreciated 30Robert.N.BarrettNov 17, 2009, 7:14am PSTIt seems to me that a certificate problem would get logged on the ACS server (it did when I tested 5.0). In order for there to be a certificate problem, the ACS server would have needed to present it's certificate to the WLC/AP in order for the client to receive/verify it (that's the first step in EAP-TLS). Therefore, something should have been logged in ACS, and I've found the ACS 5 logging to be pretty complete.<br /><br />Are you sure you have the Windows 7 client properly configured for EAP-TLS? If you're not sure, is there any chance of using WireShark to do a wireless capture and see what kind of EAP the client is trying to perform?<br /><br />What wireless supplicant are you using with Windows 7, and what flavor (Enterprise, Home, etc.) of Windows 7 are you running?<br />t-monaghanNov 17, 2009, 5:09am PSTHi there,<br /><br />I’ve got a problem hopefully someone can help me with. I have the above mentioned AP and it is configured, working well and providing wireless access to several laptops on our domain.<br /><br />The thing is I can’t get access to the web-based interface to add new laptops Mac addresses to the AP as I currently have them secured with local list Mac address authentication but my user name and password when entered in the web browser login dialog box won’t allow me in although strangely it does allow me to login using the same credentials when I telnet into the AP.<br /><br />Does anyone know why I can’t get logged in using the web interface even though the user name and password does appear to be correct as I can telnet in? Also if you have any suggestions how I could sort this without having to perform the password recovery procedure, as I don’t want all the config on the AP wiped and want to avoid having the set the whole thing up again.<br /><br />As I workaround if anyone knows what the commands are to allow me to add the Mac addresses of the new laptops so they are added to the local list Mac address authentication list so the new laptops are secured that would be great.<br /><br />Thanks in anticipation,<br /><br />Tony<br /> 30jeff.kishNov 17, 2009, 6:46am PSTYour AP is probably configured to use the enable secret as the password. Try entering nothing for the username, and enter your enable secret for the password ('Cisco' by default).<br /><br />If that doesn't work, post your running-config and we'll be able to see why it's doing that. It's a standard configuration, and no worries because wiping the AP won't be necessary since you can successfully Telnet in.<br /><br />JeffRobert.N.BarrettNov 17, 2009, 7:06am PSTMaybe this command will let you manually add MAC addresses via the CLI:<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/wireless/access_point/12.4_10b_JA/command/reference/cr12410b-chap2.html#wp2531971')">http://www.cisco.com/en/US/docs/wireless/access_point/12.4_10b_JA/command/reference/cr12410b-chap2.html#wp2531971</A><br />BartV1982Nov 17, 2009, 6:48am PST<br />we see sometimes on a 3750switch<br />SW_MATM-4-MACFLAP_NOTIF: Host 000b.xxxx.xxxx in vlan 5 is <br />flapping between port Gi2/0/42 and port Po7<br /><br />looking up the MAC we found wifi devices like a pc and handscanner which move to the building thereby changing from AP<br /><br />Can it be that roaming is not properly configured as the switch sees the MAC flapping?<br />This is only with wifi devices, fixed servers or so are not flapping<br /><br />Please help<br /> klasseolssonNov 17, 2009, 12:47am PSTI have upgraded to the new release and the EM image version is N/A have tryed to upgrade the ER version to 5.2.157-ER. But the same status N/A exists after. 30 dvr0Nov 17, 2009, 6:13am PSTI'm told this is cosmetic.<br /><br /><A HREF="javascript:newWin('http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd17116')">http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd17116</A>riteshmalpaniNov 17, 2009, 3:56am PSTHi,<br /><br />Let me first come with my Wireless scenario. I have a L3 switch ->Firewall->L2 swith-> WAN Router-> I have WLC module in router. Now I have connected my LAP to L2 switch and LAP are able to register themselves with the controller. I have defined dhcp scope at the router so my users are getting IP and going outside world. <br /><br />Now the problem is that my customer wants all the Wireless users to be behind firewall. PLese suggest me how shall I do??<br /><br />Thanks in advance<br /><br />Ritesh osumbekovNov 16, 2009, 9:56pm PSTHi,<br /><br />There is no L3 network connection to some of the 1522 APs in our mesh network.<br />They register with the 4402 WLC (5.2.157.0)i.e. appear in the AP list. When sending ping packet to APs IP addresses from WLC or PC there is no response, but I can see APs MAC addreess with "arp" command. Users connected to these APs can not access wired network, also in Monitor -> Current clients -> Detail "Auth" is Yes for users who can access wired network and No for those who can not.<br /><br />Any advice would be appreciated.<br />TIA. carlozainaSep 17, 2009, 1:41am PSTJust this: is it possible to downgrade a 1140 from lwap to autonomous AP?<br /><br /> 30 brian.kachel@quintiles.comSep 17, 2009, 7:10am PSTThere is no autonomous image for an 1140 series yet.<br />Hopefully soon! blarkins1Oct 14, 2009, 6:16am PSTThere is an Autonomous IOS available for the 1140 now, however I have yet to figure out how to get a command prompt to convert it while consoled in. When the LAP cannot find a controller it just continues to error without timing out.carlozainaOct 14, 2009, 7:00am PSTThank you for the news.<br />I was waiting for the release of an autonomous IOS<br /> blarkins1Oct 14, 2009, 7:04am PSTI have been waiting anxiously too... We have several 1140's but no controller yet. If you know how to get a command prompt without the AP joining a controller please let me know. Mine just keeps erroring and will not give me a prompt.<br />Here is the release notes for the IOS and support for the 1140's:<br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_4_21a_JA1rn.html')">http://www.cisco.com/en/US/docs/wireless/access_point/ios/release/notes/12_4_21a_JA1rn.html</A> blarkins1Oct 14, 2009, 10:55am PSTGot it figured out... the 1142's need to get a DHCP IP address, then they'll create an AP hostname, THEN you will get a command prompt to work from. <br />If you're working in a test environment, just build a DHCP pool on your switch and the AP will grab an IP from there.carlozainaOct 15, 2009, 7:24am PSTSo far i worked only with Autonomous AP, so i may be wrong..<br />When AP boots, can't you halt the normal boot process and go in a maintenance mode, much like with a catalyst switch? And then, upload the image?<br /><br />I'll have to wait until my 1142 get shipped blarkins1Oct 15, 2009, 7:36am PSTTypically, yes. But with the 1142 pre-loaded with a lightweight image, I was not able to break into rommon at all, and I could not get a prompt after it finished loading its image. It kept erroring that there was no IP and it could not find a controller, so I setup a DHCP pool on my switch and once it got an IP, it created a hostname for itself then went into a > prompt. Once that was done, a debug command was needed to get into config mode, THEN I was able to TFTP the new image on, and force a reload. .... Wasn't the easiest thing to do, but I know how to do it now. Only 19 more AP's to convert... :-)carlozainaOct 16, 2009, 3:11am PSTWhat i can say: have fun with the upgrade :-) (In this circumstance i would opt for a wireless controller).<br /><br />Anyway, thank you for sharing these inforosarraOct 16, 2009, 4:27am PSTI've successfully downgraded my 1420 to autonomous AP using the monitor mode (Press and hold MODE while you reconnect power to the access 
point). In this state you can easily configure the TFTP server and the Lan interface to download the Autonomous image.<br />Robert.N.BarrettOct 16, 2009, 8:44am PSTProbably too late now, but perhaps someone could try these steps to get into monitor mode (which work on other lightweight Cisco AP's when converting to autonomous):<br /><br />This is what I've done on 1242's. Does it not work on an 1140?<br /><br />Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.<br /><br />Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.<br /><br />Step 3 Set the timeout value on the TFTP server to 30 seconds.<br /><br />Step 4 On the PC where the TFTP server is located, perform these steps:<br /><br />a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.<br /><br />b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View; then uncheck the Hide extensions for known file types check box.<br /><br />Step 5 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.<br /><br />Step 6 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.<br /><br />Step 7 Disconnect power from the access point.<br /><br />Step 8 Press and hold MODE while you reconnect power to the access point.<br /><br />Step 9 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.<br /><br />Step 10 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.<br /><br />Step 11 After the access point reboots, reconfigure it using the GUI or the CLI.<br /> brian.kachel@quintiles.comOct 17, 2009, 5:43am PSTThe process works perfectly without issue.<br />Use a tftp server from Solarwinds (free) and you'll see your file transferring over - process took about 5 minutes total including the reload.<br /><br />Since running on the autonomous 1142.. I'm noticing some buggy behavior. Random drops of the wlan while using wpa2 and PSK.<br />And some clients just can't join at all (noticed this on a Cisco 305 old PC card, as well as a recent IBM with Intel 5500 ABGN card.)<br />I am comparing this to a 1242 that is also autonomous on a recent code.<br /><br />I think there are some known issues in this first release for teh 1142 - hopefully a new rev coming out soon!<br />Robert.N.BarrettOct 17, 2009, 9:53am PSTDid you enable ClientLink?<br /><br />To enable ClientLink, enter this CLI command in interface configuration mode on 802.11n radio interfaces:<br /><br />beamform ofdm <br /> brian.kachel@quintiles.comOct 19, 2009, 3:38am PSTI've only recently enabled it but have been working with the 1252 more so than the 1142 - I'll know in a day or three if the 1142 behaves better with the Intel client with clientlink enabled.Robert.N.BarrettOct 19, 2009, 6:19am PSTI've been playing with a 1252 on the same code level with an Intel 5300, some Atheros card (in an iMac), an Intel 3945, and a Cisco CB21. ClientLink is enabled. Not nary a drop so far, a, g, or n. I am single channel 802.11n on the 2.4 and dual channel (bonded channel, 40mhz channel width, whatever) 802.11n on the 5Ghz radio. There is little to no interference where I'm testing, so it's kind of ideal for performance testing, but not ideal for real-world testing.<br /><br />I hope to be testing a converted 1140 this week or next (the 1252 was CAPWAP, is now autonomous).Robert.N.BarrettOct 19, 2009, 7:19pm PSTI successfully converted an 1140 to an Autonomous AP. So far, so good. inscciscoNov 13, 2009, 9:04am PSTHi Robert,<br /><br />can you please share the experience so far with your 1142N that you downgraded to Autonomous?<br /><br />I have 15 of these guys and a controller was not purchased and upper management said there is no more budged, thus I am stuck with these APs and no controller.<br /><br />I'd like to convert all these 1142N units to Autonomous and then deploy them into a 3560G PoE switch for a branch that needs wireless network.<br /><br />Can you advise? My main concern is roaming, meaning that the users will be walking around the building, so everytime they hit another spot, I'd like the APs to provide them with seamless roaming so they won't experience any manual reconnect<br /><br /><br />thanks blarkins1Nov 13, 2009, 9:14am PSTI know the ? was directed at Robert, but... <br />I have converted (6) of our 1142's to Autonomous now and used them to replace some older AP's. Our laptops have the necessary profiles installed to join the wireless and are configured to log on automatically. We use a WDS architecture for authentication, so roaming between many access points, is virtually seemless, and very rarely requires anything from the user. These AP's in autonomous mode, appear to behave just like all the other Cisco AP's I've worked with... inscciscoNov 13, 2009, 10:08am PSTBrett,<br /><br />I actually meant to ask just about anyone :) so thank you very much for the quick response.<br /><br />Your input is great news. So far I have converted one of my 1142N APs to autonomous, so now based on your input and I will go ahead and convert all of them and test.<br /><br />Is there anything else I need to know while I set this up?<br /><br />I've had problems in the past with the 1130 where WEP was enabled and many laptops, especially the MACs, were having lots of problems connecting to the wireless networks.<br /><br />thankscarlozainaNov 13, 2009, 12:25pm PSTI confirm.<br />I am working with 2 1141 downgraded to Autonomous: they works perfectly. Users connects and roams seamlessly.<br />I've set up a network with WPA2-PSK to test and no trouble. The clients connecting in the past to 1130s now connect to 1140s, without noticing the change, as long as the WPA settings are unchanged.<br />Next step would be using dot1x, but this require carefull planning :) blarkins1Nov 13, 2009, 12:35pm PSTmore info..<br />We have both Cisco clients and Intel Clients using the wireless. Both types are configured with the same profiles as before... nothing has changed except the AP's. I replaced 6 of them 1 week ago, and nobody has reported any problems... in fact, nobody noticed they were replaced. All our clients are configured to log on automatically, so the users do not need to do anything except log onto thier PC when they start Windows. P.S. I do not recommend using the Windows Wireless Client. Use the software that came with your client adapters... carlozainaNov 13, 2009, 12:42pm PSTI agree with blarkins: as long as you can use the software coming with your NIC. Intel, Cisco, whatever.<br /><br />I've also Macintosh (they are the only enjoying the 802.11n so far) and Linux laptops connecting and no trouble: just type in the password and you are connected. The OSI layer 1 is simply a detail :)Robert.N.BarrettNov 13, 2009, 1:08pm PSTSorry to have been absent from this thread.<br /><br />I had no problems with the 1142 I converted, but it was just for testing. It is now back to being a LAP.<br /><br />For the best roaming and protection, I would recommend using WPA2/AES. If you have a RADIUS server, go the 802.1X route. If you do not have a RADIUS server, use WPA2/AES with a strong PSK. <br /><br />WPA2 supports Pre-authentication, which should minimize your roaming problems (provided all AP's support the same SSID with the same authentication/encryption). inscciscoNov 13, 2009, 3:36pm PSTGreat information guys.<br /><br />I will start converting the other 1142Ns tomorrow and then perform the test. What will you say are the main advantages to using these devices with the Controller? The way I will be deploying them will be by using a using where all the APs will be connecting to (wired).<br /><br /><br />carlozainaNov 14, 2009, 12:32am PSTController gives you centralized management, that's the main advantage. You haven't to configure manually each AP, update each AP's config if you make a change in the overall configuration. Also installing becomes simpler: once the AP can reach the controller, it downloads the configuration and is ready to operate.<br />I found the controller most useful if you wish to migrate to a new encryption key or create a new Wireless LAN spanning across many APs. inscciscoNov 16, 2009, 6:51am PSTThe controller then does give you lots of advantages. I read about it and it is just like you advised. Thank you for that info.<br /><br />As for the deployment of the 1142N APs converted to Autonomous, I've configured only one so far and none of my laptops are able to see the SSID. Any help? inscciscoNov 16, 2009, 7:30am PSTDisregard. I had not checked the "Broadcast SSID in Beacon" option.<br /><br />I do have a concern though. I have 2 latops connected to this single AP. One that support abg which I am able to see it under the Radio0-802.11N2.4GHz interface. The second laptop supports N, and I see it under Radio1-802.11N5GHz. However, both laptops are connected at 54Mbps speeds. I was under the impression that my N laptop was going to connect at higher speed. Can you advise?carlozainaNov 16, 2009, 1:14pm PSTWhile 802.11b/g works only in the 2.4 GHz spectrum and 802.11a works only in the 5 GHz, 802.11N works on both he frequencies, so you could be connected to dotradio 0 or dotradio 1 interface. <br /><br />As first try, i would disable the 5 Ghz radio: i've noticed, on a 1130 abg, that a couple of clients, with Cisco PCI wireless card, being in range, were used to connect with 802.11A , achieving a 18-24 Mbps link speed. Disabled the 802.11A, they connected with a link speed near 36-48 Mbit in the 2.4 GHz frequency. <br />I've used so far only AP with 802.11N 2.4 GHZ (also on ISR Routers) and the laptops were able to reach 200 Mbps, without any particular configuration (i use only CLI to configure).<br /><br />As second option, you could raise the minimum speed rate allowed, above the 54 Mbps, but keep in mind that doing so, your abg laptop will be unable to connect since it can't transmit at those bit rates. This can be useful only to debugging/evaluate the AP's performances.<br /><br />In the end, it's a design issue, however: do you want the best throughput or the best coverage? blarkins1Nov 16, 2009, 2:05pm PSTKeep your "basic" rates set to: 1.0 , 2.0 , 5.5 , 11.0 Mb/sec, but make sure that all your other rates are "enabled". (both 802.11g rates and the MCS rates)The MCS rates will be the ones that give you throughput beyond the regular 802.11g rates.Robert.N.BarrettNov 16, 2009, 3:09pm PSTYou must have WMM enabled, and you must be using either open auth/no encryption or WPA2/AES in order to achieve full 802.11n speeds. inscciscoNov 16, 2009, 7:25pm PSTAlthough it does not say anything about WMM anywhere on the GUI, I was able to follow some documentation online and finally got it. It was indeed the WMM. I enabled it along with the WPA2 and I was able to get the full speeds on the N laptops. Thank you for the feedback<br /><br /> roman.rodichev@iementor.comNov 16, 2009, 3:43pm PST40 locations, around 20-30 APs per location, 1 gig back from each site to the main site, minimizing cost. Trying to size the guest anchor controller. Redundancy is not required. As I understand correctly 4402/4404/5508 controller supports up to around 70 EOP tunnels. My limitation is bandwidth. Is it safe to say that if Internet bandwidth is <100Mbps, then 4402 will suffice? Only if Internet bandwidth was above >1Gbps when I'd need to go to 4404 (bandwidth is used twice, so 1Gbps guest traffic would result at approximately 2Gbps throughput) 30 brian.kachel@quintiles.comNov 16, 2009, 4:06pm PSTYou could always port-channel a 4402 and use LAG on your anchor controller for 2gb.<br />I use a 4402-12 for our anchor's as the BW is adequate, and AP license count is not a factor for anchors.<br /> roman.rodichev@iementor.comNov 16, 2009, 4:22pm PSTYes, that's what I was thinking, 4402 is 2gb, and since traffic is anchored the actual throughput is 1gb. What's your Internet connection speed? Thanks! roman.rodichev@iementor.comNov 16, 2009, 3:24pm PST40 locations, around 20-30 APs per location, 1 gig back from each site to the main site, minimizing cost. Client wants support of remote site survivability and reducing network loading. This implies H-REAP. We can't put controllers at each location due to cost. I'm thinking two 6506's with dual sups and three WISMs in each. My concern is HREAP. Here are some thoughts, let me know if you can think of some other limitations/issues.<br /><br />* Enterprise SSID central auth / local switching, Guest SSID central switching / central auth<br /><br />* If WAN goes down, Guest SSID will not be available.<br /><br />* If WAN goes down, limited local authentication for Enterprise SSID will be available.<br /><br />* With local switching L3 roaming is not supported, so if some location is using Layer 3 to the closet, this solution will not work.<br /><br />* Location services? Design guide states "H-REAP is not designed to provide location services, so Cisco will not support location accuracy claims in H-REAP deployments." Have anyone implemented H-REAP with location services?<br /><br />* RRM is fully supported in H-REAP (have anyone found it to be otherwise?)<br /><br />* L2 CCKM fast-roaming is supported<br /><br />* 20 H-REAP groups per controller with up to 25 in each group. Is this limitation still in place on latest 6.x code? If a site has more than 25 APs, I would create two or more H-REAP groups per site.<br /><br />* Regarding 20 H-REAP groups per controller limitation, I believe this will create a problem for N+1 controller redundancy. If, let's say, one controller is used for redundancy for all APs, that controller would need all H-REAP groups configured on it which would exceed the 20 H-REAP group limitation. Am I correct to assume that with H-REAP support you need 2*N redundancy?<br /><br />* Any other limitations?<br /><br /> swyatt@sycomtech.comNov 16, 2009, 12:54pm PSTI have a strange one. If I take a new access point to one of our remote and plug it in, it will not join the controllers at the home location (running latest 4.2) but it will eventually find one of our 2106 controllers running 5.1. If I take an access point out and plug it into the network and have it join the controller before it is shipped (but with no configuration changes) it will work just fine. These are new 1130 series access points (factory LWAPP). I had a local tech look at one and he said that it is getting the no join response message, but from the controller debugs I can see the that it is getting a response from the join request. The WAN is a 3mb connection with a an MTU of approximately 1475. The latency is sub 100 MS round trip. The access point is finding the controllers no problem. Clocks are correct on the controller and the 1130's have the MIC so it shouldn't be a problem with that. Main location controllers are 4404's with LAG on the interfaces. One controller has 37 access points connected while the other has 60.<br /><br />Just to restate. I can take one of the access points that isn't functioning correctly at a remote and if I plug it in to the network at HQ and let it flash up it works just fine at the remote. 30 leolaohooNov 16, 2009, 2:09pm PSTDid you configure HREAP? <br />Can the LAP ping the management IP address of the WLC (running 4.X)? If so, console into the AP and in enable mode type the command "lwap ap controller ip address <WLC management IP address>".<br /><br />Hope this helps. swyatt@sycomtech.comNov 16, 2009, 3:03pm PSTNot yet, as I can't manage the access point yet. I can ping the management IP address. <br /><br />Like I was saying, I can take one of these problem access points, bring it back to hq and plug it in, after it upgrades to current code send it back out and it comes up no problem.drewscarterNov 16, 2009, 2:18pm PSTHello,<br /><br />Once or twice each week our organization's wireless stops working. When this occurs, individual do get an IP, but cannot ping the router. I can resolve the issue by doing a shut / no shut on dot11radio 0. <br /><br />Is this a configuration error (I don't think it is), or do I need to have the router RMAed?<br /><br />I've added our configuration to this post. IPs and passwords have been scrubbed.<br /><br />Thanks,<br /><br />Drew Carter<br /><br /><b>Attachment Keywords : </b> <br />1) router_config.txt<br /> router_config.txt123647text/plaintext720811/16/2014no cef2lion2Nov 16, 2009, 12:32pm PSTTHe latest code has a new feature described below. Does that help with the issue of moving all APs off a controller prior to upgrading the controller. If so it would be very welcome. <br /><br />Also, the lastest MD code is 4.2.207.0. I have been running 5.2.178.0 due to our 1142 APs. It seems like it is taking a long to get any 5.X or 6.X MD code.<br /><br />AP Image Predownload <br /><br />This feature allows you to download the upgrade image to the controller, then download the image to the access points while the network is still up. <br /> 30 leolaohooNov 16, 2009, 2:07pm PSTSounds good. That means the AP's image is "pre-loaded" and the WLC and AP can reboot simultaneously.anthony.martinezNov 16, 2009, 10:09am PSTHi<br /><br />Any one experienced a white light on the status led, its the "ring light" infront of the AP. ive checked on <A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/wireless/access_point/1130/installation/guide/113h_c4.html')">http://www.cisco.com/en/US/docs/wireless/access_point/1130/installation/guide/113h_c4.html</A> where all colours are listed and none point done to white.<br /><br />ANy ideas?<br /><br />Thanks 30 leolaohooNov 16, 2009, 2:06pm PSTDuring the bootup process the "mood ring" will flash all the available colour (white included) at a rate of approximately 1 per second. <br /><br />Does this help? victorfabianNov 13, 2009, 7:02am PSTI am planning to upgrade to this code and i wanted to know if anyone have experience any issues .<br /><br />Thank you<br /><br />Vic 30 fella5Nov 13, 2009, 7:22am PSTThat is pretty new as it only came out this week. Again, we had to upgrade to this code on a 5508 due to the 6.0.0.182 was not uploading a 3rd party certificate correctly. However, this was not an issue with the 440X or WiSM's.<br /><br />I alway say to wait and see, unless you have issues with the code you are running. No reason to upgrade unless something is broken and even then, the new code might not even fix the issue or might even introduce new ones.<br /><br />Just my thought. ddmoe@healtheast.orgNov 13, 2009, 7:41am PSTI installed 6.0.188 on a pair of WiSM controllers and have 100+ APs running on it now. I upgraded from 4.2.207 and the upgrade went without any problem. The primary reason I moved quickly on this code is because it is supposed to address the problem with old Vocera badges connecting to 1252 access points. I will be upgrading 500+ APs on several other WiSMs in the next couple of weeks. dvr0Nov 13, 2009, 11:10am PSTThe B1000 badges are much better on 6.0.188.0 with the new CLI command "config 802.11b faster-carrier-tracking-loop enable". Badge to AP association seems to be faster and voice recognition appears to be more reliable on 1142/1252. Currently running 6.0.188.0 at 3 sites and will complete our migration at our two main Vocera sites next Thursday night.gstefanickNov 14, 2009, 6:06am PSTIm bringing 4 WiSMs and 300 aps online next week and i appreciate the feedback. <br /><br />I will report back if i see anything .. lavramovNov 14, 2009, 1:01pm PSTThis version was tested and has bug fixes from the previous 6.0.<br /><br />This is the first maintenance release and I suggest anyone using 6.0 to upgrade to the MR.<br /><br />To answer your initial quetion, the issues are listed under open caveats in the release notes:<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn6_0_188.html')">http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn6_0_188.html</A><br />gstefanickNov 15, 2009, 8:54am PSTwhat is going on with these caveats. Im concerned about the voice. Also the code is ED not MR?<br /><br />Table 3 Major Open Caveats <br /><br />ID Number<br />Caveat Title<br />CSCtc14910<br /><br />AP 1140 not joinning WLC and logging tracebacks.<br /><br />CSCtc22700<br /><br />AP 1240 beacons getting disabled while probes enabled on WLC 6.0.182<br /><br />CSCtc70615<br /><br />AP1142 reset from watchdog timer expired<br /><br />CSCtc70838<br /><br />AP radio UP transmitting only beacons<br /><br />CSCtc85444<br /><br />WLC locks up on SNMP task when pushing AP Group template from WCS<br /><br />CSCtc91469<br /><br />Beacon stopped after much Voice traffic wre placed under a LAP. leolaohooNov 16, 2009, 1:33pm PSTWith this new version did they fix the OTAP vulnerabilities yet? RVirdiNov 16, 2009, 2:13am PSTHello.<br /><br />I have recently setup a WLC at a loctaion.<br />Everything is fine excpet the guest access.<br />I have selected Web-Auth for the guest wireless network.<br />Users can connect to the guest network with no isses, but when they open IE the web login page doesn't appear. In fact the tab shows that the session is connecting to the web login page, but it doesn't get there.<br /><br />We have the same setup for many other WLCs, and they all work. The setup on each controller appears to be the same.<br />What have I missed?<br /><br /> 30 scottwilliamsonNov 16, 2009, 8:21am PSTHi RV,<br /><br />How do you know the session is connecting to the web login page? Is the browser warning you it is navigating to a secure site?<br /><br />I assume that the clients on the new controller are getting authenticated by the Foreign Controller (show client summary) and are receiving IP addresses from the Anchor? If not check the WLAN on the new controller has an anchor specified for the guest WLAN.<br /><br />Have you checked that the mobility control and data paths are up between the new controller and the anchor?<br /><br />That's all I can think of just now, I hope it helps.<br /><br />Scott<br /><br /> swyatt@sycomtech.comNov 16, 2009, 1:00pm PSTCheck to make sure that you have DNS resolution available on that VLAN. If the client cannot resolve an IP address the web browser with not redirect. If you gave the virtual inteface a DNS name that name will need to resolve to the IP address of the virtual interface as well.mohammed.amerNov 16, 2009, 9:35am PSTI have 2 WiSM in two 6509 with multiple WLAN SSID,aironet 1130 LAP , i use WLAN Override feature , but after a while the APs lose its WLAN Override configuration and i have to login to the WiSM again and check its SSID box again , the Software Version is 4.2.176.0 , can any one help me in this issue?<br /><br /><b>Attachment Keywords : </b> <br />1) ap.JPG<br /> ap.JPG123644image/jpegimage12106211/16/2014no30 ehlers.kevinNov 16, 2009, 9:46am PSTAre the wlan configurations identical on the WiSMs? Do you notice this after an AP moves from one controller to another? I don't have much experience with wlan override, but I know AP groups will have problems if there is a configuration miss-match between the controllers and it moves from one to another.mohammed.amerNov 16, 2009, 10:09am PSTthe WLAN SSID names are the same but there is mis-match in the profile name does that make a problem ? swyatt@sycomtech.comNov 16, 2009, 12:55pm PSTThe mismatch on the profile name is probably the problem. pgonzalez@coasin.clNov 14, 2009, 9:43am PSTHi Guys<br /><br />I need someone can help me please, my problem is this:<br /><br />We have a wireless mesh network with 2 WLC and 24 LAP1510AG (4 RAPs), which are registered to the WLC 1 when tested HA, i turn off the WLC 1 to operate the WLC 2, there were only 12 of the 24 APs are registred with WLC 2, when we made the turn of the WLC 1 have been recorded the same 12.<br /><br />the debug LWAPP events enable command only shows activity of registered APs.<br /><br />We have set to factory defaults all APs register (12) but nothing.<br /><br />Any help be welcome<br /><br />Thank you very much<br /><br />HG 30 ehlers.kevinNov 16, 2009, 9:55am PSTDid you add the mesh mac addresses to the mac filtering database? That's usually the problem when mesh aps don't join our controllers. pgonzalez@coasin.clNov 16, 2009, 10:15am PSTif I added all the APs to the MAC-Filtering pgonzalez@coasin.clNov 16, 2009, 10:29am PSTThe APs have been properly recorded with the WLC1, the problem arises when shut down WLC1 then the APs not registered with WLC2 only do 12. ehlers.kevinNov 16, 2009, 10:33am PSTHave you done<br /><br />debug pm pki enable<br /><br />on the controllers? You should see those messages even if you don't see the capwap messages.ricardorojas123Nov 16, 2009, 5:26am PSTWhit MAC Address filetering configured in a WLAN in the WLC ? The user information is encrypted.<br /><br />Whit Web Authentincation filetering configured in a WLAN in the WLC ? The user information is encrypted. hakimdanishNov 3, 2009, 1:27pm PSTHi,<br /><br />In ordering guide, 1522 are designed to withstand power surges on the AC power cord up to 4 kV as per EN61000-4-5 Level 4 & lightning arrestors are not required.<br /><br />What does it means? I've install the AP outdoor & using ant58g10ssa antenna. I'm afraid the AP will struck by lightning 30petenugentNov 4, 2009, 4:01pm PSTFrom an electrical engineering perspective assume we have 3 points of entry to the 1522, power, data and antenna. Each of these can transmit a lightning surge to downstream devices ie a switch or an upstream device the ap.<br /><br />Generally the antenna will be the most vulnerable point of the installation to lightning strikes. If there is no surge suppression between the antenna and the ap then the ap can be damaged, also it can potentially transmit that surge down the data cabling, assuming the power cabling is protected as you say it should protect in both directions on the power side, but not always.<br /><br />This probably means it can manage surges into the ap from the power side from a strike to transmission equipment and the transient overvoltages that may be caused.<br /><br />Worst cast scenario your antenna gets a direct hit, the ap fails, the voltage is transmitted down the data cabling and takes out the 6500 its directly connected to! Nobodies going to say you done a great job and were just unlucky and you wont be winning any popularity contests<br /><br />Its a question of risk, with an inline arrestor on the antenna cable you are protecting your ap etc. If its on a building and not the highest point its unlikely to get a direct hit. If its on a lighting column and the antenna is the highest point its possible. How much lightning do you get?<br /><br />Not sure thats any help! dennischolmesNov 6, 2009, 4:13am PSTAs an ATP partner the first thing Ill tell you is that an inline antenna arrestor is a bad idea on a couple of points. 1st they don't really protect the AP and secondly, they reduce the signal strength by causing at least 1db of attenuation and in most cases 3db (50% of the signal strength). Lightning arrestors for the data side and power sides will protect downstream devices but the AP itself is really only protected by luck. A direct hit and a 1500 series AP is toast. I have deployed nearly a 1000 of these and this has always been the case. There are a few enclsures that help with this. They generally have a metal case and the antenna are mounted low on the enclosures (not a good solution for 1520 series) and the enclosure has a lightning rod on the top. THe attempt is to catch the lightning and re route it before it hits the actual AP antennae. Not very successful I would think and not worth the extra 700.00 per AP. slilley@tnsNov 16, 2009, 5:00am PSTI always use these on the 1522 RAPs Ethernet connection to protect my switches from a lightning strike. It will most certainly take out the 1522, but it should protect the valuable equipment inside:<br /><br />Transtector Ethernet Surge Protection<br />P/N: ALPU-POE-48<br />$85 list<br /><br />Regards,<br />Stevem.bailey7@ntlworld.comNov 12, 2009, 9:48am PSTHi there,<br /><br />I have a question with respect to DHCP Proxy to an external DHCP server. <br /><br />Is it possible to force the DHCP proxy to use the Management Interface as the source for all DHCP requests? <br /><br />My Wireless setup has all the dynamic wireless VLAN's going straight into a "dirty firewall" which then allows internet access etc. <br /><br />I therefore don't want to place my DHCP server alongside this firewall. <br /><br />The management interface of the WLC is connected to our internal management network where there is a DHCP server already (behind a L3 router). <br /><br />How can I setup the WLAN's and Interfaces so that when a client requests a DHCP address the WLC forwards it to the DHCP server on the management network via the management interface? <br /><br />Thanks 30 fella5Nov 13, 2009, 7:13am PSTDHCP Proxy uses the VIP and not the management IP of the WLC. Is one of the WLC ports connected to your internal network and the other port connected to the FW? Again with DHCP Proxy enabled, traffic will flow to your internal DHCP server as long as you have all the dhcp server address configured on the interfaces and have ip helper-address setup on the L3 interfaces.<br /><br />Here is a doc regarding DHCP Proxy:<br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080af5d13.shtml#DHCP-Proxy')">http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080af5d13.shtml#DHCP-Proxy</A><br />m.bailey7@ntlworld.comNov 16, 2009, 2:13am PSTWhat I have is a WLC 5508 with:<br /><br />Port 1 facing my "corporate" network<br />Port 2 facing my "internet" firewall<br /><br />The Access Points are on the "corporate" network and use CAPWAP to an AP Manager interface defined on Port 1.<br /><br />Guest WLAN's and non corporate WLAN's exit on a VLAN on port 2 straight into the internet firewall.<br /><br />I don't therefore want to forward my DHCP packet out the VIP of the VLAN as it hits the Internet firewall and goes no-where. I want to send DHCP packets out of the management interface and back into the Corporate network where there are existing DHCP servers.<br /><br />Cheers severi@vem.comNov 13, 2009, 7:03am PSTHi.<br />I have a problem with unified solution.<br /><br />This is scenario:<br /><br />Client scanners mod. DENSO))((AP1230 automous))((telnet to AS400<br /><br />Mod. Denso BHT210BW, after 5 min of inactivity the client activates the standby mode, disable the radio.<br />The warehouseman press the button on the terminal activates the radio and read the activity sull'As400.<br /><br />I upgrate the system to LWAPP mode. <br /><br />This is the new scenario:<br /><br />Client scanners mod. DENSO))((LAP1230-WLC2125-6.0.182.0))((telnet to AS400<br /><br />Symptoms:<br />The warehouseman press the button on the terminal activates the radio and read the activity sull'As400 but appears the message "not connecting with AS400", after 2, 5 minutes, the tool will unlock and everything is working properly.<br /><br />See attachments for more detail.<br /><br />I disable Timeout under WLAN but without success.<br /><br />Any Ideas?<br /><br />Regards.<br /><br />Mirko Severi.<br /><br /><b>Attachment Keywords : </b> <br />1) debug client.rtf<br /> debug client.rtf123538application/mswordword2173111/13/2014no30 fella5Nov 13, 2009, 7:17am PSTMirko,<br /><br />I've always had issues with regards to scanners and them going into sleep mode or powering down the radio. The workaround was to set the devices to maximum performance or always on. Have you tried to set this in at least one scanner to see if that would solve your problem? severi@vem.comNov 16, 2009, 1:32am PSTHi, Fella.<br /><br />I think that when the barcode wakes from standby mode only sends a frame association and is not run as a broadcast ARP etc.<br /><br />*Nov 13 10:47:01.233: 00:a0:f8:e9:cc:af 0.0.0.0 Added NPU entry of type 9, dtlFlags 0x0<br /><br />"IP learning state. One packet from this client is sent to CPU in order to learn the IP address used"<br /><br />The client should send another package to end the PEM process on WLC, i think... <br />and this happens only when the warehouseman press Enter on the terminal.<br /><br />*Nov 13 10:47:01.233: 00:a0:f8:e9:cc:af Sent an XID frame<br />*Nov 13 10:47:56.935: 00:a0:f8:e9:cc:af 172.25.242.87 DHCP_REQD (7) Change state to RUN (20) last state RUN (20)<br /><br />E 'possible to disable the process on PEM WLC?? ;)<br /><br />Regards.<br /><br />Mirko S. ppellettiereApr 22, 2009, 5:12am PSTWe just setup auto RF on all of our 12 controllers. My question is, is the controller group leader the only controller<br />that will display the "Last Group Updates" times? or should I see it on all the controllers? 30jeff.kishApr 22, 2009, 5:23am PSTYou should see it on all controllers. Each controller has its own timer for running the Auto RF checks.<br /><br />As an aside, I highly recommend that you disable the automatic updates. Running them manually once a week or so is usually best, unless you have a constantly changing or challenging environment. Client can occasionally be disconnected by the automatic updates, which occur every 10 minutes by default. ppellettiereApr 22, 2009, 6:08am PSTI wonder why I only see it on the lead controller? Any ideas? frmejiugrNov 16, 2009, 1:29am PSTHello.<br />We have the same problem: 6 controllers running 4.2.207 and only one (controller group leader) shows actualizations. Any body knows what is the reason?<br /><br />Thanks in advance.ita_hsiehNov 14, 2009, 10:24pm PSThi folks:<br /><br /> Has anyone of you tried to convert autonomous to lwapp mode? I used upgrade tool v3.4 and it said 1140 is not supported. Or is there any other way to do the conversion? Thanks.<br /><br /><br />regards<br />Alex 30Robert.N.BarrettNov 15, 2009, 10:09am PSTWas it a LAP to begin with? If so, follow the "LWAPP revert to autonomous" steps using the recovery image as your file. Yes - I know you are going to LAP, not to autonomous. These steps worked great for me when going from autonomous back to LAP (without using the conversion tool):<br /><br />Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.<br /><br />Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.<br /><br />Step 3 Set the timeout value on the TFTP server to 30 seconds.<br /><br />Step 4 On the PC where the TFTP server is located, perform these steps:<br /><br />a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.<br /><br />b. Ensure all Windows files are visible. From Windows Explorer, click Tools > Folder Options > View; then uncheck the Hide extensions for known file types check box.<br /><br />Step 5 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.<br /><br />Step 6 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.<br /><br />Step 7 Disconnect power from the access point.<br /><br />Step 8 Press and hold MODE while you reconnect power to the access point.<br /><br />Step 9 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.<br /><br />Step 10 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.<br /><br />Step 11 After the access point reboots, reconfigure it using the GUI or the CLI. leolaohooNov 15, 2009, 6:14pm PSTHi Alex, <br /><br />If you prefer to use CLI then try the following steps:<br /><br />Autonomous to LWAPP (Shortcut)<br />Requirements: <br />• Image file (The recovery file has the prefix “rcv” in the image name, such as c1200-rcvk9w7-tar.122-15.JA.tar); <br />• AP is connected to the Wireless LAN Controller; and<br />• AP can ping the TFTP server where the image is located.<br /> <br />Procedure<br />1. Copy the recovery file to the AP using the following command:<br />archive tar /x t<A HREF="javascript:newWin('ftp://')">ftp://</A><tftp-server-ip-address>/ <image-filename> flash:<br /><br />2. Let the AP boot on this image:<br />boot system flash:/<image-folder>/<image-name>.bin<br /><br />3. Reboot the AP.<br /><br />OPTIONAL<br />• DO NOT ALLOW THE AP TO JOIN THE WIRELESS LAN CONTROLLER IN ORDER TO USE THE OPTIONAL COMMANDS BELOW.<br />• IF POSSIBLE, type the following commands:<br /> clear lwapp private-config (This will bring the AP to factory default.);<br /> clear lwapp ap ip address<br /> clear lwapp ap hostname<br /> clear lwapp ap controller ip address<br /><br /><br />4. Let the AP connect to the Wireless LAN controller. <br /><br />OPTIONAL<br />If an AP refuses to join the Wireless LAN Controller, type the following command from the AP:<br />lwapp ap controller ip address <WLC-management-ip-address><br />craigjostNov 13, 2009, 1:00pm PSTI have 90 1130A/G pure autonomous AP site. I want to deploy a 5508 controller, convert all APs to lightweight, and do it all remotely. I have full access to all the APs and can build the controller in any way to support this. Anyone have any ideas or white papers? I have a tech at the site that can plug things in for me. I just want the APs to maintain their IP address and host name when converted. 30 scottpicklesNov 13, 2009, 1:52pm PSTCraig - <br /><br />See my reply to the same post entered by your Engineering Manager here:<br /><br /><A HREF="javascript:newWin('http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&topicID=.ee6e8b8&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd4eee3')">http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=General&topicID=.ee6e8b8&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd4eee3</A> leolaohooNov 15, 2009, 6:11pm PSTMaintain the present IP address and hostname? If you are using the Upgrade Tool, this should work. Hector-GonzalezNov 14, 2009, 4:35pm PSTMy WCS server crash and now I need to get PAK license back from Cisco. Does Cisco have a site to get your PAK licenses using your CCO account? ahmedbishryNov 13, 2009, 11:48am PSTHi,<br />hope you are all doing well,<br />I have an LAP 1310 has joined with WLC 4402 and I need to downgrade it to Autonomous to use it as a bridge, I used a command (config ap tftp-downgrade tftp-server-ip-address filename access-point-name) from the console in my WLC where the LAP1310 joined and the LAP1310 load the Image from tftp successfully but after it reboot I notice it still searching for WLC to get new image, and join it again, how can I do a Downgrade from LAP to Autonomous in a right way? 30 lavramovNov 13, 2009, 11:55am PSTConvert to Autonomous and point it to the earlier version of code that you want to have as Autonomous AP.<br /><br />Here is the procedure:<br /><br /><br />You can convert an access point from lightweight mode back to autonomous mode by loading a Cisco IOS Release that supports autonomous mode (Cisco IOS release 12.3(7)JA or earlier). If the access point is associated to a controller, you can use the controller to load the Cisco IOS release. If the access point is not associated to a controller, you can load the Cisco IOS release using TFTP. <br /><br /><br /><br />Revert from LWAPP mode to autonomous mode using a wireless LAN controller: <br /><br /><br /><br />Step 1 Log into the CLI on the controller to which the access point is associated. <br /><br />Step 2 Enter this command: <br /><br />config ap tftp-downgrade tftp-server-ip-address filename access-point-name <br /><br /><br />Aironet 1300 Series Bridges do not have a MODE button to reset the AP to factory defaults. So, if neither the GUI or CLI is available with sufficient privileges, complete these steps to delete the current configuration and return the entire bridge settings to the factory defaults using the CLI. <br /><br />Open the CLI with a Telnet session or a connection to the bridge console port. <br /><br />Reboot the bridge by removing and reapplying power. <br /><br />Allow the bridge to boot until the command prompt appears and the bridge begins to inflate the image. <br /><br />Press ESC when you see lines that are similar to these on the CLI: <br /><br />Loading "flash:/c1310-k9kw-7mx.v122_15_ja.200040314-k9w7-mx.v122_15_ja.20040314" <br />...#############################################################################Note: In order to access the boot loader, you must press ESC twice. But this action depends on the terminal-emulation software that you use. <br /><br />Messages that are similar to these appear: <br /><br />Error loading "flash:/c1310-k9kw-7mx.v122_15_ja.200040314-k9w7-mx.v122_15_ <br />ja.20040314" <br /><br />Interrupt within 5 seconds to abort boot process. <br /><br />Boot process terminated. <br /><br />The system is unable to boot automatically. The BOOT environment variable needs to <br />be set to a bootable image. <br /><br />C1310 Boot Loader (C1310-BOOT-M), Version 12.2 [BLD-v122_15-ja_throttle.20040314 100] <br /><br />bridge:At the bridge: prompt, issue the dir flash: command in order to view a directory of the Flash file system. <br /><br />The directory is similar to this directory: <br /><br />bridge: dir flash: <br /><br />Directory of flash:/ <br /><br />2 -rwx 0 <date> env_vars <br />5 drwx 384 <date> C1310-k9w7-mx.v133_15_JA.20040314 <br />3 -rwx 1128 <date> config.txt <br />4 -rwx 5 <date> private-config <br /><br />3693568 bytes available (4047872 bytes used) <br />bridge:Delete or rename the files config.txt and env_vars, and reboot the bridge. <br /><br />Note: Do not forget the / character before the filenames. <br /><br />bridge: delete flash:config.txt <br />Are you sure you want to delete flash:/config.txt (y/n)?y <br />File "flash:/config.txt" deleted <br /><br />bridge: delete flash:/env_vars <br />Are you sure you want to delete "flash:/env_vars" (y/n)?y <br />File "flash:/env_vars" deletedIssue the boot command in order to reboot the bridge at the bridge: prompt, or simply power cycle the bridge. <br /><br />After the bridge reboots, reconfigure the bridge with the web browser interface, the Telnet interface, or Cisco IOS Software commands. <br /><br />Note: The bridge is configured with the factory default values that include: <br /><br />The IP address, which is set to receive an IP address with DHCP. If you do not have a DHCP server, you can access the bridge using the default IP address of 10.0.0.1 using HTTP/HTTPS or Telnet. Once you gain access to the bridge via Telnet or GUI, you can modify the IP address of the bridge. <br /><br />Note: This default IP address of 10.0.0.1 becomes available only for a short period. So, make sure that you assign your own IP address to the bridge within that period of time. <br /><br />The default username and password, "Cisco". <br /><br />From this doc; <br /><br /><A HREF="javascript:newWin('http://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#ca_1310_ser')">http://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#ca_1310_ser</A> <br />Finally, to delete the file you need to cd in the directory and delete it there.<br />ahmedbishryNov 13, 2009, 1:21pm PSTTanks for you great effort,<br />I did what you told me, but after reboot the AP still have the same action for seeking the WLC tring to join the WLC, I double check to be sure there is no (confgi.txt) or (env_vars) in the flash directory and after the AP1310 get an IP address from my DHCP it is still not accessible by http to make any configuration, what to do?ahmedbishryNov 13, 2009, 1:32pm PSTI need to tell you, these access points with LAP originally, so the default factory settings for this access point is LAP1310 and not AP1310.<br /> Is that will change what we are trying to do?<br />ahmedbishryNov 13, 2009, 2:02pm PSTI need to tell you, these access points with LAP originally, so the default factory settings for this access point is LAP1310 and not AP1310.<br /> Is that will change what we are trying to do?<br /> lavramovNov 13, 2009, 2:29pm PSTno it should notahmedbishryNov 13, 2009, 2:35pm PSTOk I will try the same steps with new LAP1310. Then I will send you a feedback for the result.ahmedbishryNov 14, 2009, 6:28am PSTHi,<br />I found it, it was an Image Issue because when I use the Release 12.4.21a-JA1(ED) it still seeking the WLC to join it even if I install the new Image and delete the tow files (config.txt and env_vars).<br />But when I go to older IOS and use this Release 12.3.4-JA2 it works perfect as a bridge and did not seek for WLC any more, thanks very much for your great support and quick response. rshah@visionNov 13, 2009, 10:34am PSTI am trying to design Video Surveillance Solutions for foot ball field. Here, we can not pull cable from cameras to MDF the building in Campus Environment. I am trying to incorporate Cisco bridges (Point to Multipoint Environment) in order carry data from cameras to MDF. I have attached diagram for your reference. For this solution I would like to have your advice as I am planning to deploy these bridges for the first time. I have some questions for you.<br /><br />1.) I am planning to use Cisco 1410 bridges instead of 1310 bridges. Do you think Cisco 1310 series would be sufficient for my application? Please advice me on antenna selections on root and non-root bridges in case of 140 and also 1310. I would like to use external antenna specially omni for root bridge and sectoral antennas for non-root. Please advice me for the best selection.<br />2.) As Cisco bridging solution does not have LWAPP option. I was thinking of using WLSE for managing those bridges but I came to know that is on its EOL. Do we have any other option?<br />-Do we have to have separate appliance for WLSE? Can you advice me how should I order that? Please let me know how much bridges will be supported by WLSE (1 license)?<br />3.)I am thinking of using external antenna. I would like to use omnidirectional antenna for root bridge and sectoral antennas for non-root bridges. Please advice which antenna I should be using in case of 1410 and 1310 series. 30 scottpicklesNov 13, 2009, 12:46pm PSTThe main differences between the 1400 series and 1300 series bridges is the fact that the 1400 uses external antennas, and the 1300s do not. Also, we need to know what radio frequencies you have available as the 1300 is 2.4 GHz (802.11g only) and the 1400 is 5 GHz (UNII 3 band). How far apart are your bridges going to be? This will determine what power and antenna types. Finally, the 1300 series bridge does have an LWAPP image allowing you to manage it via a controller, you lose the ability for it to bridge and it becomes an AP. Unless you go to the 1500 series for LWAPP/CAPWAP outdoor meshing deployment, you're going have to manage your bridges independently via the CLI or HTTP. There is no point in digging up an old WLSE off of ebay to manage those - it would be a waste of time and money IMHO.<br /><br />Regards,<br />Scott rshah@visionNov 13, 2009, 1:04pm PSTScott,<br /><br /> Thank you so much for your advise. My application will be using 1310 or 1410 as a bridge(One root and 2 non-root). So I am not concern about LWAPP. But as far as I know we have 1310 series available with outdoor antenna. <br /><br />(<A HREF="javascript:newWin('http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps5861/product_data_sheet09186a008022198b.html')">http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps5861/product_data_sheet09186a008022198b.html</A>)<br /><br />The distance between bridges will be around 200-300 meters and will carry 10mbps worth of data. What will be the best solution 1410 or 1310? Can I manage those bridges from HTTP? Like doing periodic updates or firmware upgrade and other necessary task? Which antenna selection would be better in case of 1310 or 1410 for root and non-root bridges? Which bridges you suggest for campus environment? <br /><br />I may be asking so much but I am going to use this product for the very first time.<br /><br />Thank you once again.<br /> scottpicklesNov 13, 2009, 1:40pm PSTI realize you are saying that you only have 10 mbps of data, but you have to remember that you are using point-to-multipoint so you would need to consider the cumulative throughput of the two non-root bridges back to the root bridge. Also, the 1310 is 802.11g only - do you have a clean airspace outdoors to use 2.4 GHz? You need to do some testing with your choice of antennas and distances. This is not something you can just input some specs, order from a catalog and install. There needs to be some onsite verification using the equipment you have and to measure your throughput. If I were chartered with doing something like this, I would perfer to use the 5 GHz spectrum due to the fact that it is a cleaner airspace and would perform better in a point-to-multipoint scenario. But I still would use some tools (laptop with Ekahau or Airmagnet, Spectrum Analyzer, etc.) to find out what frequencies are nearby. Since the 2.4 GHz and 5 GHz frequencies are unlicensed, not only do you want to use the one that will work best for your given environment, but also one that will be kind to others around you. As for the manageablility of the bridges, yes, you can access them via CLI and HTTP for the purposes of performing firmware updates. As far as antenna design goes, I'd use a patch of some sort for the root bridge, and a directional high gain for the non-root.<br /><br />Regards,<br />Scott rshah@visionNov 13, 2009, 1:50pm PSTScott,<br /><br />Thank you so much for giving me wider vision. I will really consider your points. I would like to go for 1400 series but only thing is bothering me is the cost which is almost 4times than 1310 if I am not mistaken. Is it just because of it is using 802.11a standard? I was thinking about using omni directional for root and sectoral for non-roots. What do you recommend?<br /><br />Thank you. scottpicklesNov 13, 2009, 2:05pm PSTI can understand your concern for the cost of the 1400 series, but the 1400 series is built for point-to-point links for up to 25 MILES!! Obviously less in cases of point-to-multipoint. The 1310 bridge can go a couple of miles as well, but the data rate is going to suffer at 2.4 GHz 'g' only. That's why I said to do some testing to verify you can get the data rates you need to support your application. The only time you actually want to use omni directional antennas with bridging are if you are creating a mesh or a repeater. For PtP to PtM, you would reduce your link budget, distance, and overall throughput by using omni directional antennas. The fact that we use the term 'point-to-point' tells you that you only want your signal to go from the root to the non-root and not elsewhere. Since we can't really contain wireless signals once they're in the air, it's up to engineers to design antennas for us that essentially cheat physics and shape the antenna pattern so that it is directional. Higher gain directional antennas will have a high 'front-to-back' ratio (F/B ratio) telling you that a certain percentage is going in front of the antenna, and a certain amount is going out the back. When the amount going out the front exceeds the amount going out the back, you begin to have a directional antenna. In addition, at larger distances, if you don't use directional antennas, it will be very difficult to align them and keep a stable connection due to the fade margin of the omni directional antennas. The bridges have a built in alignment mode with lights to help you achieve maximum throughput. When you align them, make very calculated, small changes. Don't move both sides, and don't move in both planes (horizontal, vertical). Keep your antennas pointed at one another using some binoculars or other pointing devices and get the best reading you can at the root after an initial setup. Then lock the root into place and go to the other side. Again, make calculated changes to vertical until you find the best, and then lock it down. Finish with sweeping horizontal until you get the best and lock it down. It may take you several iterations until you get it right. As for the non-root antennas, you don't want to mix antennas too much if you can avoid it, but in the case of point-to-multipoint, you've got it backwards. You want a larger angle on the root bridge, and high gain directional on the non-roots pointing back to the root. It is imperative that you know what the polarization is of each antenna (vertical vs. horizontal) and that you MATCH that polarization at both ends. Most antennas have this clearly labeled on the antenna itself, or it is specified in the user manual.<br /><br />Good luck! rshah@visionNov 13, 2009, 4:47pm PSTThank you so much for detailed explanation. With my application I am not much worried about distance because the maximum distance will be 300-400 meters between two bridges no more than that. I am much concern about throughput but in both the cases maximum throughput I can achieve is 54 mbps. Of course the distance will be reduced in case of 1310 but as I said distance is not an issue because in both case I can achieve the distance with maximum data rate. What do you suggest? jledwardsrNov 13, 2009, 1:24pm PSTI have 90 1130A/G autonomous AP site. I want to deploy a 5508 controller, convert all APs to lightweight, and do it all remotely. I have full access to all the APs and can build the controller in any way to support this. Anyone have any ideas or white papers? I have a tech at the site that can plug things in for me. I just want the APs to maintain their IP address and host name when converted. 30 scottpicklesNov 13, 2009, 1:49pm PSTYou can console into each AP and perform the archive softare download using the lightweight image from a TFTP server. The good thing about that is that you could script it too, if you know how to. You can also use WCS to upgrade APs, as well as the standalone conversion tool (which does about 6-10 APs at a time). Given that they are 1130 series, they should have MIC (Manufacture Installed Certificates) instead of SSC (Self Signed Certificates) in which case you don't have to rely on the conversion tool to create a hash that has to be imported into your controller for each of those APs to get adopted. Now, when you say remotely, do your APs have a VPN tunnel back to the controller to join and is the round trip time less than 150 ms? If not, the APs won't get the controller reply in time and won't join. New to the 5508 is the ability to use a public IP address on the controller for the join reply (using 'Enable NAT address'), so you can also try it without the VPN tunnel. jledwardsrNov 13, 2009, 2:21pm PSTThink I figured it out thanks for the reply.')