Hi Jeff,
I've managed to deploy LSCs. I was using the document you are referring to. My personal issue was in AP model: I've spend quite some time with c1120 until I recognized that hardware does not support LSCs. With c1130 everything was OK. Did you add CA certificate before starting AP provisioning? I suggest you to try to capture (wireshark) HTTP traffic at IIS/CA/scep side, and look onto the IIS logs, and Event viewer. Regards, Anton ________________________________ От: [email protected] [[email protected]] от имени Jeff Rensink [[email protected]] Отправлено: 18 мая 2012 г. 23:11 Кому: [email protected] Тема: [OSL | CCIE_Wireless] LSC provisioning to APs Has anyone had any luck with using the WLC to deploy LSCs to your APs? I'm following along with the instructions at http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a99e23.shtml. I installed cepsetup.exe on my CA, didn't require the challenge. Tried with both local account and a service account. On the WLC, I configure the LSC general settings with the URL, parameters, and I'm able to add in the CA successfully. Then I try to provision to the APs, and it doesn't ever work. Debugs make it look like the WLC isn't getting a response from the CA or something. Here is a snippet of the logs. I'm guessing I probably overlooked something on the CA, since there's not too much to configure on the the controller. Anyone else run into this? Jeff Rensink scep: AP MAC: 0:15:c7:29:20:90 Starting new enrollment request. scep: creating inner PKCS#7:43.085: scep: data payload size: 825 bytes: scep: successfully encrypted payload scep: envelope size: 1138 bytes087: scep: creating outer PKCS#7:43.088: scep: signature added successfully: scep: adding signed attributes.088: scep: adding string attribute transId scep: adding string attribute messageType scep: adding octet attribute senderNonce scep: PKCS#7 data written successfully scep: applying base64 encoding.201: scep: base64 encoded payload size: 4104 bytes scep: Sent 4377 bytes 13:47:43.265: scep: No response read.18 13:47:53.077: scep: waiting for 10 secs 13:47:53.077: scep: AP MAC: 0:22:56:7e:e2:10 Starting new enrollment request. scep: creating inner PKCS#7:56.126: scep: data payload size: 824 bytes: scep: successfully encrypted payload scep: envelope size: 1138 bytes128: scep: creating outer PKCS#7:56.128: scep: signature added successfully: scep: adding signed attributes.129: scep: adding string attribute transId scep: adding string attribute messageType scep: adding octet attribute senderNonce scep: PKCS#7 data written successfully scep: applying base64 encoding.242: scep: base64 encoded payload size: 4100 bytes scep: Sent 4377 bytes 13:47:56.303: scep: No response read.18 13:48:06.085: scep: waiting for 10 secs 13:48:06.085: scep: waiting for 10 secs 13:48:19.093: scep: waiting for 10 secs 13:48:32.101: scep: waiting for 10 secs 13:48:45.109: scep: waiting for 10 secs 13:48:58.117: scep: waiting for 10 secs 13:49:11.125: scep: waiting for 10 secs 13:49:24.133: _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
