RE: Cisco WLC Stable code in 8.5 train

2020-06-29 Thread Scharloo, Gertjan
Hi Jeff,

 

CSCvt22353 is related to CSCvn66715 : Cisco 3800 AP stops passing traffic under 
client with Intel NIC 8260/8265 load in MU-MIMO deployment

 

8.6.161.5 is the latest recommended version without the fix for CSCvq90572 : 
Receive throughput degrades for 2800/3800/4800/1560 - AP fails to send block 
ACKs

 

Regards,

 

ICT Services

Netwerkbeheer – draadloos

 

Gertjan Scharloo

ICT consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

Leeuwenburg | kamer A10.20

Weesperzijde 190 | 1097 DZ Amsterdam

Tel: +31(0)20 525 4885

Mobiel: +31(0) 61013-5880

  www.uva.nl

uva.nl/profile/g.scharloo

https://time.is/nl/CET 

 Je kunt mij ook bereiken via Skype for Business 

 

Van: The EDUCAUSE Wireless Issues Community Group Listserv 
 Namens Kushner, Jeff
Verzonden: Monday, June 29, 2020 3:35 PM
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: Re: [WIRELESS-LAN] Cisco WLC Stable code in 8.5 train

 

Hello Tariq,

 

According to TAC this is the bug we hit and that the release fixed. CSCvt22353 

 

 

Thanks

Jeff

 

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
> On Behalf Of Tariq Adnan
Sent: Sunday, June 28, 2020 10:11 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
 
Subject: Re: [WIRELESS-LAN] Cisco WLC Stable code in 8.5 train

 

*Message sent from a system outside of UConn.*

 

Hi Jeff,

 

Do you know the bug ID for the issue you were facing with 8.5.161.0? Just 
checking what were the conditions under which the issue triggered.

 

Thanks,

 

 

-

Cheers,

 

Kind regards,

Tariq Adnan  |  Senior Network Engineer

ICT, Campus Network Services

 

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
> On Behalf Of Kushner, Jeff
Sent: Friday, 26 June 2020 11:01 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
 
Subject: Re: [WIRELESS-LAN] Cisco WLC Stable code in 8.5 train

 

We had to upgrade to 8.5.161.4 due to issues we experienced with the 8.5.161.0. 
We had a problem where an AP would allow clients to associate but they would 
not pass traffic. The new code, as recommended by TAC appears to have fixed the 
issue, we have been running it for 36 days. But we won’t know for sure until we 
get our normal client levels back with the return of students to campus.

 

Jeff

 

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
> On Behalf Of Tariq Adnan
Sent: Friday, June 26, 2020 1:30 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
 
Subject: [WIRELESS-LAN] Cisco WLC Stable code in 8.5 train

 

*Message sent from a system outside of UConn.*

 

Hello everyone,

 

We are running code 8.5.135.0 on one of our WLC 8540 pair. We can’t go past 8.5 
because of presence of 3500 and 3600 model Aps which are not supported beyond 
code 8.5.

 

What code you are running in 8.5 train and how satisfied you are with it?

 

Is anyone running code 8.5.161.0 recommended by Cisco TAC? How stable is it? 
Have you encountered any major issues in your environment?

 

Has anyone tried 8.5.16.4 (escalation code)?

 

Thanks in advance for your responses 

 

-

Cheers,

Tariq

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community 

  

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community 

  

RE: Cisco WLC Stable code in 8.5 train

2020-06-26 Thread Scharloo, Gertjan
Hi all,

 

We have some serious issues with 8.5.161.x . We are now trying 8.5.161.5 )

 

Zoom / Team / Skype4Business customers are complaining . We see Drops on our 
Access-switch (port) <-> Access-Points 2802

 

packet drops could be explained by CSCvq90572 Receive throughput degrades for 
2800/3800/4800/1560 - AP fails to send block ACKs

 

I think this bug is not solved yet and is present in all version of 8.5.16x

 

8.5.161.5 

 

…..

CSCvq99108 Cisco 3700 AP series reloads unexpectedly due to reason 44 

 

8.5.161.4 

…..

CSCvp69474 Access point reloads unexpectedly generating capwapd core dumps 

CSCvq90572 Receive throughput degrades for 2800/3800/4800/1560 - AP fails to 
send block ACKs 

CSCvo33808 Cisco 2802,3802,4800,1562 AP reloads unexpectedly with radio 
firmware crash 

CSCvp06909 DOT11-2-RADIO_FAILED, Not Beaconing for too long, 
get_vap_mcast_q_len: invalid interface 

CSCvt53819 CPU increases to 90+% with hight volume traffic. 

CSCvo10708 Cisco 2800, 3800 APs exhibit choppiness with the Vocera client 
during the multicast voice call 

CSCvp54103 IOS APs reloads unexpectedly with 'Unexpected exception to CPU' in 
logs 

CSCvq76143 Cisco 2800 AP reloads unexpectedly on Sxpd process 

CSCvs38511 5508 silent crash 

CSCvs41893 3702 AP running 8.5.151.0 release software reloads unexpectedly 

….

 

Etc etc…

 

 

ICT Services

Netwerkbeheer – draadloos

 

Gertjan Scharloo

ICT consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

Leeuwenburg | kamer A10.20

Weesperzijde 190 | 1097 DZ Amsterdam

Tel: +31(0)20 525 4885

Mobiel: +31(0) 61013-5880

  www.uva.nl

uva.nl/profile/g.scharloo

  https://time.is/nl/CET 

 Je kunt mij ook bereiken via Skype for Business 

at https://www.educause.edu/community 

  


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


smime.p7s
Description: S/MIME cryptographic signature


Re: [WIRELESS-LAN] Feedback for Cisco WLC software release 8.2.166.0

2017-11-23 Thread Scharloo, Gertjan
Hi Svenn,

We are using 8.2.167.1 with a reason :o)

CSCve57121 was killing for us…

CSCve35938 Dual DFS detection implementation on 2700/3700 APs
CSCvc30656 FFT based intermodulation filter
CSCvf38379 8540, 5520 WLCs won't boot - "System could not find 68xx Nic Card"
CSCvg08894 3802 AP crash Watchdog reset reason: capwapd 8.2.161.0
CSCvd23185 WGB wired clients not seen by WLC
CSCve57918 WLC IGMP queries not sent consistently
CSCve81183 Cisco 2800, 3800 - Rx hang in 8.2.154.17 release
CSCvf17085 The radio of Cisco 3800 series AP stopped working after an image 
reload
CSCvf22342 Cisco 3800, 2800 AP running 8.2.154.64 release: TxFSM Stuck
CSCvf59621 Cisco 3800, 2800 AP running 8.3.124.40 release: TxFSM Stuck
CSCvf52723 IOS AP FlexConnect local switching - client cannot pass traffic when 
using 802.1X + NAC
CSCvf57360 Cisco Wave2 AP clients constantly deleted with active voice traffic 
and optimized roaming enabled
CSCvf25015 AP on8.2.154.62 reloads unexpectedly on ENTROPY-0-ENTROPY_ERROR: 
unable to collect sufficient entropy
CSCvf44583 Cisco 2800, 3800 APs transmitting at MCS/802.11n rates to clients 
with WMM disabled
CSCvf47017 2800/3800 - not able to boot and get stuck "BootROM: Image checksum 
verification FAILED"

CSCve57121 2800/3800 - AP fails to send Client ARP due to mismatch of entries 
in NSS & Radio table.

CSCvf28800 2800/3800 - FIQ crashed due to aptrace debugging enabled.
CSCvf60803 1800/2800/3800 crashes with AVC enabled
CSCvf02705 The IP-SGT binding is removed from SXP peer after a WLC redundancy 
switchover.
CSCvd16380 3800 detecting DFS False triggers
CSCvf23975 2800 AP radio stays down although CDP negotiated with full Power 
after power cycle
 
And 8.2mr7 is coming soon…… 

Gertjan Scharloo
ICT Consultant
_
 
Universiteit van Amsterdam | Hogeschool van Amsterdam
 
ICT Services
Leeuwenburg | kamer A9.44
Weesperzijde 190 | 1097 DZ Amsterdam
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl 
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr |
 

On 23/11/2017, 16:01, "The EDUCAUSE Wireless Issues Constituent Group Listserv 
on behalf of Jeffrey D. Sessler"  wrote:

What version of 8.2 are you currently on? In general for the x800 series, 
the latest code is recommended. If you are already on .164.0 then 166.0 
probably won't make a difference. If you're not on 164.0 then do get to the 
latest code.

Jeff


On 11/22/17, 10:52 AM, "The EDUCAUSE Wireless Issues Constituent Group 
Listserv on behalf of Hahues, Sven"  wrote:

Hi everyone,

We have been having an on-again-off-again problem with some of our 
newer 1832s where the APs will randomly not accept connections from new clients 
that they have not had associations with.  The current fix is to reboot the AP 
and then it works again for a random time before the behavior comes back.  
Cisco recommended to upgrade to WLC 8.2.166.0 which was just recently released, 
and I wanted to find out if anyone had upgraded to the code and seen any issues 
with it.

Thanks in advance, and happy Thanksgiving to everyone,

Sven

Sven Hahues
Florida Gulf Coast University
Director, BTS Helpdesk, Network Services & Security
Tel: (239) 590 1337
E-Mail: shah...@fgcu.edu

**
Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



**
Participation and subscription information for this EDUCAUSE Constituent 
Group discussion list can be found at http://www.educause.edu/discuss.



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



smime.p7s
Description: S/MIME cryptographic signature


Re: [WIRELESS-LAN] Big flaw in WPA2

2017-10-27 Thread Scharloo, Gertjan
SMALL Update about Cisco Client workaround:

 
Troubleshooting TechNotes
 

Wireless KRACK attack client side workaround and detection

 

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/212390-wireless-krack-attack-client-side-workar.html
 

 

Regards,

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan  on behalf of Gertjan 
Scharloo 
Reply-To: wireless-lan 
Date: Friday, 27 October 2017 at 09:49
To: wireless-lan 
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

Hi folks, 

 

In a Cisco environment there is a workaround for the client vulnerability :

 

Workaround for CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080 
and CVE-2017-13081

Please read : 
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa#workarounds
 

 

And read https://twitter.com/vanhoefm/status/923651649595478018 

 

Workaround is very simple (!) :

 

Global Config, (CLI only option)

 

config advanced eap eapol-key-retries 0

 

 

 

(5520) >show advanced eap

EAP-Identity-Request Timeout (seconds)……….. 30

EAP-Identity-Request Max Retries….. 2

EAP Key-Index for Dynamic WEP…….. 0

EAP Max-Login Ignore Identity Response……….. enable

EAP-Request Timeout (seconds)…….. 30

EAP-Request Max Retries.. 2

EAPOL-Key Timeout (milliseconds)….. 1000

EAPOL-Key Max Retries…. 0

EAP-Broadcast Key Interval……….. 3600

 

 

Regards,

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

twitter : wireless_kid

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan  on behalf of Jake 
Snyder 
Reply-To: wireless-lan 
Date: Thursday, 19 October 2017 at 15:24
To: wireless-lan 
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

You have more faith in the WFA than I.  I’m sure our next houses will be Wi-Fi 
certified Krack-Free.

Sent from my iPhone


On Oct 19, 2017, at 5:13 AM, Osborne, Bruce W (Network Operations) 
 wrote:

The specification, like many, was vague in implementation details and 
practically all vendors chose a poor, insecure design.  The only claw in WPA2 
was vagueness in the specification. I understand the Wi-Fi Alliance is working 
on remedying that as well as specifically testing for KRACK in its 
certification testing.

 

Since many implementations were likely based off the chipmakers reference 
designs, this is not very surprising.

 

 

Bruce Osborne

Senior Network Engineer

Network Operations - Wireless

 (434) 592-4229

LIBERTY UNIVERSITY

Training Champions for Christ since 1971

 

From: Marcelo Maraboli [mailto:marcelo.marab...@uc.cl] 
Sent: Wednesday, October 18, 2017 11:56 AM
Subject: Re: Big flaw in WPA2

 

if it were a Design Flaw, no patch can fix it we would need to upgrade to 
WPA3 or something.

the fact that there is patch going on, is that either every implementation is 
wrong (not likely) or
the specification (how to code the Design) did not address boundaries or 
restrictions that should/must
be cared for.

or am I wrong ?


regards,

On 10/16/17 4:32 PM, Hector J Rios wrote:

The short answer is Yes. 

 

Hector Rios

Louisiana State University

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike Cunningham
Sent: Monday, October 16, 2017 1:58 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

If this is a flaw in the design of the WPA2 protocol isn’t the fix going to 
need to be made on both sides of the communication link?  Access points will 
all need to be updated but also all client wifi drivers are going to need to be 
updated on all wifi enabled devices that support WPA2, right?

 

Mike Cunningham

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen Belcher
Sent: Monday, October 16, 2017 10:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

>From Cisco:

 

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

 

 

/ Stephen Belcher

Assistant Director of Network Operations 
WVU Information Technology Services

One 

Re: [WIRELESS-LAN] Big flaw in WPA2

2017-10-27 Thread Scharloo, Gertjan
Hi folks, 

 

In a Cisco environment there is a workaround for the client vulnerability :

 

Workaround for CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080 
and CVE-2017-13081

Please read : 
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa#workarounds
 

 

And read https://twitter.com/vanhoefm/status/923651649595478018 

 

Workaround is very simple (!) :

 

Global Config, (CLI only option)

 

config advanced eap eapol-key-retries 0

 

 

 

(5520) >show advanced eap

EAP-Identity-Request Timeout (seconds)……….. 30

EAP-Identity-Request Max Retries….. 2

EAP Key-Index for Dynamic WEP…….. 0

EAP Max-Login Ignore Identity Response……….. enable

EAP-Request Timeout (seconds)…….. 30

EAP-Request Max Retries.. 2

EAPOL-Key Timeout (milliseconds)….. 1000

EAPOL-Key Max Retries…. 0

EAP-Broadcast Key Interval……….. 3600

 

 

Regards,

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

twitter : wireless_kid

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan  on behalf of Jake 
Snyder 
Reply-To: wireless-lan 
Date: Thursday, 19 October 2017 at 15:24
To: wireless-lan 
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

You have more faith in the WFA than I.  I’m sure our next houses will be Wi-Fi 
certified Krack-Free.

Sent from my iPhone


On Oct 19, 2017, at 5:13 AM, Osborne, Bruce W (Network Operations) 
 wrote:

The specification, like many, was vague in implementation details and 
practically all vendors chose a poor, insecure design.  The only claw in WPA2 
was vagueness in the specification. I understand the Wi-Fi Alliance is working 
on remedying that as well as specifically testing for KRACK in its 
certification testing.

 

Since many implementations were likely based off the chipmakers reference 
designs, this is not very surprising.

 

 

Bruce Osborne

Senior Network Engineer

Network Operations - Wireless

 (434) 592-4229

LIBERTY UNIVERSITY

Training Champions for Christ since 1971

 

From: Marcelo Maraboli [mailto:marcelo.marab...@uc.cl] 
Sent: Wednesday, October 18, 2017 11:56 AM
Subject: Re: Big flaw in WPA2

 

if it were a Design Flaw, no patch can fix it we would need to upgrade to 
WPA3 or something.

the fact that there is patch going on, is that either every implementation is 
wrong (not likely) or
the specification (how to code the Design) did not address boundaries or 
restrictions that should/must
be cared for.

or am I wrong ?


regards,

On 10/16/17 4:32 PM, Hector J Rios wrote:

The short answer is Yes. 

 

Hector Rios

Louisiana State University

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike Cunningham
Sent: Monday, October 16, 2017 1:58 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

If this is a flaw in the design of the WPA2 protocol isn’t the fix going to 
need to be made on both sides of the communication link?  Access points will 
all need to be updated but also all client wifi drivers are going to need to be 
updated on all wifi enabled devices that support WPA2, right?

 

Mike Cunningham

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen Belcher
Sent: Monday, October 16, 2017 10:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

 

>From Cisco:

 

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa

 

 

/ Stephen Belcher

Assistant Director of Network Operations 
WVU Information Technology Services

One Waterfront Place / PO Box 6500

Morgantown, WV  26506

 

(304) 293-8440 office 
(681) 214-3389 mobile 
steve.belc...@mail.wvu.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Richard Nedwich 

Sent: Monday, October 16, 2017 10:34:43 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2 

 

Ruckus is providing a response today.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

 

This email may contain confidential information about a Pennsylvania College of 
Technology student. It is intended solely for the use of the 

Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Cisco 3800 Series APs

2017-07-12 Thread Scharloo, Gertjan
All,

 

We found our client - 2802i AP problem. They are all related to a memory leak 
in the 2802 AP : (This problem has taken us crazy for 6 months!)

 

CSCve55196 COS AP not forwarding DHCP OFFER/ACK on its radio downstream
CSCvd64819 AP-COS drops downstream DHCP; kills wpcpd (reason: OOM); kernel panic
(they will be deduplicated)
CSCvd23175 2800/3800 WCPD memory leak observed

 

And our flash issue is fixed in :

CSCuz47559 error saving config file happens on multiple 2702

 

So version 8.2.154.62 will fix all our issues (and is now available for testing)

Tonight, I will activate this version for 3100 different access point of which 
66x are AP-COS (2802)


I hope our wireless network will become stable again after this upgrade

 

 

Regards

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Charles 
Francis <charles.fran...@duke.edu>
Reply-To: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Date: Saturday, 8 July 2017 at 22:29
To: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Cisco 3800 Series APs

 

We did have some client disconnect issues on WISM2’s and 5508’s where certain 
client traffic seemed to be blackholed.  The only way to get people working 
again was to associate to a different SSID and then go back.

 

Once we changed our QoS from Platinum or Gold to Silver, the issues seem to 
have subsided.

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Jason Watts <jwa...@pratt.edu>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Date: Thursday, July 6, 2017 at 8:33 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [EXTERNAL] Re: [WIRELESS-LAN] Cisco 3800 Series APs

 

*** Exercise caution. This is an EXTERNAL email. DO NOT open attachments or 
click links from unknown senders or unexpected email. ***

Well that is troubling. We are about to deploy around 200 of them. Is anyone 
else experiencing similar issues to this on 2802's?

-- 
Jason Watts
Pratt Institute, Academic Computing
Senior Network Administrator



 

Sent from my iPhone


On Jul 6, 2017, at 7:23 AM, Scharloo, Gertjan <g.schar...@uva.nl> wrote:

Hi Bryan,

 

The University of Amsterdam and Amsterdam University of Applied Sciences are 
currently using 2802i Access Points since December 1, 2016 to gain experience 
with this new type of Access Point. (Only on the 9th and 10th floors)

 

The access points have been problematic from the start, and still there are 
complaints from end users that we can’t solve or identify properly. The same 
users can work without problems on other floors where we have 2702i Access 
Points stationed in this property.

We are currently dealing with client disconnections on the floors/buildings 
with AP2802i. This disconnection occurs 2-3 hours, sometimes more frequently. 
Many of our clients are effected. Another issue which is subpart of this issue 
is: the clients are connected but there is no traffic flow. These clients have 
laptop from different vendors for example Dell, Apple with different (updated) 
drivers. -The users stay connected but cannot transmit any data. 

 

Two months ago, we have started a new software release 8.2.154.17 and we were 
hoping to fix our client disconnect issue only with the 2802i AP, but the 
problem became worse. We have started a Tac CASE (severity 2)

 

 

Regards

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Bryan Ward 
<bryan.w...@dartmouth.edu>
Reply-To: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Date: Wednesday, 5 July 2017 at 18:07
To: wireless-lan <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Cisco 3800 Series APs

 

Couldn’t find a recent discussion on the list archives, so I’ll ask my question.

 

For those of you that have Cisco 3800 series APs in production, how have they 
been working for you recently?

We currently purchase 3700 series APs as our standard for new installs and 
replacement of our 3500 series APs, but are now considering switching to the 
3800 series.

I heard there were a lot of issues with them at first, but was wondering if 
th

Re: [WIRELESS-LAN] Cisco 3800 Series APs

2017-07-06 Thread Scharloo, Gertjan
Hi Bryan,

 

The University of Amsterdam and Amsterdam University of Applied Sciences are 
currently using 2802i Access Points since December 1, 2016 to gain experience 
with this new type of Access Point. (Only on the 9th and 10th floors)

 

The access points have been problematic from the start, and still there are 
complaints from end users that we can’t solve or identify properly. The same 
users can work without problems on other floors where we have 2702i Access 
Points stationed in this property.

We are currently dealing with client disconnections on the floors/buildings 
with AP2802i. This disconnection occurs 2-3 hours, sometimes more frequently. 
Many of our clients are effected. Another issue which is subpart of this issue 
is: the clients are connected but there is no traffic flow. These clients have 
laptop from different vendors for example Dell, Apple with different (updated) 
drivers. -The users stay connected but cannot transmit any data. 

 

Two months ago, we have started a new software release 8.2.154.17 and we were 
hoping to fix our client disconnect issue only with the 2802i AP, but the 
problem became worse. We have started a Tac CASE (severity 2)

 

 

Regards

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

From: wireless-lan  on behalf of Bryan Ward 

Reply-To: wireless-lan 
Date: Wednesday, 5 July 2017 at 18:07
To: wireless-lan 
Subject: [WIRELESS-LAN] Cisco 3800 Series APs

 

Couldn’t find a recent discussion on the list archives, so I’ll ask my question.

 

For those of you that have Cisco 3800 series APs in production, how have they 
been working for you recently?

We currently purchase 3700 series APs as our standard for new installs and 
replacement of our 3500 series APs, but are now considering switching to the 
3800 series.

I heard there were a lot of issues with them at first, but was wondering if 
they’re still troublesome now that they’ve been out in the wild for some time.

Also, does anyone currently have issues using Prime to manage them?

 

Thanks all,

 

--

Bryan Ward

Network Engineer

Dartmouth College Network Services

603-646-2245

bryan.w...@dartmouth.edu

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



smime.p7s
Description: S/MIME cryptographic signature


Re: [WIRELESS-LAN] Cisco WLC code recommendations

2017-03-16 Thread Scharloo, Gertjan
Hi all,

 

8.2mr5 is now available and is rock solid!!! 

 

http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn82mr5.html
 

 

Kind regards,

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services

Leeuwenburg | kamer A9.44

Weesperzijde 190 | 1097 DZ Amsterdam

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr |

 

 

Van: wireless-lan  namens "Jeffrey D. 
Sessler" 
Beantwoorden - Aan: wireless-lan 
Datum: dinsdag 14 maart 2017 19:55
Aan: wireless-lan 
Onderwerp: Re: [WIRELESS-LAN] Cisco WLC code recommendations

 

Bruce,

 

Engineering version 8.2.150.4 is, to my knowledge, what will become 8.2 MR5. 
This is the code I’ve been running on and so far rock solid. 

 

Jeff 

 

From: "wireless-lan@listserv.educause.edu"  
on behalf of "bruce_entwis...@redlands.edu" 
Reply-To: "wireless-lan@listserv.educause.edu" 

Date: Tuesday, March 14, 2017 at 10:51 AM
To: "wireless-lan@listserv.educause.edu" 
Subject: Re: [WIRELESS-LAN] Cisco WLC code recommendations

 

Is the engineering code you are running, the same MR5 code that is due to be 
released soon?

 

Bruce Entwistle

Network Manager

University of Redlands

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ian Lyons
Sent: Tuesday, March 14, 2017 8:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco WLC code recommendations

 

Ken

 

Short answer is it is a bug.  A “Kernel Panic”.  AP loses its mind.Very 
prevalent on the new stuff, to a much lesser degree affects “older” stuff.

 

Sometimes the reset fixes it.  Sometimes not.  We doubled down on 1810’s and 
2802’s.  Bugs galore.  Which are actively being fixed-to be fair.

 

We are running on engineering code and HUGE improvements have been made. Soon, 
I think/hope, it will be rock solid.

 

Ian Lyons

Network Engineer

Rollins College

 

 

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ken LeCompte
Sent: Monday, March 13, 2017 3:36 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco WLC code recommendations

 

We are currently running a handful of 5508s with 8.0.133.0 and have been stable 
for some time with around 400 APs and upwards of 1.5k clients. We also run a 
half dozen 5520s with 8.2.141.0 and they have been running solid with around 1k 
APs each and upwards of 10k clients. We do not however run anything but 2600, 
3600, 2700 and 3700 APs.  

 

The only issue I have seen that I don’t understand well yet is related to some 
APs losing the minds during network interruptions. The APs will appear up from 
CDP neighbor information, but will have lost their name and will not connect to 
their configured primary or secondary controllers. A power cycle will often 
recover the AP, but not always. I believe that issue started with 8.2. 

 

Thank you.

 

Ken

 

-- 
Ken LeCompte - Consulting Telecommunications Analyst
Telecommunications Division

Office of Information Technology
Rutgers, The State University of New Jersey
Office ~ (848) 445-4823

 

On Mar 10, 2017, at 1:52 PM, Entwistle, Bruce  
wrote:

 

We are currently running version 8.0.133.0 on our Cisco 5508 controllers, as 
our current access points are primarily 3500s and 3600s. However we have 
recently purchased a batch of 2802i access points whose minimum supported 
version is 8.2.110.0.  I was looking to the group for their recommendations on 
a stable version of code which will support our new 2802i access points.

 

Thank you

Bruce Entwistle

Network Manager

University of Redlands

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 

RE: [WIRELESS-LAN] Odd incident on our 8540 Controllers- wondering if anyone has seen similar?

2016-09-01 Thread Scharloo, Gertjan
recommended code for 8540 is 8.2.121.11 :-)

Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services 
Leeuwenburg | kamer A9.44
Weesperzijde 190 | 1097 DZ Amsterdam 
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr | 


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Thursday, September 1, 2016 5:22 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Odd incident on our 8540 Controllers- wondering
if anyone has seen similar?

8.2.121

Lee Badman | Network Architect (CWDP, CWNA, CWSP, Mobility+) Information
Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu


From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 on behalf of Slone, Kelly

Sent: Wednesday, August 31, 2016 9:50 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Odd incident on our 8540 Controllers- wondering
if anyone has seen similar?

Lee,

We had a similar issue but it was not with the 8540’s but instead a pair of
WISM2’s.  Our issue was actually determined to be a bug with a 40 gig line
card also in the same 6500 chassis the wism2’s were in.  We are in the
process of turning up a pair of 8540’s. What code version is TAC
recommending now?  We were advised to steer clear of 8.3 for the moment.
Curious as to what they are telling you.

Thanks,
Kelly Slone


On Aug 31, 2016, at 9:37 PM, Lee H Badman
> wrote:

And- we have a code bug! Who would have thought?  Emergency upgrade time...
seems like once a semester minimally, we trade one set of bugs for a newer,
more exciting set.

Grrr.

Lee Badman | Network Architect (CWDP, CWNA, CWSP, Mobility+) Information
Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e
lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
> on behalf of Lee H Badman >
Sent: Wednesday, August 31, 2016 11:52 AM
To:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Odd incident on our 8540 Controllers- wondering if
anyone has seen similar?

We’re on 8.2.111. From the TAC case notes:

We have an 8540 in SSO failover pair config. No changes have been made to
the environment in several weeks. With 3,100 APs and 20K clients, we
experienced the following condition on multiple secure AND open WLANs that
all go to different VLANs: Certain clients- no common type or OS across
them- would struggle with select https web page loads while other clients
had no problems on same WLANs and same destinations. No problems at all with
auth, association, other web sites. And no problems with the target web
servers. After hours of troubleshooting, we forced failover to redundant
8540, problem immediately cleared despite all "stateful" failover operations
working as they should. Is there a known bug in play here?

Just wondering if this occurrence rings any bells for anyone?

-Lee Badman


** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



smime.p7s
Description: S/MIME cryptographic signature


Re: [WIRELESS-LAN] Who WiFi vendors does everyone use? REVISITED

2016-04-04 Thread Scharloo, Gertjan
University of Amsterdam and Amsterdam University of Applied Science
80,000 students
30,000 devices per/day
Cisco 3,100 APs (standard 2700/2800(soon))
Controller based (28x5508)
Cisco Prime InfraStructure 3.0.3 (Nextgen appliance)

Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services
Leeuwenburg | kamer A9.44
Weesperzijde 190 | 1097 DZ Amsterdam
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr |


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

2015-09-10 Thread Scharloo, Gertjan
Hi All,

My tac case is also open for 8 months and this is still a known issue (I am 
working with 8.0.120.3!!!)


Please collect logs to find the root cause and send them to TAC/BU:

(Access-points logs)

 enter commands one line at a time -

test spec cli 1
logset 1M
smc dfs 8016
smc sb T33 debug 3
end

Example:
  AP0012.bd19.57c0>en
  Password:
  AP0012.bd19.57c0#test spec cli 1
  AP0012.bd19.57c0(textc-cli)#logset 1M
  +1
  AP0012.bd19.57c0(textc-cli)#smc dfs 8016
  AP0012.bd19.57c0(textc-cli)#
  +1smc sb T33 debug 3
  AP0012.bd19.57c0(textc-cli)#
  +1end
  AP0012.bd19.57c0#

That's it - wait for a DFS event and collect the log files(*.sbc files) - the 
files will be in the ram: directory - after trigger - collect the files using 
the command below -

  archive tar /create tftp:///  ram:/

Kind regards.


Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services
Leeuwenburg | kamer A9.44
Weesperzijde 190 | 1097 DZ Amsterdam
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr |


From: EDUCAUSE Listserv 
> 
on behalf of Randy Mahurin 
>
Reply-To: EDUCAUSE Listserv 
>
Date: donderdag 10 september 2015 19:14
To: EDUCAUSE Listserv 
>
Subject: Re: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

We have been fighting with these every since we upgraded to 8.0.110.0.  They 
are DFS events due to issues with Broadcom wireless cards in end user devices 
(my understanding anyway).

Our TAC case was open for about 8 months before I finally got a bandaid.  This 
does not resolve the DFS admin up/operationally down issue on the radio, 
however, Prime won't alert on the event.  I've been reading about fixes in 
various versions of code, but nothing successful yet.  Here are the notes from 
my case, after changing the severity levels listed, the alerts stopped coming.


"I was wondering if you can try some additional config as a workaround to our 
bug here.

In the Administration->Settings-> Severity Configuration, we need to set the 
desired severity (minor, I think) for two Alarm conditions:

AP radio interface down due to failure
Radio administratively up and operationally down"

On Thu, Sep 10, 2015 at 10:52 AM, Danny Eaton 
> wrote:
I’ve seen them on 3502’s, and 3702’s.  We’re running WiSM-2 in HA with 
8.0.110.11 code.  Saw it on the previous code (7.6.130.0).  We’re upgrading our 
access layer, so I just have been resetting the APs that show that, and don’t 
think I’ve seen them again.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Gregg Heimer
Sent: Thursday, September 10, 2015 11:32 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

Anyone with Cisco APs and Cisco Prime get these odd alerts from PI that state 
the radio is administratively up but operationally down with a reason of 
unknown?  I have been getting a slew of these lately.  We have introduced quite 
a few 1702’s into our environment and I am wondering if there is some issue 
with recalculation, or something that triggers a radio reset to resolve a 
different issue?  Below is the alert notification.  Cisco forums haven’t been 
much help, so I figured I’d take a shot at the group.  Thanks!



Virtual Domain: ROOT-DOMAIN



PI has detected a change in one or more alarms of category AP and severity 
Critical in Virtual Domain ROOT-DOMAIN.

The new severity of the following items is Clear:



1. Alarm Condition:Radio administratively up and operationally down

Message: '802.11a/n/ac' interface of AP 'AP01-' associated to controller 
‘XX (172.X.X.X)' is down. Reason: Unknown - Device Name: ‘X Failure 
Source: AP AP01-, Interface 802.11a/n/ac





___
Gregg Heimer
Sr. Network Engineer
Montgomery County Community College
340 Dekalb Pike
Blue Bell, PA 19422
ghei...@mc3.edu
215.641.6442




Montgomery County Community College is proud to be designated as an Achieving 
the Dream Leader College for its commitment to student access and success.
!DSPAM:911,55f1b0a7312755505785440!
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 

Re: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

2015-09-10 Thread Scharloo, Gertjan
Hi all again,

Extra information about the (unsolved) DFS issue :

Besides the UP/Down (802.11a) e-mail messages in PI there are three other bugs 
responsible for DFS issues:

https://tools.cisco.com/bugsearch/bug/CSCut98006 -> DFS detections due to high 
energy profile signature on 2600/3600 <- solved in 7.6.130.30

https://tools.cisco.com/bugsearch/bug/CSCuq86269 -> DFS detection due to 
broadcom spurious emissions <- solved in 8.0.120.0 and is out on CCO

https://tools.cisco.com/bugsearch/bug/CSCus53495 -> DFS detection due to 
broadcom spurious emissions on 2700/3700

Disable the background task "Lightweight AP Operational Status” is not a 
solution!(CSCup98951) and with PI 3.0 you will miss some (important) graphs 
like ‘ Client Count By IP Address Type’  or ‘ Client count by Wireless 
(802.11n/802.11ac etc)’  client traffic etc.
There is only one ‘ Client Count By Association/Authentication’  graph  
available (with the blue color for Association and Authentication in different 
tab. For me this is a ‘ no go’

Gertjan Scharloo

From: EDUCAUSE Listserv 
> 
on behalf of Gertjan Scharloo >
Reply-To: EDUCAUSE Listserv 
>
Date: donderdag 10 september 2015 19:33
To: EDUCAUSE Listserv 
>
Subject: Re: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

Hi All,

My tac case is also open for 8 months and this is still a known issue (I am 
working with 8.0.120.3!!!)


Please collect logs to find the root cause and send them to TAC/BU:

(Access-points logs)

 enter commands one line at a time -

test spec cli 1
logset 1M
smc dfs 8016
smc sb T33 debug 3
end

Example:
  AP0012.bd19.57c0>en
  Password:
  AP0012.bd19.57c0#test spec cli 1
  AP0012.bd19.57c0(textc-cli)#logset 1M
  +1
  AP0012.bd19.57c0(textc-cli)#smc dfs 8016
  AP0012.bd19.57c0(textc-cli)#
  +1smc sb T33 debug 3
  AP0012.bd19.57c0(textc-cli)#
  +1end
  AP0012.bd19.57c0#

That's it - wait for a DFS event and collect the log files(*.sbc files) - the 
files will be in the ram: directory - after trigger - collect the files using 
the command below -

  archive tar /create tftp:///  ram:/

Kind regards.


Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services
Leeuwenburg | kamer A9.44
Weesperzijde 190 | 1097 DZ Amsterdam
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr |


From: EDUCAUSE Listserv 
> 
on behalf of Randy Mahurin 
>
Reply-To: EDUCAUSE Listserv 
>
Date: donderdag 10 september 2015 19:14
To: EDUCAUSE Listserv 
>
Subject: Re: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

We have been fighting with these every since we upgraded to 8.0.110.0.  They 
are DFS events due to issues with Broadcom wireless cards in end user devices 
(my understanding anyway).

Our TAC case was open for about 8 months before I finally got a bandaid.  This 
does not resolve the DFS admin up/operationally down issue on the radio, 
however, Prime won't alert on the event.  I've been reading about fixes in 
various versions of code, but nothing successful yet.  Here are the notes from 
my case, after changing the severity levels listed, the alerts stopped coming.


"I was wondering if you can try some additional config as a workaround to our 
bug here.

In the Administration->Settings-> Severity Configuration, we need to set the 
desired severity (minor, I think) for two Alarm conditions:

AP radio interface down due to failure
Radio administratively up and operationally down"

On Thu, Sep 10, 2015 at 10:52 AM, Danny Eaton 
> wrote:
I’ve seen them on 3502’s, and 3702’s.  We’re running WiSM-2 in HA with 
8.0.110.11 code.  Saw it on the previous code (7.6.130.0).  We’re upgrading our 
access layer, so I just have been resetting the APs that show that, and don’t 
think I’ve seen them again.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Gregg Heimer
Sent: Thursday, September 10, 2015 11:32 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco Wireless AP's Radio Down

Anyone with Cisco APs and Cisco Prime get these odd alerts from PI that state 
the radio is administratively up but operationally down with a reason of 
unknown?  I have been getting 

Re: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

2015-08-31 Thread Scharloo, Gertjan
Solution is 8.0.120.3 (dfs problem)

From: EDUCAUSE Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Dan Brisson <dbris...@uvm.edu<mailto:dbris...@uvm.edu>>
Reply-To: EDUCAUSE Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: maandag 31 augustus 2015 14:46
To: EDUCAUSE Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

Any update on the bug fix for the flapping 5ghz radios in 8.0.120?  I'm seeing 
a fair amount of them on my 3702i's.

Thanks!
-dan



Dan Brisson
Network Engineer
University of Vermont





On 7/28/15 4:45 AM, Scharloo, Gertjan wrote:
Hi Lee,

The 5 GHz radio message is a DFS problem and part of bug (CSCut98006)-and 
(CSCuq86269)


CSCut98006 DFS detections due to high energy profile signature – AP2600/3600 
specific fix

Fixed in Image  8.0.110.22 for 3600/2600 platforms

For 1700/2700/3700 will be coming soon, as there were some minor issues found 
during fix porting for this HW that are being resolved.

This week Cisco should be able to confirm ETA for this second part of the fix

(this is my TAC case SR 634977857 Flapping AP radio causing Alarms in Prime)


Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services
Leeuwenburg | kamer A9.36
Weesperzijde 190 | 1097 DZ Amsterdam
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl<http://www.uva.nl/>
uva.nl/profile/g.scharloo
Beschikbaar : Ma | - | Wo | Do | Vr |

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Jess Walczak
Verzonden: dinsdag 28 juli 2015 01:25
Aan: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Onderwerp: Re: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

Lee,

I am also seeing what Scott is seeing with the nearly instantaneous radio 
resets on the 5Ghz side.  It doesn't seem to affect any client experience, 
either, but it does generate a LOT of noise from a monitoring point of view.  
We have had a TAC open about this since February, but honestly haven't really 
done any hardcore troubleshooting of the issue once we ascertained that it was 
not affecting service in any real way.  In Prime, I have it emailing a 
distribution group, and I get tons and tons of emails from the same exact time, 
one reading that the AP went down, and the other one reading that it came up, 
like so:
__
PI has detected a change in one or more alarms of category AP and severity 
Critical in Virtual Domain ROOT-DOMAIN.
The new severity of the following items is Clear:

1. Message: '802.11a/n' interface of AP 'OWS458-01-1142' associated to 
controller 'UST-WLC8510 (140.209.13.70)' is up.
Failure Source: AP OWS458-01-1142, Interface 802.11a/n
__
PI has detected one or more alarms of category AP and severity Critical in 
Virtual Domain ROOT-DOMAIN for the following items:

1. Message: '802.11a/n' interface of AP 'OWS458-01-1142' associated to 
controller 'UST-WLC8510 (140.209.13.70)' is down. Reason: Unknown Failure 
Source: AP OWS458-01-1142, Interface 802.11a/n
__
In fact, here, the "all clear" message arrived before the one telling about the 
down event, and both are timestamped for 4:21PM.  :-)

Our environment is an 8510 HA pair running 8.0.120.0 for the larger campus with 
900 or so APs, and an 5508 HA pair running 8.0.120.0 for the smaller campus 
with under 200 APs, and Prime 2.2.  The AP models we have are 1242's, 1142's, 
2702's (both i's and e's), and 702W's.  Also, we are just now going live with 
ISE 1.4 as well.
Jess Walczak
Sr. Network Analyst
University of St. Thomas
Saint Paul, MN

On Mon, Jul 27, 2015 at 5:18 PM, Scott McDermott 
<sco...@kcls.org<mailto:sco...@kcls.org>> wrote:
My environment is not on that scale, but I’m still seeing a lot of 5GHz radios 
cycling between up and down states followed by a reset, then it will come back 
up. Might happen again later, might not. Seems to be happening on all models.

--
Scott McDermott
Network & System Administrator
King County Library System

From: The EDUCAUSE Wireless Issues Constituent Group Listserv on behalf of Lee 
H Badman
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv
Date: Monday, July 27, 2015 at 06:03
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>"
Subject: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

Hello to the group- for those of you who have moved to the Cisco-recommended 
8.0.120.0 code, have you found any issues? Particularly big 8510 environments 
with thousands of APs per controller doing 802.1x/WPA2.

Thanks-

Lee

Lee Badma

RE: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

2015-07-28 Thread Scharloo, Gertjan
Hi Lee,

 

The 5 GHz radio message is a DFS problem and part of bug (CSCut98006)-and 
(CSCuq86269)

 

CSCut98006 DFS detections due to high energy profile signature – AP2600/3600 
specific fix

 

Fixed in Image  8.0.110.22 for 3600/2600 platforms

 

For 1700/2700/3700 will be coming soon, as there were some minor issues found 
during fix porting for this HW that are being resolved.

 

This week Cisco should be able to confirm ETA for this second part of the fix

 

(this is my TAC case SR 634977857 Flapping AP radio causing Alarms in Prime)

 

 

Gertjan Scharloo

ICT Consultant

_

 

Universiteit van Amsterdam | Hogeschool van Amsterdam

 

ICT Services 

Leeuwenburg | kamer A9.36

Weesperzijde 190 | 1097 DZ Amsterdam 

+31 (0)20 525 4885

Mobiel : +31(0) 61013-5880

 http://www.uva.nl/ www.uva.nl

uva.nl/profile/g.scharloo

Beschikbaar : Ma | - | Wo | Do | Vr | 

 

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Jess Walczak
Verzonden: dinsdag 28 juli 2015 01:25
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: Re: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

 

Lee,

I am also seeing what Scott is seeing with the nearly instantaneous radio 
resets on the 5Ghz side.  It doesn't seem to affect any client experience, 
either, but it does generate a LOT of noise from a monitoring point of view.  
We have had a TAC open about this since February, but honestly haven't really 
done any hardcore troubleshooting of the issue once we ascertained that it was 
not affecting service in any real way.  In Prime, I have it emailing a 
distribution group, and I get tons and tons of emails from the same exact time, 
one reading that the AP went down, and the other one reading that it came up, 
like so:
__
PI has detected a change in one or more alarms of category AP and severity 
Critical in Virtual Domain ROOT-DOMAIN. 
The new severity of the following items is Clear:

1. Message: '802.11a/n' interface of AP 'OWS458-01-1142' associated to 
controller 'UST-WLC8510 (140.209.13.70)' is up.
Failure Source: AP OWS458-01-1142, Interface 802.11a/n
__
PI has detected one or more alarms of category AP and severity Critical in 
Virtual Domain ROOT-DOMAIN for the following items:

1. Message: '802.11a/n' interface of AP 'OWS458-01-1142' associated to 
controller 'UST-WLC8510 (140.209.13.70)' is down. Reason: Unknown Failure 
Source: AP OWS458-01-1142, Interface 802.11a/n
__

In fact, here, the all clear message arrived before the one telling about the 
down event, and both are timestamped for 4:21PM.  :-)


Our environment is an 8510 HA pair running 8.0.120.0 for the larger campus with 
900 or so APs, and an 5508 HA pair running 8.0.120.0 for the smaller campus 
with under 200 APs, and Prime 2.2.  The AP models we have are 1242's, 1142's, 
2702's (both i's and e's), and 702W's.  Also, we are just now going live with 
ISE 1.4 as well.

Jess Walczak

Sr. Network Analyst

University of St. Thomas

Saint Paul, MN

 

On Mon, Jul 27, 2015 at 5:18 PM, Scott McDermott sco...@kcls.org 
mailto:sco...@kcls.org  wrote:

My environment is not on that scale, but I’m still seeing a lot of 5GHz radios 
cycling between up and down states followed by a reset, then it will come back 
up. Might happen again later, might not. Seems to be happening on all models.

 

-- 

Scott McDermott

Network  System Administrator

King County Library System

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv on behalf of Lee 
H Badman
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv
Date: Monday, July 27, 2015 at 06:03
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] Cisco WLC 8.0.120.0 (MR2) on 8510- good, bad?

 

Hello to the group- for those of you who have moved to the Cisco-recommended 
8.0.120.0 code, have you found any issues? Particularly big 8510 environments 
with thousands of APs per controller doing 802.1x/WPA2.

 

Thanks-

 

Lee

 

Lee Badman | Network Architect

Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244

t 315.443.3003 tel:315.443.3003f 315.443.4325 tel:315.443.4325e  
mailto:lhbad...@syr.edu lhbad...@syr.eduw its.syr.edu http://its.syr.edu 

SYRACUSE UNIVERSITY
syr.edu http://syr.edu 

 

 

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 


**
Participation and subscription 

RE: [WIRELESS-LAN] MAC OS X Yosemite 10.10.2 Wi-Fi issues

2015-03-02 Thread Scharloo, Gertjan
Hi Jerry,

7.6.110 ?

This is not recommended !

You are facing the following bugs :

CSCuq71068AP traffic issue causing client to lose layer 3 connectivity
- Fixed in 8.110.4

Original Apple issue that caused the workaround to affect Intel, in 7.6
timeframe:
CSCug65693Macbook client bug causing connectivity problem w/ recent OS X
update

Last bug we are tracking for some less frequent client:
CSCus13594slow in getting the DHCP address in the AP2700

CSCus06920preauth bit set in RSN IE when wlan is wpa2AES - EDUROAM (!)
This is 8.0 and higher, fixed in 110.4, not affecting 7.6
Some Atheros clents may have problems connecting

CSCus21276 Kernel Panic on wism2 for 8.0MR1 beta Webauth kernel crash, 8.0
specific First part of fix in 8.110.4


7.6.130.0 is the latest version : Please upgrade to 8.0.110.0 and look at
the following notes (ask for an escalation image)

8.0.110.6
CSCus49126 AP3702 floods RTS frames @ 8000pps to departed client
CSCup68372 Stats are carried over when session timeout occurs
CSCur32475 NewMobility Web-Auth on MacFilter Failure always send client to
web-auth 
CSCur37475 wism2 system crash - at client stats AVL corruption 
CSCus26067 HA failing after upgrade to 8.0 due to gateway ARP source mac 
CSCus44802 WLAN NAS-id is not applied when AP Group NAS-id is changed
 CSCus53635 Add 802.11a Philipines country support for 1532I Aps joined to
5760. 
CSCus55004 WLC2504 8.0MR1: Kernel Panic with pre-auth ACL and external
web-redirect 
CSCus72994 WLC Crash on Task Name: DHCP Socket Task

8.0.110.5
CSCuq48043 Store orphan IPv6 addreses in IPv6 DB instead of scbdb  other
cleanup
CSCuq60042 Memory leak on WLC when using PMIPv6 clients pem_api.c
CSCur52246 PMIPv6 GRE key databse gets full during scale testing
CSCur88307 AP name unknown in dissoc messages (Intermittent)
CSCur88864 3600 APs with AC module shows 100% Rx utilization on slot-2.
CSCus13594 slow in getting the DHCP address in the AP2700
CSCus45806 Enable CDP Spare pair TLV for 1570 and 1530 series access points
CSCus46424 Band select not working on 1042 AP

8.0.110.4
CSCuq54548 Anchor Memory Leak when Sleeping Client Feature is enabled
CSCuq90632 3702 crashed with a traceback
CSCur20154 HA SSO pair memory leak
CSCur67701 Image download errors for CAPWAP 7500/8500
CSCur71427 Flex: Client roaming fails not processing
DOT1X_4WAY_COMPLETED_AT_AP
CSCus06920 preauth bit set in RSN IE when wlan is wpa2AES
CSCus21276 Kernel Panic on wism2 for 8.0MR1 beta
CSCuq71068 AP traffic issue causing client to lose layer 3 connectivity

8.0.110.3
CSCuo09947 RADIUS AVP #44 (Acct-Session-ID) to be sent in RADIUS authen
messages
CSCuq48218 WLC cannot process multiple sub-attributes in single RADIUS VSA
CSCup80403 Low iMac Tput -supported rate IE in association response has ZERO
length
CSCus35411 3702P access points has only 36, 40 two channels available in 8.0
MR1

Gertjan Scharloo
ICT Consultant
_

Universiteit van Amsterdam | Hogeschool van Amsterdam

ICT Services 
Leeuwenburg | kamer A9.36
Weesperzijde 190 | 1097 DZ Amsterdam 
+31 (0)20 525 4885
Mobiel : +31(0) 61013-5880
www.uva.nl
uva.nl/profile/g.scharloo
Beschikbaar : Ma | Di | Wo | Do | Vr | 

-Oorspronkelijk bericht-
Van: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Jerry Bucklaew
Verzonden: maandag 2 maart 2015 16:13
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: Re: [WIRELESS-LAN] MAC OS X Yosemite 10.10.2 Wi-Fi issues

Kees,


   We are running a cisco infrastructure (wism2, 5508) on 7.6.110 and have
seen a huge increase in Mac yosemite issues since December.  They basically
all complain of being disconnected every 5 minutes.  Nothing we do seems to
solve the issue, it seems to be a client side problem.  
Not all macs seem to be affected as some are working fine.


On 03/02/2015 08:52 AM, Kees Pronk wrote:
 Just wondering if anyone can share opinions / experience on this one. 
 There is a big discussion at : 
 https://discussions.apple.com/thread/6601963?tstart=0
 Our University has seen a steep rise on connectivity issues since 10.10.2
was released, both on our open SSID as on eduroam.

 Sincerely, Kees Pronk

 Disclaimer ( http://www.avans.nl/over-avans/e-mail-disclaimer )

 **
 Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.



**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



smime.p7s
Description: S/MIME cryptographic signature


RE: [WIRELESS-LAN] List abuse? SecureW2

2014-03-06 Thread Scharloo, Gertjan
All,

Since SecureW2 is not an Educause member, here is their response they provided 
to Jeff's post :

SecureW2 does not use any contact information from Educause threads. We are 
not even members of Educause and so cannot see contact information of the 
members to even abuse it. While we are spoken about on Educause and other 
forums, we do not solicit any data of members from Educause.
We do reach out to a wide variety of prospects and customers as part our 
business efforts and reference conversations in the public domain for 
interested parties. Last year some members from the Claremont College System 
(which Scripps College is part of) requested a demo of SecureW2's product
and during the meeting mentioned that they generally make decisions as a group 
and hence we reached out to Scripps as part our effort to continue the existing 
conversation. It is no secret in the that we've had many competitive wins 
against Cloudpath's XpressConnect  other products in the
marketplace. Bottom line, we greatly respect the Educause community and did not 
collect Jeff¹s or anyone else¹s contact info from any Educause 
list/postings/etc. and apologies if the perception was that we did.

Yours sincerely,

University of Amsterdam
ICT Services / Technical Support

Gertjan Scharloo
ICT Consultant

Leeuwenburg | kamer A9.36
Weesperzijde 190 | 1097 DZ Amsterdam | The Netherlands
T:  +31 (0)20 525 4885
www.uva.nl
uva.nl/profile/g.scharloo
Available on : | Mon | Tues | wed | Thurs | Fri |

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Jeffrey Sessler
Verzonden: woensdag 5 maart 2014 18:03
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: [WIRELESS-LAN] List abuse? SecureW2

I'd be interested in knowing if other members on the list who are Cloudpath 
customers have recently been contacted by SecureW2?

I received and unsolicited marketing email from them today touting their 
product, including the fact that quite a few former XpressConnect customers 
have switched to them. As proof, the marketing email links back to a Jan 16th 
discussion on this list where someone from Rutgers posted about their 
experience.

I suspect they collected my email from the list thus why I'm interested in 
knowing if other Cloudpath customers on the list got a similar email.
Do the educause list rules allow use of posts in marketing?
For Rutgers, are you aware Securew2 is using you in their marketing material?

best,
Jeff
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Controlling Bonjour Zones

2014-01-24 Thread Scharloo, Gertjan
Hi Jason,

The UvA want to use AppleTV . The AppleTV 's have a wired connection ( this is 
a conscious choice / WiFi is off) and should be available through the ssid 
eduroam/802.1x ( so i don't want a separate SSID for AppleTV )
We want to use AppleTV in all large meeting rooms (about 16 devices in the same 
building ). Once you 're connected to the SSID eduroam allows you to receive 
the relevant bonjour announcement ( eg name, meeting room B9.08 ) . This only 
works a little too well , because the bonjour ' announcement ' is also seen in 
the basement of the building (there are 283 access points spread over two 5508 
controllers ).
I would like to isolate the AppleTV announcements to only be available through 
one or two access points . This 'feature' is is currently not working ( even 
with LSS ) . In the Cisco Support Forum this problem is also discussed and 
there is already a TAC case . (627112765) It is advised to request a feature 
request through the Cisco account team. Who has more need for this 
functionality and make a request ...
https://supportforums.cisco.com/thread/2233930

https://supportforums.cisco.com/thread/2236392

(LSS is only applies to mDNS snooping via Wireless. If your planning on using 
the mDNS AppleTV feature , where you snoop mDNS on wired ports you will not 
have LSS capability for this moment and you need a separate SSID)


Kind regards,

University of Amsterdam
ICT Services / Technical Support

Gertjan Scharloo
ICT Consultant

Leeuwenburg | kamer A9.36
Weesperzijde 190 | 1097 DZ Amsterdam | The Netherlands
T:  +31 (0)20 525 4885
www.uva.nlhttp://www.uva.nl/
uva.nl/profile/g.scharloo
Available on : | Tues | wed | Thurs | Fri |


Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Jason Cook
Verzonden: maandag 27 mei 2013 4:03
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: [WIRELESS-LAN] Controlling Bonjour Zones

Hi,

We have Cisco wireless and are currently dev'ing up the bonjour gateway service 
release in 7.4. I know other vendors have similar workaround features and am 
interested see how people have gone with it, keen to hear from users of other 
vendors as well.

So far it all seems to work as advertised, was pretty easy setup with good 
control over what services you advertise. However I find there to be a lack of 
location control, and would like to know if anyone has implemented ways to 
control the location where the advertisements go.

For something like this we'd like to restrict the advertisements to location by 
building/level/room/AP, it will help it scale better for users devices when 
scrolling through the list of available devices to connect to like an Apple TV. 
Users in building 1 don't need to see an Apple TV in a meeting room in building 
2. Using separate SSID's is also not really a scalable solution... though does 
work of course with a dedicated subnet and multicast enabled.

We currently don't have building based networks, which would be one way to 
control advertisements. This is something we are planning, but are a while off 
yet, also the ability to go more granular than just buildings would be useful.

I've started a conversation with our local Cisco office, but am interested see 
what others may have done or believe could be useful for this.

Regards

Jason

--
Jason Cook
Technology Services
The University of Adelaide, AUSTRALIA 5005
Ph: +61 8 8313 4800
e-mail: jason.c...@adelaide.edu.aumailto:jason.c...@adelaide.edu.au

CRICOS Provider Number 00123M
---
This email message is intended only for the addressee(s) and contains 
information which may be confidential and/or copyright.  If you are not the 
intended recipient please do not read, save, forward, disclose, or copy the 
contents of this email. If this email has been sent to you in error, please 
notify the sender by reply email and delete this email and any copies or links 
to this email completely and immediately from your system.  No representation 
is made that this email is free of viruses.  Virus scanning is recommended and 
is the responsibility of the recipient.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Cisco AVC (Performance, Service Assurance)- Any one else...

2013-04-22 Thread Scharloo, Gertjan
Hi *,

I have the same problem!

Also read :

https://supportforums.cisco.com/thread/2203717

I think it is a known problem ..

Technical Support
IC - Informatiseringscentrum

Gertjan Scharloo

Gebouw Rivierstaete
Amsteldijk 166 | 1079 LH Amsterdam | kamer D 2.07
T:  (020) 525 4885
E:  g.schar...@uva.nlmailto:g.schar...@uva.nl
Aanwezig: | di | wo | do | vr |

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Lee H Badman
Verzonden: maandag 22 april 2013 16:03
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: [WIRELESS-LAN] Cisco AVC (Performance, Service Assurance)- Any one 
else...

Just getting feet wet with application analysis that comes with WLC 7.4 and 
Prime Infrastructure 1.3. I have proper PAM licenses on PI.

Am seeing that the applications are nicely classified as expected on the 
Controller GUI, but when viewed through PI (verified to be set up right as per  
AVC deployment guide) I see only Undefinedxxx for every application. 
Proportions are correct in bar graphs, client IP addresses all right, just no 
application name being displayed on PI despite being correct on controller.

I do have a TAC case open, but am curious as to whether anyone else on the list 
is seeing similar?
Thanks-

Lee Badman

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Cisco AVC (Performance, Service Assurance)- Any one else...

2013-04-22 Thread Scharloo, Gertjan
Hi Lee,

Can you tell me exactly what I need (id license PAM) in PI 1.3

Example : R-PAM-1.3-BSxx  or/and L-PI12-AS-15 ???

Is an assurance license not enough?

Technical Support
IC - Informatiseringscentrum

Gertjan Scharloo

Gebouw Rivierstaete
Amsteldijk 166 | 1079 LH Amsterdam | kamer D 2.07
T:  (020) 525 4885
E:  g.schar...@uva.nlmailto:g.schar...@uva.nl
Aanwezig: | di | wo | do | vr |

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Lee H Badman
Verzonden: maandag 22 april 2013 17:20
Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: Re: [WIRELESS-LAN] Cisco AVC (Performance, Service Assurance)- Any 
one else...

Hi Gertjan,

I'm thinking my issue is different. I have the PAM licenses applied, I have the 
right tabs in PI, and actually see application data. It's just that for me, all 
apps are called undefined in PI.

-Lee

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Scharloo, Gertjan
Sent: Monday, April 22, 2013 10:58 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco AVC (Performance, Service Assurance)- Any one 
else...

Hi *,

I have the same problem!

Also read :

https://supportforums.cisco.com/thread/2203717

I think it is a known problem ..

Technical Support
IC - Informatiseringscentrum

Gertjan Scharloo

Gebouw Rivierstaete
Amsteldijk 166 | 1079 LH Amsterdam | kamer D 2.07
T:  (020) 525 4885
E:  g.schar...@uva.nlmailto:g.schar...@uva.nl
Aanwezig: | di | wo | do | vr |

Van: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Namens Lee H Badman
Verzonden: maandag 22 april 2013 16:03
Aan: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Onderwerp: [WIRELESS-LAN] Cisco AVC (Performance, Service Assurance)- Any one 
else...

Just getting feet wet with application analysis that comes with WLC 7.4 and 
Prime Infrastructure 1.3. I have proper PAM licenses on PI.

Am seeing that the applications are nicely classified as expected on the 
Controller GUI, but when viewed through PI (verified to be set up right as per  
AVC deployment guide) I see only Undefinedxxx for every application. 
Proportions are correct in bar graphs, client IP addresses all right, just no 
application name being displayed on PI despite being correct on controller.

I do have a TAC case open, but am curious as to whether anyone else on the list 
is seeing similar?
Thanks-

Lee Badman

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.