Replacement for Cisco AIR-AP1120B Access Point.

Similar Questions

• Cisco WLC 2504 - Access Points do not reach the controller

  Hello world

  We bougth a Cisco WLC 2504 with two AIR-AP2702I-UXK9 Access Points. The problem is that the AP do not join the WLC.
  The output from 'show join ap stats' shows the following:

  (Cisco Controller) > view join ap stats summary all the

  Database Mac EthernetMac AP AP name IP address Status
  00:35: 1a: B1:A9:60 00:f2:8 b: f4:1 has: 9 c AP00f2.8bf4.1a9c 192.168.10.23 joined not
  00:35: 1a: C9:99:B0 00:f2:8 b: 77:b7:fc AP00f2.8b77.b7fc not joined 192.168.10.24

  (Cisco Controller) > show join ap 00:35:1 detailed stats to: b1:a9:60

  Synchronization phase statistics
  -For the synchronization request has received... Does not apply
  -For the synchronization completed... Does not apply

  Discovery phase statistics
  -Applications received discovered... 114
  -Answers success of discovery... 114
  -Discovery failure processing... 0
  -Purpose of the last unsuccessful attempt of discovery... Does not apply
  -Attempt to finally successful discovery time... 20:15:40.106 16 June
  -Discovery attempt ultimately unsuccessful time... Does not apply

  Join the live statistics
  -Join applications received... 57
  -Join sent successful responses... 57
  -Processing of the join request without success... 0
  -Purpose of the last unsuccessful attempt to join... Does not apply
  -Attempt to join finally managed time... 20:15:50.414 16 June
  -Join finally failed time... Does not apply

  Configuration phase statistics

  -Configuration requests... 114
  -Answers configuration successful... 0
  -Processing configuration failed... 57
  -Purpose of the last unsuccessful attempt to Setup... Invalid license in the application configuration
  -Attempt to finally successful configuration time... Does not apply
  -Time finally failed configuration attempt... 20:15:50.810 16 June

  Last the decryption of the AP details failure messages
  -Last message decryption failure reason... Does not apply

  Details of recent disconnection AP
  -Last AP connection failure reason... Does not apply
  -Last reason for disconnection AP... Unknown failure reason

  Latest summary join error
  -Type of error that occurred in the last... Application of configuration rejected LWAPP
  -Reason for the error that took place the last... Invalid license in the application configuration
  -Time which occurred the last error to join... 20:15:50.810 16 June

  Details of sign-out AP
  -Last AP connection failure reason... Does not apply
  Ethernet Mac: c 00:f2:8 b: f4:1 has: 9 Ip address: 192.168.10.23

  Would be grateful for the help.

  Best regards
  Marc

  Hi Marc,

  Make sure first that your controller has software code 8.0.x or above, if first better it. Here's the code recommended by TAC

  http://www.Cisco.com/c/en/us/support/docs/wireless/wireless-LAN-Controller-software/200046-TAC-recommended-AireOS.html

  Then, try the UX above deployment guide to begin. Under Advanced tab WLAN, you need to enable "of the first universal ap' in order to use this app provisioning & connect to the AP.

  If you have more than 1 AP, then you must start 1AP using this application. Other access points that you can feed them upward, while AP original is also powered, so they'll use protocal called NDP & start them automatically

  Let us know how it goes

  HTH

  Rasika

  Pls note all useful responses *.

• Questions of VLAN and configuration for Cisco AIR-CT2504-25-K9 Controller

  Hello

  It's my first time thanks to the Cisco wireless solutions, so I was hopping someone could help me with the following:

  We just bought the AIR-CT2504-25-K9 controller with some points of access for the AIR-CAP1702I-E-K9.

  The network is as follows:

  Peripheral layer 3 (managed by third parties): it's on the domain network. (VLAN by default, 1 - unidentified)

  ADSL router - it's the network without comment thread. (Default Vlan 4 - tagged).

  VOIP: VLAN 5.

  Both fittings go into a switch Cisco SG500 52 (Layer 2). There is a port to shared resources on the switch SG500 with VLAN 1 (Tagged) and VLAN 4 (with tag). The WLAN controller is plugged into this port trunking.

  The data and management network are in the same subnet and on the same VLAN (1).

  I used the wizard on the controller setup.

  There are three interfaces:

  management VLAN ID 1 IP 192.168.1.2 Port 1 (configured with a gateway domain network, DHCP, etc.).

  VLAN wireless identifier 4 IP 192.168.5.1 Port 1 comments (configured with modem router ADSL, DHCP, etc.).

  Virtual IP 192.0.2.1

  Proxy DHCP active overall.

  There are two wlan networks:

  (1) area - management Interface - SSID abc.

  (2) comments - comments Wireless Interface - SSID xyz (the wizard put to management, but I changed it to the wireless).

  Are the AP connected to another SG500 switch which is shared resources to the switch with the controller.

  Ports of the APs are connected to have only 1 VLAN unidentified. They don't have 4 VLAN Tag or not identified. However, everything seems to work as expected.

  When I join the guest network (SSID xyz), I get an IP address from the router ADSL and all Internet traffic goes through him. When I connect to the domain network (SSID abc), I get an IP address from the DHCP in Windows Server and all traffic goes through the device of layer 3 (I checked the public IP address in my browser). I can't ping anything from one network to the other.

  My questions are the following:

  (1) how the guest network traffic (VLAN 4) headed the APs controller when they are connected to the ports on VLAN1? Is it because the traffic is encapsulated?

  (2) is set up correctly? After you configure the controller, I saw a note in the forums, this State I can simply enter 0 for the management of VLANS to let it not identified. However, in my case, I kept it as 1, which is the same as the switches and then the tag VLAN on the switch. In addition, the set Wizard wlan of comments to use the management interface but I changed it to use the comments interface.

  (3) when I connect to the APs of the controller, I see several options that can be configured manually. Is it necessary for this? For example, there is an option of data encryption.

  Thank you

  A

  Hello

  (1) how the guest network traffic (VLAN 4) headed the APs controller when they are connected to the ports on VLAN1? Is it because the traffic is encapsulated?

  Yes, I'm with CAPWAP:

  More information: http://lets-start-to-learn.blogspot.de/2014/08/cisco-wireless-understand...

  (2) is set up correctly? After you configure the controller, I saw a note in the forums, this State I can simply enter 0 for the management of VLANS to let it not identified. However, in my case, I kept it as 1, which is the same as the switches and then the tag VLAN on the switch. In addition, the set Wizard wlan of comments to use the management interface but I changed it to use the comments interface.

  If you want that mgmt interface must be unmarked and then put 0 otherwise you can use vlan 1.

  I do not have what is configured under mgmt and comments interface, but according to the name I'll say yes, you must set the comments under comments wlan interface.

  (3) when I connect to the APs of the controller, I see several options that can be configured manually. Is it necessary for this? For example, there is an option of data encryption.

  Yes, there are many things that you can configure, but I'll leave most of the default of things unless you really need to change!

  The following best practices: http://www.borderlessccie.net/?p=270

  Concerning

  Remember messages useful rates

• Cisco 1602i series Access point installation

  Hello everyone. I tried to configure cisco AIR-CAP1602i-E-K9 series access point is default for the configuration files and other settings, I guess you are looking for WLC. but I do not have a WLC I want to configure the AP a standalone conceerne Access point. I connected via switch where all the ports on the switch are vlan 10 switch is connected to a router and I have configured the router as DHCP server. It is my first time that I've never touched a cisco point for configuration of access. below is the error that was coming up on the screen countinously when I access the AP via the console. Kindly any assistance in this regard would be highly appreciated. Thank you

  * 00:18:46.324 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-CAPWAP-CONTROLLER
  Not in a bound State.
  * 00:19:31.824 Mar 1: % 3-CAPWAP-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.
  * 00:19:36.828 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.
  * 00:19:36.948 Mar 1: DHCP-6-ADDRESS_ASSIGN %: BVI1 Interface assigned address DHCP 10.10.0.218, mask 255.255.255.0, hostname AP64f6.9dee.87d1

  Translate "CISCO-CAPWAP-CONTROLLER"... the domain server (255.255.255.255)
  * 00:19:42.824 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

  * 00:19:51.823 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-CAPWAP-CONTROLLER
  Not in a bound State.
  * 00:20:37.323 Mar 1: % 3-CAPWAP-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.
  * 00:20:42.327 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.
  * 00:20:42.447 Mar 1: DHCP-6-ADDRESS_ASSIGN %: BVI1 Interface assigned address DHCP 10.10.0.219, mask 255.255.255.0, hostname AP64f6.9dee.87d1

  Translate "CISCO-CAPWAP-CONTROLLER"... the domain server (255.255.255.255)
  * 00:20:48.323 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

  * 00:20:57.323 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-CAPWAP-CONTROLLER
  Not in a bound State.
  * 00:21:42.822 Mar 1: % 3-CAPWAP-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.
  * 00:21:47.826 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.
  * 00:21:47.946 Mar 1: DHCP-6-ADDRESS_ASSIGN %: BVI1 Interface assigned address DHCP 10.10.0.220, mask 255.255.255.0, hostname AP64f6.9dee.87d1

  Translate "CISCO-CAPWAP-CONTROLLER"... the domain server (255.255.255.255)
  * 00:21:53.822 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

  * 00:22:02.822 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-CAPWAP-CONTROLLER
  Not in a bound State.
  * 00:22:48.322 Mar 1: % 3-CAPWAP-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.
  * 00:22:53.326 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.
  * 00:22:53.446 Mar 1: DHCP-6-ADDRESS_ASSIGN %: BVI1 Interface assigned address DHCP 10.10.0.221, mask 255.255.255.0, hostname AP64f6.9dee.87d1

  Translate "CISCO-CAPWAP-CONTROLLER"... the domain server (255.255.255.255)
  * 00:22:59.322 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

  * 00:23:08.322 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-CAPWAP-CONTROLLER
  Not in a bound State.
  * 00:23:53.821 Mar 1: % 3-CAPWAP-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.
  * 00:23:58.825 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.
  * 00:23:58.945 Mar 1: DHCP-6-ADDRESS_ASSIGN %: BVI1 Interface assigned address DHCP 10.10.0.222, mask 255.255.255.0, hostname AP64f6.9dee.87d1

  Translate "CISCO-CAPWAP-CONTROLLER"... the domain server (255.255.255.255)

  If you do not have WLC, you will need to convert this access point in stand-alone mode. See below on this post. You must required image before this conversion. If you have a support contract with Cisco you can download from Cisco.com

  https://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/

  https://mrncciew.com/2013/12/13/AP-conversion-using-mode-button/

  HTH

  Rasika

  Pls note all useful responses *.

• Separation of monitor only and Admin for Cisco ASDM (ASA) access for users authenticated via LDAP

  Hello

  We have two groups of ads on network Admins, one for the system administrators group. The network Admins will get Priv lvl 15 the other Priv lvl 3.

  This is the setup I use:

  TestASA # sh run ldap-attribute-map of test4
  Comment by card privileged-level name
  map-value comment fw - ro 5
  map-value comment fw - rw 15
  memberOf IETF Radius-Service-Type card name
  map-value memberOf "cn = s-FW-Admin, OR = security groups, DC = 802101, DC = local" 6
  map-value memberOf "cn = s-fw-ro, OR = security groups, DC = 802101, DC = local" 5

  The user in both groups can connect ssh and asdm but all users get the same rights priv lvl 15.

  Someone at - it an idea?

  You must visit the listed link below to configure ASA to only read access and access admin. not sure, if you have already been there.

  https://supportforums.Cisco.com/docs/doc-33843

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.

• The upgrade of Cisco 1600 access points

  A customer has Cisco 1600 12 access point and they want to add 3 access points. These access points are autonomous access points and the customer is tired to make individual changes by access points.  I suggested that the new access point be base controller, so my question; These existing access points can be upgraded to LWAPP? Or do need to be replaced? Or this controller one web-based access to existing contact points and be controlled.

  so my question; can these existing access point be upgraded to LWAPP? Or do they need to be replaced?

  Yes, existing AP can be converted into TOUR mode with a recovery image. Here's how you can do it (note that there are several ways) http://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/ http://mrncciew.com/2013/12/13/ap-conversion-using-mode-button/ is the good idea to get a WLC (like 2504) to manage in a simple way, rather managing them individually. See below the product bundles available. If this is the case, you will get with license 25AP 2504 for almost for free when you buy 2 x 1702. Make sure that you choose the product of appropriate regulatory AIR-AP1702I-A-WLC HTH Rasika * Pls note all useful responses *.

• Ordered the wrong access point!

  I thought that I had ordered a 1130ag but looks like I ordered a 1131ag LWWAP.

  Please could someone tell me what the difference between a 1130 and 1131. I understand I can load the IOS on the light AP software using a tftp server, but I do not know which exit to load on this subject. 12.3JX, 12.3JA, 12.3JEA, 12.3JEB! can anyone help please? either by the way, I am in the United Kingdom, do not know if this affects image to install. Thank you.

  Hi Paul,.

  This happens all the time, so it shouldn't be a problem :) I'm guessing that you have received this AP - AIR - LAP1131AG - x - K9 LWAPP. When you really wanted this AP - AIR-AP1131G-x-K9 Cisco IOS software. Look at the comparison;

  http://www.Cisco.com/en/us/products/ps6087/products_data_sheet0900aecd801b901c.html

  That being said, you should be good to go with 12.3 (11) JA1.

  To access Cisco Aironet to Cisco IOS version 12.3 Points (11) JA1

  http://www.Cisco.com/en/us/docs/wireless/access_point/iOS/release/notes/b11jar1n.html

  Cisco IOS version 12.3 (11) JA1 supports 32 MB independent platforms. 16 MB platforms and platforms supported by Cisco IOS version 12.3 (8) JA and earlier versions (350, 1100, 1130, 1200 and 1230 access points and access point/bridge 1300 series) are supported by Cisco IOS version 12.3 (8) JEA1.

  Do not install a "JX" (it is a software image support to upgrade and recovery Cisco Lightweight Access Point Protocol (LWAPP));

  These release notes describe features, improvements, and caveats for Cisco IOS release 12.3 (11) JX1.

  Note: This version must be loaded on points of access to the plant or by using the lightweight stand-alone mode upgrade tool. Your access point may become unusable if you install this software without using the upgrade tool.

  http://www.Cisco.com/en/us/docs/wireless/access_point/iOS/release/notes/b311jx1.html

  Returning to standalone Access Point

  http://www.Cisco.com/en/us/products/HW/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272

  You can convert an access point of the mode light return to autonomous mode by loading a Cisco IOS version that supports stand-alone mode (Cisco IOS release 12.3 (7) JA or earlier version). If the access point is associated with a controller, you can use the controller to load the version of Cisco IOS. If the access point is not associated with a controller, you can load the version of Cisco IOS using TFTP.

  By using a TFTP server to revert to a previous version

  Follow these steps to return mode LWAPP stand-alone mode by loading a version of Cisco IOS using a TFTP server:

  --------------------------------------------------------------------------------

  Step 1 the IP address of the computer on which the server software runs TFTP should range from 10.0.0.2 to 10.0.0.30.

  Step 2 make sure the PC contains the file access point (for example, c1200-k9w7 - tar.122 - 15.JA.tar for a 1200 Series access point) in the TFTP server folder and the TFTP server is activated.

  Step 3 Rename the access point image file in the folder of the TFTP server c1200-k9w7 - tar.default for a series of 1200 point, c1130-k9w7 - tar.default of access for a series of 1130 access point and c1240-k9w7 - tar.default for a series of 1240 access point.

  Step 4 connect the PC to the access point using an Ethernet category 5 cable (CAT5).

  Step 5 disconnect the power to the access point.

  Step 6 push the MODE button and hold the button while you reconnect power to the access point.

  Step 7 hold the MODE button until the status of the LED turns red (approximately 20 to 30 seconds), then release.

  Step 8 wait until restarting access point, as indicated by the LEDs become green followed the status LED flashes green.

  Step 9 after the access point reboots, reconfigure using the GUI or the CLI.

  This doc.

  http://www.Cisco.com/en/us/products/HW/wireless/ps430/prod_technical_reference09186a00804fc3dc.html#wp161272

  I hope this helps!

  Rob

• to convert 1142N AP autonomous lightweight access point

  Hello

  I have 4 1142N access points are all points of light access. Because I don't have a controller, I need to convert to standalone AP.

  I went through document cisco 1142, where it is mentioned that "the access point 1142 doesn't have the default IP address"

  I know procedure to convert offline in which I need to connect ap to the TFTP 10.0.0.1 with the ip address by default, but as for 1142, we do not have the default ip address. What is the procedure to convert offline?

  I have to assign a pool in one of the local switch and connect the ap to these switches with vlan, so she will receive the IP address of the DHCP server?

  But how can we without default IP address? I wonder about this...

  If I did not turn on where I can assign pool dhcp... what should I do?

  Please suggest me to convert 1142 standalone AP ap...

  I will be thankful to get the right answer...

  Hi Vinod,

  Here's the resolution...

  The image that is on the device's LWAPP, not the autonomous... If you want to use the AP in stand-alone mode, then the image must be W7...  It's...

  C1140-k9w7 - tar.124 - 21A .JY .tar not c1140-rcvk9w8 - tar.124 - 23c.JA.tar

  Please feel free to download any image from the below link and perform the conversion of image LWAPP to stand alone...

  http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=IOS+Software&mdfid=282439881&treeName=Wireless&mdfLevel=Model&url=null&modelName=Cisco+Aironet+1140+Access+Point&isPlatform=N&treeMdfId=278875243&modifmdfid=null&imname=&hybrid=Y&imst=N

  the methos to convert is...

  Download TFTPd32 of google and install it on your PC... point of the image that you downloaded on the TFTP server.

  Connect a cable ethernet between your notebook and AP... both should be on the same subnet... Connect a cable from the console and access the hyperterminal console with the command... Make sure that you are able to ping the PC and AP and vice versa!

  AP > en

  AP #debug lwapp console cli or debugging console cli capwap

  T AP #config

  AP (confg) int FA 0

  AP(confg-IF) ip addr (same subnet as the laptop)

  End AP(confg-IF)

  Force - reload DOWNLOAD - AP #archieve sw / overwrite tftp: / /.

  Force - reload DOWNLOAD - AP #archieve sw / overwrite tftp: / /<10.0.0.5>/c1140-k9w7-tar.124-21a.JY.tar

  The above command will do it for you!

  Let me know if that answers your question...

  Concerning

  Surendra

  ========

  Please don't forget to rate the post if this has been useful for you or useful

• NETGEAR D7000 - Mode Access Point - connection problems with iOS Devices

  Hello

  Having a problem with my Netgear D7000 in mode access point.

  My laptop (MacBook Pro) can successfully connect to WiFi and my PC connects fine cable using the D7000 as a switch.

  iOS devices, however, hurt that is to get or maintain a connection - even if they connect to and then some time later they will fall the network. Go to settings shows the client attempts to connect, but seems to be stuck with an assigned random IP (not on the subnet of law), no gateway by default, etc..

  iOS clients are an iPad 3, iPhone 5 & iPhone 5 c. All about the latest version of iOS.

  Other access points by train (Belkin, billion) that's fine.

  DHCP etc. everything is managed by my router which is a constant for all devices and access points - but I tried to change that, and he has not made a difference also.

  D7000 is on the latest firmware (v28), I tried to reset it and setting up from scratch, but no joy.

  Any ideas?

  Change the channel seems to resolved this problem.

• Access Point WAP200 is compatible with the injector WAPPOE12?

  Hello!!!

  I want to bring the power of an Access Point WAP200. I need to know if the WAPPOE12 injector is compatible with this kind of Access Point.
  I deployed 108 AP WAP200 in a wireless network and I want to know what type of power injectors, I use in this set.

  Thank you!!
  Best regards, Carlos

  Hi cramosfors. The search of the forums I found this.

  http://homecommunity.Cisco.com/T5/access-points/WAP200E-with-WAPPOE12/m-p/204398/highlight/true#M798...

• Impossible to find a stand-alone image for Cisco Aironet 1140

  Can someone give a link?

  -JeIlMa

  Here you go:

  http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=IOS+Software&mdfid=282439881&treeName=Wireless&mdfLevel=Model&url=null&modelName=Cisco+Aironet+1140+Access+Point&isPlatform=N&treeMdfId=278875243&modifmdfid=null&imname=&hybrid=Y&imst=N

• My canon printer mx420 does not see my router to access point

  My canon printer mx420 does not see my router to access point. What can I do about it.

  Hello Rick,

  I went online on the website of Canon, and there were 25 games for "printer sees router access point; you might want to try this page: http://www.usa.canon.com/cusa/support/consumer/printers_multifunction/pixma_mx_series/pixma_mx420?CMD=MIXED_SEARCH&mName=PIXMA+MX420&mType=PIXMA+MX&pageKeyCode=ekbresults&searchString=doesn't+see+router+access+point&BASIC_SEARCH_CURRENT_TOPIC_ID=1076&BASIC_SEARCH_CURRENT_TOPIC_TYPE=0&RESULTS=RELEVANCE&RELEVANCE_START=1&RELEVANCE_COUNT=25&CONFIGURATION=1011&PARTITION_ID=1&TIMEZONE_OFFSET=null&USERTYPE=1&isSecure=false .

  If you have no luck after visiting the Canon site, post back here with what you tried, and we'll go from there. I hope this helps you.

  Kind regards

  BearPup

• configuration cisco air-ap1142n-a-k9 problem wpa2 wireless access point

  HI people,

  I am brand new to Cisco Wireless, just that I bought new wireless access point air-ap1142n-a-k9 cisco, try to configure the configuration of wpa2 for security reason, but impossible to configure in any mode security. So my AP is currently no security / encryption mode.

  Could someone can help and suggest me I will appreciate if I get all documents, so the security problem can be solved.

  Concerning

  Sanjeev

  OK great

  ----------------------------------------------------------------------------------------------------------------------

  Be sure to note the correct answer and mark the thread as answered

• Access point of the AIR-CAP1602E-N-K9

  Hello

  can someone help me set up AIR-CAP1602E-N-K9 as autonomous access point.

  This is a new default affecting by my knowledge, it's a point of access controller based pls if help how to convert in autonomous access point and the image that is compatible with that.

  Hi Kamal,

  Hope links below will keep you started with LWAP autonomous.

  http://www.Cisco.com/en/us/docs/wireless/access_point/conversion/LWAPP/u...

  https://supportforums.Cisco.com/docs/doc-14960

  http://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/

  For standalone AP, you can use the configuration below. In the link below, you can skip the configuration under 'bridge Configuration.

  https://supportforums.Cisco.com/document/61936/autonomous-AP-and-bridge-...

  Hope that helps.

  Concerning

  Najaf

• Correct configuration of the Cisco Access Point 1242AG

  Hi all

  Here's the situation:

  Recently, we decided to create a small network of WLAN in our company. We choose the Cisco AIR-AP1242AG-E-K9 with 2x2.4GHz 2.2dbi rotating dipole antenna.

  For better management, a new VLAN routable (ID:20) added to our router IP 192.168.55.1 and SNET 255.255.255.0

  Then, I made the following configurations in the autonomous AP through WEB Console:

  • Static IP:192.20.10.35, SNET:255.255.254.0, GWY:192.20.10.200
  • Vlan1 (native) and VLAN20 (Radio0 - 802.11 g) added in Services.
  • I put the encryption against zero for VLAN1 Mode and cipher AES-CCMP for VLAN20
  • In Server Manager, I've defined a new 192.20.10.35 RADIUS server (AP-IP) and a secret shared and left the default ports for authentication and accounting (1645 and 1646). Also, in the default server priorities section I put focused 1 time for authentication EAP and the IP (Radius Server) 192.20.10.35 Access Point MAC.
  • During the General local RADIUS server configuration, I add as a server for access to the network current (AAA client) the same IP address and the shared secret as the ones I use during the configuration of the RADIUS server above. In authentication protocols enable I left checked only the JUMP and the Mac. In addition, in the users individual section 2 new users created with passwords.
  • In the SSID Manager a new hidden SSID created for interface Radio0 - 802.11 g, associated with VLAN20 and in the Client authentication settings section, I left as accepted authentication open with MAC and EAP authentication method. Also, I left the option to use by default for EAP and MAC authentication servers in Server priorities Section and finally I choose mandatory for key management in the section Client authenticated and active the option enable WPA key management.

  I can ping VLAN20 IPs from any PC which is a member of the VLAN native both AP

  As wireless clients, I use 2 Motorola MC5574 with Windows Mobile 6.1 professional. Both of them have a WLAN Jedi adapter that is configured with the following:

  IPs:192.168.55.10 and 192.168.55.11

  SNET:255.255.255.0

  GWY:192.168.55.1

  In addition, a unique profile has been created on all of them to use for the authentication of the association AP. Each profile has been configured for WPA2-Enterprise with AES and LEAP and identification information predefined user (those defined in the PA for individual users)

  The problem:

  Association of clients with AP is always successful but, authentication fails, and I can't ping the AP IP, IP VLAN20, nor the other customers.

  What I'm missing here? I'm sure it's quite simple somenthing but although I tried several different configurations (even WPA - PSK, WPA2-PSK with TKIP) I always find myself without an appropriate solution to unable to ping.

  Thanks in advance for any help

  Hello

  Can you please paste the show run out of AP?

  Kind regards

  Madhuri