FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine Release 2.5 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
C ON T E NT S CHAPTER 1 FAQs and Troubleshooting 1-1 General FAQs and Troubleshooting 1-1 Faults FAQs and Troubleshooting 1-11 Devices FAQs and Troubleshooting 1-13 Configuration FAQs and Troubleshooting 1-19 Firmware FAQs and Troubleshooting 1-24 Reports FAQs and Troubleshooting 1-32 Radio Manager FAQs and Troubleshooting 1-36 Administration FAQs and Troubleshooting 1-43 CHAPTER 2 Fault Descriptions 2-1 Access Point Faults 2-2 WLSE Fault 2-20 AAA Server Faults 2-20 Switch Faults 2-25 Router Fault 2-2
Contents FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine iv
C H A P T E R 1 FAQs and Troubleshooting This FAQ and troubleshooting guide consists of the following sections: • General Questions—See General FAQs and Troubleshooting, page 1-1 • Faults—Faults FAQs and Troubleshooting, page 1-11 • Devices—Devices FAQs and Troubleshooting, page 1-13 • Configuration—Configuration FAQs and Troubleshooting, page 1-19 • Firmware—Firmware FAQs and Troubleshooting, page 1-24 • Reports—Reports FAQs and Troubleshooting, page 1-32 • Radio Manager —Radio Manager FAQs
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting • Is Telnet enabled or disabled by default on the WLSE? • Can SSH be disabled?, page 1-2 • Can I run a job to convert a number of access points from non-IOS to IOS? • What are the requirements for WLSE usernames and passwords? Q. Can several users be logged on and managing the same access point at once? A. Yes, several users can view data and reports on the same access point.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting Q. Can I run a job to convert a number of access points from non-IOS to IOS? A. Yes, you can run a firmware job, using a special IOS upgrade image that is available on Cisco.com. For more information, see the firmware upgrade information in the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.5. Q. What are the requirements for WLSE usernames and passwords? A.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting Symptom After the WLSE reboots, the login screen appears, followed by an Internal Server Error message. Possible Cause The servlet engine in the WLSE is starting up. Recommended Action Wait for 20 to 30 seconds, then log in again. Symptom A search for an access point using APs Based on Client IP, displays the following message, “search yielded no results.” Possible Cause The device you are searching for is an IOS device.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting Symptom Cannot log into the system. Possible Cause You did not run the setup program to create an initial system configuration or you lost all the user account passwords. Recommended Action 1. Did you run the setup program after booting the system for the first time? If no, run the setup program. If yes, continue to the next step. 2.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting 5. Enter the following command. This erases the WLSE’s configuration, returns the WLSE to factory defaults, and reloads the WLSE. [root@CiscoMaintImage/]# erase config Symptom After the WLSE starts up, the setup login prompt appears. Use the setup program. The WLSE cannot connect to the network. Possible Cause – The network cable is not connected to the Ethernet 0 port. – The Ethernet 0 interface is disabled or misconfigured.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting If the ping command gets a response, the system is connected to the network. If the system cannot connect to a particular host, the problem is either with the network configuration or that host. Contact your network administrator for assistance. If the ping command does not get a response, continue. – Attempt to connect to another host on the same subnet as the system.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting – If connecting via HTTP, the IP address was not appended with :1741. – The client system is not configured. Recommended Action 1. Make sure that the system can connect to the network. Attempt to connect the system using a Web browser. If you cannot connect, continue. 2. If you are attempting to connect via HTTP, verify that the IP address is appended with :1741. 3.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting For more information on the reload command, see the CLI appendix in the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.5. You can access a PDF version of this guide by clicking View PDF in the WLSE’s online help. 10. If you still cannot connect to the system using a Web browser, contact Cisco’s Technical Assistance Center for assistance. Symptom The system time or date is incorrect.
Chapter 1 FAQs and Troubleshooting General FAQs and Troubleshooting Symptom Cannot connect to system with Telnet or Telnet interaction is slow. Possible Cause – Telnet is disabled or configured incorrectly. – The WLSE cannot recognize host names. If you are not using name recognition, slow or non-existent telnet interaction is an expected problem. Note Telnet is disabled by default. SSH is enabled by default. Recommended Action If the problem is not the network, perform the following steps.
Chapter 1 FAQs and Troubleshooting Faults FAQs and Troubleshooting 4. Verify that the system can get DNS services from the network by entering the following command: # nslookup dns-name {hostname | ip-address} where dns-name is the DNS name of a host on the network that is registered in DNS and hostname and ip-address is the same IP address specified in 2. The command returns the IP address of the host. 5.
Chapter 1 FAQs and Troubleshooting Faults FAQs and Troubleshooting Q. Does acknowledging a fault clear it? A. No, it only removes it from the Active list. For a description of fault states, see the information on understanding fault states in the online help. Q. What traps are sent from the WLSE? A. Traps are sent based on fault policy and threshold settings on the WLSE. The WLSE only sends out v2c traps, so make sure your trap listener is configured to accept v2c traps. Solaris 2.8- based NetView 7.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting Symptom Email fails to arrive at its destination. Possible Cause The SMTP server is not configured properly. Recommended Action Configure the SMTP server by selecting Administration > Appliance > Configure Mailroute. Symptom No VLAN fault information is displayed for IOS access points. Possible Cause WEP keys have not been configured in each VLAN.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting Q. Why is hostname (device name), sysContact, and sysLocation information not updated in the WLSE after I change these parameters on the access point? A. The hostname (device name), sysContact, and sysLocation parameters are updated during discovery, not during inventory. Make sure you schedule a periodic discovery under Administration > Discover > Scheduled Discovery. Q. What is an invalid CDP seed? A.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting Devices Troubleshooting This section contains the following troubleshooting information: • Devices were discovered but are not displayed in the GUI; for example, in Reports. • There is a time discrepancy in the scheduled discovery jobs. • Devices are placed in Misconfigured Devices group after discovery and dot11mib fault is displayed.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting a. Reset the WLSE system time (UTC) using CLI commands as follows: Enter services stop to stop services. Enter the clock command to reset the time. Enter services start to restart the services. b. Set the local browser time. Select Administration > Appliance > Time/NTP/Name. Symptom Devices are placed in Misconfigured Devices group after discovery and dot11mib fault is displayed.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting a. Use the procedures in the configuration template instructions in the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, 2.5 to create a template. b. Enter the following custom values in the template: snmp-server view iso iso included snmp-server community community_string view iso RO c.
Chapter 1 FAQs and Troubleshooting Devices FAQs and Troubleshooting Symptom Access points are placed in Misconfigured Devices group even though they have been configured with the correct ISO views. Possible Cause Unknown. Recommended Action Delete the access points from the WLSE and run a new discovery on them. Symptom The SNMP Query Authorization Exception is recorded in the discovery log. Possible Cause The community string on the access point does not have admin and firmware rights.
Chapter 1 FAQs and Troubleshooting Configuration FAQs and Troubleshooting Possible Cause If there are also SNMP timeouts on the network, inventory jobs will take much longer. Other jobs may be using all of the available resources. Also, the next scheduled inventory will not run until the current inventory finishes. Recommended Action None. Symptom When entering device Telnet or SSH credentials on the WLSE, authentication fails if the & character appears in a name or password.
Chapter 1 FAQs and Troubleshooting Configuration FAQs and Troubleshooting • If I make changes to the startup template, will those modifications be automatically uploaded to the access points that already had that startup template applied? • What is auto configuration? • Can I give a configuration job a name that is used for a firmware or radio management job? Q.
Chapter 1 FAQs and Troubleshooting Configuration FAQs and Troubleshooting – HTTP credentials for the device (with admin and firmware privileges on the access point) must match those entered on the WLSE HTTP device credentials screen. – TFTP server settings on the access point (Setup > FTP), must refer to the WLSE’s IP address. Note • Both username and password in the device credentials are case sensitive. The SNMP mechanism is valid for versions 11.08T and higher.
Chapter 1 FAQs and Troubleshooting Configuration FAQs and Troubleshooting Q. What is startup configuration? Startup configuration is used right after a device (access point) reboots. It requires DHCP server to be properly set up to allow the access point to pick its startup configuration from WLSE. For this to work, you must set up the following: a. Enter the in the Boot Server Host Name field (option number 066) on the DHCP server. b.
Chapter 1 FAQs and Troubleshooting Configuration FAQs and Troubleshooting Symptom HTTP configuration jobs are picking up the wrong template. Possible Cause If the access point’s FTP setting is the same as the DHCP server, then HTTP config job picks up the wrong template from wrong WLSE server. Recommended Action None. This is how the access point functions and there is no workaround. Symptom An IOS template job failed.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Firmware FAQs and Troubleshooting • Firmware FAQs, page 1-24 • Firmware Troubleshooting, page 1-26 Firmware FAQs • How can firmware images be imported? • Are firmware jobs run by using both HTTP and SNMP? • What kinds of job logs are available? • How many devices can I have in one firmware job? • Can I give a firmware job a name that is used for a configuration or radio management job? Q.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Note • Both username and password in the device credentials are case sensitive. SNMP is valid for versions 11.08T and higher. The following setup parameters must be in place for SNMP to function properly: – SNMP credentials for the device (with admin and firmware privileges on the AP) must match those entered on the WLSE SNMP device credentials screen.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Q. Can I give a firmware job a name that is used for a configuration or radio management job? A. No. Job names cannot be duplicated. Firmware Troubleshooting • There is a time discrepancy in a job. • Email about job completion fails to arrive at destination. • Firmware is not updated on all the devices included in a job. • An SNMP job fails. • A firmware job ends with status “not verified.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting b. Set the time in local browser time, select Administration > Appliance > Time/NTP/Name. For more information on setting the time, see the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.5. You can access a PDF version of this guide by clicking View PDF in the WLSE’s online help. Symptom Email about job completion fails to arrive at destination. Possible Cause The SMTP server is not specified.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Symptom An SNMP job fails. Possible Cause The read community string does not have sufficient permissions. Recommended Action The access point must have a user with at least SNMP, FIRMWARE, and ADMIN permissions for read-only access. Access points with software releases prior to 12.01(T) must have a user with SNMP, FIRMWARE, ADMIN, and IDENT permissions for read-only access. Symptom A firmware job ends with status “not verified.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Note Do not make this value extremely high. It is advisable to keep this value to something slightly higher than the actual reboot time of the slowest access point. Symptom Firmware jobs over slow links do not succeed. Possible Cause The access points being upgraded are connected to the WLSE over a slow link (less than 1.544 Mbps) and the job is timing out.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Symptom When downloading firmware from Cisco.com, an error message about cryptography permissions appears. Possible Cause The first time you attempt to download firmware, the WLSE displays this message: Error while selecting or displaying image details. Please log into cisco.com and make sure your username has acknowledged cryptography permissions for downloading IOS images . Recommended Action Log into Cisco.
Chapter 1 FAQs and Troubleshooting Firmware FAQs and Troubleshooting Device Login Sequence Telnet Credential Fields Required Username: Password: prompt >enable Password: enable prompt # User Name Password: prompt > enable Password: enable prompt # User Password prompt > enable Password: enable prompt # Enable Password enable prompt # Not supported. Configure the device accordingly.
Chapter 1 FAQs and Troubleshooting Reports FAQs and Troubleshooting Reports FAQs and Troubleshooting • Reports FAQ, page 1-32 • Reports Troubleshooting, page 1-32 Reports FAQ Q. Are any of the reports real-time reports? A. The reports are not real time. They are based on data that is collected periodically. The frequency with which the data is collected is user configurable (see Devices > Discover > Inventory > Polling).
Chapter 1 FAQs and Troubleshooting Reports FAQs and Troubleshooting Symptom The Top N Busiest Clients report and the Client Statistics report display 0 (zero) values. Possible Cause Wireless client polling frequency is set to 51 minutes by default. The counters could reset between two polling cycles which would cause zero values when the reports are run. Recommended Action Increase the polling frequency by selecting Devices > Discover > Inventory > Polling.
Chapter 1 FAQs and Troubleshooting Reports FAQs and Troubleshooting Symptom The access point data in the Historical Associations report is not accurate. Possible Cause The wireless client was associated with an access point managed by the WLSE, but subsequently associated with an access point that was added to the network, but not yet managed by the WLSE.
Chapter 1 FAQs and Troubleshooting Reports FAQs and Troubleshooting Symptom After running a job, the updated data does not appear in a report. Possible Cause A full polling cycle has not completed and the new data has not been entered in the database. Recommended Action Verify that the polling cycle has completed as follows: a. Select Administration > Appliance > Status > View Log File. b. Click jobvm.log. c. Scroll through the log to find the message: “Finished Inventory” for your particular job.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting Symptom No VLAN information is displayed for IOS access points. Possible Cause WEP keys have not been configured in each VLAN. When the WEP keys are configured in the IOS access points, VLAN information is accessible by SNMP. Recommended Action Configure the WEP keys for the corresponding VLAN.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting • In the Assisted Site Survey Wizard, what does None mean in the Last Scan Time field? • In the Assisted Site Survey Wizard, why is the Next button disabled on the radio scan step? • Why did my radio scan job fail in the Assisted Site Survey Wizard? • When I’m using the Assisted Site Survey Wizard, the radio scan progress advances very slowly.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting A. No, each AP does not need to be enabled as a WDS AP. Rather, each AP participating in the Radio Monitoring should have a subset of the WDS configuration which includes only the WLCCP username and password. Q. If so, do I need a separate username and password for each? If not, how many WDS APs would I need? A. No, you do not need a separate username and password for each.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting Device Discovery in the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, 2.5. After adding the device and specifying its location, restart the Assisted Site Survey Wizard. Q. When I select devices in the Assisted Site Survey Wizard, why are some shown in red? A. The devices might be red if: – The devices are not in the Managed state.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting – Make sure the devices have the correct setup for WDS. Also verify that WDS is authenticated to WLSE and that WDS has an IP address pointing to WLSE. – Make sure the devices have the correct SNMP read/write community strings that match the WLSE setting. Q. When I’m using the Assisted Site Survey Wizard, the radio scan progress advances very slowly. How long does it radio scan normally take? A.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting Q. How long should the Constraints and Goals calculation step take in the Assisted Site Survey Wizard? A. It varies depending on the amount of radio scan and client walkabout data. The more data you have, the longer it will take to calculate. Q. Where can I see the result of the Constraints and Goals calculation in the Assisted Site Survey Wizard? A. If the calculation was successful, you can click Next to view the result. Q.
Chapter 1 FAQs and Troubleshooting Radio Manager FAQs and Troubleshooting Radio Manager Troubleshooting • WDS has been set up on the AP and WLSE, but WDS isn't authenticating with WLSE. • My clients are not being authenticated through WDS. • After completing the Assisted Site Survey, Location Manager did not update to include the applied configurations. Symptom WDS has been set up on the AP and WLSE, but WDS isn't authenticating with WLSE.
Chapter 1 FAQs and Troubleshooting Administration FAQs and Troubleshooting Symptom My clients are not being authenticated through WDS. Possible Cause You have not created a server group on the WDS APs for client authentication. Recommended Action To create a server group on the WDS APs for client authentication, you can use the AP CLI, the AP web interface, or the WLSE configuration templates.
Chapter 1 FAQs and Troubleshooting Administration FAQs and Troubleshooting Administration Troubleshooting This section contains the following troubleshooting information: • Users cannot log in after failure of the alternative authentication source. • Some users are not listed under User Admin > Manage Users. • When using Internet Explorer 6.0 to install a new image on a WLSE from a repository located on a Windows XP machine, the progress bar does not appear in the Install Software Updates window.
Chapter 1 FAQs and Troubleshooting Administration FAQs and Troubleshooting Symptom When using Internet Explorer 6.0 to install a new image on a WLSE from a repository located on a Windows XP machine, the progress bar does not appear in the Install Software Updates window. This problem also occurs when you use Internet Explorer 6.0 and a Windows XP system as a client to install a new image on a WLSE. Possible Cause The Internet Explorer 6.
Chapter 1 Administration FAQs and Troubleshooting FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine 1-46 FAQs and Troubleshooting
C H A P T E R 2 Fault Descriptions This section provides the following information on the faults displayed in Faults > Display Faults. The following information is provided: • Fault—The fault as it appears in the Display Faults table. • Explanation—An explanation as to why the fault occurred. • Related Setting—The threshold or policy you assigned to devices under Faults > Manage Fault Settings, when applicable. • Recommended Action—An action that can be taken to clear the displayed fault.
Chapter 2 Fault Descriptions Access Point Faults Access Point Faults Table 2-1 Access Point Faults Fault Description Type Explanation Related Setting Recommended Action AP is in a Degraded state number associated clients Non-IOS and IOS The fault threshold set for the degraded state has been exceeded. Manage Fault Settings > Thresholds > Access Point > Associated Clients Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation AP is not registered with any WDS IOS The managed IOS access point is not registered with any WDS. Broadcast Key Rotation is disabled Non-IOS and IOS Manage Fault Settings > Access Point > Thresholds > For Radio Manager Registration Error functionality to work, all IOS access points must register with a WDS.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action Client association rate is Degraded number per minute Non-IOS and IOS The fault threshold set for the degraded state has been exceeded. Manage Fault Settings > Thresholds > Access Point > Association Rate Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action Client authentication error rate is Overloaded number per minute Non-IOS and IOS The fault threshold set for the overloaded state has been exceeded. Manage Fault Settings > Thresholds > Access Point > Authentication Error Rate Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Duplicate IP is found Non-IOS and IOS Explanation Related Setting Recommended Action Do one of the following: There is no setting • Assign a new IP associated with address to the device. this fault.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action EAP per SSID is disabled Non-IOS and IOS EAP per SSID has been disabled on the access point. Manage Fault Settings > Security Policies > EAP Per SSID Enforced Log in to the access point and enable the Network EAP and Open authentication per SSID.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action Firmware version policy violation (version number) Non-IOS and IOS The wrong version number for policy checking has been entered. Manage Fault Settings > Security Policies > Firmware Version When this fault is cleared, the following message displays: Firmware version is valid.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action HotStandBy is active Non-IOS and IOS The access point that is configured for hot standby has become active.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action For IOS access points: 1. 2. Check the primary access point, the Ethernet port, or the Radio port to see why the hot standby access point has been activated. Correct the condition. For example, if the Radio Port on the formerly active access point was in a disabled state, then enable it using the access point GUI. 3.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action HTTP access is enabled Non-IOS HTTP has been enabled on the access point. Manage Fault Log in to the access point and disable HTTP access. Settings > Security Policies > HTTP Disabled When this fault is cleared, the following message displays: HTTP access is disabled.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Packet Error is in is in Non-IOS Overloaded state and IOS (error rate %) Explanation Related Setting Recommended Action The fault threshold set for the overloaded state has been exceeded. Manage Fault Settings > Thresholds > Access Point > RF Port Packet Errors Verify that the fault threshold is set correctly. This fault is not generated based on a threshold or policy violation.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action PSPF is disabled Non-IOS The PSPF port has been disabled. Manage Fault Settings > Security Policies > PSPF Enabled Log in to the access point and enable the PSPF setting. Manage Fault Settings > Thresholds > Access Point > Max Retry Counts Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action Retry Count rate is Overloaded number per minute Non-IOS and IOS The fault threshold set for the overloaded state has been exceeded. Manage Fault Settings > Thresholds > Access Point > Max Retry Counts Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type SNMP query received Non-IOS authorization error response Explanation Related Setting Recommended Action The access point's user community strings do not have Admin, Ident, Firmware, SNMP privileges. The WLSE might not be able to access some SNMP information from the access point that requires these privileges.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type SSID policy violation Non-IOS SSID assigned to the and IOS access point Explanation Related Setting Recommended Action The SSID entered in the WLSE is different from the SSID assigned to the access point. Manage Fault Settings > Security Policies > SSID When the fault is cleared, the following message displays: SSID is valid. The access point is configured with an unauthorized SSID.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Telnet access is enabled Non-IOS Telnet has been enabled on the access point. User capabilities are not enforced Non-IOS The enableUserMgr Manage Fault Log in to the access point and enable the User Mgr setting is not set on Settings > setting. Security the access point.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation Related Setting Recommended Action WDS appears down. IOS The WLSE failed to receive “keep active” messages from the WDS. This happens when the WDS is down or when the network is down. Manage Fault Settings > Thresholds > WDS > WLSE-WDS Link Status Check the network connectivity, the WDS status, and the WLSE and WDS credentials.
Chapter 2 Fault Descriptions Access Point Faults Table 2-1 Access Point Faults (continued) Fault Description Type Explanation WEP key length policy violation Non-IOS and IOS The WEP key length setting has been violated. WNM failed to authenticate with WDS. IOS Authentication required to open a WLCCP channel between the WLSE and the WDS failed.
Chapter 2 Fault Descriptions WLSE Fault WLSE Fault Table 2-2 WLSE Fault Fault Description Explanation Related Setting Recommended Action Dot11mib view is not enabled on some Access Points. Please consult online help for details The device is not configured with the iso (dot11 mib) view, and cannot be managed effectively by the WLSE.
Chapter 2 Fault Descriptions AAA Server Faults Table 2-3 Server Faults (continued) Fault Description Server Type Explanation Related Setting EAP-MD5 server EAP-MD5 The EAP-MD5 server Manage Fault Settings > is not available is not available. Thresholds > Leap > When this fault has Response Time been cleared, the Recommended Action Check the server configuration.
Chapter 2 Fault Descriptions AAA Server Faults Table 2-3 Server Faults (continued) Fault Description LEAP server is not available Server Type LEAP Explanation Related Setting Manage Fault Settings > This can be caused if Thresholds > Leap > you have enabled this Response Time policy and you are using a non-Cisco client with EAP. The LEAP server is not available. Recommended Action Check the server configuration.
Chapter 2 Fault Descriptions AAA Server Faults Table 2-3 Server Faults (continued) Fault Description PEAP server is not available Server Type PEAP Explanation Related Setting Recommended Action The PEAP server is not available. Manage Fault Settings > Thresholds > Peap > Response Time Check the server configuration. Manage Fault Settings > Thresholds > Peap > Response Time Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions AAA Server Faults Table 2-3 Server Faults (continued) Fault Description Radius server is Degraded Server Type PEAP Explanation Related Setting Recommended Action The fault threshold set for the degraded state has been exceeded. Manage Fault Settings > Thresholds > Radius > Response Time Verify that the fault threshold is set correctly. Manage Fault Settings > Thresholds > Radius > Response Time Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Switch Faults Switch Faults Table 2-4 Switch Faults Fault Description Explanation Related Setting Recommended Action CPU utilization is Degraded (utilization %) The fault threshold set for the degraded state has been exceeded. Manage Fault Settings > Thresholds > Switch > CPU Utilization Verify that the fault threshold is set correctly. Manage Fault Settings > Thresholds > Switch > CPU Utilization Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Switch Faults Table 2-4 Switch Faults (continued) Fault Description Explanation Port could not agree with The port could not other end on duplex mode agree with the far end on port duplex, and is in disagree(3) mode. Related Setting Recommended Action This fault is not generated based on a threshold or policy violation. Make sure the duplex mode on both ends match.
Chapter 2 Fault Descriptions Switch Faults Table 2-4 Switch Faults (continued) Fault Description Explanation Related Setting Recommended Action Switch Port bandwidth utilization is Degraded (utilization %) The fault threshold set for the degraded state has been exceeded. Manage Fault Settings > Thresholds > Switch > Port Utilization Verify that the fault threshold is set correctly. Manage Fault Settings > Thresholds > Switch > Port Utilization Verify that the fault threshold is set correctly.
Chapter 2 Fault Descriptions Router Fault Router Fault Table 2-5 Router Fault Fault Description Explanation Related Setting Recommended Action Device was not reachable via SNMP The SNMP Agent on the switch is down. Manage Fault Settings > Thresholds > Router > SNMP Reachable Make sure that the router SNMP agent is active. When this fault has been cleared, the following message displays: Device was reachable via SNMP.
I N D EX A C AAA server CDP fault descriptions 2-20 discovery without using 1-14 access point seed, invalid 1-14 accessing through WLSE, troubleshooting 1-4 AP web page, accessing 1-4 fault descriptions 2-2 client inventory, troubleshooting 1-18 reports 1-33 configuration interface auto-configuration 1-22 adding, results of 1-14 removing, results of 1-14 reports, VLAN information in 1-36 Administration tab FAQs 1-19 IOS template job failures 1-23 job history, retention of 1-20 protocols used f
Index date and time incorrect 1-9 reports 1-32 faults device credentials, Telnet/SSH 1-19 AAA server fault descriptions 2-20 device name, updates to 1-14 access point fault descriptions 2-2 Devices tab acknowledging 1-12 FAQs 1-13 clearing 1-12 troubleshooting 1-15 descriptions of 2-1 discovery email of 1-13 devices discovered, but not displayed 1-15 FAQs 1-11 Misconfigured Devices group 1-16 MIB file 1-12 seed devices 1-14 no display 1-12 SNMP Authorization Exception in discovery log 1
Index connection failure 1-6 G groups Misconfigured Devices group 1-16 P passwords, loss of 1-5 performance I problems caused by frequent client inventory 1-18 inventory effects on traffic and performance 1-18 protocols extra inventories 1-14 SSH, disabling 1-2 FAQs 1-14 Telnet, enabling 1-2 length of time required 1-18 used for configuration jobs 1-20 L R logging in radio manager Assisted Site Survey cannot log in 1-5 cannot log in as system administrator 1-5 client walkabout, skipping 1
Index updates radio scan slow 1-40 Recall button 1-40 Use Old Radio Scan Data disabled 1-39 Internet Explorer, problems using 1-45 SSH FAQs 1-36 disabling 1-2 inventories run by 1-14 switches, fault descriptions 2-25 troubleshooting 1-42 sysContact information, updates to 1-14 reports sysLocation information blank fields in 1-33 updates to 1-14 client reports, 0 values in 1-33 FAQs 1-32 not real-time 1-32 troubleshooting 1-32 VLAN information missing 1-36 routers, fault message for 2-28 T Tel
Index U users authentication failure 1-44 not listed in UI 1-44 password created in CLI not accepted 1-45 simultaneous access to access points 1-2 V VLANs in reports 1-36 FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine IN-5
Index FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine IN-6