¶ Header
¶ VM install
- Main Page https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide.html
- VMware Install: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide/installing_the_controller.html
- KVM Install: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide/installing_the_controller_in_kvm_environment.html
¶ VM Installation
Download file to PC, then upload using vcenter Deploy C9800-CL-universalk9.17.09.05.ova
Virtual machine name: TNV200-vWLC-PodA
1K APs, 10K Clients, High Throughput (7 vCPU, 8 GB RAM, 3 VNICs, 16 GB Disk)
SAN disk Production
GigabitEthernet1 Vlan 17
GigabitEthernet2 Vlan 16
GigabitEthernet3 Vlan 36
- GigabitEthernet 1 to device management interface and map it to the out-of-band management network.
- GigabitEthernet 2 to wireless management interface and map it to the network to reach APs and services. Usually this interface is a trunk to carry multiple VLANs.
- GigabitEthernet 3 to high-availability interface and map it to a separate network for peer-to-peer communication for SSO.
--
Hostname: PodA-vWLC
Password: 2001:6b0::
2. Device Management/Service Interface Configuration
4 settings
2.1 Device Management/Service Interface
Management interface (such as "GigabitEthernet1")
2.2 Device Management/Service Interface IPv4 Address/Netmask
IPv4 address and mask for management interface (such as "192.0.2.100/24" or "192.0.2.100 255.255.255.0"), or "dhcp" to configure via DHCP
192.168.17.5x/24
2.3 Device Management/Service Interface IPv4 Gateway
IPv4 gateway address (such as "192.0.2.1") for management interface, or "dhcp" to configure via DHCP
192.168.17.1
2.4 Remote Device Management/Service Network Route/Netmask
This will add a route to the remote network where you want to manage your device from (Hint: To add the default route enter 0.0.0.0)
0.0.0.0
#####################################
3. User login Configuration
4 settings
3.1 Login Username
Username for remote login
tnv
3.2 Login Password
Password for remote login. WARNING: While this password will be stored securely within IOS, the plain-text password will be recoverable from the OVF descriptor file.
Password 2001:6b0::
Confirm Password 2001:6b0::
Serial Number for the C9800-CL Instance <leave blank>
Specify the S/N of the instance if already generated(Alpha Numberic format only, E.g:94TSWI79AYW)
<leave blank>
PnP Token
PnP Token to connect to Cisco Cloud.
Password
Confirm Password
<all above, leave blank>
=========================
¶ Ready to complete
Review your selections before finishing the wizard
| Select a name and folder | |
|---|---|
| Name | TNV200-vWLC-PodA |
| Template name | C9800-CL-universalk9_vga.17.09.05 |
| Folder | Students |
| Select a compute resource | |
|---|---|
| Resource | esxi-h3.cnap.hv.se |
| Review details | |
|---|---|
| Download size | 1.2 GB |
| Select storage | |
|---|---|
| Size on disk | 17.2 GB |
| Storage mapping | 1 |
| All disks | Datastore: SAN-disk production; Format: Thick provision lazy zeroed |
| Select networks | |
|---|---|
| Network mapping | 3 |
| GigabitEthernet1 | VLAN17 |
| GigabitEthernet2 | VLAN16 |
| GigabitEthernet3 | VLAN36 |
| IP allocation settings | |
| IP protocol | IPV4 |
| IP allocation | Static - Manual |
| Customize template | |
|---|---|
| Properties | 1.1 Hostname = PodA-vWLC 2.1 Device Management/Service Interface = GigabitEthernet1 2.2 Device Management/Service Interface IPv4 Address/Netmask = dhcp 2.3 Device Management/Service Interface IPv4 Gateway = dhcp 2.4 Remote Device Management/Service Network Route/Netmask = 0.0.0.0 3.1 Login Username = a Serial Number for the C9800-CL Instance = |
WAIT, wait and Wait
Deploy OVF template Cluster-H 68%
Copying Virtual Machine configuration
VCENTER-B.LOCAL\vpxd-extension-600fd928-8ec8-4d53-ba35-b8244bbf5d8d 32 ms
04/25/2024, 2:01:33 PM vcenter-b.cnap.hv.se
Import OVF package esxi-h3.cnap.hv.se 68%
Administrator 99 ms
04/25/2024, 1:55:08 PM vcenter-b.cnap.hv.se
----------------------
¶ POWER ON THE VIRTUAL MACHINE
POWER ON THE VIRTUAL MACHINE
DO NOT use the Console Window: VGA Console (is default)
ping 192.168.17.50
- Firefox to 192.168.17.50
- Log in with creadentials from above instruction
- Change NTP to 193.10.199.83
- NEXT
- Click PLUS-SIGN and add SSID: PODF-vWLC with psk 2001:6b0::
- WHY ??? is Virtual IP 192.0.2.1 ???
- Set AP Certificate to 2001:6b0::
¶ After initial setup; VMware + Web
- Firefox to 192.168.17.50
- Select Administration → Time: 193.10.199.83
- Select Administration → DNS: 1.1.1.1 and 8.8.8.8
Still, nothing works
RESETTING AN AP 3702i
https://popravak.wordpress.com/2014/08/26/resetting-cisco-capwaplwap-access-point-to-factory-defaults/
ap: delete flash:private-multiple-fs
ap: reset
Are you sure you want to reset the system (y/n)?y
System resetting…
Base Ethernet MAC address: 10:05:ca:40:4a:70
Cisco IOS Software, C3700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB1, RELEASE…
*Mar 1 00:00:51.507: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
*Mar 1 00:00:54.119: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.16.23, mask 255.255.255.0, hostname AP1005.ca40.4a70
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (193.10.199.96)
*Mar 1 00:01:05.023: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:01:05.023: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
*Mar 1 00:01:15.023: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Apr 26 08:26:32.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.17.50 peer_port: 5246What is the default password for AP1702i access point? Cisco (username cisco?)
AP1005.ca40.4a70#show version
Cisco IOS Software, C3700 Software (AP3G2-RCVK9W8-M), Version 15.2(4)JB1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Sat 16-Nov-13 10:46 by prod_rel_team
ROM: Bootstrap program is C3700 boot loader
BOOTLDR: C3700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB, RELEASE SOFTWARE (fc1)
AP1005.ca40.4a70 uptime is 22 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"
Last reload reason:
...
cisco AIR-CAP3702I-E-K9 (PowerPC) processor (revision A0) with 204790K/57344K bytes of memory.
Processor board ID FCZ1816Q04E
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.6.1.118
1 Gigabit Ethernet interface
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 10:05:CA:40:4A:70
Part Number : 73-15243-01
PCA Assembly Number : 000-00000-00
PCA Revision Number :
PCB Serial Number : FOC181215GP
Top Assembly Part Number : 068-05054-01
Top Assembly Serial Number : FCZ1816Q04E
Top Revision Number : A0
Product/Model Number : AIR-CAP3702I-E-K9
Configuration register is 0xF
AP1005.ca40.4a70#FEL FEL! Tyvärr krävs APs IOS version 15.3(3) för att fungera med vWLC. Just nu har den 15.2(4) :-(
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Flytta AP till samma VLAN som MGMNT interface (vlan 17 i detta fall) då uppgraderas den automatiskt
¶ REGISTERING AN AP
Cisco Catalyst 9800-CL for public cloud
https://www.cisco.com/c/en/us/support/wireless/aironet-3700-series/products-command-reference-list.html
- Make sure the AP is on the sam VLAN as the first interface of the vWLC
- Access Point (AP) Username: cisco Password: Cisco (Capital C) when using Console-cable to AP
- SWEDEN: Choose Configuration > Wireless > Access Points
“> Country” is in the middle of the screen
Check [v] SE for Sweden - https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2024/pdf/BRKEWN-2339.pdf
- tags n profile FLEX
- https://learningnetwork.cisco.com/s/question/0D53i00000KspMJCAZ/virtual-wireless-controller
- https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/Cisco_VirtualWirelessController75.html
- https://mrncciew.com/2023/01/21/9800-flexconnect-basics/ Fina bilder; bådel Click & Conf !!
- https://gjermundraaen.com/2019/08/05/cisco-9800-cl-and-ap-in-flexconnect/ äntligen vWLC 9800-cl on a single vlan access-port
*Apr 30 08:44:06.239: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.17.50 peer_port: 5246
*Apr 30 08:44:06.239: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.17.50
*Apr 30 08:44:06.275: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.17.50
*Apr 30 08:44:06.275: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.17.50:5246
*Apr 30 08:44:06.279: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to the reason code 27
*Apr 30 08:44:06.279: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to the reason code 27
*Apr 30 08:44:06.479: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Apr 30 08:44:06.479: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Apr 30 08:44:06.683: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!
*Apr 30 08:44:07.483: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Apr 30 08:44:07.511: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Apr 30 08:44:07.519: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Apr 30 08:44:08.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Apr 30 08:44:08.511: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Apr 30 08:44:08.539: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Apr 30 08:44:08.547: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Apr 30 08:44:08.555: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Apr 30 08:44:09.539: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Apr 30 08:44:09.547: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Apr 30 08:44:09.575: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Apr 30 08:44:10.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to upSecond try:
*Apr 30 08:51:44.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.17.50:5246
*Apr 30 08:51:45.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.17.50 peer_port: 5246
*Apr 30 08:52:14.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0xE1243F0!
*Apr 30 08:52:44.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.17.50:5246
Not in Bound state.
*Apr 30 08:53:30.503: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
*Apr 30 08:53:34.599: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.17.149, mask 255.255.255.0, hostname AP1005.ca40.4a70
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (193.10.199.96)
*Apr 30 08:54:11.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.17.50 peer_port: 5246
*Apr 30 08:54:11.259: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.17.50 peer_port: 5246
*Apr 30 08:54:11.259: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.17.50
*Apr 30 08:54:11.551: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.17.50
*Apr 30 08:54:11.551: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.17.50:5246
*Apr 30 08:54:11.555: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to the reason code 27
*Apr 30 08:54:11.555: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to the reason code 27
*Apr 30 08:54:11.671: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!
*Apr 30 08:54:11.671: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!
*Apr 30 08:54:12.703: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Apr 30 08:54:12.731: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Apr 30 08:54:12.739: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Apr 30 08:54:13.723: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Apr 30 08:54:13.731: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Apr 30 08:54:13.759: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Apr 30 08:54:13.767: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Apr 30 08:54:13.775: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset