text:
David Bowie
63 Best Laughs in Pop Music
While there's countless songs that feature a good laugh, both canned and totally off the cuff, here are the 63 that we think deserve some recognition.
David Bowie Is Co-Writing a Play Inspired By 'The Man Who Fell to Earth'
The play will reportedly open later this year.
Kool Video For Great 80's Movies
There are some great 80's movies out there and you know they are good movies when today's generation still rates some of these movies the best around. 80's movies are still widely popular and for […]
15 Rock Stars Who Made TV Cameos
Our favorites include David Bowie, Devo, Boy George, Motorhead and Elton John.
An Artist Made a Mold of David Bowie's Crooked Teeth
Oh, the '80s, what a carefree time—hair was big, shoulder pads were bigger and teeth had a mind of their own.
David Bowie Rejected a Possible Coldplay Collaboration
Chris Martin revealed that he once wrote a song with the intention of having the iconic singer record vocals for it. He was denied.
Watch David Bowie's Mysterious Video for 'Sue (Or in a Season of Crime)'
David Bowie lays the suspense on thick in his new music video for the appropriately titled song, "Sue (Or in a Season of Crime)."
David Bowie's New Song is No 'Pity': Listen
Following the release of his 10-inch A-side "Sue (Or In A Season Of Crime)," David Bowie has premiered the single's B-side with BBC 6 Music.
David Bowie Goes Jazz for New Song 'Sue (Or in a Season of Crime)': Listen
David Bowie's new track is a doozy. As in, it's a sizable song length-wise. You're going to want to sit down to listen.
'David Bowie Is' Exhibit Brings True 'Sound and Vision' Experience to Chicago
Ready for an immersive experience? The retrospective "David Bowie Is" opens today in Chicago, and it's a mind-blowing examination of one of the modern musical era's most fascinating creative minds.


text:
Friday, July 9 *Common/DJ Needles, Celebrate St. Louis *Jonny Lang/Brandi Shearer, The Pageant *Let Them Eat Art festival, Maplewood *3 Sheets to the Wind/Vanattica/Sonic Candy/Ahj/Acupunkture, Fubar ... More >>
Heart's upcoming stop in St. Louis, which we predicted last month, has been confirmed! The Wilson sisters will play the Family Arena in St. Charles on Saturday, September 4, at 7 p.m. The tour is in s... More >>
Nothing quite compares to receiving a mixtape. Whether it's from an unrequited love or a dear friend, a music mix is an intimate and compelling glimpse into what makes its maker tick. A group of youn... More >>
From its independent movie theater/DVD shop/cafe, the Ragtag, to its annual True/False Film Fest, Columbia, Missouri, is a college town known for supporting art-house cinema, especially documentaries.... More >>
Fair St. Louis is a somewhat unusual venue for artists, especially ones that aren't entirely mainstream. Much of the crowd is simply there to get a good view of the fireworks, and if they're at all fa... More >>
Most of us have seen it at one time or another -- the person who approaches the DJ and asks to rifle through his or her records, who requests a song completely out of context, who insists that he coul... More >>
+ = local, * = coming to town Euclid Records 1. Wolf Parade -- Expo 86 2. Black Keys -- Brothers 3. Rolling Stones -- Exile on Main St. 4. Robert Randolph & the Family Band -- We Walk This Road 5. Ba... More >>
(New albums are typically released on Tuesdays, i.e., today. What can you spend your hard-earned pennies on this week? Find out below.) *Big Boi, Sir Lucious Left Foot: The Son of Chico Dusty Big Bo... More >>
Friday, July 2 *311/The Offspring, Verizon Wireless Ampitheater *Whole Wheat Bread/Chase Long beach, Fubar *Mad Titans, Lemmon's *Eric Moeller And The Strummalongs/Equal Squeeze/Andy Hyland, Firebird ... More >>
After decades of guzzling booze by the case, abusing countless drugs, urinating on public monuments and biting the heads off bats and doves, the prince of darkness has not only survived, but is health... More >>
(New albums are typically released on Tuesdays, i.e., today. What can you spend your hard-earned pennies on this week? Find out below.) *3OH!3, Streets Of Gold Ke$ha joins the neon-pop group on its l... More >>
Although 2720 Cherokee records September 9, 2009 (09-09-09) as its birthday, it wasn't fully up and running until November of last year. Since then, the new Cherokee Street venue has actively hosted m... More >>
Tuesday, June 22 marked the release date of the Chemical Brothers' seventh album, Further. Although, "album" doesn't begin to define the project, which consists of eight new tracks, each with a corr... More >>
Friday, June 25 *Michael Bublé, Scottrade Center *Cage the Elephant/22-20s/AutoVaughn, The Pageant *New World Spirits/Gravity Kills/Soul Kiss/The Hunted, Roberts Orpheum Theater *A Cursive Memory, F... More >>
Cherokee Street just produced the latest addition to its unique strip of art- and music-related shops, studios and galleries. It just doesn't want you to know exactly who/what/where it is. The group w... More >>
Although this could be said of any week in St. Louis, there's a lot going on this weekend. Aside from the usual laundry list of shows, art openings, naked bike rides, et cetera, Pridefest returns to S... More >>
From 6:00 -10:00 p.m. this Thursday, the Contemporary Art Museum will host an indoor and outdoor Courtyard Concert. Theodore (who was voted Best Americana/Folk act by the RFT in 2009, and was nominate... More >>
Quintron and Miss Pussycat appear at once to be very ordinary, down-to-earth people, while simultaneously being utterly surreal. They're a pretty cute married couple, partially because of (or perhaps ... More >>
(New albums are typically released on Tuesdays, i.e., today. What can you spend your hard-earned pennies on this week? Find out below.) *Chemical Brothers, Further The Brothers' seventh album is an e... More >>
Voting for this year's music awards was as close as it's ever been. Several categories were decided by very, very few votes, even though... More >>
Oliver Sain's life began in 1932 in Dundee, Mississippi. He played with greats such as Howlin' Wolf, Sonny Boy Williamson, Little Milton, Bobby... More >>
Eisley has humble beginnings: The band formed in the teenage bedrooms of sisters Chauntelle and Sherri DuPree back in 1997. But with... More >>
* = coming to town, + = local act Vintage Vinyl 1. Drake---Thank Me Later 2. Nas & Damian Marley---Distant Relatives 3. Black Keys---Brothers 4. Tom Petty & The Heartbreakers---Mojo* 5. Grace Potter &... More >>
Each year, the Tivoli Theatre hosts the St. Louis Filmmaker Showcase, a film fest packed with workshops, lectures and films of all genres and lengths from local filmmakers. This year, local visual ar... More >>
(New albums are typically released on Tuesdays, i.e., today. What can you spend your hard-earned pennies on this week? Find out below.) *Cowboy Junkies, The Nomad Series Volume 1: Renmin Park In th... More >>

subset: commoncrawl


text:
Features and Options:
- 0–60 in 3.9 seconds
- 556 HP 6.2L Eaton supercharger V8 with 551 lb.-ft. of torque
- Magnetic Ride Control suspension system
The CTS portfolio includes a luxury sedan, a high-performance sedan, a luxury coupe, a sports coupe, the luxury wagon and a sports wagon. Each sedan, coupe and wagon is equipped with touch-screen navigation* and adaptive forward lighting. And each luxury vehicle within CTS-V family includes a g-meter that measures and remembers lateral acceleration, high-performance brakes, and a direct-injection Eaton supercharger V8 engine.


text:
Board Chair
Dr. Gisèle Huff is the executive director of the Jaquelin Hume Foundation in San Francisco. After a decade in the business world, she earned a Ph.D. in political science, with a concentration in political philosophy, at Columbia University. She has taught at Golden Gate University, San Francisco University High School, and Dominican College. While at University High School, she served as the director of development for 12 years. She currently serves as chairman of the Board of Directors of Innosight Institute, as a member of the Board of Directors of iNACOL, and as a member of the Board of Directors of The Learning Accelerator. She is a member of the Advisory Board for Harvard University's Program on Education Policy and has served as a member of the advisory committee for the National Charter School Research Project at the Center on Reinventing Public Education and of the Executive Committee of the Digital Learning Council.


text:
Resumen disponible en
Reclamaciones disponible en
Descripción (El texto procesado por OCR puede contener errores)
Feb. 27, 1968 J. [.188 ETAL 3,370,820
ASHTRAY CONSTRUCTION Filed Aug. 25, 1966 United States Patent 3,370,820 ASHTRAY CONSTRUCTION Jules Liss, New York, and Martin Liss, Brooklyn, N.Y. (both of 1671 McDonald Ave., Brooklyn, N.Y. 11230) Filed Aug. 25, 1966, Ser. No. 574,979 1 Claim. (Cl. 248-311) This invention relates generally to the field of portable ashtrays adapted to be selectively engaged upon tubular members forming outdoor furniture pieces, and more particularly to an improved embodiment thereof which may be conveniently positioned in a large number of locations, and rotationally adjustable after installation.
Many ornamental ashtrays are formed with other than cylindrical outer walls, in the interests of providing an attractive device. Difiiculty has been experienced in providing proper mounting means for such devices whereby the same may be supported for pivotal adustable movement about an axis which is not at right angles to the outer surface of the ashtray. This problem has arisen principally where the tray element comprising the device is one of a large number of attractive designs, none of which are suitable for resilient attachment to a piece of furniture.
It is therefore among the principal obects of the present invention to provide improved mounting means whereby an ashtray having peripheral side walls of other than cylindrical configuration may be conveniently mounted upon portions of tubular furniture for rotational ad ustment about a substantially horizontal axis.
Another object of the invention lies in the provision of an improved mountable ashtray in which the cost of fabrication may be of a reasonably low order, with consequent wide sale, distribution and use.
A further object of the invention lies in the provision of an improved mounting means which will maintain a given degree of adjustment by frictional means.
Still another object of the invention lies in the provision of an improved mountable ashtray which may be conveniently attached and detached from an article of furniture as desired using only ordinary skill, and with a total absence of tools of any kind.
A feature of the disclosed embodiment lies in the unusually attractive appearance of the mounting means.
These objects and features, as well as other incidental ends and advantages, will more fully appear in the progress of the following disclosure, and be pointed out in the appended claim.
In the drawing, to which reference will be made in the specification, similar reference characters have been employed to designate corresponding parts throughout the several views.
FIGURE 1 is a fragmentary view in elevation of an embodiment of the invention.
FIGURE 2 is a fragmentary plan view thereof, partly in section.
FIGURE 3 is a fragmentary sectional view as seen from the plane 3-3 in FIGURE 2.
FIGURE 4 is an enlarged view in perspective of a bracket element forming a part of the disclosed embodiment.
FIGURE 5 is an enlarged view in perspective of a spacer element forming another part of the disclosed embodiment.
In accordance with the invention, the device, generally indicated by reference character It is illustrated in FIG URES 1 to 3, inclusive, in installed condition upon a gen erally vertically disposed tube 11 forming a part of a furniture piece (not shown). As is well known in the art, there are many forms of outdoor furniture formed from bent aluminum tubular construction, or similar steel construction, and the device is adapted to be mounted in any 3,370,829 Patented Feb. 27, 1968 of a plurality of locations where a generallyvertically disposed tube is available. Owing to the rotational adjustment feature described hereinbelow, a horizontally disposed tube segment may also be employed as a mounting support. The device 10 comprises broadly: a tray element 12, a resilient bracket element 13, a spacer element 14, rivet means 15, and a resilient washer 16.
The tray element 12 is preferably of molded synthetic resinous construction, although drawn metal construction is also suitable. As best seen in FIGURES 1 to 3, inclusive, it includes a bottom wall 17 having a cylindrical downwardly extending rim 18, and an angularly disposed frusto-conical side wall 19. The wall 19 includes an outer surface 20, an inner surface 21 and an upper rim portion 22 having the usual indentations 23 therein for the retention of cigarettes, and the like.
The bracket element 13 is preferably formed from a single piece of spring steel, and is bounded by an upper edge 26, a lower edge 27, an inner surface 28 and an outer surface 29. A medially disposed member 30 is provided with a centrally disposed orifice 31, and interconnects with first and second resilient members 32 and 33, respectively, at bend portions 34 and 35. The members 32 and 33 include outer portions 36 and inner portions 37 joined by bend portions 38 and 39. From a consideration of FIGURE 2, it will be apparent that by moving the tube 11 into the interstice formed between the bend portions 38 and 39, the resilient members 32 and 33 are spread apart permitting the tube to pass to the position shown in FIGURE 3, the tube is resiliently maintained by the members 32-33. Removal requires merely pressure in a reverse direction, again spreading the portions 38 and 39 to a point where the tube 11 is released.
The spacer element 14 is preferably formed by injection molding using a suitable synthetic resinous material, and is of irregular configuration as best seen in FIGURE 5 in the drawing. The element includes a generally planar, rectangularly shaped main body portion 41 bounded by first and second planar surfaces 42 and 43, respectively, as well as edge surfaces 44, 45, 45a, and 46. Extending laterally from the lower corners 47 are lower corner projections 48 and 49. At the upper corners 50 are upper corner projections 51 and 52, preferably joined by a web 53 of material. It will be observed that the projections 51 and 52 project laterally a distance greater than the projections 48 and 49. A central opening 54 extends between the planar surfaces 42 and 43.
Assembly of the device 19 includes the positioning of the respective elements as shown in FIGURE 3, wherein the spacer element engages the outer surface and rim of the side wall 19 in such manner that the upper projections 51 and 52 overlie the rim 22, and the lower projections 43-49 contact the outer surface 20. Depending upon the convergence angle of the outer surface, the length of the lower corner projections 48 and 49 can be adjusted to allow the outer surface 43 to lie parallel to the principal axis of the tray element 12. The resilient washer 16 is positioned between the spacer element and the bracket element, following which the rivet means 15 is inserted through the aligned opening in each of the elements 12, 13, 14 and 16 and headed over in well known manner. This operation will serve to compress the washer 16 such that the planar surfaces thereof will be in frictional contact with the outer surface 29 of the bracket element 13 and the surface 43 of the spacer element 14. By virtue of the positioning of the spacer element with respect to the tray element, the axis of the rivet means 15 will be substantially perpendicular to the principal axis of the tray element 12, so that where the bracket element 13 is installed upon a vertically disposed tube 11, the tray element will assume the orientation shown in FIGURE 1.
3 Should the tubell lie in other than a vertical position, the tray element 12 may be rotated about an axis through the rivet means 15 with respect to the bracket element 13, and against the frictional resistance provided by the washer 16 to a desired location. Upon release of the tray element, the frictional contact between the Washer 16 and the tray and bracket elements will cause the tray to retain the imparted adjustment.
We wish it to be understood that we do not consider the invention limited to the precise details of structure shown and set forth in this specification, for obvious modifications will occur to those skilled in the art to which the invention pertains.
We claim:
1. In a self-supporting ashtray construction for selective resilient attachment with a tubular member, the improvement comprising: a tray element having a substantially frusto-conical peripheral wall, said wall including an upper rim portion and an outer surface; a resilient bracket element including means for engaging said tubular member, said bracket member having a through opening therein; a spacer element having a generally planar main body member of rectangular.configuration, and having first and second sets of projections extending laterally outwardly of the plane of said planar member, resilient washer means, and fasten-ing means 'genetrating said tray element, bracket element, spacer element and washer; whereby the projections on said spacer element engage the outer surface and rim portion of said tray element, and said washer element is positioned between said spacer element and said bracket element to permit relativerotation between said tray element and said bracket element.
References Cited UNITED STATES PATENTS ROY D. FRAZIER, Primary Examiner.
R. P. SEITTER, Assistant Examiner.
Citas de patentes
Citada por
Imagen original


text:
MMA News
Ronda Rousey: I wouldn't do TUF again for $10,000,000
"I think it was very good for the women's division, and I think it definitely needed to happen. But you couldn't pay me $10 million to do it again. How could people possibly know who you are from a couple of clips of a video that people are seeing out of context? That's no way for people to get to know you, so I'm just preparing for people to get the worst idea of who I am."
UFC female bantamweight champion, Ronda Rousey, discussed her recent coaching gig on the UFC's hit reality show, 'The Ultimate Fighter', with USA Today.
Ronda coaches opposite her longtime rival Miesha Tate and the two served as the first ever female coaches in the show's 18-season history.
0 Responses to "Ronda Rousey: I wouldn't do TUF again for $10,000,000"
Well u look like a crazy hormonal bitch on the commercial I doubt ull look any diff on show cause that's who u r
I feel like my title says it all that for that comment simply amazing and hilarious and from what I have seen very true!
^That is what I was thinking. Every time I see her she acts the same way.
In fairness the only way to really know her is to be a personal friend or acquaintance, I would imagine.
I wouldn't do Rhonda for $10,000,000. That's for sure.
yah shes waaay to ugly
no one cares about watchin a grown woman act like a bratty little kid in ronda one trikk pony rousey. no class at all. look how she acts n shes sayin oh no one really knows me or ever will blah blah blah well look how u act on the show. not even chael acted like a fool when he was on it. act like a bratty bitch and u get judged by it. shes always got a grouchy look on her ugly face
The thing about Chael is this: He goes to work to do what he is there to do. He was not on TUF to be a dumbass to JBJ. He was there to TEACH AND COACH. He did just that. Because he does whatever his JOB is.
With the UFC his job is to sell shows and show up. That is what he does. That and get beat up by current champs.
Shr is getting extremely muscular, no wonder if she is 145 already. If she fights Cyborg, with Lucia Rijker as striking coach. she wont need armbar again, she will defeat her by knocking her out cold.
I dont know what everyone else is saying but Rousy is Excellent, every person she fights she destroys, she's dedicated to competition and is successful, don't hate cuz she has done more fore the sport than so many others She helped breakthrough she has kicked open a door for many people to follow their dreams and she's Beautiful!! I would love to have an opportunity to learn from someone as skilled and dedicated to success and being involved in helping others.
why do we give her any attention… she's so annoying… the commercial totally made me not want to watch it; the entire preview was her having a freaking tantrum.
Leave a Reply
You must be logged in to post a comment.


text: Classic TV, Free Classic Movies One Step Beyond – The Storm (1959) January 1, 2014 Kevin Leave a comment A couple travel to a village to investigate a painting by an artist they think is dead. They are told the ghost of the painter allowed a blind man to finish the work. Share on FacebookShare on TwitterShare on Google+


text:
Landfill gas control systems
Although most contemporary landfill sites in the UK have had gas extraction systems installed, many of these require regular repair, replacement or expansion of these systems.
In addition a significant number of the older sites still have requirements for gas control systems, often determined as a result of gas pumping trials.
We have extensive experience and capability in control systems from the complete design and installation of gas control systems, through to fault finding, minor repairs to major upgrades, control systems for power generation through to migration and emission control.
We are unique in the UK with our portfolio of projects ongoing and completed. The particular blend of expertise that we have available is used extensively in our closed site management packages where we undertake the compliance monitoring, field balancing, control system installation and ultimately direct reporting to the Environment Agency.
Not only is the full range of expertise and resource available in-house but also we operate the systems that we install.


text:
Definitions for =$word?>
Overview of noun sashay
The noun sashay has 3 senses? (no senses from tagged texts)
1. sashay
(a square dance figure; partners circle each other taking sideways steps)
2. chasse, sashay
((ballet) quick gliding steps with one foot always leading)
3. excursion, jaunt, outing, junket, pleasure trip, expedition, sashay
(a journey taken for pleasure; "many summer excursions to the shore"; "it was merely a pleasure trip"; "after cautious sashays into the field")
Overview of verb sashay
The verb sashay has 3 senses? (first 1 from tagged texts)
1. (1) sidle, sashay
(move sideways)
2. tittup, swagger, ruffle, prance, strut, sashay, cock
(to walk with a lofty proud gait, often in an attempt to impress others; "He struts around like a rooster in a hen house")
3. chasse, sashay
(perform a chasse step, in ballet)


text:
Orlando Window Tinting LLumar Films
Orlando Window Tinting LLumar Films
- Advanced Film Solutions
Watch the video below for more information:
Why LLumar Residential Window Film?
Learn about how LLumar window film for your home can help save you money, keep your home cooler in the summer, warmer in the winter, plus protect your furnishings from fading.
LLumar window film can help lower home cooling costs, reduce energy consumption, improve comfort, and protect your interior furnishings from fading – all without obstructing your view. LLumar dealers professionally install window film at a fraction of the cost of window replacement!
Your home is your largest investment. LLumar can help you protect that investment by giving you control over the things that matter most. Professionally installed LLumar window film will greatly enhance the energy efficiency, look, and functionality of your windows. This translates into lower utility bills, improved comfort, added privacy, and greater protection against the unexpected.
- Control the Sun
Make your home more comfortable, reduce energy costs and protect your interior furnishings from fading.
- Safety & Security
Glass can be a real hazard in the home when broken from accidents, storms, or break-ins. LLumar helps you defend against the unexpected.
- Designer & Privacy
With LLumar, you can increase your privacy or create unique designs on nearly any glass surface in your home.
- Avoid Window Replacement
Did you know the cost for quick, professional window film installation is about one-tenth the cost of replacement windows and it's better for the environment?
To learn more about LLumar Window Films, please visit their website http://www.llumar.com.
Give us a call at 877-575-(FILM) 3456 or at 407-843-9350.
Our professional staff in Orlando Florida, is highly trained to help you select the right window film solution for you and to explain the benefits associated with making the right selections.
You can follow any responses to this entry through the RSS feed. Both comments and pings are currently closed.
Tagged film, LLumar, Orlando, orlando window tinting, tinting, Window Film, window tint, window tinting orlando


text:
Table Of Contents
Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 18.104.22.168
Cisco Unified Wireless Network Solution Components
Upgrading to a New Software Release
Dynamic Frequency Selection Added to Access Points in -A Regulatory Domain
FCC Safety Compliance Statement
Resetting the Configuration on 2006 Controllers
Multicast Group Address Not Supported on 2006 Controllers
Service Modules Supported in the Catalyst 6500 Series Switch
DHCP Servers Must Have Duplicate IP Checking Enabled
RADIUS Server Failover Behavior
Access Points Fail to Join Controllers If MTU Setting Is Less Than 1500
Changing the Default Values of SNMP Community Strings
Using the GUI to Change the SNMP Community String Default Values
Using the CLI to Change the SNMP Community String Default Values
Changing the Default Values for SNMP v3 Users
Using the GUI to Change the SNMP v3 User Default Values
Using the CLI to Change the SNMP v3 User Default Values
Controllers Must Run Release 184.108.40.206 or Later to Support -P Regulatory Domain
Operating Mesh Networks Through Switches and Routers
RADIUS Servers and the Management VLAN
RADIUS Configuration for Management Users
Cisco 7920 Wireless IP Phone Support
Exclusion List (Blacklist) Client Feature
Cisco Aironet 1030 Remote Edge Lightweight Access Points and WPA2-PSK
Management Usernames and Local Netuser Names
802.1x and Microsoft Wireless Configuration Manager
Cisco Aironet 1030 Remote Edge Lightweight Access Point Default Operation
Home Page Retains Web Auth Login with IE 5.x
Features Not Supported on 2000 Series Controllers
Some Clients See Only 64 Access Point MAC Addresses (BSSIDs) at a Time
Pinging from Any Network Device to a Dynamic Interface IP Address Is Not Supported
2006 Image Not Supported for 3504 Controllers
Running a 3504 Image on a 2000 Series Controller
Cisco Lightweight Access Points Fail to Join Cisco Controllers
Upgrading External Web Authentication
Obtaining Documentation, Support, and Security Guidelines
Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 18.104.22.168
April 2, 2007
These release notes describe open and resolved caveats for operating system release 22.214.171.124 for Cisco 2000, 4100, and 4400 Series Wireless LAN Controllers; Cisco Wireless Services Modules (WiSM); Cisco Wireless LAN Controller Network Modules; and Cisco Aironet 1000, 1130, 1200, 1240, and 1500 Series Lightweight Access Points, which comprise part of the Cisco Unified Wireless Network (Cisco UWN) Solution.
Note Unless otherwise noted, all of the Cisco wireless LAN controllers are hereafter referred to as controllers, and all of the Cisco lightweight access points are hereafter referred to as access points.
These release notes contain the following sections:
•Cisco Unified Wireless Network Solution Components
•Obtaining Documentation, Support, and Security Guidelines
Cisco Unified Wireless Network Solution Components
The following components are part of the Cisco UWN Solution and are compatible in this release:
•Operating system software release 22.214.171.124 for all Cisco controllers and lightweight access points
•Cisco Wireless Control System (WCS) software release 126.96.36.199
•Location appliance software release 18.104.22.168, 184.108.40.206, or 18.104.22.168
•Cisco 2700 Series Location Appliances
•Cisco 2000, 4100, and 4400 Series Wireless LAN Controllers
•Cisco Wireless Service Module (WiSM) for Cisco Catalyst 6500 Series Switches
•Cisco Wireless LAN Controller Network Module for Cisco Integrated Services Routers
• Cisco Aironet 1000, 1130, 1200, 1240, and 1500 Lightweight Access Points
Controller Requirements
The controller graphical user interface (GUI) requires the following operating system and web browser:
•Windows XP SP1 or higher or Windows 2000 SP4 or higher
•Internet Explorer 6.0 SP1 or higher
Note Internet Explorer 6.0 SP1 or higher is the only browser supported for accessing the controller GUI and for using web authentication.
Software Release Information
Operating system software is factory installed on your controller and automatically downloaded to the access points after a release upgrade and whenever an access point associates to a controller. As new releases become available for the controllers and their associated access points, consider upgrading.
Note The Cisco WiSM requires software release SWISMK9-32 or later.
Finding the Software Release
To find the software release running on your controller, look on the Monitor > Summary page of the controller GUI or enter show sysinfo on the controller command line interface (CLI).
Upgrading to a New Software Release
When a controller is upgraded, the code on its associated access points is also automatically upgraded. When an access point is loading code, each of its lights blinks in succession.
Caution Do not power down the controller or any access point during this process; otherwise, you might corrupt the software image! Upgrading a controller with a large number of access points can take as long as 30 minutes. The access points must remain powered, and the controller must not be reset during this time.
Cisco recommends the following sequence when performing an upgrade:
1. Upload your controller configuration files to a server to back them up.
2. Turn off the controller 802.11a and 802.11b networks.
3. Upgrade your controller to the latest software release, following the instructions in the latest version of the Cisco Wireless LAN Controller Configuration Guide. Click this link to browse to that document:
4. Re-enable your 802.11a and 802.11b networks.
Note Controllers can be upgraded from one release to another. However, should you require a downgrade from one release to another, you may be unable to use the higher release configuration. The workaround is to reload the previous controller configuration files saved on the backup server or to reconfigure the controller.
New and Changed Information
Dynamic Frequency Selection Added to Access Points in -A Regulatory Domain
In controller software release 220.127.116.11, dynamic frequency selection (DFS) is enabled automatically on the following Cisco lightweight access points that are configured for use in the -A regulatory domain (U.S., Canada, and Philippines): AP1130, AP1230, and AP1240. DFS affects channels 52 to 64 of the 802.11a radio. The access points use DFS to detect radar signals such as military and weather sources and then switch channels to avoid interfering with them.
Installation Notes
This section contains important information to keep in mind when installing your controllers and access points.
Warning This warning means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.
Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipment.
Warning Do not locate any antenna near overhead power lines or other electric light or power circuits, or where it can come into contact with such circuits. When installing antennas, take extreme care not to come in contact with such circuits, as they may cause serious injury or death. For proper installation and grounding of the antenna, refer to national and local codes (e.g. U.S.: NFPA70, National Electrical Code, Article 810, in Canada: Canadian Electrical Code, Section 54).
Warning This product relies on the building's installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than 120 VAC, 15A U.S. (240vac, 10A International).
Warning This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground connector. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available.
Warning Read the installation instructions before you connect the system to its power source.
Warning Do not work on the system or disconnect cables during periods of lightning activity.
Warning Do not operate your wireless network near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use.
Warning In order to comply with radio frequency (RF) exposure limits, the antennas for this product should be positioned no less than 6.56 ft (2 m) from your body or nearby persons.
Warning This unit is intended for installation in restricted access areas. A restricted access area can be accessed only through the use of a special tool, lock and key, or other means of security.
Safety Information
Follow the guidelines in this section to ensure proper operation and safe use of the controllers and access points.
FCC Safety Compliance Statement
FCC Compliance with its action in ET Docket 96-8, has adopted a safety standard for human exposure to RF electromagnetic energy emitted by FCC certified equipment. When used with approved Cisco Aironet antennas, Cisco Aironet products meet the uncontrolled environmental limits found in OET-65 and ANSI C95.1, 1991. Proper operation of this radio device according to the instructions in this publication results in user exposure substantially below the FCC recommended limits.
Safety Precautions
Each year hundreds of people are killed or injured when attempting to install an antenna. In many of these cases, the victim was aware of the danger of electrocution but did not take adequate steps to avoid the hazard.
For your safety, and to help you achieve a good installation, read and follow these safety precautions. They may save your life!
1. If you are installing an antenna for the first time, for your own safety as well as others, seek professional assistance. Your Cisco sales representative can explain which mounting method to use for the size and type of antenna you are about to install.
2. Select your installation site with safety as well as performance in mind. Electric power lines and phone lines look alike. For your safety, assume that any overhead line can kill you.
3. Call your electric power company. Tell them your plans and ask them to come look at your proposed installation. This is a small inconvenience considering your life is at stake.
4. Plan your installation carefully and completely before you begin. Successfully raising a mast or tower is largely a matter of coordination. Each person should be assigned to a specific task and should know what to do and when to do it. One person should be in charge of the operation to issue instructions and watch for signs of trouble.
5. When installing an antenna, remember:
a. Do not use a metal ladder.
b. Do not work on a wet or windy day.
c. Do dress properly—shoes with rubber soles and heels, rubber gloves, and a long-sleeved shirt or jacket.
6. If the assembly starts to drop, get away from it and let it fall. Remember that the antenna, mast, cable, and metal guy wires are all excellent conductors of electrical current. Even the slightest touch of any of these parts to a power line completes an electrical path through the antenna and the installer: you!
7. If any part of an antenna system should come in contact with a power line, do not touch it or try to remove it yourself. Call your local power company. They will remove it safely.
8. If an accident should occur with the power lines, call for qualified emergency help immediately.
Installation Instructions
Refer to the appropriate Quick Start Guide or Hardware Installation Guide for instructions on installing your controllers and access points.
Note To meet regulatory restrictions, all external antenna configurations must be professionally installed.
Personnel installing the controllers and access points must understand wireless techniques and grounding methods. Access points with internal antennas can be installed by an experienced IT professional.
The controller must be installed by a network administrator or qualified IT professional, and the proper country code must be selected. Following installation, access to the controller should be password protected by the installer to maintain compliance with regulatory requirements and ensure proper unit functionality.
Important Notes
This section describes important information about the controllers and access points.
Using Web Policy
The Web Policy parameter on the WLANs > Edit page cannot be used with the following Layer 3 security policies: L2TP, IPSec, and VPN Passthrough.
Resetting the Configuration on 2006 Controllers
If you wish to reset the configuration to factory defaults on a 2006 controller, perform one of the following:
•From the controller GUI, choose Commands > Reset to Factory Default > Reset.
•From the controller CLI (after system bootup and login), enter clear config. Then after the configuration has been cleared, enter reset system without saving the current configuration.
•From the controller console (after system bootup), enter Recover-Config at the User Name prompt.
Caution Do not attempt to reset the controller's configuration by choosing Option 5, Clear Config, from the boot menu unless you have successfully upgraded to the _ER.aes image on Cisco.com.
Multicast Group Address Not Supported on 2006 Controllers
If you choose Multicast from the Ethernet Multicast Mode drop-down box on the Controller > General page, a Multicast Group Address edit box appears to the right of the drop-down box. However, this edit box should not appear for 2006 controllers because they do not support a Multicast Group Address.
Service Modules Supported in the Catalyst 6500 Series Switch
The Catalyst 6500 Series Switch chassis can support up to five Cisco WiSMs without any other service module installed. If one or more service modules are installed, the chassis can support up to a maximum of four service modules (WiSMs included).
DHCP Servers Must Have Duplicate IP Checking Enabled
For the Cisco WiSM, you need to enable duplicate IP detection on your DHCP servers. Otherwise, multiple clients may be assigned the same IP addresses.
RADIUS Server Failover Behavior
If you enter the config radius aggressive-failover enable command, the RADIUS server switches over to the backup server if it fails to answer one RADIUS request after five retransmissions. This is the default behavior. If you enter the config radius aggressive-failover disable command, the RADIUS server switches over to the backup server only if it fails to answer three consecutive RADIUS requests (where each RADIUS request is retransmitted five times).
Access Points Fail to Join Controllers If MTU Setting Is Less Than 1500
When the network path between access points and the controller is configured for an MTU size less than 1500, the controller does not receive join requests from access points in local mode. (MTU settings less than 1500 are common when you use tunneling protocols such as IPsec VPN, GRE, and MPLS.) The access point join request is larger than 1500 bytes, so the request is fragmented. The size of the first fragment is 1500 bytes (including IP and UDP header) and the second fragment is 54 bytes (including IP and UDP header).
Access points in REAP mode are not affected by this limitation, and the problem is resolved in the 4.0 software release because the LWAPP tunnel can reassemble up to four fragments. The problem occurs when all four of these conditions exist on your network:
•Your controller runs software release 3.2 or earlier
•Your controller is configured for Layer 3 LWAPP
•The network path MTU between the access point and the controller is less than 1500 bytes
•The access point is in local access point (LAP) mode (not REAP mode)
Use one of these workarounds to resolve the problem on your network:
•Upgrade to controller software release 4.0 if the controller platform supports it.
•Use 1030 series access points in REAP mode for locations reachable through low-MTU paths.
•Increase the network path MTU to 1500 bytes.
Note New out-of-the-box access points default to local mode and run a special image that helps them join the controller but does not contain this fix. If you use these access points in hybrid-REAP mode across a WAN, have them first join the controller to resolve this issue before deploying them across the WAN in the remote office.
Changing the Default Values of SNMP Community Strings
The controller has commonly known default values of "public" and "private" for the read-only and read-write SNMP community strings. Using these standard values presents a security risk. Therefore, Cisco strongly advises that you change these values.
Using the GUI to Change the SNMP Community String Default Values
Follow these steps to change the SNMP community string default values through the controller GUI.
Step 1 Click Management and then Communities under SNMP. The SNMP v1 / v2c Community page appears.
Step 2 If "public" or "private" appears in the Community Name column, click Remove to delete this community.
Step 3 Click New to create a new community.
Step 4 When the SNMP v1 / v2c Community > New page appears, enter a unique name containing up to 16 alphanumeric characters in the Community Name field. Do not enter "public" or "private."
Step 5 In the remaining fields, enter the IP address from which this device accepts SNMP packets with the associated community and the IP mask, choose Read Only or Read/Write to specify the access level for this community, and choose Enable or Disable to specify the status of this community.
Step 6 Click Apply to commit your changes.
Step 7 Click Save Configuration to save your settings.
Step 8 Repeat this procedure if a "public" or "private" community still appears on the SNMP v1 / v2c Community page.
Using the CLI to Change the SNMP Community String Default Values
Follow these steps to change the SNMP community string default values through the controller CLI.
Step 1 To see the current list of SNMP communities for this controller, enter this command:
show snmp community
Step 2 If "public" or "private" appears in the SNMP Community Name column, enter this command to delete this community:
config snmp community delete name
The name parameter is the community name (in this case, "public" or "private").
Step 3 To create a new community, enter this command:
config snmp community create name
Enter up to 16 alphanumeric characters for the name parameter. Do not enter "public" or "private."
Step 4 To enter the IP address from which this device accepts SNMP packets with the associated community, enter this command:
config snmp community ipaddr ip_address ip_mask name
Step 5 To specify the access level for this community, enter this command, where ro is read-only mode and rw is read/write mode:
config snmp community accessmode {ro | rw} name
Step 6 To enable or disable this SNMP community, enter this command:
config snmp community mode {enable | disable} name
Step 7 To save your changes, enter save config.
Step 8 Repeat this procedure if you still need to change the default values for a "public" or "private" community string.
Changing the Default Values for SNMP v3 Users
The controller uses a default value of "default" for the username, authentication password, and privacy password for SNMP v3 users. Using these standard values presents a security risk. Therefore, Cisco strongly advises that you change these values.
Using the GUI to Change the SNMP v3 User Default Values
Follow these steps to change the SNMP v3 user default values through the controller GUI.
Step 1 Click Management and then SNMP V3 Users under SNMP.
Step 2 If "default" appears in the User Name column, click Remove to delete this SNMP v3 user.
Step 3 Click New to add a new SNMP v3 user.
Step 4 When the SNMP V3 Users > New page appears, enter a unique name in the User Profile Name field. Do not enter "default."
Step 5 In the remaining fields, choose Read Only or Read Write to specify the access level for this user, choose the authentication and privacy protocols to be used, and enter a password for each.
Step 6 Click Apply to commit your changes.
Step 7 Click Save Configuration to save your settings.
Using the CLI to Change the SNMP v3 User Default Values
Follow these steps to change the SNMP v3 user default values through the controller CLI.
Step 1 To see the current list of SNMP v3 users for this controller, enter this command:
show snmpv3user
Step 2 If "default" appears in the SNMP v3 User Name column, enter this command to delete this user:
config snmp v3user delete username
The username parameter is the SNMP v3 username (in this case, "default").
Step 3 To create a new SNMP v3 user, enter this command:
config snmp v3user create username {ro | rw} {none | hmacmd5 | hmacsha} {none | des} auth_password privacy_password
•username is the SNMP v3 username,
•ro is read-only mode and rw is read/write mode,
•none, hmacmd5, and hmacsha are the authentication protocol options,
•none and des are the privacy protocol options,
•auth_password is the authentication password, and
•privacy_password is the privacy password.
Do not enter "default" for the username and password parameters.
Step 4 To save your changes, enter save config.
The Cisco 4400 Series Controllers are on the NIST FIPS 140-2 Pre-Validation List.
Controllers Must Run Release 126.96.36.199 or Later to Support -P Regulatory Domain
To support access points configured for use in Japan, you must upgrade the controller software to release 126.96.36.199 or later. Earlier releases do not support access points configured for use in Japan (regulatory domain -P).
Voice WLAN Configuration
Cisco recommends that aggressive load-balancing always be turned off in any wireless LAN that is supporting voice, regardless of vendor. When aggressive load-balancing is turned on, voice clients can hear an audible artifact when roaming, and the handset is refused at its first reassociation attempt.
Inter-Subnet Roaming
Currently, multicast traffic cannot be passed during inter-subnet roaming.
Operating Mesh Networks Through Switches and Routers
In mesh networks that operate through low-speed switches and routers, access points can disconnect from the controller, causing the controller to generate alerts.
Heavily Loaded Controller CPU
When the controller CPU is heavily loaded (for example, when doing file copies or other tasks), it does not have time to process all of the ACKs that the NPU sends in response to configuration messages. When this happens, the CPU generates error messages. However, the error messages do not impact service or functionality.
RADIUS Servers and the Management VLAN
The RADIUS server can be on any subnet as long as it can be reached by the management VLAN subnet.
The controllers can be managed via the management VLAN subnet from any other subnet that can reach the management VLAN subnet.
RADIUS Configuration for Management Users
To authenticate management users using RADIUS, set the IETF attribute Service-Type to Administrative for the user or group.
Cisco 7920 Wireless IP Phone Support
When using Cisco 7920 Wireless IP Phones with controllers, make sure that the phones and controllers are configured as follows:
•Aggressive load balancing must be disabled on a per-controller basis. Otherwise, the initial roam attempt by the phone may fail, causing a disruption in the audio path.
•The QoS Basis Service Set (QBSS) information element (IE) must be enabled. The QBSS IE enables the access points to communicate their channel usage to wireless devices. Because access points with high channel usage might not be able to handle real-time traffic effectively, the 7920 phone uses the QBSS value to determine if it should associate with another access point. Use the following commands to enable the QBSS IE:
–sh wlan summary
Note Use this command to determine the WLAN ID number of the WLAN to which you want to add QBSS support.
–config wlan disable wlan_id_number
–config wlan 7920-support ap-cac-limit enable wlan_id_number
–config wlan enable wlan_id_number
–sh wlan wlan_id_number
Note Use this command to verify that the WLAN is enabled and the Dot11-Phone Mode (7920) field is configured for compat mode.
–save config
•The Dynamic Transmit Power Control (DTPC) information element (IE) must be enabled using the config 802.11a dtpc enable command. The DTPC IE is a beacon and probe information element that allows the access point to broadcast information on its transmit power. The Cisco 7920 Wireless IP Phone uses this information to automatically adjust its transmit power to the same level as the access point to which it is associated. In this manner, both devices are transmitting at the same level.
•The 7920 phones and the controllers do not currently use compatible fast roaming mechanisms. The phone uses CCKM while the controllers use proactive key caching (PKC). To minimize roaming latency, static WEP is the recommended security mechanism.
•When configuring WEP, there is a difference in nomenclature for the controller and the 7920 phone. Configure the controller for 104 bits when using 128-bit WEP for the 7920.
Client Channel Changes
Cisco access points are known to go off channel for up to 30 seconds while identifying rogue access point threats. This activity can cause occasional dropped client connections.
Exclusion List (Blacklist) Client Feature
If a client is not able to connect to an access point and the security policy for the WLAN and/or client is correct, the client has probably been disabled. In the controller GUI, you can view the client's status on the Monitor > Summary page under Client Summary. If the client is disabled, click Remove to clear the disabled state for that client. The client automatically comes back and, if necessary, reattempts authentication.
Automatic disabling happens as a result of too many failed authentications. Clients disabled due to failed authorization do not appear on the permanent disable display. This display is only for those MACs that are set as permanently disabled by the administrator.
Maximum MAC Filter Entries
The controller database can contain up to 2048 MAC filter entries for local netusers. The default value is 512. To support up to 2048 entries, you must enter this command in the controller CLI:
config database size MAC_filter_entry
where MAC_filter_entry is a value from 512 to 2048.
Cisco Aironet 1030 Remote Edge Lightweight Access Points and WPA2-PSK
Cisco Aironet 1030 Remote Edge Lightweight Access Points do not support WPA2-PSK in REAP standalone mode.
RADIUS Servers
This product has been tested with the following RADIUS servers:
•CiscoSecure ACS v3.2
•Funk Odyssey Client v1.1 and 2.0
•Funk Steel-Belted RADIUS release 4.71.739 and 5.03 Enterprise Edition
•Microsoft Internet Authentication Service (IAS) release 5.2.3790.1830 on Windows 2003 server
Management Usernames and Local Netuser Names
Management usernames and local netuser names must be unique because they are stored in the same database. That is, you cannot assign the same name to a management user and a local netuser.
802.1x and Microsoft Wireless Configuration Manager
Clients using the Microsoft Wireless Configuration Manager and 802.1x must use WLANs configured for 40- or 104-bit key length. Configuring for 128-bit key length results in clients that can associate but not authenticate.
Cisco Aironet 1030 Remote Edge Lightweight Access Point Default Operation
When a controller reboots, dropped Cisco Aironet 1030 Remote Edge Lightweight Access Points attempt to associate to any available controller. If the access points cannot contact a controller, they continue to offer 802.11a/b/g service on WLAN 1 only.
Using the Backup Image
The controller bootloader (ppcboot) stores a copy of the active primary image and the backup image. If the primary image becomes corrupted, you can use the bootloader to boot with the backup image.
With the backup image stored before rebooting, be sure to choose Option 4: Change Active Boot Image from the boot menu to set the backup image as the active boot image. Otherwise, when the controller resets, it again boots off the corrupted primary image.
After the controller boots, the active boot image can be changed to the backup image using the config boot backup command.
Home Page Retains Web Auth Login with IE 5.x
Due to a caching issue in the Internet Explorer 5.x browser, the home page retains the web authentication login. To correct this issue, clear the history or upgrade your workstation to Internet Explorer 6.x.
Ad-Hoc Rogue Containment
Client card implementations may mitigate the effectiveness of ad hoc containment.
RLDP Enable/Disable
The RLDP protocol detects rogues on your wired network. When RLDP is enabled, the controller reports a threat alarm for each rogue detected on the wired network. When RLDP is disabled, rogues detected on the wired network are shown in the Alert state.
Disabling RLDP stops the controller from detecting rogues on the wired network. Rogues can be manually contained by changing the status of the detected rogues. When rogues are being contained, you must manually disable containment for each rogue individually.
Apple iBook
Some Apple operating systems require shared key authentication for WEP. Other releases of the operating system do not work with shared key WEP unless the client saves the key in its key ring. How you should configure your controller is based on the client mix you expect to use. Cisco recommends testing these configurations before deployment.
Features Not Supported on 2000 Series Controllers
These hardware features are not supported on 2000 series controllers:
•Power over Ethernet
•Service port (separate out-of-band management 10/100-Mbps Ethernet interface)
These software features are not supported on 2000 series controllers:
•VPN termination (such as IPSec and L2TP)
•Termination of guest controller tunnels (Origination of guest controller tunnels is supported)
•External web authentication web server list
•Layer 2 LWAPP
•Spanning tree
•Port mirroring
•QoS per-user bandwidth contracts
•IPv6 pass-through
Some Clients See Only 64 Access Point MAC Addresses (BSSIDs) at a Time
In a crowded RF environment, clients may not be able to detect the desired SSID because of internal table limitations. Sometimes disabling and then enabling the client interface forces a rescan. Your RF environment needs to be controlled. Cisco UWN rogue access point detection and containment can help you to enforce RF policies in your buildings and campuses.
Pinging from Any Network Device to a Dynamic Interface IP Address Is Not Supported
Clients on the WLAN associated with the interface pass traffic normally.
2006 Image Not Supported for 3504 Controllers
The 2006 controller image is supported for use with only 2000 series controllers. Do not install the 2006 image on a 3504 controller. Otherwise, errors may occur. Install only the 3504 image on a 3504 controller.
Running a 3504 Image on a 2000 Series Controller
It is possible to run a 3504 controller image on a 2000 series controller, but Cisco Aironet 1130, 1200, and 1240 series access points will not be able to connect to the controller.
Cisco Lightweight Access Points Fail to Join Cisco Controllers
When a Cisco lightweight access point is connected to a terminal server port and reboots because of a join failure or timeout, this sequence repeats until the access point returns to the boot prompt and remains there. This condition occurs when there is no telnet session to the access point's console port and when the controller is not responding to the access point's join response.
Workaround: Disconnect the access point's console port from the terminal server. Reprogram the controller to have it respond to the access point's join request. Power cycle the access point to force a restart.
Upgrading External Web Authentication
When upgrading a controller from operating system release 2.0 or 220.127.116.11 to release 126.96.36.199 or later, update the external web authentication configuration as follows:
1. Instead of using a preauthentication ACL, the network manager must configure the external web server IP address using this command:
config custom-web ext-webserver add index IP-address
Note IP-address is the address of any web server that performs external web authentication.
2. The network manager must use the new login_template shown here:<html><head><meta http-equiv="Pragma" content="no-cache"> <meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <title>Web Authentication</title> <script>function submitAction(){var link = document.location.href;var searchString = "redirect=";var equalIndex = link.indexOf(searchString);var redirectUrl = "";var urlStr = "";if(equalIndex > 0) {equalIndex += searchString.length;urlStr = link.substring(equalIndex);if(urlStr.length > 0){redirectUrl += urlStr;if(redirectUrl.length > 255)redirectUrl = redirectUrl.substring(0,255);document.forms[0].redirect_url.value = redirectUrl;}}document.forms[0].buttonClicked.value = 4;document.forms[0].submit();}function loadAction(){var url = window.location.href;var args = new Object();var query = location.search.substring(1);var pairs = query.split("&");for(var i=0;i<pairs.length;i++){var pos = pairs[i].indexOf('=');if(pos == -1) continue;var argname = pairs[i].substring(0,pos);var value = pairs[i].substring(pos+1);args[argname] = unescape(value);}//alert( "AP MAC Address is " + args.ap_mac);//alert( "The Switch URL is " + args.switch_url);document.forms[0].action = args.switch_url;// This is the status code returned from webauth login action// Any value of status code from 1 to 5 is error condition and user// should be shown error as below or modify the message as it suits// the customerif(args.statusCode == 1){alert("You are already logged in. No further action is required on your part.");}else if(args.statusCode == 2){alert("You are not configured to authenticate against web portal. No further action is required on your part.");}else if(args.statusCode == 3){alert("The username specified cannot be used at this time. Perhaps the user is already logged into the system?");}else if(args.statusCode == 4){alert("Wrong username and password. Please try again.");}else if(args.statusCode == 5){alert("The User Name and Password combination you have entered is invalid. Please try again.");}}</script></head><body topmargin="50" marginheight="50" onload="loadAction();"> <form method="post"> <input TYPE="hidden" NAME="buttonClicked" SIZE="16" MAXLENGTH="15" value="0"> <input TYPE="hidden" NAME="redirect_url" SIZE="255" MAXLENGTH="255" VALUE=""> <input TYPE="hidden" NAME="err_flag" SIZE="16" MAXLENGTH="15" value="0"><div align="center"><table border="0" cellspacing="0" cellpadding="0"> <tr> <td> </td></tr><tr align="center"> <td colspan="2"><font size="10" color="#336699">Web Authentication</font></td></tr><tr align="center"><td colspan="2"> User Name <input type="TEXT" name="username" SIZE="25" MAXLENGTH="63" VALUE=""> </td> </tr> <tr align="center" > <td colspan="2"> Password <input type="Password" name="password" SIZE="25" MAXLENGTH="24"> </td> </tr><tr align="center"><td colspan="2"><input type="button" name="Submit" value="Submit" class="button" onclick="submitAction();"> </td> </tr> </table> </div></form></body></html>
This section lists resolved and open caveats for Cisco controllers and lightweight access points.
Resolved Caveats
These caveats are resolved in software release 18.104.22.168.
•CSCsf10181—A REAP access point may reboot when you change its mode of operation from standalone to connected.
•CSCsh57637—When a switch that is connected to several access points using power-over-Ethernet (PoE) is repeatedly rebooted, one or more access points may fail during bootup.
•CSCsh68089—Access points directly connected to the 2006 or 4000 controller are unable to perform DHCP.
•CSCsh71613—When you attempt to migrate an access point from the -J regulatory domain to the -U regulatory domain, the access point may reboot after you enter the show ap migrate command.
•CSCsh97875—When you migrate an access point from the -J regulatory domain to the -U regulatory domain, the channel settings may not update properly. They should update as follows: channel 34 to 36, channel 38 to 40, channel 42 to 44, and channel 46 to 48. For example, if the access point's radio used channel 34 in the -J regulatory domain, it should switch to channel 36 after migration. However, it may switch to some other channel, such as 44.
•CSCsi03229—An access point with the -J regulatory domain may join the controller with the country code configured as Argentina (AR), Brazil (BR), or Thailand (TH).
Open Caveats
These caveats are open in software release 184.108.40.206.
•CSCar14535—When configuring a mobility group anchor that is not part of the mobility member list, the controller displays an "Invalid Parameter Provided" error message.
Workaround: Make sure that the anchor controller is a mobility group member.
•CSCsa95763—The controller GUI cannot display more than 80 local net users on the Security > AAA > Local Net Users page.
Workaround: Use the controller CLI to view all the Local Net User entries.
•CSCsb01980—When the operator enters incorrect data for the management interface in the controller web configuration wizard, error messages are shown only at the end of the wizard, and the user must return to the Management Interface page for correction. The data entered on the Management Interface page, such as the port number, are not validated immediately but at the end of the wizard. As a result, any error messages are shown only at the end.
Workaround: Use the CLI configuration wizard.
•CSCsb01983—The controller web configuration wizard is not reachable after making repeated invalid entries for the management interface port. If an operator connects to the wizard on address 192.168.1.1 and enters an invalid port number on the Management Interface page, the operator is redirected at the end of the wizard to the Management Interface page to correct the port. If the operator enters an incorrect port and submits, the wizard becomes inaccessible.
Workaround: Reboot the controller through the CLI to access the wizard again.
•CSCsb07168—The AP1000 802.11a radio experiences a very low receive packet count when the receive RSSI is -75 dBm.
Workaround: None at this time.
•CSCsb20269—On the WiSM, when the service VLAN is configured as one of the VLANs on a data port, it does not operate correctly.
Workaround: Do not configure the service VLAN as one of the VLANs on a data port.
•CSCsb34149—Disabling or deleting a wireless LAN on which a large number of clients exists may not result in all clients being deleted. This generally occurs when several thousand clients are using the wireless LAN.
Workaround: Make sure that wireless LANs with a large number of clients associated are not deleted or disabled.
•CSCsb38486—The Cisco Aironet 1500 Series Lightweight Outdoor Access Point Bridge CLI does not accept 10-character bridge group names.
Workaround: Use 9-character bridge group names.
•CSCsb52557—Cisco access points do not connect to the 4400 series controller if the time is not set first.
Workaround: Set the time on the controller before allowing the access points to connect to the controller.
•CSCsb55597—The access point's output power may change after you modify a mandatory data rate.
Workaround: None at this time.
•CSCsb55937—VLAN-tagged large ICMP packets that need to be fragmented are not sent by Cisco Aironet 1000 series access points in direct-connection mode. Ping replies never come back when the access point sends requests to a gateway from a wireless client using large 1500-byte packets and with RADIUS override configured with any 1p tag.
Workaround: None at this time.
•CSCsb71060—Internal LAG errors occur when the management interface is changed from tagged to untagged.
Workaround: Leave the WiSM management interface as tagged or untagged.
•CSCsb77595—When logging out from Telnet/SSH sessions, the session always prompts the user to save changes, even when no changes have been made.
Workaround: Answer Yes or No when prompted.
•CSCsb85113—When users download the code image to WiSM using the CLI, associated access points are sometimes disconnected.
Workaround: Download new code images to the WiSM at times when there are no clients to be affected.
•CSCsb88588—Incorrect power levels are reported for access points when the controller is set to country code SG.
Workaround: None for this release.
•CSCsc01221—When downstream test data is sent from the wired endpoint to four wireless clients at different priority levels (voice, video, background, and best effort), the Cisco Aironet 1000 series access points crash.
Workaround: None for this release.
•CSCsc02741—In the bootloader mode, users are unable to exit or return to the main prompt. If users make mistakes while entering values, they cannot quit the step and are unable to go back and change existing values.
Workaround: Reset the system through IOS or power the device off and on if necessary.
•CSCsc02860—When users download the code image to a WiSM for the first time, the WiSM fails to download the new image to flash memory.
Workaround: Download new code images to the WiSM a second time.
•CSCsc03072—Cisco lightweight access points do not always produce complete logs.
Workaround: None for this release.
•CSCsc11660—The current country screen is not 100% accurate for all deployment scenarios, which may cause confusion in some instances.
Workaround: None for this release.
•CSCsc22084—Error messages and traps are not triggered when a PoE controller with CDP causes Cisco Aironet 1200 series access points to disable their radios.
Workaround: Disabling CDP resolves this issue.
•CSCsc22663—Deleting a mobility member mapped to a controller as an anchor removes the anchor's entry as well, but the Auto Anchor knob remains enabled even though only the mobility anchor mapping is deleted.
Workaround: Before deleting a mobility member, first delete the controller to which it is mapped from the WLAN.
•CSCsc35784—The transmit power control adjustment levels 3, 4, and 5 are not supported on Cisco Aironet 1500 Series Lightweight Outdoor Access Points in the 5745-to-5825-MHz band. The transmit power control adjustment levels 4 and 5 are not supported on Cisco Aironet 1500 series access points that operate in the 5500-to-5700-MHz band and at 2.4 GHz.
These levels correspond to -6, -9, and (in the case of 5500 to 5700 MHz) -12 dB from the maximum power, respectively. Power levels 1, 2, and (in the case of 5500 to 5700 MHz) 3 are supported, which correspond to maximum power for the particular data rate and channel, and -3 dB relative to this maximum, at which these adjustment levels provide little or no further reduction in transmit power output.
Workaround: Set the transmit power level to either 1 or 2 for 5745 to 5825 MHz. Set the transmit power level to either 1, 2, or 3 for all other bands.
•CSCsc40648—Rooftop access points are displayed in the web interface as poletop access points for more than four minutes, which prevents them from being configured.
Workaround: Configure the access point as a rooftop access point using the controller CLI.
•CSCsc41313—The Cisco Aironet 1500 Series Lightweight Outdoor Access Points are configured by default to allow old bridges. When this configuration is enabled, the shared secret key set on the controller is not passed to the access points, so a few access points might be running on the old key. If these access points reset or new access points are waiting to join the running network, they may take a very long time to connect to the network or might not join at all. The default value has been changed to not allow old bridges to authenticate.
Workaround: Configure the controller using this command: config network allow-old-bridge-aps disable.
•CSCsc59180—When WCS displays a rogue access point and a user sets the state to Known - External, WCS displays the access point as "Trusted Missing."
Workaround: None at this time.
•CSCsc68154—The controller's error log repeatedly displays the "Got an idle-timeout message from an unknown client" error message for some unknown reason.
Workaround: None at this time.
•CSCsc70484—Most IPSec VPN clients start using the new security association (SA) immediately upon rekeying. However, the Cisco VPN Client continues to use the old SA for some time before switching to the new one, which results in packet loss until the client switches over.
Workaround: Use these WLAN settings on the controller to ensure that the client controls when the rekey process takes effect and the controller responds to the client for the phase 1 SA rekey:
–Session Timeout: 0 seconds
–Layer 3 Security: IPsec
–IPsec Authentication: HMAC SHA1
–IPsec Encryption: AES (If you choose 3DES, configure the IPsec lifetime to a value greater than the expected duration of the client session.)
–IKE Phase 1: Aggressive
–Lifetime: 43200 to 57600 seconds (12 to 16 hours)
–IKE Diffie Hellman Group: Group 2 (1024 bits)
•CSCsc75351—The controller CLI command debug mac addr client_mac_address, which is designed to limit debug output to the specified client, is not filtering client traffic.
Workaround: None at this time.
•CSCsc77157—Multiple 4100 series controllers may simultaneously reset without crash files or message log entries being generated.
Workaround: None at this time.
•CSCsc92354—The Security > MAC Filtering page on the controller GUI shows MAC address filters in this format: XX:XX:XX:XX:XX:XX, which differs from the Cisco standard format of XXXX:XXXX:XXXX.
Workaround: None at this time.
•CSCsd18462—The transfer download tftppktTimeout ? command uses the wrong tag.
Workaround: None at this time.
•CSCsd25491—The management IP address of a controller incorrectly sends an ARP request for a client IP address on a WLAN subnet over the wired interface. The ARP request is not answered because the management IP address and the client WLAN are on different subnets.
Workaround: None at this time.
•CSCsd33178—Duplicate IP detection is not working. The controller does not detect duplicate IPs in its setup, so the http service to the controller stops working after some time.
Workaround: None at this time.
•CSCsd34555—If the access point is not in protection mode, the PC350 client adapter is unable to pass traffic.
Workaround: None at this time.
•CSCsd39873—The controller may report a WEP key encryption error for Intel 2200BG clients operating with OEM driver version 184.108.40.206, 18.104.22.168, or 188.8.131.52 and using some form of EAP authentication (PEAP, LEAP, EAP-FAST, or EAP-TLS).
Workaround: None at this time. However, the client will attempt to reauthenticate and upon successful EAPOL key exchanges will communicate in a normal, encrypted fashion.
•CSCsd41602—The controller may reboot due to a failure with the pemReceiveTask software watchdog.
Workaround: None at this time.
•CSCsd44612—Multicast is failing when traffic is passed between two wireless clients on access points directly connected to 2006.
Workaround: None at this time.
•CSCsd52483—When you make changes in the boot loader of a 2006 controller or a Controller Network Module, the bootup process may halt, and the controller may stop responding.
Workaround: None at this time. The controller must be returned for repair through the RMA process.
•CSCsd54171—After the controller configuration is modified, the changes may not take effect or function properly.
Workaround: Save the controller configuration to a TFTP server or WCS, then reset the controller. After completing the setup wizard, reload the saved configuration from the TFTP server or WCS.
•CSCsd65307—When radio resource management (RRM) is enabled on the controller, 1000 series access points sometimes fail to send an acknowledge packet (or send the packet after a delay) in response to a reassociation request. As a result, a wired IP phone cannot call an N900iL handset until the handset resends a reassociation request to the access point.
Workaround: None at this time.
•CSCsd67332—If you have Telnet enabled and then disable it, the change does not take effect until you reboot the Cisco WiSM.
Workaround: None at this time.
•CSCsd69158—After a RADIUS session timeout expires, the access point does not send a unicast key to the client.
Workaround: None at this time.
•CSCsd75245—The management packet for the UserIdleTimer is incorrect on access points in REAP mode.
Workaround: None at this time.
•CSCsd83743—Authentication fails if you enter a RADIUS-server key with more than 31 characters on the ACS server and a 4400 series controller.
Workaround: Do not enter more than 31 characters for the RADIUS-server key.
•CSCsd93784—Setting the Channel/Power Update (RRM) parameter on WCS does not change the channel or power settings on the controller.
Workaround: None at this time.
•CSCse02235—Access points occasionally delay the transmission of beacons by 0.1 or 0.2 seconds. This condition occurs when the access points do not have any associated clients.
Workaround: None at this time.
•CSCse04495—The Cisco WiSM controller may become stuck in a strange state after it is powered down and back up.
Workaround: Reset the controller.
•CSCse04713—The controller detects a rogue access point, but it may not acknowledge it as a "Rogue on Wired Network" access point on WCS.
Workaround: You can try to resolve this problem by downgrading your controller software to a release prior to 184.108.40.206.
•CSCse06202—When a controller's IKE lifetime expires, a rekey is not offered.
Workaround: None at this time.
•CSCse06206—The controller sends a DEL notification when the IKE lifetime is expired, but it does not send the notice to the client.
Workaround: None at this time.
•CSCse06509—The 4400 series controller sends out an undersized frame when it connects to certain Catalyst switches (2970, 3560, or 3750).
Workaround: None at this time.
•CSCse08725—A Vocera badge running MS-PEAP fails when trying to associate to an AP1010. This problem occurs because the controller is dropping the packets.
Workaround: None at this time.
•CSCse09235—UDP traffic drops in both directions when per-user bandwidth is set for real-time traffic.
Workaround: None at this time.
•CSCse15932—The 4404 controller may reboot if the TimerTickTask software fails.
Workaround: None at this time.
•CSCse17260—WPA clients may receive an error message indicating that the WEP key is configured incorrectly on the client.
Workaround: None at this time.
•CSCse30514—When an LWAPP-enabled AP1100 or AP1200 first connects to a controller, the secondary controller name on the All APs > Details page in the controller GUI is not blank. The output of the show ap config general command also shows that the secondary controller name is not blank.
Workaround: None at this time.
•CSCse32656—The 4402 controller supports an enhanced security module (ESM) card only in slot 1, not in slot 2. Slot 2 is reserved for 4404 controllers.
Workaround: Use slot 1, which is the slot closest to the power outlet, for an ESM card in the 4402 controller.
•CSCse34481—Numerous system event messages are received when trying a TFTP download.
Workaround: None at this time.
•CSCse40636—The foreign controller incorrectly forwards multicast traffic onto the auto-anchor WLAN.
Workaround: Configure the WLAN on the foreign controller to map to an invalid VLAN.
•CSCse42329—The controller management IP does not an AR-to-HSRP virtual MAC.
Workaround: None at this time.
•CSCse52143—IPSec authentication with certificates may not always operate properly.
Workaround: None at this time.
•CSCse60689—The controller may reboot due to a failure with the sshpmAddIPv4IpsecRules software.
Workaround: None at this time.
•CSCse61840—The debug messages stop after some time even if the debugs are enabled to collect data.
Workaround: Disable all debugs with the debug disable-all command and then re-enable them.
•CSCse68342—On a 2006 controller running software release 3.2.78 or 3.2.116, an SNMP query of the ipAddrTable, IP section of rfc1213 results in the return of 127.0.0.1 and looping (loopback is not configured). This may cause an "Agent in distress: spinning in ipAddrTable" error on the network management system (NMS) or an "OID not increasing: IP-MIB::ipAdEntrAddr.127.0.0.1" error.
Workaround: None at this time.
•CSCse72413—The controller may reboot due to a failure with the debugMaintask software.
Workaround: None at this time.
•CSCse80636—Under heavy traffic conditions, the VPN module may reach capacity and fail to accept additional packets.
Workaround: None at this time.
•CSCse88067—An "aborting SA dump due to timeout" error message is received when entering show ipsec brief command on the 4012 controller console.
Workaround: None at this time.
•CSCse92865—The session timeout value is not modified when issuing a CLI or WEP+802.1x WLAN GUI selection. The default value of 1800 seconds is retained.
Workaround: None at this time.
•CSCse93890—The controller and access point clocks are not synchronized. Therefore, the access points may report timestamps that are out of sync with each other and the controller.
Workaround: Upgrade to controller software release 4.0 and use the management frame protection (MFP) feature to achieve clock synchronization across your controllers and access points.
•CSCse95768—When a controller is in the A regulatory domain with local power constraint enabled, beacons are sent out. This broadcast should only be present with an E regulatory domain.
Workaround: None at this time.
•CSCsf02388—The controller port did not link up following a repeated cable removal or connection.
Workaround: Power cycle the controller.
•CSCsf04684—On the 4400, the FPGA and VPN module are losing some packets. The packet loss is a small percentage of total throughput.
Workaround: None at this time.
•CSCsf10167—The controller may reboot due to a failure with the pemReceiveTask software watchdog.
Workaround: None at this time.
•CSCsf11862—Controllers sometimes reboot during a software upgrade.
Workaround: Download the software image twice. On the second try, the controller successfully loads the new image.
•CSCsf14716—On release 3.2, data rate shift from 11M to 5.5M does not occur.
Workaround: None at this time.
•CSCsf17520—With REAP AP connected to the controller, the first WLAN with WMM enabled on the controller does not get a client DHCP IP address.
Workaround: You can disable the WMM from which the client gets the IP address.
•CSCsf17618—The reason and status code of the client is always zero whether the client is in probing, associated, or excluded state.
Workaround: None at this time.
•CSCsf21931—The Cisco WiSM does not support Layer 2 LWAPP mode.
Workaround: The option to configure Layer 2 LWAPP mode is available through both the controller GUI and CLI.
•CSCsf26816—A WLC crash occurred in NEC WL3036 while running the nPCSL_timer task.
Workaround: None at this time.
•CSCsf27061—If you are configuring the AP group VLAN, all controller interfaces (CLI, web, and WCS) show the dynamic ap-manager interface in the interface-mapping-to-the-WLAN list. Because dynamic AP manager is not supposed to be mapped to a WLAN, it should not appear in the list.
Workaround: None at this time.
•CSCsf27201—You may receive a "Multicast Rx queue is full" message in your msglog even if multicast is disabled and no multicast traffic exists.
Workaround: None at this time.
•CSCsf28181—When two ct4400s are connected and security mobility is enabled, the client loses the current IP address from the dynamic interface during the handoff and gets a new IP address from the new controller.
Workaround: None at this time.
•CSCsf28446 and CSCsg09867—Controllers running 188.8.131.52 experience a system restart at pemReceiveTask.
Workaround: None at this time.
•CSCsf99924—In controller software releases 18.104.22.168 (and later) and 220.127.116.11 (and later), you cannot configure the controller to automatically adjust its local time for daylight saving time. In earlier controller software releases, a Daylight Time check box is available, but it does not correctly adjust the time in the Southern Hemisphere and is not programmed for the newly legislated daylight saving time changes for the United States in 2007.
Workaround: Follow these steps:
a. Configure the controller for Greenwich Mean Time (GMT) with no timezone offset.
b. During standard time, run the controller with the standard offset. Then, when daylight saving time rules go into effect, manually configure the controller to set the offset forward. When the standard time resumes, manually configure the controller to set the offset back.
For example, if your controller is in the Eastern Standard Time (EST) timezone, you would have the offset set to -5 prior to March 11, 2007. Then, at 02:00 on March 11, 2007, you would issue the following CLI command: config time timezone -4. Similarly, at 02:00 on November 4, 2007, you would issue the config time timezone -5 command.
•CSCsg03501—The access point may reboot due to an assert in the software task.
Workaround: None at this time.
•CSCsg10391—When you use the remote-debug enable command on the controller CLI to enable remote debugging on an access point, debugging stops when your CLI session times out.
Workaround: Open a new CLI session, disable remote debugging (enter remote-debug disable), and re-enable remote debugging.
•CSCsg13067—An access point loses association with the controller with repeated associations or when free system memory is decreased to 4MB or less. Log information is recorded.
Workaround: None at this time.
•CSCsg32267—Even if you disable 1M and 2M 802.11b operational rates, data is transmitted from the access point at that rate.
Workaround: None at this time.
•CSCsg45166—The voice quality is less than desirable when six FOMA clients are associated to an AP125x (NECl UNIVERGE WL2024/3006/3025). If the access point is in PEAP or LOCAL mode, the voice quality is poor, but if short preamble is disabled, the quality improves.
Workaround: Disable short preamble.
•CSCsg48089—If you lose your controller password and have not backed up the configuration, the only recovery mechanism is to revert to the factory default configuration, which causes you to lose your configuration settings.
Workaround: None at this time.
•CSCsg56010—Some unnecessary access point images are not removed after an upgrade.
Workaround: None at this time.
•CSCsg93477—On an AP1000, the username and password may be lost when upgrading 4.0.
Workaround: None at this time.
•CSCsh05353—An error is returned when you attempt to display the Internal Webauth window. This error occurs when you go to Management > Web Login Page, ensure external webauth is not selected, and click Preview.
Workaround: None at this time.
•CSCsh24239—Some class-of-service (CoS) values may be randomly assigned to Internet Control Message Protocol (ICMP) traffic from wireless clients.
Workaround: None at this time.
•CSCsh35098—Web authentication sends authentication requests to external authentication servers, even when there is no authentication server configured for the WLAN. If an external authentication server is configured on the controller and a client fails web authentication, web authentication sends the credentials to that external authentication server for validation.
Workaround: Change the Web Radius Authentication type from PAP to CHAP on the Controller > General page.
•CSCsh41347—The following warning appears when you enter dynamic interface details and click Apply:Changing the Interface parameters causes the WLANs to be temporarily disabled and thus may result in loss of connectivity for some clients.
After accepting the warning message, the GUI does not apply the interface configuration. This warning occurs only on a ct4000 and ct2006.
Workaround: None at this time.
•CSCsh44942—When an ipsec client roams from a 4400 to a 4000 controller, a crash occurs in apfReceiveTask, and a "crypto card not responding" message occurs.
Workaround: None at this time.
•CSCsh45097—When associating a client to an ipsec WLAN on a 4000 locally, a "crypto card not responding" error message appears.
Workaround: None at this time.
•CSCsh47792—With a Ct3500 and AP1200 in local mode, the AP1200 crashes within 10 to 15 minutes after RLDP is enabled on the controller.
Workaround: None at this time.
•CSCsh47973—When the client idle timeout is expired and the client disassociates, the same disassociation packet sent by the access point to the client is repeated numerous times.
Workaround: None at this time.
•CSCsh53198—When sending upstream traffic from the wireless client to the wired client, DSCP mapping is not working on an AP1130.
Workaround: None at this time.
•CSCsh54555—When a FOMA phone in extension mode roams to another access point because of an access point failure during a conversation, another access point sends an EAPOL-KEY message instead of an EAP-Request to the client.
Workaround: None at this time.
•CSCsh54674—The wrong default WLAN.1p value on platinum QoS profile displays.
Workaround: None at this time.
•CSCsh55290—A foreign WLC sends an XID for STAs on the foreign controller when an STA in the foreign state does a DHCP release.
Workaround: None at this time.
•CSCsh55789—The controller may experience communication problems that prevent access points from joining the controller. In this case, the following messages appear:
–Msg 'Set Default Gateway' of System Table failed, Id = 0x008d2fa2
–Msg 'Port HW Stats get' of Port Mgmt failed, Id = 0x00692fac erro
–Msg 'Port SW Stats get' of Port Mgmt failed, Id = 0x005f0ac3 erro
Workaround: None at this time.
•CSCsh58395—After web authentication completes successfully, a gray web page appears with the following text: "Web Authentication." The web browser appears to be loading a page but never does. The original URL destination (such as http://www.cisco.com) never loads.
Workaround: Follow these steps:
a. Turn off the radio on the wireless client.
b. Remove the client entry from the controller.
c. Turn on the radio on the wireless client.
d. Re-associate and re-authenticate the client to the WLAN.
•CSCsh67667—If you try to set an invalid physical port number for the management interface, an error message appears indicating that the requested port is not available. However, the controller accepts the invalid physical port number.
Workaround: None at this time.
•CSCsh67699—If you try to set an invalid physical port number of 25 or less for the management interface, an error message appears indicating that the configuration cannot be set. However, the controller accepts the invalid physical port number.
Workaround: None at this time.
•CSCsh77184—If you disable more than four of the data rates on the 802.11a (or 802.11b/g) Global Parameters page, the supported rates do not exceed 24 Mbps.
Workaround: Set the Radio Policy field to All or 802.11b/g only on the WLANs > Edit page.
•CSCsh90756—The show run-config command sometimes enters a loop, continually displaying the "--More-- or (q)uit--" message.
Workaround: None at this time.
•CSCsh91578—When you upgrade the controller from software release 184.108.40.206 to 188.8.131.52, the self-signed certificate (SSC) feature becomes disabled, which prevents any access point with a self-signed certificate from being able to rejoin the controller.
a. If SSC is disabled after a software upgrade, perform one of the following to re-enable it:
•On the controller GUI, click Security > AP Policies and then check the Accept Self Signed Certificate check box on the AP Policies page.
•On the controller CLI, enter this command: config auth-list ap-policy ssc enable
b. If SSC is disabled after a software upgrade and the SSC access point entries have been lost, perform one of the following to re-enable SSC and restore the access point entries:
•On the controller GUI, click Security > AP Policies to access the AP Policies page. Then check the Accept Self Signed Certificate check box; enter the MAC address of the SSC access point in the MAC Address field, choose SSC from the Certificate Type drop-down box, and enter a key in the SHA1 Key Hash field; and click Add. Repeat this step for all SSC access points.
•On the controller CLI, enter the following commands to enable SSC and restore any lost SSC access point entries:
config auth-list ap-policy ssc enable
config auth-list add ssc ap_mac ap_key
Repeat this step for all SSC access points.
Note A workaround is also available on WCS software release 22.214.171.124. Refer to the Release Notes for Cisco Wireless Control System 126.96.36.199 for Windows or Linux for instructions.
•CSCsh94601—An access point that is associating to the controller may restart when 30 other access points try to join at the same time.
Workaround: None at this time.
•CSCsh96461—The Back button on the following Security > Wireless Protection Policies pages of the controller GUI does not work correctly. When you click the Back button, the current page reappears.
–Trusted AP Policies
–Rogue Policies
–Standard Signatures
–Custom Signatures
–Client Exclusion Policies
–AP Authentication
Workaround: Do not use the Back button. Select a page directly.
•CSCsh97956—A controller cannot resolve the Address Resolution Protocol (ARP) after a software update.
Workaround: None at this time.
•CSCsi10071—The access point reboots after controller port recovery. If the access point is associating to the controller through the backup port, then when the primary port comes back, all of the access points reboot. At that time, the access point sends an "LWAPP CNTL ECHO_REQUEST" to the MAC address of the controller's backup port, but there is no response. Then the access point reboots. This behavior only occurs when you change the LWAPP operation mode from Layer 3 (with controller port redundancy enabled) to Layer 2 and you change the management VLAN or IP to a different subnet after changing to Layer 2 mode.
Workaround: None at this time.
•CSCsi21632—The access point sends out a deauthentication message (reason code: 0x0001) to FOMA clients at the interval set for WPA broadcast key rotation.
Workaround: None at this time.
If You Need More Information
If you need information about a specific caveat that does not appear in these release notes, you can use the Cisco Bug Toolkit to find caveats of any severity. Click this URL to browse to the Bug Toolkit:
(If you request a defect that cannot be displayed, the defect number might not exist, the defect might not yet have a customer-visible description, or the defect might be marked Cisco Confidential.)
For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at
Click Product Support > Wireless. Then choose your product and Troubleshooting to find information on the problem you are experiencing.
Documentation Updates
This section lists updates to user documentation that has not yet been added to either printed or online documents.
The Package Contents section in the Quick Start Guide: Cisco 4400 Series Wireless LAN Controllers should be updated to include this item, which is included with the 4400 series controller:
•DB-9 to DB-9 null modem cable
Related Documentation
For additional information on the Cisco controllers and lightweight access points, refer to these documents:
•The Quick Start Guide for your particular controller or access point
•Cisco Wireless LAN Controller Configuration Guide
•Cisco Wireless LAN Controller Command Reference
•Cisco Wireless LAN Controller Online Help
•Cisco Wireless Control System Configuration Guide
•Cisco Wireless Control System Online Help
Click this link to browse to the Cisco Support and Documentation page:
Obtaining Documentation, Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCVP, the Cisco Logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0612R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2007 Cisco Systems, Inc. All rights reserved.