Pages

Thursday, September 30, 2010

ACS 5.2 EAP-Fast works

eap-fast on ACS5.2 tested and working with cisco 7921 phones. fast roaming worked as well.  disconnected antennas on one 1242 AP, and phones stayed up and connected to anothe AP near by.

nexus 5000 switch port for 1G connection

turns out it needs specify "speed 1000", and "sh int status" would not tell GBIC type like in catalyst switches.

version matters

lobbyadmin would not push users to the WLC, keep complaining user exists or controller not responding. turns out the WLC was upgraded, but the WCS is one version behind, so it marked the WLC unreachable.

it is all in the detail

had a p1 case. ha, seems the loadbalancer is getting used to be the blame victim. claim was the loadbalancer probing failed and puts serverfarm out off service. going crazy for few minutes to see what the heck! true web port is open on the server, the probe is a http probe expecting "status 200", hey! "show probe detail" (again it is all in the details!) shows return "status 404". Turns out, newly implemented urlscan rule on the serve was the villain.

Cisco 7206VXR IOS Upgrade Gotcha

Today did a upgrade of Cisco 7206 VXR upgrade to 15.0(1)M3 and found a Gotcha. a IPSec Tunnel would stay in reset status. Had to remove all the nhrp map statements, not neccessary with "ip nhrp map multicast dynamic" anyway, and a "shut" and "no shut" afterwards, it came right up.

Also, found that a frame-relay MFR interface protocol did not come up after reboot. After "shut" and "no shut" of all serial member interfaces, it came right up. But this has nothing to do with IOS upgrade.