After completing an AD upgrade to 2008r2 I've had my fill of roaming profiles. I want to change all users back so that their profile is on their pc. Of course ideally I'd like this to occur with the user affected as little as possible. Most users are still winxp but some win7 machines too.
View 18 RepliesI have ACS 5.1 configured to authenticate users based on Active Directory. I have configured wired 802.1x too, with machine authentication enabled on ACS.When I login with credentials that exist in AD, it works fine. Then I configured Windows Authentication to ask for credentials (popup window). But I experience network disconnection when I login with a local account even though I entered correct AD credentials.I want to do the following: for an account that exist on the machine being authenticated (non-AD account), ACS should check its local database and reply with authentication success if it finds it, so the user is granted network connectivity.I heard about Identity Sequence in ACS. But I still don't see the right configuration,
View 2 Replies View Relatedwhen I ping another workstation on my local network I should get back it's local IP but instead I am getting an ip address that resolves to somewhere in Germany! In fact if I ping any bogus name, I mean anything, it returns this same address 62.116.181.25. If I shut down my cable modem then everything resolves correctly. And yes I have DNS relay enabled because it seems to be the only way to get the workstations to resolve external sites correctly.
View 2 Replies View RelatedWe have configured following commands on switch to fallback to local Vlan if both radius server (policy persona's) is found dead. For test purpose we shutdown both servers (policy persona's) but fallback didn't work. We have 3750 switch running image 12.2(55)SE6 having following configuration.We do not know whether we configured switch in proper way or do we need to modify it. [code]
View 5 Replies View RelatedI have a Cisco 8510msr that is connected back to back with a 7206vxr across a 155Meg connection.I receive lots of Output drops on the 7206vxr interface facing the atm switch. When I do the following command:-
kwdair9#sh atm int atm 1/0Interface ATM1/0:AAL enabled: AAL5 , Maximum VCs: 4096, Current VCCs: 27 Maximum Transmit Channels: 0Max. Datagram Size: 4528PLIM Type: SONET - 155000Kbps, TX clocking: LINECell-payload scrambling: ONsts-stream scrambling: ON797522 input, 881483 output, 203946630 IN fast, 223768062 OUT fast, 0 out dropVBR-NRT : 110288 Avail bw = 44712 <====
I only have 44megConfig. is ACTIVEkwdair9# I only get 44Meg of the available 155Meg.There is no QOS on the router and the only commands I can find that vaguely see that refer to QOS are on the ATM switch:-
atm address 47.0091.8100.0000.0007.0d87.b201.0007.0d87.b201.00atm router pnnino aesa embedded-number left-justifiednode 1 level 56 lowest redistribute atm-static?why this is acting like a DS3 link and not a 155Meg link?
What cable I need to connect two 2951 back to back through a HWIC-4T1/E1 card ?
View 1 Replies View RelatedI have two site that has a copper wire ( 2 wire) connection between each router ( No Telco in between ). Now I want to use 1921 router with HWIC-4SHDSL-E card to connect these two site together. Can I use attach configuration to make the connection reference from the diagram ?
View 1 Replies View RelatedI have 2650XM router and 2620 Router Both routers have built in WIC T1 CSU/DSU cards
2620Router --
2620Router#sh int se0/0
Serial0/0 is down, line protocol is down
Hardware is PQUICC with Fractional T1 CSU/DSU
Description: DTE side
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
[code]....
My question is that cisco website says there are two type of cable connections for this type of config --which are --T1 CSU/DSU ConfigurationSet one CSU/DSU to clock source internal, and the other CSU/DSU to clock source line. The linecode, framing, data-coding, and timeslots must be set the same on both CSU/DSUs.Four-Wire 56k CSU/DSU Configuration For my network connection which type of config i should use??Secondly i try to connect these ports by normal crossover cable it did not work.So for this type of connection i know i need T1 cross over cable-- which has RJ 48 connections at both sides.I check cable from ebay which is RJ45 RJ48 cross over -- will this cable work in my router to router connection.
I have 1 2611xm router and 1 2801 router. For my own lab purpose, i want to configure them back to back to support voice services. I don't know what configuration will be required at each end. in 2611xm, i have NM-2V and its also detecting the card, so i hope it will work ? also what commands i need to run on both ends .
View 1 Replies View RelatedI would like configure two router (e.g. 1921) back to back via a 2 pin copper wire. Can I use HWIC-4SHDSL-E card to do it? What is the configuration I can use?
View 7 Replies View RelatedI have two site that has a copper wire (2 wire) connection between each router ( No Telco in between )Now I want to use 1921 router with HWIC-4SH DSL-E card to connect these two ste together.Can I use attach configuration to make the connection reference from the diagram?
View 2 Replies View RelatedJust to get this clear as having issues with a E1 link with CRC's at one.Router A,Network-Clock-Participate WIC 1,Should router B have clock participate for WIC 1? We currently have controllers set as UNFRAMED but guess we can set to NO-CRC4 both ends and telco will pass this.
View 1 Replies View RelatedI'm looking for instructions on how to setup and connect two RV082 routers together with a crossover cable between their WAN ports. This is to connect two separate LANS together via an ethernet connection. For staging we are setting everything up with a crossover cable in our shop. Ultimately the crossover cable will be replaced by a microwave link between the two LANS several miles apart. There will be no internet connection.
View 7 Replies View Relatedsecuring a back-toback connection using E1.The connection is between two cities, using 2x CISCO 1841 router + VWIC-1MFT-E1 interface at each city.
The E1 connections has been provided by our local telco, and they are completely private. The customer is a bank, and they asking me if this is a secure connection or not. If possible, we need to guarantee that no body can get access to the bank network even if they brought E1 modem at one of the ends (telco PoP).
I searched a lot but couldnt find a clear document about connecting 2 G.SHDSL routers back to back.First of all I am not sure which type of cable (RJ11) is used for connecting two 878 routers. Does it have to be cross or straight cable.
Which RJ11 pairs will be connected each other [code]
According the configuration samples One router must be CPE and the other must be CO for simulating DSLAM.
I'm having some trouble getting two Cisco 888's to work correctly back to back.. The two routers will ultimately be used in conjunction with a BT EPS8 circuit which is effectively four wires short distance between customer sites. We have configured lots of these using the older Cisco 878's.
Anyway, as i've been struggling to get line sync on site I've gone back to basics and connected the two 888's back to back. However, I've found that no matter what I do I can only get the routers to sync at 384kbps!? And that's with a one meter RJ11-RJ11 cable.. Very strange. When we've used the 878's we get much more bandwidth. I have tried statically assigning the line rate at both ends but it still only works at 384kbps.
I am wanting to setup a small network at home. I am using Server 2008r2 64 bit running on VMWorkstation, which is the only way I can run a 64bit OS. I have it installed and running on VM with active directory and a domain created. My problem is trying to join the domain with my other PC's. They cannot find the domain name. The network connection on the VM is set to NAT.
View 2 Replies View RelatedI am moving a Windows Server to a new location. We currently have static IPs but are not using any of them so at the new location I requested no new static IPs. With that being said is there anything I need to worry about when I move? From what I have heard it should be a turn it on and go type of move.
View 1 Replies View RelatedDHCP = win2008r2
scope 1:
172.16.1.51 - 172.16.1.200
sub net 255.255.255.0
router: 172.16.1.1
scope 2
172.16.3.51 - 172.16.3.200
Sub net 255.255.255.0
router: 172.16.3.1
Nic1 = 172.16.1.20
Nic2 = 172.16.3.20
[Code] ......
i was wondering if i really NEED to install the certificate services role in 2008r2,what do i lose by not having it, and what do i gain by using it ?
View 5 Replies View Relatedhow to use Microsoft server 2008R2 NPS with cisco wlc 4400.am i correct, each LWAPP AP have to be connected to NPS . (this AP is also called access server)?when client tries to connect to the wlan, (in this case lets say we want a user in AD, after providing its creds, can access the network, internet etc) the auth req is sent from AP to NPS/RADIUS? where does WLC come into play here, what does WLC do?
View 3 Replies View RelatedI am setting up my lab using two 2901 routers which is running on 15.2 IOS.I am trying to simulate a back to back BRI.BRI Module: WIC-1B-S/T-V3 (x2) one of each router.
I followed this amazing document to understand the concept of BRI and configuration. url..but it never says if i can use the module that i have mentioned.
Q1. What cabling i need to use to setup back to back BRI using 2x 2901 routers with these modules?
Q2. What cabling do i need to use.
Q3. Is it actually possible to use these 2 modules alone to simulate a back to back BRI..?
We had a power outage that kicked off our server and our network switch (2008R2, Cisco2960), before we could get it back up, a user was able to log into his laptop.
The user used the domain login - not the local machine account - he obviously wasn't able to access any shared resources, but how did he log in with a domain account, when the server and switch were both off?
We are in the earlier stages of moving our Domain Controlllers from 2003 to 2008 R2. The remote agents are running in 2003 Domain Controllers. According with Cisco Documentation, I can move the agent to a Windows 2003 Member Server and the upgrade to 2008 R2 Domain Controllers.
View 4 Replies View RelatedIs NPS (windows 2008R2) supports EAP-TLS? I've built an NPS to authenticate wireless clients (WLC 2504). But in the EAP types I only see EAP(PEAP) this only requires a certificate on the server side.
I want the clients also should have a certificate, for that the NPS should support EAP-TLS
I got a few of these NICs and Windows Server 2008R2 is not installing any drivers.
I tried downloading some drivers off Intel website and still no joy.
Since this is a Dell OEM product, how to get the correct set of drivers?
i am looking for alternatives to Windows System Resource Manager, as we do not have Datacenter or Enterprise editions of 2003, or 2008/R2 terminal servers. The main problem we have is when a user tanks the entire server with Excel in a workbook that would be more appropriate as an Access SQL database rather than being in Excel.
View 3 Replies View RelatedIs it possible to insert a Netgear wireless router b/g 108Mbs into a running 2008r2 network, making it a slave to allow wireless access?
At the moment the menu is only accessible thru 192.168.0.1, but I need to have it visible as a device subservient to 10.151.48.1? If this is possible, I can set it up to do a SSID broadcast for wireless access?
I have windows server 2008r2 running a FTP server, so I can back up my configs and upgrade IOS when needed. My problem is than I can backup to the server just fine but when i try and restore a config or pull a new IOS over it gives me this error
%Error opening ftp://13****** (Protocol error) this is happening on every switch I have and I can't figure it out.
I have a Cisco ASA5520 that we are going to use to allow users to connect to our network via the Anyconnect client, I have authentication set up to validate against AD via LDAP, but was wondering if there were any way to set up the profile to check the PC before they log in....we do not want users using their home PCs to attach to our corporate network, only PCs that were issued to them by the company. Nothing is jumping out at me in the config, we are running some fairly old sofware on the boxes (ASA - v8.2(2), Anyconnect - v2.5.3046) I plan on upgrading the Anyconnect to v3.1 but will probably need to keep running the 8.2(2) version on the ASA due to support issues.
View 2 Replies View RelatedI have enabled the following attribute...Show Pre-connect Message—Displays a message to the user before the user makes the first connection attempt.Where do you actually enter the text for the message?
View 1 Replies View RelatedI have an ASA 5510 being fed by ACS for authentication and groups.I have several VPN groups, and I'm trying to determine how the local routes on the VPN client are created. I know it's based on the vpn group becuase clients with different policies get different routes when they login. I know I should know this as I've setup groups before but for some reason this section of my brain wasnt backed up.
View 4 Replies View Relatedwhat's the ACS 5.3 common configuration for authorization profile for RAS authorization ?
I have an authorization error and the customer needs PPP, LCP, ip pool (configured on the ras).