If you deploy a Cisco 1242 a/b/g access point as a rogue detector, can this be used for 802.11n wired detection as well.i.e Will the controller send the MAC addresses of the 802.11n clients and APs. url...
View 8 RepliesI'm using a 2504 controller. I dont have WCS.My questions are about the best way to configure a Rogue Detector AP.
In my lab environment I setup the WLC with 2 APs. One AP was in local mode, and I put the other in Rogue Detector mode.The Rogue Detector AP was connected to a trunk port on my switch. But the AP needed to get its IP address from the DHCP server running on the WLC. So I set the native vlan of the trunk port to be the vlan on which the WLC management interface resides. If the trunk port was not configured with a native vlan, the AP couldn't get an address through DHCP, nor could the AP communicate with the WLC. This makes sense because untagged traffic on the trunk port will be delivered to the native vlan. So I take it that the AP doesn't know how to tag frames.Everything looked like it was working ok.
So I connected an autonomous AP (to be used as the rogue), and associated a wireless client to it. Sure enough it showed up on the WLC as a rogue AP, but it didn't say that it was connected on the wire. From the rogue client I was able to successfully ping the management interface of the WLC.
But the WLC never actually reported the rogue AP as being connected to the wired network.So my questions are:
1. What is the correct configuration for the trunk port? Should it not be configured with a native vlan? If not, then I'm assuming the rogue detector AP will have to have a static IP address defined, and it would have to be told which vlan it's supposed to use to communicate with the WLC.
2. Assuming there is a rogue client associated with the rogue AP, how long should it reasonably take before it is determined that the rogue AP is connected to the wired network? I know this depends on if the rogue client is actually generating traffic, but in my lab environment I had the rogue client pinging the management interface of the WLC and still wasn't being picked up as an on-the-wire rogue.
(5508 WLC, 1142N APs).I understand if I enable the AP mode to Rogue Detector from the details page of the AP, the AP stops accepting requests and is now looking for rogue items on the wired network. Is this the same when I enable Rogue Location Discovery Protocol? Will I lose the wireless functionality of all of my APs on the controller?
Next question, when I look at the Rogue Summary on the Monitoring page I see three Adhoc Rogue devices. When I select the Detail link only one shows. I remember the other two were HP mutifuction devices with WIFI enabled but I cannot retrieve that information anymore.
I am testing rogue on wire using 5508 WLC and , I have a dedicated AP configured as rogue detector and configured the switch port where the Rogue detector is connected as trunk. I have plugged in an autonomous AP with open authentication to the same switch so that it can act as a rogue. On the WLC, I can see that Autonomous AP as rogue on Wire. But along with that I am seeing another AP as rogue on wire, even though i have plugged in only one Autonomous AP to the switch.
View 3 Replies View RelatedWe have 1242-AG series AP which is configured in Rogue Detector mode. After adding this AP to WLC its showing Admin Status of AP as Down.
When i am trying to enable the Admin Status its giving me following error
" Admin status cannot be enabled for AP in Rogue Detector mode".
how to enable Admin Status for Rogue Detector AP.
I have the wireless controller 5508 and many AP1261 registered on site. It detects a lot of rogue access points around. I would like to find out geographic location of these rogue access points. Is it possible?
View 2 Replies View RelatedI moved 1242 access point to my new buliding which i have 5508 wlc and 3500 acess point are working. i connected 1242 ap in network it got registered and download new ios and downlaoded the configuration and working fine. But i open the WLC tha 1242 ap are not visible in ap list.
View 3 Replies View Relateddownload an autonomous image for Cisco Access point 1242 ?
View 1 Replies View RelatedCan I use the access point 1242 to do clients location using WLC 5008, NCS 1.1 and MSE3310?On this moment I doesn´t need of CleanAir features. I want just to do location for clients and rogue aps.
View 2 Replies View RelatedI have just installed 3 access points along with 6 repeater access points all running V12.4. They are all AIR-AP1242AG-E-K9 using the 2.4GHz radio.
Prior to installation I bench tested that the repeaters would associate with the access points and if one of the access points was turned off the repeaters would automatically roam to another access point. I did not have all 9 devices powered up at the same time, but did have 2 repeaters and 2 access points powered up to simulate association and roaming.
During installation as access points and repeaters were powered up everything behaved as expected (repeaters were associating to access points etc.) however during installation once everything was installed the 3 access points were all powered down for half an hour or so and once powered back on the repeaters did not automatically re-associate until they were re-booted.
I have now configured the repaters with parent MAC addresses to reflect the above current assocaition pattern but not yet powered off the access points to test if this forces re-association as this is now a live operational site!!
Is it normal to have to re-boot the repeaters if ALL 3 access points are powered down at the same time? i.e. If only one access point is powered down will the repeaters automaically roam to another access point o.k.?
I need to know if 3502p with outdoor antennas supports Point-to-Point Wireless Bridging?
View 6 Replies View RelatedHow would I bridge a wireless connection with a distance of 400 feet? Would twoAP1262N-A-K9 be able to make this happen? Or is there another wireless bridge that you all can think of?I would be connecting one AP1262 of off a 3750g switch and at the far end (400 ft aproximately) another AP1262N-A-K9.
View 12 Replies View RelatedI had a new AIR-AP1042N-N-K9 access point and I tried to convert it into lightweight mode with the image c1140-rcvk9w8-tar.124-21a.JA2.tar . I used all the methods but the AP is getting hanged at one position after decompressing the new IOS. The capture of the process is below: [code] After this I am getting the junk characters and everytime AP hangs at this position.
View 4 Replies View RelatedHow do I connect and configure my WAP54G wireless access point to my new Cable Modem? I have it connected to the modem but I cannot access it to configure it. It appears to be working but before I got the cable modem I had it connected to a router and it was set-up with a static IP address. With my new ISP, I no longer have a static IP address so I am trying to configure the WAP54G to use DHCP. Trying to access it thru the internet at 192.168.1.245 does not work.
View 1 Replies View RelatedI just bought an LG Bluray DVD player (BD390) which is unable to find the access point in my home network.My router is a WRT54G, ver. 2.2, running firmware: Ver.4.21.1. My home network uses high speed cable with two computers on the wireless network, all working with no problems.The router is on the second floor but the two computers and the new BD390 are on the first floor - about 35 feet away. I have the wirelss security set to none and use only the specific computer MAC addresses to allow connection to this network.
I found directions in the forum for a setup using the LG BD390 but with a different Linksys router. I changed the security to WPA (AES); the Beacon interval from 100 to 75; the Fragmentation Threshold from 2346 to 2304; and the RTS Threshold from 2347 to 2307. The DVD wireless connection still failed to find my network. There is a "Push button" connection feature on the BD390 setup which I tried, but the only "button" on the router I could find was in the basic wireless setting, a green icon for the wireless SSID setup. No connection was made there either.
The recommendation connection from the LG manual is for a network cable, but that would be over 50 feet and a real pain to connect, so I would prefer WiFi.
I have a Cisco 1242 AG wireless access point with the goal of having multiple SSIDs. I set up one network which broadcasts correctly but only sometimes can I connect to it.
And, even if I connect to the network, I cannot get a DHCP address for the client.Other devices connected (but not through this Access Point) to the associated VLAN 60 can get a DHCP address and connect just fine.Here is the configuration for the Cisco 1242 AG access point in question: [code]
Lastly, here is the information on VLAN 60 from the distribution switch. As mentioned, other devices connect to this VLAN and get IP addresses just fine.
I had to reset my access point but the login screen fails to appear to lock the router. I don't have the setup wizard disk.
View 9 Replies View RelatedI have a WAP54g hardware version 1.0.I install de last firmware on this access-point but, this access-point reset automatic after a random time..It’s it possible to downgrade de firmware from this access-point?
View 1 Replies View RelatedHave a WRT320N router at one end of the house in the basement. Would like to boost signal to other end of the house. Which product should i use, an access point or a range extender? My house is also wired with Ethernet cable and I could plug the access point into an Ethernet port at the end of the house where the signal is weak.
View 1 Replies View RelatedI have AP WAP 4410 N, and I want conected AP to cacti. Where is I faoun MIBs or OIDs for my Access Point?
View 1 Replies View RelatedI've got a AP WAP54G. I've managed to get into the configuration page and rename my router and set a WPA2-Personl password.
The issue I'm facing is that when me and my roomate try to connect to the router at the same time, it shows the laptop that connects second as one that has 'limited connectivity' and hence cannot use the internet. The 1st laptop however works fine!
The settings for the router have all been left to default.
I'm not sure, but does this problem have anything to do with the fact that the router in configured with a static IP. If so, then there is another issure which is that whenever I try to change it from static to automatic/dynamic IP, the page fails and the router doesn't even get connected to the configuraion page(192.168.1.245) after that. The only way to get that page again is the reset the router.
Also I'm not able to directly get into the config page when I connect my router to my laptop via lan. I need to change the LAN IP to 192.168.1.x where x is >1.
I'm attempting to set up a detector that fires when an application is seen. I've set up the flow monitor
2951-HQ#sho flow monitor AppWatch cache
Cache type: Normal
Cache size: 4096
[code]....
I'm runnig c2951-universalk9-mz.SPA.152-3.T2.bin
In 12.4(24)T4, I don't seem to have the SNMP detector in Advanced Security; however, it is present in Advanced IP Services.Is this a known pre-requisite? I can't seem to find any documentation or guidance from Feature Navigator that this should be the case.
Adv Sec (3845):
(config-applet)#event ?
application Application specific event
cli CLI event
config Configuration policy event
counter Counter event
[code]....
I want to setup Wireless Clients MAC+Active Directory based acess on AP 1242 standalone Wireless series.Steps i have configured :
1) SSID manger under Open authentication : Selected with EAP.
2) under advacned Radius.MAC Address AuthenticationMAC Addresses Authenticated by: Authentication Server Only
3) Server Manger : Current server list added the radius ip address 10.1.200.x
What I want to do is the opposite of most configurations. I live on a small island with only one DSL connection. The modem is wired connected to a WAP54G Access point. To extend this access point want to use a WRT54G.
View 4 Replies View RelatedI'm using a WRT120N and have had no problems connecting most wireless devices, but a Nintendo DS and DSi owned by my family are unable to connect to the access point. My wireless security mode is disabled, network mode is set to mixed, SSID is the same as on the DS/DSi, Channel width is 20Mhz only, Standard channel is set to 6, but I tried using channel 1 and 11 without success, SSID broadcast is enabled.
I've tried every work-about I could find and always get the 51300 error code, and am at a loss as to what else I can try to get the devices to connect to the access point.
Is it possible to configure WRT120n as an access point?
View 1 Replies View RelatedI have 3 E3000 Routers and would quality input regarding using 1 of the E3000 Routers connected to my Broadband Modem (Roadrunner) and would like to know how to configure the remaining 2 E3000 Routers to be hardwired to my main Router as Access Points located approximate segmented 1/3rd areas throughout my house which really is only 1800 Sq.Ft. in area. How to be configure these routers as access points as well as configuring the main router that will be connected to my broadband router. This is my first network to utilize streaming video, Internet Television Programs, Internet Radio, Accessing the Internet in all rooms of my house and outside the immediate adjacent patio area.
View 1 Replies View RelatedI have tried to find mib for my Linksys WAP54G acces point without succeed. Any body know how I could find it?? I want to program a software based on SNMP protocol. Is there some databses for mibs?
View 1 Replies View RelatedWe have several WLC's in school sites all connected back to a central WCS (ver6) which is working fine so I am just trying to clear up a few small issues.At a couple of sites I am getting alarms on WCS as per example below which has me at a loss.WCS has detected one or more alarms of category AP and severity Critical in Virtual Domain rootfor the following items:AP 'grafs-S03' is being contained. This is due to rogue device spoofing AP 'grafs-S03' BSSID or targetting AP 'grafs-S03' BSSID. - Controller Name: grafs-wlc-01E-mail will be suppressed up to 30 minutes for these alarms.Then a minute later I get the following to say its no longer being contained.WCS has detected a change in one or more alarms of category AP and severity Critical in Virtual Domain root. The new severity of the following items is Clear:AP 'grafs-S03' with protocol '802.11b/g' on Controller '10.96.192.5' is no longer being contained. Service is restored. - Controller Name: grafs-wlc-01E-mail will be suppressed up to 30 minutes for these changes.
View 16 Replies View RelatedI have a 5508 controller with 70 AP's ( a mix of 1131 and 1142). On the Monitor tab I can see under the Rogue Summary numerous "Rogue AP's" as well as the clients associated to these AP's. There are no Rogue AP's on my wired network according to the report. My question is this: What actions should I take regarding these "Roague AP's"? Many of them appear to be just other AP's in the residential area near by. I know I can take action to classify them as Friendly or Malicious as well as Internal or External, but what benefit is there to doing this? Will taking these actions keep my AP's from scanning off channel for Rogues? I read that if a "Rogue AP" is not on the wired network that is really is not considered a threat. Any Cisco best practices regarding how to handle detected Rogue AP's ?
View 4 Replies View RelatedWe have recently deployed a wlc5508 & some 40+ 3502i APs at the location.In the wlc I notice quite a few "rogue AP" listed with ssid's.
Is there a way within the wcs or wlc to determine better if any of these rogue AP are on my Lan?If I can locate the mac address of the ethernet port on the rogue AP I can track the port down on the appropriate switch & shut it down.
I've been noticing a Belkin router on my network for a while now and just yesterday another Linksys router as join the party, causing havoc on my connection speed!
The strange thing is that I'm the only one seeing them through Norton on my laptop, all other computer on my home network is not detecting them. could this mean that someone is monitoring me? is possible? If I move permanently to Ubuntu linux would the problem go away? OR will they still be able to connect and monitor me?