Any 3rd party CA to provide a root cert for the ACS & verify csr's generated by the 7925's? I've spoken with customer service at Verisign and GeoTrust and either i'm explaining it totally wrong or their not providing CA services for this type of secured environment. sHA1 using EAP-TLS.
View 1 Replies
We have a UC500 with 3 access points AP541N. We need to move around the building so we use wireless voice with 7925G phones. All works fine except when the phone needs to change from one AP to another. We lost connection for a small interval of time and then resume normal operation.
View 1 Replies View RelatedHaving a hard time getting Cisco phones to roam 'cleanly' in a Cisco unified wireless environment; Cisco 2504 controller with Cisco LAP1142n (lightweight) APs. The phone SSID is not broadcast and is using WEP encryption. The problem is that when the user is walking around the property, traversing from AP to AP in-call (external and internal calls), they notice the point at which the phone roams from AP to AP - it's literally two or three seconds of no sound and then the call resumes back again. Fast SSID change has been enabled, we've tried locking the SSID to 802.11a only, b only and g only but with only slightly better results when locked to B. We've lowered the client roaming threshold RSSI to -75dB from -80dB, this also yielded better results but still a couple of seconds gap exists. Cisco TAC came in on a Webex session earlier, changed a few QoS settings and advanced wireless settings on the controller, but to no avail. Wireless signal has been proven to not be an issue; several AIRMagnet PRO surveys have been carried out showing the signal throughout the property to meet the -67dB requirement.
View 8 Replies View RelatedI would like to use the NCS 1.2 to monitor Juniper SRX 210 firewall. When I try to import the MIB File from NCS, which show "Error: Failed to load MIB File "mib-802" because it is not in the resource path.what I can upload the MIB File from Juniper. [code]
View 0 Replies View RelatedI have came across some third-party ws-g5483's that I was thinking of using. But when I go to plug them in, nothing seems to happen. I have tried them in ws-c3548-xl-en and also a ws-c3524-pwr-xl-en with the same results. I know on the newer switches you can do the serviice unsupported-transceiver command but is there anything I can do to get these to work with older switches?
View 5 Replies View RelatedI use wireless internet connection and I see “third party setup = Yes under configuration. Is it about sharing data or being monitored
View 1 Replies View RelatedI am using a cisco asa5520 and i have set up remote access vpn with an AnyConnect connection profile.In the connection profile i have set up that users should authenticate using both certificate and AAA.Due to a high security requirement, the user certificate is issued from a 3rd party. This is working fine and the user now need a valid certificate and a username/password to authenticate successfully.I added the CA certificate as a associated trustpoint on the ASA box to get the certificate verification working.Problem:If Jane and Joe both have a valid certificate AND a valid username/password, Jane could authenticate using a combo of Joes certificate, and Janes username/password. Both are valid (isolated), but i only want jane to be able to authenticate with her username/password and her personal certificate.
View 1 Replies View RelatedI'm responsible for designing the network for a LAN party that will be held in October. There will be up to 400 participants and 25-30 crew members. 10 table rows, 40 participants and one 48-port gigabit switch on each table. Core network will be a couple of Cisco 3560G or similar. There will be 2xGbit between the table and core switches.So, how to set up VLANs and subnets for a 400+ people network?
1) Everything on one /23 subnet, or
2) Participants on one /23 subnet, separate subnets for servers, crew and wireless, or
3) Participants on two /24 subnets, separate subnets for servers/crew/wireless, or
4) Separate /26 subnets for each table switch and for servers/crew/wireless?
As far as I can see, the main disadvantage of all participants on one subnet is troubleshooting and isolating network problems - and the main disadvantages of separate subnets is more complex setup and that people cannot browse LAN games other than those on the same switch.
Does any one used third party SPF in Cisco ASR 1002 series routers, does it supports them.
View 2 Replies View RelatedI am thinking about running some third-party unified communications apps under VMWare ESXi5 on a Cisco SRE 900 module. According to the Cisco docs, third-party apps are supported on these modules (see table below) but the app in question is NOT on Cisco's list below.
[URL]
Some questions:
1. As long as the third-party app is capable of running under VMWare/VSphere ESXi5, is there anything on the SRE that would prevent you from running this third-party app even though it's not on Cisco's list?
2. What is Cisco's policy on the use of third-party apps that are not on their list? For example, will they take a support call on the SRE running a non-listed app. (I don't want to void any sort of support contract through the use of a third-party app not on their list).
I have a school club, but our school does not allow any wireless networks within the school perimeters.Wired are allowed, but wireless are not allowed.I plan to host a LAN party for my club, and we will have about 20-30 people.We cannot have any internet access, and I have not touched a wired stuff, There is a 24 ethernet switch, and if I buy one, and suppose I buy another 24 ethernet switch (I know there is a 48 ethernet switch), can I connect those two 24 ethernet switches to make 47 ports?* For a LAN party without internet access, can we use an ethernet switch or do we use something else?* For 20-30 people, it is recommended that we have a ~8mbps upload speed. When ethernet switches advertise 10mbps, is that upstream & downstream? When all the computers are hooked to 24 ports, does the advertised 10mbps go lower? (I have seen 100/10 mbps, and I don't know what that means)
View 4 Replies View RelatedI'm trying to connect a few of my devices to the wireless internet at home.
1.Xbox 360
2.Galaxy Tab 10.1
3.My Touch 4g
All of them can recognize the the network they just will not connect. All my freq are good 2.4 or 2.5. WEP Key works no problem, just the minute I try to connect the galaxy tab and cell phone just says "remembered, secured with WPA/WPA2 PSK." The xbox when running the test connection fails as well.
Running vista x64 home premium on HP DV7 1270us.
I had something odd happen to my Dlink router DIR-651 model. During the early evening hours someone changed the SSID name of my Router. Nothing else changed that I could see right off. So I reset the router to Factory Defaults.
View 1 Replies View RelatedI am attempting to install a third party SSL cert (GoDaddy) to properly secure the external interface of my 1811 ISR so that I can implement SSL VPN. I have tried using SDM 2.5, but that doesn't appear to be working. I am familiar with doing this on a Cisco 3005 Concentrator, but I'm not aware of how to install an intermediate cert on the 1811 (or if it's even possible), in order to properly have the GoDaddy cert properly imported and used for SSL VPN. I have gone through the CSR process and have the initial cert from them generated and have imported it, but it never appears to be identified correctly if I browse to the external interface on the router. The router always defaults to its self-signed cert.
View 1 Replies View RelatedI have windows 7 clients (supplicants), D-link access point (authenticator), Cisco acs 5.2 virtual appliance with evalution license (acts as authentication server - Radius server). I want to setup EAP authentication (PEAP) that users will be able connect to Wireless LAN with login-password. I've done some configurations, but I did not get any result. in ACS 5.2 I get this error message: 11014 RADIUS packet contains invalid attribute(s): RADIUS Request dropped.
View 5 Replies View RelatedSo since my web auth cert is expiring I got it renewed from VeriSign and they sent me back the file. Do I need to again combine the "myprivatekey.pem" file and the new one that I got and then load it on the WLC? Can't find any guidelines and instructions from Cisco on this. Or do I need to go through the whole regenration of CSR process again etc?
View 3 Replies View RelatedWe have just installed a Cisco RV120W behind a third party firewall. All works correctly now, but we are struggling to get the Quick VPN clients connected. I have enabled port forwarding for PPTP & L2TP over IPSEC on the third party router, but still cannot connect (the RV120W was previously used as a primary router & worked perfectly). What ports do I need to open on the third party router to get this to work correctly?
View 4 Replies View RelatedI have a scenario.On our website, there is an option to pay mobile,electrycity etc bill from payment gateway (third party). when user click on that link, my servers(behind CSS) should go to paymrent gateway using their SSL cert (payment gateway SSL cert) and should provide payment gateway link to user on our website.
How to implement this scenario using CSS115003 ?
user access URL---click on Payment Gateway---My servers get authenticated from pyament gateway using their cert--revert back and provide payment gateway link to user on URL.
I'm fairly new to networking but I've learned quite a bit on my own without being educated. I'm trying to just figure things out on my gear. So for my LAN party i'm going to need an internet connection. I'm not going to rely on my venues subnet though so i want to create a new /24 subnet(250 hosts is good for a start). I want my subnet to be able to speak to the outside network too.
View 8 Replies View RelatedI am new to these forums and I have upgraded from firmware 1.00 on the DIR-815 to the 1.01 firmware and once I upgraded, I can log into Xbox, but can't host party chats or host game rooms. I also noticed that any and all messages sent from friends didnt show until I rebooted my console. Something is SERIOUSLY WRONG here and would like a MOD to comment on this.
View 12 Replies View RelatedXbox works fine for some things, I can access Netflix, can download from live marketplace, etc, but cannot join a party and cannot play a game. Other people cannot join my party, cannot play my game. Error when I try to join a party is "Can't connect to xbox live party, there might be a network problem."
Xbox join party and games work fine when connected directly to comcast (motorola) modem.Dir-601, firware 1.02NA and 101NA. Hardware version A1.Port forwarding TCP 53,80,3074 and UDP 53,88,3074 - also included TCP 80 and 21 to no avail.
In CUCME if you do not configure any translation rules and leave the system mainly at default, when a call is routed to the PSTN the CUCME system sends the true calling party ID which would be a users extension number. Is it correct to assume that a CUCM server based system, when too left at the majority of default (without translation rules or stripping etc) that it will send the true calling ID to the gateway?
View 1 Replies View RelatedI've got a Cisco 1941 setup working fine for Cisco Anyconnect. Clients can connect to local resources fine. The issue I have is I need the remote clients to access a third party IP address but to do so they must do it through the VPN. At the moment only local resources are accessed across the vpn and if they need internet they use their own internet connection they are connecting with.I've added the below to make sure traffic going to the IP is going across the VPN.
View 4 Replies View Relatedhow ISE support on third party LAN switch, if the requirement is doing 802.1X based flexauth.Refer to the diagram i attached; 01 topology.png
Concern 1: if the 3com switch with 802.1X feature, but still without the full feature to support FlexAuth, policy encforcement, DACL etc. In this kind of situation, will user still able to authenticate (using method PEAP-MSCHAP v2), but authorization just grant with permit any any?
Concern 2: Can i assume i authenticated the 3com switch using MAB? But this will cause endpoint with no 802.1X, am i right?
Concern 3: cisco switch C4507-E, loaded with IOS version Cat4500e-UNIVERSALK9-M, version 03.04 and Supervisor Engine :WS-X45-SUP7-E, is this platform is supported in Cisco TrusctSEC?
Contribute to our DCS IP Camera Third-Party Video Monitoring Software List.Do you have experience using third party software to monitor feeds from your DCS camera? Share your knowledge. post your contributions here: DCS Compatible Software(i.e. sticky at the top of the DCS Software board)
View 1 Replies View RelatedI need properly configuring the RVS4000 device. I need all devices to be on the same subnet (192.168.0.x) and if I am drawing this out correctly in my head I would perform the following:Connect LAN port of RVS4000 to LAN port of the switch and statically assign a LAN IP of 192.168.0.251 to the RVS4000Switch is connected to LAN port of the 2Wire (192.168.0.254)Change operating mode from Gateway to Router in the RVS4000 Connections to the RVS4000 will obtain a DHCP IP address from the 2Wire that's upstream.As the WAN port of the RVS4000 would be unused, will it still answer requests for a VPN connection assuming the proper ports are forwarded to it?
View 1 Replies View RelatedIve been trying to work this out on XBL forum for a while. all my settings seem to be correct ( UPnP, NAT type: open, no port forwarding or triggering, IP settings on Xbox's are auto).
The two Xbox can play online separately, when either one of them attempts to join the others party it disconnects from Xbox live.
According to the microsoft website, Xbox live only supports the Hardware version 1A and Firmware: 1.00NA.
My router has B1 and 2.00NA. is there a way to downgrade?
I'm trying to test fast roaming using a Cisco 2100 Series controller and 2 1140 APs. The initial authentication succeeds fine and the wireless connection works ok using WPA2+CCKM and LEAP with a Cisco ACS radius server.The problem is that the client does not attempt to preauthenticate with the other AP because the RSN Capabilities IE in the AP beacons and probe responses do not set the RSN Preauthentication capable bit. I can't figure out what it takes to get the APs to indicate to clients that it can do preauthentication. I'm been crawling through all the documentation I can find, to no avail.
View 1 Replies View RelatedWe are about to share a 10 MBit ISP connection with 2 others companies, and they are going to split the bill up into 3,3 and 4 Mbit, so we where thinking that we could setup a switch before their and ours router and provide them with a static IP from our ISP. But is it possible to set a bandwidth limit on the ports of a Cisco Catalyst 2960-8TC, so that we can set a limit of 3,3 and 4 on 3 ports.
View 1 Replies View RelatedI want to PAT my project of WLAN and i attached the document, how I create the Testing Criteria of the said scenarios, PAT document includes WCS 7.0, WLC 5508, MSE 3310, Cisco AP 3502e and ACS 4.2.
View 0 Replies View RelatedI have cisco ASA5510 firewall using in my network but unable to bolck Url's unwanted. can i block the [URL] on the asa by using regular exp.
View 3 Replies View RelatedI have 7 POE switches that have ESI IP phones attached. I have two VLANS, 1 and 2. VLAN 2 is used for voice and is defined in each switch.The ESI IP phones connect to my POE switch ports and the pc attaches through the ESI IP phone.
I have had voice quality issue between floors in my building. Talking to others on my floor via the IP phone, there are no voice quality issues. [code]
is it possible to connect Cisco Ap-1242AG with non-cisco wireless router to work as repeater?
View 1 Replies View Related
