I had configured one access point CAP3602E in flex connect mode through a WLC 5508 after deploying the access point in flex control mode the local mac-filering is not working. before it was working when ap was in local mode. any body have to know is the mac-filtering working in flex-control mode ?
View 2 RepliesI am trying to block clients based on MAC addresses connecting to our Wireless Guest network.
My scenario is: We have 2 interfaces (corporate and a guest). Users are connecting to our guest network after they have automatically connected to our corporate network and logged into Windows. When they realise that things are not quite working in the way they want (access to servers etc...), they reboot and then find they cannot logon to the laptop at all. This is because the laptop has automatically rejoined the guest network and has no access to AD. I then have to locally logon to the laptop and remove the guest network.
It’s starting to become a bit of a pain as we are an educational establishment and... well... you would wouldn’t you
Hardware: WLC5508, Software Version 7.3
So far I’ve tried enabling MAC Filtering under “Security -> AAA -> MAC Filtering”, but found out that it’s a white list. The opposite of what I’m trying to achieve, but I like the fact you can link it to a specific interface.
I’m just looking at the “Disabled Clients” again under “Security -> AAA ->”, but think this is more a total ban as I cannot see a method at attaching it to an individual interface. I'm kindda stuck and my good old friend Google is not yielding great results.
I’m not by any means a wireless expert, so there is probably a better method. I would prefer to use the controller as a way of achieving this, but if you think I’m wasting my time and should be looking at a Windows Group Policy method then I’ll go with that?
I have a wireless 5508 with license base to 50 aps, i use a deployment flex connect. I already registered all my access points, I use web authentication to authenticate users guest, and the service dhcp is in the central site.
My issue is the users in each remote site, can not get an ip address by dhcp from the central site, they can authenticate in the guest ssid, but any users can not get an ip. The request is passing by the wan in this way
Central Site DHCP - Router WAN - Remote Site - Users with notebooks. I use flex connect central deployment (all the traffic consulting to the wlc) .
perhaps i should use local deploy? The wireless is in the central site.
(5508 WLC, 1142N APs).I understand if I enable the AP mode to Rogue Detector from the details page of the AP, the AP stops accepting requests and is now looking for rogue items on the wired network. Is this the same when I enable Rogue Location Discovery Protocol? Will I lose the wireless functionality of all of my APs on the controller?
Next question, when I look at the Rogue Summary on the Monitoring page I see three Adhoc Rogue devices. When I select the Detail link only one shows. I remember the other two were HP mutifuction devices with WIFI enabled but I cannot retrieve that information anymore.
One of my customer has an Apple IPAD 2.The IPAD is getting registerd through Cisco WLC 7.2.The APs that are being used is AP 1252 & AP 1242. The AP are configured in flex mode. The issue that we are facing is all the laptops and IPADs other then Apple IPAD are working but the Apple IPAD are not working through AES WPA2.It gives him a dismiss message and at time it gets connected but take a long time to get connected. Incase when the IPAD gets connected the following happens.
While connecting to the SSID it will ask for the preshared keyAfetr entering the preshared key it takes time to acquire an IP addressAfter the IP address is assigned it gives a dismiss message. If we do not click on the dismiss message then it will take anothere 30 seconds or so and get connected.
I am planning an HREAP deployment; a data centre with multiple remote sites. HREAP has been evaluated and meets our requirements. We are now looking at buying some equipment for this deployment. For controllers, we are considering either the 5508 or the new 7500. Other than cost, scalability and different hardware what are the differences between the platforms? So far I have found:AP's in local mode not supported on 7500, the 5508 supports AP's in local mode.The 7500 cannot be used as a guest anchor controller, the 5508 can.
View 3 Replies View Relatedi have 8 users in my office. i want to enable the URL Filtering for only 5 users in my office and 3 users will have no URL Filtring.
View 7 Replies View RelatedWhere on my router interface I could go to enable both the SPI Firewall, and the Wireless MAC Filtering? I have the D-link DIR-815.
View 1 Replies View RelatedDIR600 doesn't allow me to enable wireless MAC filtering when I setup DIR600 as access point. (I connected DIR600 (access point) to my another room's router.)
View 1 Replies View RelatedI am planning to enable MAC address filtering (one port on 4510 & another 3560). I want to allow only that MAC address to communicate via that port with the rest of the network and internet.
4510 has PC connected and 3560 had polycom connected. [code]
It shows this option "Filter wireless clients: Apply MAC Filtering to devices that connect to the network via Wi-Fi. This is the normal usage of MAC Filtering. Filter wired clients: "However I don't see that option on the actual page. How can i enable Mac address filtering only for the wireless side?
View 7 Replies View RelatedI was wondering if i can enable url filtering on my 2691 or 2651XM routers so that if someone visits any website i can see that under router logs. right now i am using kiwi syslog that logs the router activities.
View 3 Replies View RelatedWe are planning to implement Cisco wireless in our central office and branch office using Cisco 2504 WLC and Cisco 1602i Ap. Our branch office is connected via ip vpn and a separate broadband connection for urgent requirements. Usually all users are allowed to browse through central proxy server.I have been trying to find any possibility of giving guest access (web authentication) for branch office guests utilizing only the broadband connection which is connected to the branch office. Is there a possibility that Central WLC is reached using NAT from the BranchOffice AP and allowing guests to authenticate and surf the web at times IP VPN is unreachable.
View 4 Replies View RelatedWhen disabling SSID broadcast and enabling MAC address filtering on WAG320N, my other wireless laptop get disconnected. And when you try to connect, it doesn't connect again.
View 3 Replies View RelatedI am curious if I can do an either or sitution with a single SSID. If you are on the mac filtering list then you gain access to the network, if not then enter your WPA2-ENT credentials. I have a minimal ammount of users that need mac filtering, but do not want to give them there own SSID.
Cisco WLC 5508 7.4 code
I have one cisco wlc 2112 with ios 7.0.230.0 with license to support 12 access points. My access points are nine (9) lap1231ag and one (1) lap1310.I just have one wlan (ssid). My scenario of deployment is in layer 3. I have one interface management and ap manager in the WLC. All my Access Points have differents ip address that WLC. I need to configure a unique ssid to associate my six (6) dynamics interfaces (each dymanic interface with different vlan subnet).Each wlan profile (ssid) should have the same security in phase 2 (wpa2/psk). My cisco access points don't support hreap. My wlc support only (4) interface into an interface group, and i need six (6) dynamics interfaces.
View 6 Replies View RelatedI created a LAP Template in NCS to configure some new 1142 LAPs that were installed in a remote office. These LAPs need to be in Flex Connect mode with V LAN support. The template is being applied with partial success on every access point. Details of the partial success say the Flex Connect Parameters fail with the following error.
Provision Failure: { URL}.Object Not Found Exception cannot be cast to [URL]
Am I doing something wrong? The Flex Connect portion of the template has V LAN Support enabled, Native V LAN ID, and the Profile Name- V LAN Mappings configured.
Prime NCS version 1.1.1.24 Access Points are AIR-LAP1142N-A-K9s running 7.2.110.0
As per my understanding, Cisco Nexus 2232 can only connect to HP c7000 Chassis if we are using a Pass Through Switch in the HP c7000. Cisco Nexus 2232 can only connect to End Hosts and not to a switch. Is there a New Feature added in Nexus 2232, which enables it to connect to a Switch like HP Flex Fabric ?
View 1 Replies View Relatedl have implemented mac filtering auth on my wireless network, l have 2 WLC ( 1 WLC 5508 and 1 WLC 4402, and I wonder if you can migrate the mac address database of a WLC to another and how can l do this.
View 4 Replies View RelatedDo we have Option to add MAC address of specific laptop or Mobile to connect to the Access Point in cisco Aironet AP 1260 series in Autonmous mode
View 4 Replies View RelatedAny chance the filtering features on the 5508 controller code will make it into WCS at some poiint? Being able to sort these lists would be invaluable.
View 5 Replies View RelatedDo we have enable mod eon 2112 WLC ? Also if we need to access WAP from WLC how can we telnet or ssh?
View 5 Replies View Relatedhow to Config the ACS 4.2 server runs in TACACS + mode (users accounts configured the ACS) mode to authenticate enable mode password on the asa using the same AD account?
View 10 Replies View RelatedHow to enable security mode on DLINK wireless router DIR-615, after having it installed in "unsercured mode"?
View 1 Replies View RelatedHow do I enable the Security Mode on a Dling 615 wireless router?
View 1 Replies View RelatedI have a TWC wideband modem and service. I know that they will enable bridge mode if I ask them. My questions are. After they enable it whats my setup? Do I just run a cable from their modem into a new router that I then set up on my own? Is it that simple?
View 2 Replies View RelatedI have a Cisco 5508 controller and am considering using LAG. Can I enable LAG but only use 2-4 of the 8 available ports on the 5508? I am asking because currently I don't have enough ports on my 3750G switch to accomidate all 8 ports on the 5508.
View 2 Replies View RelatedI am trying to get users in the external identity store (AD) to be dropped directly into enable mode after being authenticated, since I don't know of a way to set an enable password for users in an external identity store. I think it has something to do with shell attributes but I'm not realy sure.
So here's what I tried.Linking identity group to external group and provide full command priviliges - enable still didn't work Creating duplicate users in the internal identity store and setting the password type field to AD1 - That gives me the ability to get to the enable password prompt hit enter on the blank promt then prompts for Old and new passwords but fails everytime with an Error in Authentication.
How i can enable promiscuous mode on my Atheros AR9285 Wireless Network Adapter? I'm using windows 7 starter.driver version of my Atheros AR9285 Wireless Network Adapter:9.2.0.427.
View 4 Replies View RelatedOn my 2650 Router it just has only Telnet password.It has no enable mode password set.After reboot it is goes to prompt mode BB.I am unable to go to enable mode .how can i go back to enable mode on this router?
View 13 Replies View RelatedI configured the below config in Routers it is working good , but when i do the same in SWITCH-2960 , i am getting a problem not able to login to enable mode ... i am getting the basic login only ....
Error msg : % Error in Authentication.
Need to be configured at TAFE Network Devices: Code...
how do I setup an enable password for an ASA 5510? At the moment its setup to authenticate using RADIUS (which I'd like to keep doing) but I need to setup an enable mode password.
View 3 Replies View RelatedMy engineer onsite can't get into enable mode on his 2911 router. I've seen this before but I can't find out how I fixed it.
He gets an error saying : no password set
Here is the config:
Router#sh run
Building configuration...
Current configuration : 1784 bytes
!
[Code]....