We are required to change passwords every so often at my job. I am trying to change the password for one of the local user accounts on a 5508 WLC running 7.0.98.218 - How can I accomplish this task? The option I get is to remove the users.
View 1 RepliesRecently i have setup a WLAN with inside and anchor 5508 controllers. Standard setup. However, one issue I have is I wish to extend the length of time between password changes for users connected in on the guest wlan. At the moment, 30 is max. I dont have an option on the controller to creat accounts for any longer than that. How to I extend it to 90 days or 120 days?
View 1 Replies View RelatedI have ACS 5.1 configured to authenticate users based on Active Directory. I have configured wired 802.1x too, with machine authentication enabled on ACS.When I login with credentials that exist in AD, it works fine. Then I configured Windows Authentication to ask for credentials (popup window). But I experience network disconnection when I login with a local account even though I entered correct AD credentials.I want to do the following: for an account that exist on the machine being authenticated (non-AD account), ACS should check its local database and reply with authentication success if it finds it, so the user is granted network connectivity.I heard about Identity Sequence in ACS. But I still don't see the right configuration,
View 2 Replies View RelatedI am trying to configure a Cisco ASA 5505 so that users can authenticate via Radius or via a Local account using the Cisco AnyConnect client. In the AnyConnect Connection profile, the basic tab, it has Authentication Method. We have this going to an AAA server group with Use Local if Server Group fails option is checked.Each time, I see where the user has failed while attemtping to log in to the domain via the radius servers and thus bypasses the local user database all together.
View 3 Replies View RelatedI have ACS 5.1 configured to authenticate users based on Active Directory. I have configured wired 802.1x too, with machine authentication enabled on ACS.When I login with credentials that exist in AD, it works fine. Then I configured Windows Authentication to ask for credentials (popup window). But I experience network disconnection when I login with a local account even though I entered correct AD credentials.I want to do the following: for an account that exist on the machine being authenticated (non-AD account), ACS should check its local database and reply with authentication success if it finds it, so the user is granted network connectivity.I heard about Identity Sequence in ACS. But I still don't see the right configuration,
View 2 Replies View RelatedSince the number of computers are expanding at my home, I want to reduce Wireless Connectivity and increase Ethernet connection between computers. I will be running a Server that supports 10 TB Storage.Will a Custom PC be better or should I use a NAS connected to a web server?
I currently use a Linksys WRT160n router that supports only 4 ethernet connections.Now I need at least 40 Ethernet connections. Will a Switch do? Also I will be running Asterisk to support Telephones.
My web server will not function globally. Only in LAN.And also, the web server will have a 250gb Wikipedia Dump that will deploy 10 times; and also a lot of video from KhanAcademy for knowledge base.I am looking for something powerful which will be quiet and have less downtime.I have checked out Newegg, eRacks, and many other websites. But I am confused with what to consider buying.
A Local Web Server or a custom built PC for 10tb hard drive suppoty.Router that can provide wired connection to about 40 users.A Terminal so I can monitor the bandwidth usage.
I am using web authentication with my Wlc 5508 and I would like to check all users currently connected (ip, login used, MAC address, ...) with SNMP.
I am using an external web server and my client are authenticated with ldap.
I know I can receive these information with traps, but I would like to create a short program which will check all users when I click on a button.
Having an issue with Cisco ACS v5.1.0.44 and the Cisco WLC 5508. Cannot get users to authenticate and keep getting error messages referring to EAP session timeouts from WLC filling our logs. Seems to be with this model WLC because we have Cisco 4400 WLCs pointing to the same ACS with no issues. Is there a bug or special configuration that is necessary to marry the 5508 with ACS v5.1.0.44?
View 9 Replies View RelatedI have WLC 5508 and 18 1242 APs are connected to WLC. I am getting following error messages in all APs.
*Jul 3 02:53:18.263: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul 3 02:53:18.320: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 3 02:53:18.326: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to
[Code]......
Have WLC 5508 running 7.4 code; have wlan setup to allow access to internal network. Users on ipads should be able to connect to this wlan and authenticated via certificate instead of PSK. We have setup laptops that are part of domain to use internal CA for authentication to WLAN. Ipads are not part of domain so we are not able to use the same model, or can we use the same model for authentication?How to setup WLC to authenticate ipad users via certificate instead of PSK while connecting to the WLAN?
View 1 Replies View RelatedIs it possible to limit what users are able to do and view in the webconsole of a WLC 5508 via ACS. I have ACS setup to restrict what commands can be run depending on user on the CLI however when they log into the webconsole they can access everything?
View 2 Replies View RelatedIs it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
We are implementing a WLC infrastructure in our company following the below scenario:
- WLC 5508, OS 7.2
- APs AIR-LAP1142N-T-K9
- 3 Wlans (1Open w/ Web Auth, 1 WPA2 and 1 802.1x)
Issues:Everything seems to be fine, but some users loses connectivity (when connected to 802.1x network) at least 3 times by day.
- I cannot see anything at WLC logs concerning the association/deassociation of any of these users.
- Only strange line in the logs is "RADIUS server 172.21.44.50:1646 deactivated in global list" (authorization server config)
- Also I see some "Coverage hole pre alarm for client" but that doesn't look like a problem...
Have a WLC 5508 running 6.x code with LAP's providing wireless for our internal laptops (WPA2 and EAP-TLS). I want to provide guest wireless which goes out a different port on the WLC to a guest firewall/cable modem. However, we want to prevent our internal laptops from being able to use the guest wireless. I have RADIUS (IAS) and LDAP for my AD available. We would prefer not to have use Lobby Ambassador and just have the guests use a simple password or web passthru. Guests may be laptops or smartphones. What options are available? I have tried a test setup using dynamic vlan assignments from RADIUS using the IETF flags, but can't seem to get it to work. Is there a way to identify the SSID is being used at the RADIUS server?
View 13 Replies View RelatedI have a wireless 5508 with license base to 50 aps, i use a deployment flex connect. I already registered all my access points, I use web authentication to authenticate users guest, and the service dhcp is in the central site.
My issue is the users in each remote site, can not get an ip address by dhcp from the central site, they can authenticate in the guest ssid, but any users can not get an ip. The request is passing by the wan in this way
Central Site DHCP - Router WAN - Remote Site - Users with notebooks. I use flex connect central deployment (all the traffic consulting to the wlc) .
perhaps i should use local deploy? The wireless is in the central site.
I have a WCS, four 5508 controllers, Cisco 3750X switches, and both autonomous Cisco 1200, and LightWeight 3502i in service.The problems I am having, is that some of my Access Point reset for no apparent reason, and I get alerted by my NMS.When I look at the switch port, that connects an access point that reported down, I see the POE switch port went down and back up in 4 seconds, just long enough for the access point to reset.There are no errors on the switch port(s). No cable or speed/duplex issues. Switch IOS: c3750e-universalk9-mz.122-55.se1
There are no other pertinent entries in the switch log. Just that the port went down and then back up. Always in 4 seconds.When a reset happens the WCS reports on the access point: '802.11/b/g/n' interface of AP associated to controller 172.20.0.x is down. Reason: Indicates that while the radio state should be updated on controller, no reset should be reported.But nothing else, except that the radio came back up.
This is happening two or three times a day, and rotates. It seems that it never happens at the same time of the day, or the same access point, or the same switch. (I have over 1000 access points and 500 switches in service)I am curious if the WCS is automatically resetting the access point radios, which is causing the switch port to go down/up?And if so, is it possible to turn off the automatic reset?
I work at a campus and use the WCS to control access to my network for staff and only internet access for students. The Staff are assigned Username/password thru active directory and the student uses another SSID with only WPA --a password for all. I was tasked with adding more securing for students -- by adding a user/password. I do not want them connecting to my Active Directory for two reason--security risk and I have too many to input (over 1000). So, I wanted to use our internal database to validate users. I create a webpage with "WebAuth" that opens my logon page from my site and validates the login fields against the database. It works and this allows the user to navigate thru my website but not outside the site. If they try an outside url it redirect them to my logon script. I now understand why, so I'm looking for code I can add to my logon page that would allow me to redirect me to the controller's (once users are authenticated by my database) to call the WCS controller so I can enter a preset username/password so the policy management file would allow them access. I presently use "External" and don't know if "Custom" would work. Finding a way in using a database instead of adding one person at a time?
View 3 Replies View Relatedhow do I change my router password?
View 1 Replies View RelatedI'm very new to WCS and the bloke that configured the bludger has left the company. I'm trying to get into it but I don't have the correct username/password combination.
My query is: How does one do a password reset on a WCS server? Or failing that, is there a way I can ascertain the current unknown password?
I have access to the actual server itself, but not the WCS application. Searching around Cisco.com shows that apparently there is a utility that can be used to reset usernames and passwords however I can't seem to find it. The WCS version is: 4.2.62.11
I bought a new connection with this router, and the first time i tried to access it it had the default <blank> username and password it, so i changed it. But now i really don't remember what it could be. I tried to reset the router, but it still didn't clear the password. I tried to contact my ISP, and they said they can't access my router remotely, i had to reset it myself. I've tried to reset it many times (holding down the reset button for 10-100 seconds), but by PASSWORD won't be reset.
How can i reset it? Is there perhaps any other reset trick for it?
we have two WLC model 5508 with software version 7.0.116.0 (25 ap supported for each), i tried to add a new access point air-lap1131ag-e-k9 but after five minuts (maximum) the ap reboot, i replaced :
- power injector
- AC/DC adapter
- patch ethernet
- switch port
- switch
- ip of the access point
- reset a default of all access point i tried
- reboot of both wlc
I took the ap and connected directly to the switch (with or without power injector), but the access point reset with this reason.
I am transitioning from RADIUS auth to local auth and i don't want to hassle everyone to change in one hit.If i can get auth requests to look in the WLC local net db first and if not found try RADIUS then this is what i am after! You can easily do it with web auth but doesnt seem so easy via WPA2 method.
View 1 Replies View RelatedI don't remember my network password. How do I reset or recover it?
View 5 Replies View RelatedI need to reset my wireless password because I forgot it
View 1 Replies View Relatedtrying to reset my security password- and same problem as listed- tried using admin for admin and password for password at 192.168.1.1, but seem to have locked myself out.
View 1 Replies View RelatedI need to reset my wi fi password to 192.168.1.1
View 2 Replies View RelatedHow do I reset my password on my iPad? I have phone to enter a password on it and I don't remember what it is.
View 1 Replies View RelatedFor access by external users on our network use all Cisco VPN Client, we have a VPN3000 Concentrator and a Cisco ACS 2.6 for authentication.We wanted to upgrade to the latest release of ACS 4, x .... you can set a password expiration for VPN Client? Or make sure that the remote user can change password?
View 2 Replies View RelatedI have ACS 4 integrated with RSA 6.1, where users of ACS can authenticate their passwords with the rsa server.I am migrating users to ACS 5, and I want to integrate with rsa.
I am configuring rsa as “rsa secureID token servers”.But how should I configure the users on acs to authenticate the password with rsa?
Previously on acs 4, on the user page, in password field, I select authenticate with external DB, Also, any guide for the config on rsa 6.1 side (with acs 5)
I have a Cisco 5508 running version 7.0.116.0. This controller hosts an open public wifi that requires users to accept a terms agreement via a Web-Passthrough setup that redirects them to the terms splash page. For most people this works without any issue. However, if a user has their homepage for their default browser set to a https site, such as [url]..., then they are never redirected to the terms splash page. The page will just spin and spin until finally they get a timeout error.
View 7 Replies View RelatedWe just took on a new client and they do not have the username or password for their ASA 5505. we need to reset to factory defaults. I have read some instructions online how to do this, but they require the password. How do we do it without the password?
View 4 Replies View RelatedI have Cisco PIX 515E for my Lab and can't recover the password. It is not connected to the network. I have configured server, address, gateway from the monitor mode and tftp not seeing my laptop. best way to reset or recover password.
View 7 Replies View RelatedI have been asked to do a network survey at a client. They are using the Cisco SGE2000 switch, which is new to me (used to working with 3750 switches). They seem to have lost the username/pasword for one the switches. Is there an way to recover from this, without reseting the whol config (not sure they even have a backup) ..
View 1 Replies View Related