I have in the past downloaded the webauth bundle to a wlc 5508 running 7.0.98 successfully. I am trying to upload a new bundle after modifying the AUP but I get an error after the download to the wlc.
The error with FTP or TFTP is
% Error: Webauth Bundle file transfer failed - Unknown error - refer to log
I've tried to copy the unmodified bundle from the zip and get the same error so I don't think it's the login.tar file.
I have a new fresh 5508 release 7.0.98.0 When I try to download (I mean upload to the controller) a customized Webauth bundle in .tar format I have the following message error in the syslog :*TransferTask: Oct 29 12:56:08.894: %UPDATE-3-UNTAR_CMD_FAIL: updcode.c:2832 Error during untar of webauth bundle. Tar returned 256.
View 17 Replies View RelatedRecectly we replaced Cisco 2100 Series LAN controller to Cisco 5508 Wirless LAN controller , I downloaded WebAuth Bundle from my Old LAN Controller ,when i am trying to upload to my New Wireless LAN controller ,its not uploading and also it gave me uploading failure error message .
View 2 Replies View RelatedI would like to get webauth bundle sample to create custom page for our AP controllers but I'm unable to find the sample .tar within the WCS itself.Some other WCS manuals has references in them that says there should be link to download sample from WCS but clearly 2106 hasn't got one.There's one in download section "webauth bundle 1.0.2.zip" but this is for registered partners and costumers, we are not registered as partners and cannot download the sample ourselves.
View 2 Replies View RelatedI'm trying to install a webauth certificate -- it works fine when unchained, however once I add the additional information the installation fails. I am using the same root and intermediate certificate information as last year, and it worked fine then. I can recreate last year's pem file with the chained information and it installs fine, so it's only when I include the new device certificate information that it fails. The certificate installs fine when it's not chained, I'm not receiving any openssl errors, and I'm not using openssl 1.0.
View 1 Replies View RelatedI am using webauth and need to install a SSL cert to prevent the "There is a problem with this website's security certificate" message. I have a Wildcard cert that was issued by Network Solutions that I use on a couple web servers I run, and want to know if I can use that for the WLC? It's a pks cert and I think the WLC needs to use a pem cert, so I converted the wildcard to pem. Or do I need to purchase a cert that is not a wildcard and is in pem format?
View 7 Replies View Relatedi am getting an error during the Upload of Login page for WLC 5508 customized.After the upload is completed i receveid the error "Error extracting webauth files."I tried to create the file *.tar with different program (winrar, 7zip, gnu tar, etc)
View 3 Replies View RelatedWe have disabled the WebAuth SecureWeb on our 5508 WLCs so Guest users can access the guest splash page without the certifiacate error. The controllers are currently running 7.3.112.0. Everything works fine with the WebAuth SecureWeb enabled, but once we disable the guest users are not redirecting to the splash page anymore. I remember having to reload the controller in the past to disable HTTPS completely, but is this still the case? I don't see any documentation supporting the need to reload.
View 2 Replies View RelatedWe are trying to get the waep template (default no changes) from the Cisco WebAuth bundle to work on a 5508 controller.
We've setup the controller to use the custom login.tar that comes with the waep template folder in the bundle. We setup the WLAN to work off the global template and we used the config network web-auth secureweb disable command to allow only http rather than https (which is supposed to work in 7.2 code)
When we test with the custom bundle, we get no answer from the controller, just a url of [URL]
If we turn custom off, and use internal everything works...
Just to be clear.. we aren't looking for authentication (user and pass) we are trying to do the enter your email and click accept to the aup method.
I am trying to upload a customized web-auth bundle to a WLC 5508 and having some issues.I have downloaded the web-auth bundle from Cisco and used this as a template to create the web pages.I seem to recall that there is only a couple of Windows tools that you can use to TAR the file such as TUGZIP and IZARC. Anyway I have tried both and I still cannot get the file to extract. I have tried to strip the file out so that I only send up the login.html page and even this does not work.I am using a software release 7.0.220.0.
View 6 Replies View RelatedI have a major wired network issue.It manifests itself as not being able to print to my two home network (wired) printers and speedtest upload test fails.I can disconnect the ethernet cable from the failing desktop and plug it in to a laptop and everything works fine.I have tried disabling AVG firewall.
View 2 Replies View RelatedI have WLC 5508 in my office and i am asked to backup file configuration from WLC but when i remote WLC to get the upload configuration file via tftp it doesn't work.
But when I try to use direct connection ( point to point ) with WLC and my laptop i can get the upload configuration file. is there something wrong, actually i have connected with that WLC i can ping and telnet that device
I have two Cisco WLC 5508 controllers that I'm trying to set-up for our new corporate WLAN. I've gone through most of the configuration fine but have ran into an issue uploading a signed certificate to one of my controllers. I should point out that I have managed to upload the certificate successfully to one of the controllers, I just can't seem to upload it to the second.The issue is as follows:
- I've logged into the controller, gone to Security -> Web Auth -> Certificate -> Download Certificate
- I've specified my tftp server details and selected apply
- the process begins and I can see through my tftp client that the controller is attempting to copy and install the certificate
- The controller tries to install the certificate but fails, reporting the same
We recently did a forklift upgrade on our campus and installed 3502i's, 3502e's, and 11 5508 WLC's. Our students are complaining about slow connections in several areas of the campus.In our testing and basic trouble shooting our Apple laptops have no problems but our windows laptops are showing a very slow connection rates 264kbps downloand and 366kbps upload. The window device has current drivers installed.
View 14 Replies View RelatedWe are trying to set up Out of band connection for Cisco 5508 WLC and when we try to ssh to the Service port from a remote switch, this fails. SSH or Telnet to the Management IP address works fine. The Service port and Managment IP are in the same IP scope but different subnet..i.e 172.16.10 for Management and 172.16.99 for Service port. Also, as this set up will be HA (AP SSO) in future, for which DHCP is recommended for the service ports, just wondering if SSh will be possible.
View 7 Replies View RelatedI have a WLC5508 working fine right now, using IOS 7.3
When I try to do a Link test on some users to check signal quality, noise, etc... I received the error message below
I have a problem with a customer of mine. We have deployed two new WLC5508 running r7.0.116.0 and AP1142s, also WCS with r7.0.172. When we setup a "Guest Access" we ran into trouble.The problem is that we can associate to the SSID/AP and get an ip-adress. When we open the web- browser we do not get redirected to the virtual interface but instead the _hostname_ of the WLC. Like this: url...
I we manually replace "cisco6a19c4" with 1.1.1.1 it works as it should, the login page appears, we login and can access the internet.We have tested and disabled web-auth on the ssid an everything works, we can directly go out on the internet, DNS works without any problems. [code]Guest network (VLAN) is transfered from WLC via the trunk to the Cat4503 and then connected on a access-port to a separate broadband-router, then to the inetrnet.DHCP to guest-users from separate broadband-router which is def gwy and "DNS".On the virtual interfaces no hostname is configured.
I have setup the WLC to authenticate to a MS Server2008 NPS for a WPA2/AES SSID. The connection is successful, but client authentication fails for wrong EAP-type. I believe this indicates a Windows7 client issue. What is the required client setup to satisfy the MS NPS?
View 8 Replies View RelatedI just upgraded my cable modem from the Motorola Sufboard 5120 to the DOCSIS 3.0 capable 6120. Provisioned it with Comcast and their "Blast" service (supposedly it caps at 16 down, 2 up).
I had, in the past, used my desktop via N-format wireless (DWA-525 N-format PCI adapter and DIR-655 N-format router) to do a speedtest.net test. I was getting 16 down and 2 up (as advertised). When I switched to the 6120, I did a speedtest.net test again to see what kind of gains, if any, I was getting. Turns out, I was getting 20+ down (nice improvement) and 1/2 Mbps up (a fourth of what I used to be getting?). Called Comcast. They "sent signals" (don't they always?) and claimed that it fixed it. My download speeds increased a smidge (about 22), but my upload speeds were still .5. Called Motorola, they had me do a few things and now I get 1 Mbps up and 27 - 30 down via wireless.
My download speeds are great. I'm content with that. If I hardwire from the cable modem directly to a ****py old laptop, a speedtest.net shows 4 Mbps up. So why do I get such a high upload speed when hardwired (4 Mbps), but a fraction of it (1/4th) when wireless? I'm not using any other devices to sap bandwidth (some are connected -- i.e. another desktop, my Droid phone, etc., but aren't actively pulling packets). And why would it go from 2 up (on my desktop via wireless in the past) to only 1 up (via wireless now) when the setup is the same across the board (as best I recall) other than upgrading my cable modem.
Since I get 4 up when hardwired straight off the cable modem, I assume my DIR-655 is slowing me down somehow. How to pick up the pace a bit? I've already tried the standard "power cycling", etc.
Oh, and the reason I go wireless -- my cable modem and wireless router are in my game room in the basement for my PS3. My desktop computer (and the wife's desktop computer) are two floors directly above it in our "office". Signal strength is "excellent" ... always has been. And again, pretty much everything is the same.
[URL]
I have 2 5508s (foreign and anchor both running 7.2.110.0) with an open WLAN configured via mobility anchors. This configuration works and has no problems. My next task is to incorporate a webauth page (accept/reject) to present the clients with AUP information, etc. On the foreign controller I created a test WLAN (open) and setup webauth Passthrough using the Cisco webauthbundle (wap.html), this works as intended, no issues. However I am at a loss as to how to incorporate the webauth Passthrough functionality on the WLAN that is configured for the mobility anchor.
View 2 Replies View Relatedi've upgraded our WLC 5508 from 7.0.220 to 7.2.115.1.For our guest WLAN we use web authentication with customized startpage, no login error page and no logout page. The customized login page is displayed correctly. After successful authentication the browser is forwarded to the default CISCO login page "login.html". No further autentication is possible, also no internet access.Reload the customized webauth bundle to the controller didn't change anything. Is there a change in the HTML/Java code of this controller version? I didn't find any hint in the release notes. Or do I need the newer web authentication bundle with version 1.0.2?
View 6 Replies View RelatedI understand that Cisco have at long last provided a facility to separate HTTP web authentication from HTTPS WLC management on WLC code 7.2.x for the new 5500 series WLCs.
My question is does Cisco intend to provide the same much needed functionality on the 4400 series WLCs that are running 7.0.x code? I was looking through the release notes for v7.0.235.3 code and that did not seem to mention this functionality. I know we can get around the problem by purchasing an SSL certificate so that guest users with web authentication do not have to see the same security warning each time they log in but the idea to separate the HTTP web authentication from HTTPS WLC management seems so much simpler.
I have a custom webauth page installed that I am using with web passthrough authentication on my WLC2006 in order to put up a acceptable use policy page. The WLC uses HTTPS to display this which causes a security certificate warning to appear if I go with the WLC's own self-signed certificate. Is there a way I can get the WLC to use plain HTTP to display this page instead so I can eliminate the warning? I have already tried installing a trusted 3rd party certificate on the WLC, but I have this very strange problem where mucking with the WLC's web authentication certificate in any manner causes all network activity on the WLC to break except for CDP and ARP, essentially leaving the WLC dead. Three weeks of troubleshooting with Cisco TAC has yielded no progress on that front so now I am trying to bypass the need for a security certificate altogether since I really don't need to encrypt my acceptable use policy page.
View 13 Replies View RelatedWeb auth redirect URL gets dropped if stateful firewall is between webauth host and switch management interface. Aaron at Cisco live london kinda hinted about maybe Cisco working on this ? We can't disable stateful inspection. Is there any other solutions or workarounds ?
"Although this approach introduces additional hops in the return path from the switch to the host, it produces negligible load on the default router and intervening infrastructure since only the WebAuth traffic from the switch to the host follows this path. In campus designs that do not use SVIs on the data VLAN,6 a default route is typically already configured. In this case, no additional configuration is required to support WebAuth.
However, problems may arise in the case in which traffic to the default router is bridged through a stateful firewall. The original SYN packet in the TCP handshake is consumed by the access switch, so the first packet that the firewall sees is the SYN-ACK packet from the access switch. Stateful firewalls typically drop SYN-ACK packets if they have not seen the original SYN packet.In this case, you will need to turn off stateful inspection for ports 80 and 443 on the firewall."
I have been given a task to upgrade 8T1's bundle to DS3 Fractional circuit. We are currently using 2821 router with 4 VWIC-2MFT. What card/module I need to order for upgrading to fractional DS3. Also are there any compatability issues with ISP or local router.
View 6 Replies View Relatedhow can i remove webauth files from WLC?I have few versions of login.tar file used for web-authentication. After uploading a new login.tar file, the wlc still show old webauth bundle files. I tried to remove customized webauth login from wireless LAN, issue clear webauth-bundle and show>custom-web webauth-bundle WebAuth Bundle does not contain any files but when i upload new login.tar that does not include files from previous login.tar, i still get the old webauth. Is it possible to delete extracted webauth files from the controller using CLI?
WLC is running 7.0.116.0 code.
What is the command that can show the ACE Bundle (Like: ACE-4710-02-K9, ACE-4710-04-K9). We have ordered one ACE with 4G BW, and another one with 2G BW. But nothing shows this fact using "show hardware" and "show inventory" commands !
View 1 Replies View RelatedI need to understand security bundles. I purchased a Cisco Security Bundle, Advanced Security, 64F/256D. part number CISCO3825-SEC/K9. My expectation from this device was that I will get an IOS based firewall with no need for an additional firewall module. however, the supplier is telling me that I have to buy a firewall module to use the feature. Isn't the bundle supposed to come with all I needed since is a bundle?
Is there any command I can use to verify if this device is really what I paid for? what can can I check for in the sh inv and sh ver commands? I don't see any information from these commands.
To understand and configuring VPN setup to give secure access to my DB & Application Server exist in my Datacenter, to other Service Provider organisation. They need to access those DB & Application Server sitting at their company LAN itself.
My DC Setup :-
1. Core Router 7609 with SPA-IPSEC-SSC400-1 ( Cisco 6500/7600 IPSec VPN SPA Bundle 1 )
2. Core Switch 6513 with FWSM, ACE, SVC ( Network Analyser ), SUP 720
3. Distribution 6509 SUP 720
All the DB & Application Server connected to Distribution Switch in various VLAN,The Server support team from another company need the access to those, for that we will take MPLS link connecting out Core Router.
I'm going to be wiring a new (to me) house with a couple cat 6 runs to each room. The runs will all be brought back to an enclosed 6u rack and cat 6 110 style patch panel. This rack will contain:
- HP 2824 Switch
- PfSense router (Supermicro X7SPA-HF ITX board)
- DSL modem
Since the rack is completely metal and enclosed I'm going to put my Netgear WNDR3700 WiFi router (used as an access point only) on top of the rack. My question is, what the implications are in regards to placing a WiFi device right next to a bundle of ethernet cables?
We have ordered the following 10 line items , but only got 3 licenses , unless the 3 licenses somehow have all the licenses integrated into the 3 part numbers below, but I suspect not.
Licenses attached from Cisco:-
N7K-C7009-XL-SBUN Nexus 7009 Scalable Feature License x 1
N7K-C7009-SBUN-P1 Inc LAN,ADV,TRS,EL2,DCNM,DCNMSAN,MPLS,SAN,XL -Promotion x 1
[Code].....
I'm trying to replace a ASA 5505 with a Cisco 2801 w/ security bundle.I have gone through a pretty basic set up of configuring what I could and letting the Cisco Config Prof do the security audit to lock it down. I have everything working just fine except for the bandwidth.
As soon as I plug the router in it seems to give all the bandwidth to one computer and the rest of the campus slows down to a crawl.I turned on "fair-queue" and even tried the QoS wizard in CCP, but it seems like thats if you want to prioritize voice over data - which we aren't running VOIP so I don't need.
I have a site which has been successfully running a multilink bundle of four T1 lines for about 6 months. The remote location is a C3825 router and the central location router is a C7206. I have access to both. A few weeks ago the multilink circuit started flapping and I was able to identify one of the four T1 lines as the culprit. When I shut down the interface for that one T1 line, the multilink circuit stops bouncing. As soon as I issue a "no shut" command on that fourth T1 interface, the multilink circuit starts flapping, ping commands start to time out and I have to shut it down again. The Telco has sent a technician to both locations and reported all tests run clean. Internal wiring from the NIU to the router has also tested fine. I've tried to move the T1 lines to different ports on both routers and the problem persists. [code]
View 9 Replies View Related