Cisco AAA/Identity/Nac :: ACS 5.2 Swapping CLI And DNIS Values
Oct 6, 2010
I am running ACS 5.2 (more detail below) eval demo version for a proof of concept and noticed an oddity.. It appears that if you create a Endstation Filter and click the CLI/DNIS tab, click Create and then click DNIS and enter your info ex: *coolssid and hit submit it shows everything correctly, but if you go back and edit it. it swaps them.
Version : 5.2.0.26Internal Build ID : B.3075.EVAL..If you have the webex recording viewer you can watch the little Webex Recording I did showing the steps and the issue.
View 6 Replies
ADVERTISEMENT
Jan 8, 2013
What are the best values for "mac address-table aging-time" and "arp timeout" by following scenarios?:- single sg300-10 as layer3-switch with a maximum of 10 local (direct connected) hosts - and a 3750x-stack with 100 local hosts + hsrp with a other stack of the same sort or for asa 5520 as internet gateway for 500 clients?I use at the moment a mac aging-time from 300 seconds and a arp timeout from 3600 seconds.
View 6 Replies
View Related
Jan 13, 2011
Is it straight forward to swap over from a wired router to a wireless one? The PC that is currently using the wired router will remain as a wired connection and some new items (laptop, PS3, Wii) will use the wireless connection. The wireless devices are already up and running in a different location and I was going to use the same router at the new location.
View 2 Replies
View Related
May 13, 2011
Recently, my computer fried and I had to get another. I bought the exact same model, and since the hard drive was salvagable, I moved it from the old laptop to the new one. Now, my wireless is not working. I have tried installing the drivers, but it still says no connections are available. My modem and router are working fine...but for some reason, the wireless is not picking up on the laptop anymore[CODE]
View 2 Replies
View Related
Mar 9, 2012
i currently have a working WRT54G2 router and will be swapping it for a e1200 router. Should I disconnect the current router from the modem first before inserting the setup CD for the new router?
View 2 Replies
View Related
Feb 2, 2012
I currently have a 4 year old Dell XPS M1530 that recently died due to an rough impact. About to buy a new Dell XPS 15 and was wondering if I can easily swap my Sprint Mobile Broadband Card between the two. And if so would I only need to download a new driver for it? I am currently grandfathered in with Unlimited Data on my current card plan and I would hate to have to get a new one requiring a new contract with Limited Data.
View 1 Replies
View Related
Mar 6, 2013
I am in the process of swapping out an older 24 port Cisco catalyst 3525 POE switch running IOS 12.0(5) with a 48 port POE catalyst 3560 running ios 12.2(50)The trunk port on the older switch (that currently works) is in port Gig0/1 with as basic of a trunk config as you might find.
In the newer switch I have a 1000BaseSX SFP min gbic with a SC-LC fiber cable attached (8.3/125 – 15 meter.When I make the connections, I get no lights… no connection.
View 7 Replies
View Related
Nov 8, 2011
I am swapping my AT&T DSL and Comcast cable for U-verse. In the basement, I have a Netopia DSL modem connected to a Linksys BEFRS81 v. 3 ethernet Cable/DSL router/8-port switch. Cat 5 cables are attached to the router, then run throughout the house so we are "networked" to the DSL modem and use a patch cord from laptop or desktop into the wall to get to the Internet.
View 1 Replies
View Related
Sep 30, 2012
The school I work at upgraded to Cisco Catalyst 2960-S switches, all connected to each other via fiber. I am seeing a problem with one such connection. Cisco Network Assistant showed a "4-Warning" regarding the fiber link port: port was disabled because it was fluctuating between up and down too rapidly. Possible hardware problem, resolve and re-enable. (I'm paraphasing the message...it was 'acknowledged', and I can't bring it back up.)
This message was only showing on our "SV-Copy-Rm" switch's port 49. The other end, on "SV-Maint-Rm" port 49 showed a normal green link status.
Using Internet Explorer, I logged onto SV-Copy-Rm switch's Device Manager, and I first tried disabling/re-enabling port 49 on SV-Copy-Rm. It came back up blinking yellow and showing "port has bad link" when I cursor hovered over port 49. This continued for a few minutes, followed by port 49 being disabled again.
The current thing I'm trying is swapping the connection on both ends to a spare pair of fibers. I'm pretty certain I've swapped to the same pair on both ends, however, now neither switch shows an active link. I've disabled/enabled the ports on both ends, but still no link.
Question: How do I re-establish the above link? (The active connection has 'fallen back' to the designated ethernet Cat 5e connection and is currently running with that connection.)
View 1 Replies
View Related
Aug 1, 2012
I have copied status codes from show ip bg command output and its explanation (from Cisco documentation site)., d and h (suppressed, dampened and history). I read somewhere that these are to control flapping routes. But not able to understand it completly.Raised this question in a couple of forums but didnt get a proper reply.The table entry is suppressed.??The table entry is dampened. ??The table entry history. The table entry is validThe table entry is the best entry to use for that network.
View 2 Replies
View Related
Dec 6, 2011
Now, with all the unified communications, voice, video and data are in the same device, and I try to give priority to voice and some applications, but in the WLC I can not find the way to mark all that kind of packets.
Is it possible to do that? like in a LAN making the marking as voice, signaling and any kind of application? as I marked in all the LAN.
the equipment:
WLC 5508 v7.0.116
AP 1142N
View 5 Replies
View Related
Feb 2, 2012
We purchased a Cisco 541w router for one of our customers.
The main reason was to provide them with 3g backup solution for their business.
In order for the router to recognise the 3G router the firmware was upgraded SRP540_1.02.01_023_081211_1136.
We arrived on site last night to do the install but couldn't make any changes to the already configured router. Every time we attempted add a vlan or adjust the dhcp scope the router would return "The values are invalid".
Worked at this for over 1 hour and then decided to factory reset the router to see if that would revert the router to use the original firmware.
This didn't revert to the previous firmware but we magically could now make network changes without problem.
So everything was good, we reconfigured the router, tested 3G and failed the wan1 interface back and forth and the customer was very happy.
Customer arrived onsite this morning and the router was running on 3G. Every 8 - 10 minutes it was attempting a failover between connections.
I decided to turn off the failover for the time being and investigate further but yet again i was back to "the values are invalid"
We've had to pull the router as the customer is about 2hours away and revert back to their BT router.
Found this document for another SRP model - A warning message may appear in the Basic Wireless Settings screen with the text “The values are invalid” when modifying the wireless profile. Set the SRP 521W to its default setting (CSCtd49614).
[URL]
Will firmware SRP540_1.2.4_003_011112_1847 released only 2 days ago cure the problem?
View 1 Replies
View Related
Oct 17, 2011
I have a WLC 2106 with 3 APs. Everything works and users can connect, but the throughput seem to be lower than it should (it is around 8Mbps and should be around 30-50Mbps). And all speed and duplex has been accounted for.
I am trying to understand the stats that I see for the 802.11 MAC counters I under the Wireless APs.on the controller.
That screenshot is attached. I see high numbers for the following areas:
- Tx Failed Count
- RTS Failure Count
- FCS Error Count
what these mean and what could cause this? Maybe these are normal and not a concern.
View 1 Replies
View Related
Sep 1, 2011
my cisco 2611 series router is showing garbage value at start up and not allowing me to enter in Romon mode I check the bitrate in console .it is 9600/8N till then i am unable to start the router Can you tell me how to change configuration register value without entering in rommon mode
View 6 Replies
View Related
Sep 24, 2012
I am scanning the documentation for CPI 1.2, trying to get it to use CSACS 5.3 for my authentication/Authorization. The docs say to create a TACACS Shell Profile, and add the TACACS A/V Pairs as needed... . nowhere could I find a listing of AV Pairs I can use to grant authorization. I did see that what ever pairs I did use, I must keep the menu chain in tact..
View 6 Replies
View Related
Jul 4, 2012
i am searching for the right SNMP-OID to poll the values of the CPU-load from a VSS (6509E)here a OID for VSS-Switch1 and a other OID for VSS-Switch2 values like cli-command "sh proc cpu" of the supervisor-module in slot 5.
View 1 Replies
View Related
Dec 10, 2012
how to perform Linear Hashing in databases on given values?
View 2 Replies
View Related
Oct 18, 2012
Type of Wireless Adapter I have: Intel WiFi Link 1000 BGN When I click on (Properties) and then click the (Advanced) tab, there is a list of properties on the left and a list of values to choose from on the right. I'm curious on what each property does and, which property/value would be most "effective" or "appropriate" for a certain location/situation I'm in.
View 1 Replies
View Related
Apr 16, 2012
I have a WS- C2924C-XL switch that I would like to upgrade the IOS version on. The IOS version in question can only be installled on an 8MB version of this switch, I have tried to confirm the amount of memory present in the device but I am getting conflicting values depending on where I look.The model number would indicate that this device is a 4MB version, therefore not compatable with the upgrade.Running the show version command from the CLI shows Processor having 8192K/1024K bytes of memory.Accessing the switch via the VMS management interface displays a value of 4MB.
View 5 Replies
View Related
Oct 30, 2011
I'm looking at a stack of WAP200 and WAP4410N APs. I'd like to use Cacti to track number of associations on each AP.What's the OID I should be querying? Are there multiple OIDs that would correspond to the multiple SSIDs? I'm running 2 SSIDs on all of them, and it would be extra nice to be able to track number of stations on each SSID, though the total number would also be acceptable as well.
View 4 Replies
View Related
Apr 29, 2012
I've been working on a 3560 that doesn't seem to map dscp values to a new value: mls qos map dscp-mutation ToR1 22 24 to 46
[Code]....
On the router on the other side, I created an acl that matched on dscp 46, but it doesn't match on it. I've tried moving the mutation map to the ingress interface and I've tried setting dscp with a service policy instead of marking COS and using internal dscp. Where is the mutation map supposed to be placed: ingress or egress? Also, I added an entry in the acl on the router to see if I was mapping to dscp 24, and I am:
[Code]....
So it seems like the mutation map is being ignored completely. Any reason why?
View 7 Replies
View Related
Jan 10, 2013
I have a switch where the current power threshold is set to -20.0db. The problem is that the receive power fluctuates between -19.9db to -20.1db, which is causing it to throw alarms on my solarwinds monitoring server. What I would like to do is change it to a different warning threshold, but I can't seem to find the command to do so. This is a catalyst 3750 running IOS version 12.2(55)SE3. [code]
View 5 Replies
View Related
Nov 8, 2011
I want to get the result of the following command with snmp. Is This possible?
The command is "show extended channel 2/0 csna oper". I need to know, if the status is "closed" or "setupcomplete". Can I catch these values with snmp?
I did a snmpwalk but can´t find any lines with these values. Is there a specific IOS version necessary?The hardware is a Cisco 7204VXR with IOS 12.1(5)T10 and microcode xcpa28-1
View 2 Replies
View Related
Feb 4, 2010
We have a C4500 with 2 sup V which is showing high CPU values sometimes.When this occures, the switch shows 95-100% for total cpu for a few hours at a time.show proccesses cpu shows process Cat4k Mgmt LoPri with an unusual cpu value of 65% The show platform heath command gave me a high reading for K2FibFC DelFlow which is about 50% at this peak but is normaly around 1%?
what the process K2FibFC DelFlow means and what could be the cause of this peak?
View 12 Replies
View Related
May 16, 2013
Access point gives all junk vlaues in console. I am getting all outputs while booting up and executing commands. But To say, it is as simple as printing with spelling mistakes
View 2 Replies
View Related
Mar 20, 2012
I've been having a debate with a colleague about QOS COS values. My colleague says I need to use COS values across layer 2 trunk links between access layer switches and core switches. My argument is if phones are marking packets with DSCP values I don't need to be concerned with Cos.The reason I ask is we're implementing a new phone system, the ip phones will mark RTP traffic wih dscp value EF and Call signaling with DSCP value of CS3. If my understanding is correct I can trust the dscp values of the phones. We are using Cisco 4507 switches which I believe automatically trust dscp values so I would just need a class-map to match the dscp values and apply the output policy map on the egress interfaces as follows? [code]
View 3 Replies
View Related
Oct 14, 2012
We have a 4500 series switch that is running around 39% cpu utilization but seems to be dragging a bit. I did a show platform health and GalChassisVp-review has a target of 3% but an actual of 17%. All other actual values were at or below target values. I then went to show platform cpu packet statistics and in the "Packets received by Packet Queue" all queue packet values at 5 sec, 1 min, 5 min and 1 hour avg were either 0 or 1 with the exception of Esmp - that averaged 351/377/317 and 313 respectively. I then checked show platform hardware acl input entries static and the entry type InputEsmpToCPU had a whopping 10121370 hit count. All other entry types were well under that number.
View 2 Replies
View Related
Oct 26, 2011
I'm working on a catalyst c3750 and for my work i need to prioritize certain streams independent of their bandwith usage.
The streams are the following:
- voice
- video
- data
I created policy maps based on vlans like below:
policy-map VOICE
class class-default
set precedence 5
policy-map VIDEO
[Code]...
View 7 Replies
View Related
Oct 19, 2011
I have a stack of 4 Cisco WS-C2960S-48FPS-L switches running c2960s-universalk9-mz.122-58.SE1 code. One of our network monitoring tools is indicating discards on a certain port on the switch. Upon further investigation I am seeing the Total output drops values change in a very odd manner.
The numbers seem to go from 573 to 1146 to 1719 then back down to 573 and it starts the same pattern over: [code]
The port utilization is quite low, the highest I've seen over the past 7 days is 3.5% with a polling period of every 30 seconds using Statseeker. Yet the discards are bouncing all over the place.
I've searched though the bugs for 12.2(58)SE1 and didn't see anything.
View 13 Replies
View Related
Jan 13, 2013
I recently bought an EA4500 specifically to utilize the QoS feature. I have my xbox in the set up for the prioritization, but when I try to set the bandwidth to 250 kbps upload, it resets to 0. My xbox is hardwired to the router and I know most of the feature set of this particular router is geared towards wifi, but I would assume the QoS settings would apply to the wired devices as well. exchanging this router for one that supports DD-WRT?
View 8 Replies
View Related
Jun 2, 2013
I am using 10Gig link to connect distribution and access switches. Since we are terminating the cables at multiple locations, we are also doing the link budgeting. The CISCO SFP 10G-LR module data sheet shows two values for the transmit power one of which is maximum power .5dBm and another is minimum power -8.2 dBm. Which value should I choose for the link budgeting.
View 1 Replies
View Related
Oct 28, 2012
I'm trying to test such 802.1x wired environment:windows xp sp3 as supplicant windows NPS as radius server 2960 as authenticator latest anyconnect (3.1.01065) + nam and standalone profile editor.I have a question: What is the difference between protected identity pattern and unprotected identity pattern (set in nam profile editor)? As I understand documentation PEAP-MSCHAPv2 is a tunneled method and it uses un- protected identity pattern to protect user's identity during phase 0. But if I use any fake identity here (anonymous, anonymous@[domain], etc) access is rejected (Access-Reject in switch debugs). I have to use exacly the same pattern in unprotected identity pattern as in protected identity pattern ([username] or [username]@[domain]) to gain access, regardless of authenticaton mode (same in machine only, user only authentication).
View 1 Replies
View Related
May 18, 2011
I have a new Cisco Secure ACS 5.2 on a VM. We want to use it to for administrative access to our Cisco equipment with TACACS+. I am trying to map user permissions to different groups of devices based on active directory group membership, however it is not working.
I am using an LDAP (configured for secure authentication) external identity store. On the directory organization tab, I have confirmed the accuracy of the subject and group search base and the test configuration button shows that it's finding > 100 users and >100 groups.
On the directory groups page I have entered the groups according to the required format. cn=groupname1,ou=groups,dc=abc,dc=com
I have a rule based result selection under group mapping. I have two rules in the format below.
Conditon
LDAP:Externalgroups groupname1
Result
Identitygroup1
I have the default group set to a identity group named other. My problem is, no matter what user attempts to authenticate, the Default rule is applied, and the user is put into the other identity group.This occurs when I log on as a groupname1 user, groupname2 user, or as user that is not a member of either of those groups. LDAP authentication works and the user is able to logon to the device.
View 3 Replies
View Related
