Currently the ACS 5 is authenticate the iPhone/iPad by using the MAC address (which is entered manually) and AD user/password, i need to do that with certificate, so it will be scalable.
View 2 RepliesThe IPAD VPN works great over token, radius and local authentication. But now we need to authenticate vpn client via digital certificate (only vpn authentication between client and gateway)? I'm not sure which certificate we should buy to authenticate vpn client.The plan is to install digital certifiacte on VPN Gateway (CISCO ASA 8.0.4) and IPAD Cisco IPSec client to eliminate user/pass authentication.
View 9 Replies View RelatedThe web authentication page comes up but as soon as the user hits Submit, the following error appears:
Error Opening Page Hot Spot login cannot open the page because the network connection was lost.
I've tried all the suggestions on these forums but none have worked: [URL]
I'm using a Services Ready Engine Service Module in a 2921 router as my WLC. The same i Phones/i Pads can connect fine using MAC filtering and WPA2.
I have an issue when I´m trying to authenticate my iphone&blackberry device with ASA 5520 using certificates. It seems that certificates are working fine, pass the ike phase 1 but never complete the phase 2. When i use pres hared keys everything works fine with both devices.
If you consider necessary, i can provide my current configuration in asa.
We're in the process of implementing an ISE 1.1 server for Guest Wireless Access / BYOD at our company and ran into an issue with authenticating from iPhones / iPads when the account is set with 'change password on next logon' (it's a local account created on the ISE server - not AD). It fails and displays 'unable to join network' on the iPhone. The ISE log shows a '5411: No response received in 120 seconds'. We're able to authenticate from Windows devices and are prompted to change the password during the authentication process. If we unchecked the 'change password' box we can authenticate from iPhones & iPads without any issue but we need to have a way for users to set their own password.
View 3 Replies View RelatedIs there a way to authenticate a windows computer in ACS 5.2 for 802.1x only with a certificate.The Computer is from a different active directory than the one that is configured in ACS.I tried importing the cert into "external indentity Stores" > "certificate authorities", then setup the computer to use smart card or certificate, then selected the certificate from the other AD.when i look at the ACS log, here is the message i can see: 22044 Identity policy result is configured for certificate based authentication methods but received password based
View 1 Replies View RelatedLooking for the steps to configure wired clients using certificate authentication only
- i.e., once a certificate is presented to the ACS that is issued by a trusted CA, the connection is permitted.
No need to tell me about switch configuration.
We use a combination of Cisco ACS and Cisco catalyst 3560 switches for network authentication and authorization. Clients (Windows XP) have a certificate installed which will grand access to the network and put them in the correct VLAN. So far, so good. Some users are testing with Windows 7 in the same set-up as above and run into strange behaviour. The problem is that after a random timer the machine gets de-authenticated and nothing besides a reboot works to get the computer authenticated again (from a Windows point of view). It looks like this only happens to users who are using a certificate to authenticate, Windows 7 MAC bypass users have no such problems. If it occurs, the following logging appears in ACS: [code] We are using ACS 4.2(0) Build 124 and 3560-48PS switches with IOS 12.2(55).
View 4 Replies View RelatedThere is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example:
%ASA-3-717009: Certificate validation failed. Certificate date is out-of-range, serial number: (...)
I would like to know if there is an opportunity to view user's certificate expiry date beforehand, say, 3 days before?
i am working on ISE 1.1.1, surprisingly i couldn't found certificate authority certifiate at certificate operation anymore.
would it be the change on GUI? So now where i can import the CA certificate to ISE?
Is it possible to make Any Connect VPN from IPad/iPhone to 871w? IPSec VPN is working perfectly but cant get my Cisco AnyConnect iOS client to connect. I have config webvpn and it beeing user/pw prompted but keep getting the following error:
"the required license for this type of VPN client is not avaiable on the Secure gateway. Please contact Your network administrator".
My pc was working fine till I shut it down n restarted it and now it won't connect to the Internet I am running windows vista 32 bit service pack 1 and is wired to my router but I can connect my ipad(which I'm using now) and iPhone through wireless
View 12 Replies View RelatedIs it possible in the near future?
View 5 Replies View RelatedI just setup 3 webcam DSC-930L for a friends with a router DI-655.
I run the setup for the 3 webcams. If I use my dlink on the local network it work, if I used my dlink from let say at work, it work too. If I used the i pad in WiFi it works.
The problem is when I try to use the i phone or the i pad in 3G mode, sometimes it work but most of the time it doesn't, after about 60sec it says something like check your network settings... When I'm able to see something in my dlink app on the i phone, if I return back to the list after that it doesn't work if I switch camera.
Question is, do I have to forward any port on the router in the virtual server section? I'm assuming no since sometime it work and sometimes no. Do I have to activate the UpnP on the router too?
We are implementing a new corporate wireless network with Cisco 5508 WLC's and C3602I LWAP's. We are not running any RADIUS or EAP at the moment and are starting with WPA2 w/ AES with a pre-shared key to begin piloting. The issue we are having is iOS based devices (iPhone/iPad) do not seem to want to connect. We just get a could not join wireless network messages. We have had success with several Windows based laptops, my MacBook connects, as well as several different Android devices.Looking at the logs on the WLC I see these entries which correspond to the MAC address of my iPhone.
*apfMsConnTask_6: Jul 17 17:25:20.620: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:376 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 24:ab:81:92:4d:97.
How to make a non-client VPN connection to the RVS4000 SBR with an iPhone or iPad? I realize that I could setup some pass-through VPN just fine, but I would like to connect directly to the router and was under the impression from the Cisco product video and other research that IOS was now supported.
View 0 Replies View RelatedI am looking to purchase the RV220W router. I am interested to know if I can use the iPhone/iPad to create a VPN connection to this router.I have seen a lot of conflicting information about this so I am looking for a confirmation.
View 15 Replies View Relatedon a 5508 WLC can we create new SSID for I PAD / IPHONE Users without having ISE, only I phone / I PAD are allowed to be authenticated rest all should be denied. IS this possible?
View 8 Replies View RelatedHave WLC 5508 running 7.4 code; have wlan setup to allow access to internal network. Users on ipads should be able to connect to this wlan and authenticated via certificate instead of PSK. We have setup laptops that are part of domain to use internal CA for authentication to WLAN. Ipads are not part of domain so we are not able to use the same model, or can we use the same model for authentication?How to setup WLC to authenticate ipad users via certificate instead of PSK while connecting to the WLAN?
View 1 Replies View RelatedI have an ASA5540 running AnyConnect premium (25 users). I know that I need the AnyConnect Mobile license in order to use an AnyConnect client on the IPADs/Iphones. My question is - can I do clientless SSL VPN? Do I need the AnyConnect Mobile license for this?
View 3 Replies View RelatedIPods and IPads to connect to stand alone AP1131? My scenario is as follows:
There is a section of a campus that is covered by 14 stand alone AP1131 were I experience the problem. The security parameters are: 802.1x, wpa enterprise, tkip
The other section is under WLC also AP1131 but in this case in WLANs/Scurity/Leyer 2 I checked boxes:
WPA Policy, WPA Encryption TKIP
WPA2 Policy, WPA2 Encryption AES
Auth Key Mgmt 802.1x
Wonder if the fact that I chose WPA2, AES makes a difference with stand alone mode? Anyways I tried configuring AES in stand alone APs and it didn't make a difference since I could not connect either.
I really worked hard not to write this question here but here I am. I am trying to route all traffic through vpn but I cant browse the web. It seems no traffic goes through the vpn tunnel. Split tunneling works but it doesnt route the traffic through vpn tunnel. I have a cisco asa5505 with base license,
When I try to browse the web with one of the clients I see lots of
6Apr 07 201309:40:5510.10.50.136088410.10.10.153Built inbound UDP connection 834 for outside:10.10.50.13/60884 (10.10.50.13/60884) to outside:10.10.10.1/53 (10.10.10.1/53) (xxxx
messages but at the end I see " Safari could not open the page because the server stopped responding" message or smth similar.
My setup is
Vpn Clients ====== asa5505 ========== CiscoLinksysEA4500 Router ======== ISPProvidedFiberConverterDevice(huawei)
10.10.30.10-10.10.30.50 10.10.10.2(outside int) 10.10.10.1(inside) PPOE(outside)
[Code].....
I have some iPhone in my company and they connect to VPN through an ASA (version 8.0.4). The vpn connection use a certificate to validate that the device can connect. All my devices used the ASA IP address to connect, I decide to change that and use a name to connect ( DNS resolution made by the ISP), a generate a new certificate and made a new vpn connection profile. My PC, mac book pro can connect using the new connection, but my iPhone display the message : "Could not validate certificate". I've checked all the configuration and can't find where the difference between my two connection profile.
View 2 Replies View Relatedi have windows 2008 R2 as CA server. and i also have 2911 router as remote vpn server. Everything works fine for desktops computers and leptops. Users automatically enroll certificates on Microsoft CA server and get connected to vpn. But problem is with ipads. When i try to connect from ipad error massage deslpays "Could not validate the server certificate" and i also get chis error massage from router "CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from x.x.x.x failed its sanity check or is malformed"
With ipads built in vpn client i can see the installed certificate and use it but with anyconnect client no certificates are displayed.
We have a centralized WLC with some branch office with AP's in Flexconnect Mode. The Wlans are configured to use Web Authentication (Landing Page). The Landing Page is Cisco Default.
We're experiencing some problem with Apple Devices, on some the Landing Page apperars on some not. The WLC Software is about 1 year old. On a XP machine the landing page doesn't appear too, but you can type in the address manually and it works.
Whats the best solution to include the Apple Devices successfully in the WLC Wireless World.
I have an issue with my home network that is really stressing me out now. I have a Thomson TG585 v8 router that my laptop, iPad and iPhone connect to no problem but my iPad/iPhone won't talk to my laptop.. I want to be able to use my iPad to remote in to my laptop to watch movies etc. Network sharing is on the laptop and I've checked that all devices are on the same network..I can't ping the iPad or iPhone from the laptop either.
View 9 Replies View RelatedMy iphone wireless connectivity to my Linksys router that I have put up with for a year, but as I now have the same issue with my ipad I've decided enough is enough.The issue is that they both connect OK to the router and therefore to the internet, but after a short period of time (minutes) whilst it appears that they are still connected to the router the connection seems to completely hang. At that point I have to go into settings on the iphone/ipad and turn off the wireless connection and turn it on again. This then allows connectivity and internet activity for 5-10 (15-20) minutes before it hangs again.I have no problems with connecting to any other router from the iphone and ipad. And I also have no problems with my PC's connecting to the Linksys router.
View 9 Replies View Relatedi got my ps3 & xbox to connect it was easy but when i go to connect my iphone it doesnt even let me put my password in it just says"cant connect"?
View 3 Replies View RelatedI recently connected E1500 to time wanrner cable modem for my home. 3 laptops work fine, but iphone and ipad can not connect to wireless. But iphone and ipad connected to linksys guest automatically.
View 4 Replies View RelatedRegion : India
Model : TD-W8951ND
Hardware Version : V4
ISP : MTNL
I m using TD-W8951ND wifi router with MTNL connection. The LAN connection with PC works just fine but i m not able to connect my iphone or ipad with the router. I have reset the router many times and also retored my iphone but still no luck. Pl tell me what are the settings needed for wifi connections.. Currently i have set the wireless mode to 802.11 b+g+n. Setting it to just 802.11 b sometimes connects with the iphone but never with ipad.
I have local WI-Fi network with 2 Macs, 2 PC's, iPhone, iPod and i Pad at home on Link sys WAG120N router. On i Pad when I try to connect to Internet I have to turn WiFi off and on. It works for a while but after waking i Pad from sleep I have to switch off and on again. It really drives me crazy. Sometimes (hardly ever) it happens on my iPhone 4 (same network setup as on i Pad). Other devices connect to Internet whenever I need.
View 9 Replies View RelatedMy use case is very simple I want to connect iPhone/iPad using pptp to my home network. I purchased the 180W and looks like I am not able to connect mobile devices to it. My Setup is simple I have ST536v6 (firmware 7.4.4) modem in bridge mode and Cisco RV 180W connect to my ISP using Ppoe. I followed the Admin guide and created the pptp user. If I connect from internal network it connects but when I try to connect the device from WAN it just does not work.
Cisco RV 180W
Firmware Version:1.0.1.9
I´m trying to connect them to my WLAN, for throubleshoot I create a new WLAN with WPA2-TKIP and a PSK, the devices didin´t connect to the WLAN.I also change the security to WPA2-AES with TKIP, it didn´t work too.
My best choice was to disable every security configuration in order to began the throubleshooting from zero, but even with no Layer 2 and 3 security, the devices didn´t connect to my Test WLAN.
I´m using a AIR-CT2504-K9 WLC with two AIR-CAP3502I-A-K9 AP, all the PCs and other brand cellphones and tablets work well.
Also I have a SOHO router on the office, and the IPad connect without a problem with that WLAN, but I need them to connect to my Cisco AP.