Any configuration example where i have a Cisco 1140 connected with a trunk to one router and with the Cisco 1140 i broadcast one SSID per vlan, one with WPA2 and other "open".?I ask because i see that when i turn on cipher, i cant configure an SSID without encryption.
View 1 Repliesi have a 1140 AP and i have an ssid on it authenticate users from NPS server.
but now i need to conifure on it 2 ssid with different vlans each ssid authenticate from the same NPS server but with diferent groups.
I am using a Aironet 1100 series access point (AIR-AP1142N-N-K9) with IOS version c1140-k9w7-tar.124-21a.JA1. I want to create two seperate SSID's on the access point with WEP encryption. There is no VLAN configured and i want it to be like it. Also I need to broadcast both the SSID's at the same time, so the some of my users need to login with the first SSID and the others to login through the other.
View 2 Replies View Related I have an AP Aironet 1140 that have two (2) SSID: (ZDE) and (GUEST). Guest is working fine but ZDE is not giving IP addresses to users attached in this AP. I atached the sh tech of the Ap. From the configuration cisco guide of Aironet 1140 i understand that by default, access points are configured to receive IP settings from a DHCP server on your network. But i don´t know if i have to configure the dhcp server ip addres in the Ap, similar to the ip helper address in switches
Configuring the Access Point to Provide DHCP Service. These sections describe how to configure the wireless device to act as a DHCP server:
•Setting up the DHCP Server, page 5-22
•Monitoring and Maintaining the DHCP Server Access Point, page 5-24
•Setting up the DHCP Server
By default, access points are configured to receive IP settings from a DHCP server on your network. You can also configure an access point to act as a DHCP server to assign IP settings to devices on both your wired and wireless LANs.
The 1100 series access point becomes a mini-DHCP server by default when it is configured with factory default settings and it cannot receive IP settings from a DHCP server. As a mini-DHCP server, the 1100 series access point provides up to 20 IP addresses between 10.0.0.11 and 10.0.0.30 to a PC connected to its Ethernet port and to wireless client devices configured to use no SSID, and with all security settings disabled. The mini-DHCP server feature is disabled automatically when you assign a static IP address to the 1100 series access point. Because it has a console port to simplify initial setup, the 1200 series access point does not become a DHCP server automatically.
when I try to configure my autonomous 1140, it does not work unless I use numbers.If I put in my phone number as my key, I can authenticate just fine. When I change it to some random letters and numbers.
View 6 Replies View RelatedI have 2 Cisco 2811 routers that are installed in different locations. I set up a tunnel connection between the two routers.
[code]...
I am in the process of installing an Aironet 1140 standalone AP. I have not worked with these AP's before. I will be connecting it to one of the PoE ports on the existing ASA 5505. My goal is to have 2 SSID's, one for internal network and one for guest internet only, no access to internal LAN. I want to have the internal wifi clients and the guest clients on seperate IP networks. The internal clients obtain DHCP from the existing server and use the ASA DHCP server for the guest clients. And of course, I would like the ability to manage the AP from the internal network. I am providing copies of my current configs for both the ASA and Aironet.
View 4 Replies View RelatedI am in a situation where I share internet access with roommates. We have a Gateway which is conected to the provider and which delivers ethernet and WiFi signal.
In order to isolate myself from my roomates and to protect my network connection, both wired and WiFi, I would like to plug in the Ethernet cable I get from the Gateway to my router, and then configure my router's firewall and WiFi enctryption to maximize my safety.
However, I am having some problems. I have already configured the router as "router" and not "Gateway" and I am trying to assign it an IP address different from the default one, which is the one the gateway has, and a ranger of DHCP IP's, also different from those of the Gateway. In other words, 192.1681.N.1 for the router and start from there.
I have a problem, i would like todo MACSEC betwwen two switches cisco catalyst 3560-x but I know that for this operation i needed ACS server 5.1 is it possible to encryp dataflow without ACS server and if you have the configuration
View 7 Replies View RelatedI can't configure the SSID more than one in the web UI of the WAP4410N. Except I can type the first SSID1, the rest SSID2 - 4 are grey which not allow me to type in anything. ( See attached the screen shot ) My current version is 2.02.1 and I was using IE8 under windows 7.
View 3 Replies View RelatedIs there away to configure ACS 4.2 to only allow certain EAP-type of authentication per SSID? For example: SSIDA - only allows EAP-TLS and SSIDB - only allows EAP-PEAP on the same ACS server?
View 1 Replies View RelatedIt,a possible configure 2 ssid with wlc 2504 and lap 1042n? It,s possible configure 2 ssid with support 802.11n?
View 1 Replies View RelatedI have around 60 , 1142 N APs . As of now i have only management VLAN ( for IP ) & one user vlan 350 configured on the access point . All the users connect to VLAN 350 and they get IP as required.However in our new set up there are couple of requirements have come up were in SSID will be the same however we have created many VLANs for different kind of user group and all these VLANs should be mapped to this single SSID and pick the IPs from their respective VLANs .
We have done configuration on the RADIUS server side were in we have mapped the users in their respective VLANs and they are getting authenticated via AD . Now how do i map my these 4-5 VLANs in a single SSID in Access Point.
I just bought a Linksys E2500, and I'm trying to configure multiple SSID's on it. The "guest mode" won't work for me because I want one SSID to use WPA and the other to use WEP, but the option to set different encryption based on the GHz frequency of the connection won't work for me because I only want the WEP one to be used by my Nintendo DS (which doesn't support WPA); I don't want to force ALL devices that don't support 5GHz to use the WEP one!
View 9 Replies View RelatedCan I configure Multiple SSID (Guest/Corporative) on Cisco Aironet 3600i AP via Cisco 2504 Wireless controller?
View 1 Replies View RelatedI have two WRT54GS routers. I want to extend my WiFi from the router connected to my upstream in the office to a second router in the living room. I want devices configured for the SSID and passphrase of my current WiFi (which is find in the office) to work seamlessly in the living room. I understand I can do this by running a cable and configuring router 2 as a client of router 1 with router 2 exposing the same SSID and passthrase on a different channel.
But I really don't want to run a cable.There is a point where a client can see router 1 where an AP would cover the living room.
Can I put router 2 at that point, have it connect wirelessly as a client to router 1, and have it expose as an AP using the same SSID and passphrase? Can this be done without wiring the router?
My question is if I can configure 3 ssid, for 3 different VLAN and add the DHCP address from a WAP4410N AP, when you upgrade to the latest version of IOS I can have this functionality?
View 2 Replies View RelatedWe've recently sold and implemented a wireless solution using a WLC, WCS and 1140 APs.
There is a HQ site where the WLC, WCS, DNS and DHCP reside. Active Directory and a RADIUS server are also located there. There is then a WAN link to remote sites which sometimes fails. At the remote sites you'll just have a router, switches and the APs. The intention is for the APs to work in lightweight mode, falling back to H-REAP when the WAN link fails.
That works fine, but what doesn't work fine is the APs rejoining once the WAN link is restored.
They just don't. Even days later, the APs are still all disassociated from the controller despite the WAN link being up. I've 'hardcoded' the controller IP into the AP configuration, while the APs initally get the IP for the WLC from DHCP using Option 43. Despite the APs therefore knowing where WLC is, once they're disassociated from it (WAN link failed) they will not reassociate by themselves. Restarting the APs is the only way to get them to rejoin.
With hundreds of APs and in excess of 30 switches, restarting all the APs each time the WAN link fails is pretty ridiculous.
I've logged a TAC case and gone through the whole rigmarole, this is an offical bug and Cisco have informed us that it's due to be fixed sometime early 2011, but besides that there is nothing useful. So to be perfectly clear, Cisco have sold and shipped a product that doesn't work as advertised and they best they can offer us is a promise to fix it soon. I'm pretty shocked, I've never had this experience with Cisco in the past.
Ok, so now I've got to come up with a decent workaround until we get a firmware release where this is fixed. I'm looking at using CNA to automate the reloading of all the switches, I guess when an outage is reported I'll just write a procedure for the client to follow to reload all their APs.
Is it possible to assign a single ssid to multiple interface groups by assigning the ssid to multiple AP groups?
I have buildings geographically dispersed that are configured with multiple vlans in interface groups so that I can maintain an addressing scheme of dhcp assigned addresses per building. Each building is also further grouped as AP groups. I'd like to know if by assigning the same wlan ssid to each of the AP groups, will I maintain addressing integrity for each building? I'm thinking it will work.
Do the buildings have to be outside AP range of each other to avoid problems?
5508 controller
7.2.110.0 code
6 buildings
6 interface groups
1 ssid
Quick question about the association web interface tab on a 1140. I have noticed that the Device Type shows as "unknown" and the Name shows as "NONE."
View 1 Replies View RelatedI've set up a Cisco Aironet 1301 AP to be used for a guest network. I've got several other of the Aironet 1140-series around the business but none of them are in reach of this one at the moment.
The problem I have is that clients that try to connect to the AP are either not able to connect at all or lose their connection after some seconds. The config is more or less copied from the other APs with the same guest VLAN.
We've recently sold and implemented a wireless solution using a WLC, WCS and 1140 APs.
There is a HQ site where the WLC, WCS, DNS and DHCP reside. Active Directory and a RADIUS server are also located there. There is then a WAN link to remote sites which sometimes fails. At the remote sites you'll just have a router, switches and the APs. The intention is for the APs to work in lightweight mode, falling back to H-REAP when the WAN link fails.That works fine, but what doesn't work fine is the APs rejoining once the WAN link is restored.
They just don't. Even days later, the APs are still all disassociated from the controller despite the WAN link being up. I've 'hardcoded' the controller IP into the AP configuration, while the APs initally get the IP for the WLC from DHCP using Option 43. Despite the APs therefore knowing where WLC is, once they're disassociated from it (WAN link failed) they will not reassociate by themselves. Restarting the APs is the only way to get them to rejoin.
With hundreds of APs and in excess of 30 switches, restarting all the APs each time the WAN link fails is pretty ridiculous.
I've logged a TAC case and gone through the whole rigmarole, this is an offical bug and Cisco have informed us that it's due to be fixed sometime early 2011, but besides that there is nothing they can do. So to be perfectly clear, Cisco have sold and shipped a product that doesn't work as advertised and they best they can offer us is a promise to fix it soon. I'm pretty shocked, I've never had this experience with Cisco in the past.
Ok, so now I've got to come up with a decent workaround until we get a firmware release where this is fixed. I'm looking at using CNA to automate the reloading of all the switches, I guess when an outage is reported I'll just write a procedure for the client to follow to reload all their APs.
A script that can query the associated status of APs and reload them as needed, automatically, would be pretty cool. Perhaps that can be done with SNMP.
I'm configuring an 1140 and trying to make it invisable to any user that doesnt know the SSID. The SSID is not broadcast, however my clients see "Other Network" in their list of available networks. Short of turning off the AP is there any way through the 1140's configuration to prevent this "Other Network" from showing up in the clients available networks list.
View 2 Replies View Relatedhow to disable radio on the AP 1140 from NCS script .
View 5 Replies View RelatedA customer has RADIUS running on a Win Server 2008 R2 machine, has Autonomous 1140 APs and a mix of Windows 7 and XP Pro clients. Using PEAP as the authentication method the Win 7 clients can access the WLAN, but the Win XP clients cannot. The Win XP clients are at least SP2. I am doing some research before going to site on Friday and wanted to poll the community. I found an older post speaking to a MS Hotfix under KB#885453, but it referes to "third-party RADIUS servers," not MS servers URL.
View 14 Replies View RelatedI tried to find the radiation pattern for the 1140 AP, but no luck so far. Where to find it?
View 7 Replies View RelatedI'm using 3 AP's 1140 with local authentication using local radius (flex connect mode).the radius server im using is MS 2008 R2.authentication is working great on all devices pc's&mobile.authentication method is PEAP wpa2 aes enterprise.after 3 or 4 hours devices loose connectivity to the web.the device seems to be still connected to the ap but there is no ping to host from local lan or any arp learnd on local router.only manual disconnect on device and reconnecting brings connectivity up again.in one case only reseting the AP's worked.
View 6 Replies View RelatedI need a legible radiation pattern graph for the 1140 AP -- the antenna pattern. This is for a wireless deployment application which models signal strength. It needs to be specific for the 1140 AP as the antenna has a Maximum gain of 3 dBi which is different than the antenna gain on the 1130 AP.
View 2 Replies View RelatedIn our project we are building a smartphone application dat determines the locations of persons in a building, using Wifi access points.Using 3 accespoint we are calculating the overlap of 3 circles.Today we measured the signal strength and found out that it changes around alot.So we dont really know if our measurements are right.
We would like to know what the RSSI strengths are of the following access point per meter.Cisco Aironet 1140 2.4 ghz
I just installed an Aironet 1140 to replace a Netgear ProSafe access point that I had in my network prior. I'm having one issue that I can't figure out though. None of the client PCs can establish a connection to an external (over the internet) VPN server while on the Aironet wireless. If i unplug the AP and plug a PC into the same port that normall feeds the Aironet I can VPN just fine.
Is there any "VPN Passthrough" option that needs to be enabled somewhere on the 1140 that is blocking this traffic for some reason?
i'm running the following IOS BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(18a)JA3, RELEASE SOFTWARE (fc1) and I've included my running config below
Current configuration : 2092 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname ap!enable secret 5 [omitted]!no aaa new-model!!dot11 syslog!dot11 ssid MetroC authentication open authentication key-management wpa guest-mode mbssid guest-mode wpa-psk ascii 7 [omitted]!!!username Cisco password 7 [omitted]!!bridge irb!!interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid MetroC ! antenna gain 0 speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 port-protected bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled!interface Dot11Radio1 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid MetroC ! antenna gain 0 no dfs band block speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. channel width 40-above channel dfs station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 port-protected bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled!interface GigabitEthernet0 no ip address no ip route-cache duplex auto speed auto no keepalive bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled!interface BVI1 ip address 192.168.1.3 255.255.255.0 no ip route-cache!ip http serverno ip http secure-serverip http help-path [URL]
I try to setup a 1141 aironet AP to authenticate my user through our Ms Radius Server ( Win 2008 R2).Everything is fine with small Bussiness AP WAP4410N with the following configuration:But I can't setup successfully the aironet 1141 with the same settings and getting it works.Here is my configuration for the Aironet 1141 Vlan 1 is the ssid I want to get it work with Radius.
View 1 Replies View RelatedWe have 6 aironet 1140's throughout the office I have them all configed as one ssid but I would like the DHCP to come from our Windows server. Right now I have set them up with ip dhcp pools. So what is the secret to get them to send dhcp requests to the Windows server?
View 3 Replies View RelatedIf I do a speed test (bandwidthplace.com) while connected to a remote locations 1140 standalone access point, the download/upload speeds are roughly 100kbps. There are no other devices connected to the access point at the time. Wired PCs on the LAN that the access point is connected to are not having a problem.Pings from the laptop, through the access point, to our central WAN router are at <10ms.The WAN circuit (remote location to headquarters) is 5Mbps. No congestion.Circuit out from headquarters to I'net is 50Mbps. No congestion.Access point and router interfaces show no errors or collisions, etc. The configuration is the same as 28 other standalone access points in 28 different LANs on the WAN. They have no problems.
View 5 Replies View Related