I'm running a wpa2-secured guest ssid on a particular vlan that allows traffic to the web but restricts any access to internal network resources. It had been working fine for a couple of weeks, until the network started intermittenly dropping - at first I tried swapping channels and rebooting, but there has been no progress. I keep a running log at all times as long as the network is still active, but once it drops, the only message I'm getting is
'Line protocol on Interface Dot11Radio0, changed state to down'
My understanding would be that this is the same message logged when a user manually turns off the radio from a terminal window, is this correct? Or am I missing some basic troubleshooting steps?
I wonder if there is a way to rename an existing SSID on aironet 1142 without destroying/recreating. I tried downloading configuration/ changing name/ re-uploading however that didn't have desired effect. There doesn't seem to be a way via web-GUI.
I have 4 autonomous AP 1142 with 2 ssids : SSID10,vlan10 & SSID20,vlan 20.I use ACS 4.2 in order to authenticate users (EAP-FAST). How can i restrict access base on ssid or on vlan?I want users that connect to SSID 10 to not have access to SSID 20 and the opposite.
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
We presently have a guest wireless solution in place using 4400/5508 WLC controllers authenticating guests via a NAC Guest server. This has functioned well for the last year or so, but now our security team has requested that we begin logging guest activity. I already have RADIUS accounting set up on the WLAN configuration pointing to the NGS,I have added the NGS to the syslog set up on the controller (I have tried various syslog levels) but I am not receiving any guest activity info in the reports on the NGS. Any way for getting this data?
we recently purchased a sg300-52. i was told i would need to setup a port trunk to connect it our main catalyst. However, i was able to connect a patch cable on the two devices and ping endpoint devices on both switches. I also noticed that the activity lights are constantly blinking. I'm not sure why. Is there something i can do to slow the activity light? it blicks constantly even in times of very low activity by the endpoint.
I am using Bit meter (on Windows 7 64-bit) to measure up/down activity on the network adapter connected to the RV042 in load balancing mode. Is there a way I can, in real time, have a visual indication of up/down network activity on the WAN 1 and 2 port separately on the RV042?
I was examining my router's logs the other day and I noticed a recurring entry stating that my PC's IP address was sending packets to the IP 172.16.30.115 on port 80, and that the router was dropping them.Except for the fact that my home LAN uses the 192.168.1.0/24 network EXCLUSIVELY. That is all it has ever used since this router was set up, and the only other networks we have EVER used are 192.168.0.0/24 and 192.168.2.0/24. So why, I wondered, is my PC repeatedly sending (presumably) HTTP traffic to a private IP that is not and never has been on my network?I wasn't worried about what these connections might be doing, since I figured they couldn't do anything, but I was kind of concerned about what was generating this traffic in the first place. So I downloaded Wireshark and ran a capture for 30 minutes. Upon completion, I filtered results to show only packets that contained the IP 172.16.30.115, as either the source or destination IP.Based on the router logs, I expected to see three packets with my PC's source IP address and a random source port sent to 172.16.30.115, port 80 every 10 minutes.And I did see that. These are TCP packets, and they appear to be completely empty. The only thing I noticed about them is that the SYN flag is set. I don't know what the significance of that is, if any, but that's what I noticed.
What I DIDN'T expect to see were the packets that had a source IP of 172.16.30.115. These packets (also TCP) had the ACK and RST flags set, and they contained the text "Go away, we're not home." So not only are there packets being sent to an IP that cannot possibly exist within my network, but there are also packets coming FROM the impossible IP telling me to go away.All of that is scary enough on its own. But then I hopped on Google and did a search for the phrase "go away, we're not home," and almost every result was related to the decline of the Storm worm. After reading about Storm, I was more confused, not less. In its heyday, Storm used UDP traffic to communicate between peers, and my mystery traffic was TCP. Storm usually did not use well-known port numbers, such as 80, which I read was part of what made it so resilient. Not to mention that the most recent posts I could find regarding the Storm worm were dated 2010 and were about the possibility of a second Storm, and I didn't get this PC until May 2011. Plus, even if we ignore all of this and operate under the assumption that I have the Storm worm on my PC, that still doesn't explain the fact that the traffic from my computer is heading to a private IP that is NOT, I repeat, NOT being used on my network, my router says it's dropping this traffic, but my PC is still somehow receiving a response from an IP address that 1) isn't on the network and 2) can't be having any packets forwarded to it, since the router says it's dropping the traffic.So, operating under the worst-case scenario assumption, I used two different virus scanners (not simultaneously, of course) to do the deepest scans they are capable of doing. They both turned up completely clean. In fact, I've had AVG Free installed on my computer since I got it, and even if you look at my virus history you only see a few tracking cookies, a corrupted EXE from the Skype setup folder, and a Trojan dropper that I never even ran because I thought the file properties seemed fishy so I scanned it and promptly deleted it. So I now have to go back to operating under the assumption that I do NOT have the Storm worm, and I am back to the drawing board.
REmote desktop connection times out when there is no activity, I mean I open rdp to work computer from home ,If I am away from the computer I am not using keyboard , after few minutes I get a blank screen and if it is very longthe connection times out and I have to relogin to my computer, I need suggestion on how to retain the connection so that no blank screen appears and I alos dont loose connection .
I heard my brothers' conversation in our house. One was asking another, if he is downloading things. The other one replied, saying no, he didn't. And then the one that was asking said, he knew he was lying. He can detect and monitor that person's IP address to know enough if the other person is downloading or not.
Sometimes when I actively use the LAN (copy a file or stream media), my PC loses connection to both the internet and LAN. It doesn't always happen though. I can always fix it by opening network connections and disabling Local Area Connection and then re-enabling it. However, if I don't do this, the connection stays off indefinitely. The PC that loses connection is on Windows 7 64-bit with Asus P5K integrated ethernet controller with latest drivers. Modem/router is Linksys WAG320N.
During the last month or so my internet connection keeps stalling and will not work until I repair the connection, however I am still connected to the network, I just can't send or receive packets. In particular when I am downloading things, it will stop after 2MB is downloaded or 300MB, it just random. After sending/receiving 7,000 packets or 700,00. This only happens to my computer with the wifi adapter. Prior to this I didn't have any issues for over two years. My phone and laptop still connect via wifi to the internet. And the xbox and blu ray player are connected via ethernet and have not had any problems. The log for my router states "deauthenticate reason 3", which I have found to mean "The access point went offline, deauthenticating the client". So, I figured that the issue could be the wifi adapter which I installed on the laptop and that too never had an issue. I used inSSIDer 2.0 to see the close by networks and changed channels to get away from the strongest ones. I tried switching to wireless n only instead of g and n, the problem still persists.
Then I figured the issue must be my computer and no malware, spyware, adware nor any virus was found. The same thing happened while in safe mode. I also tried the winsock fix to no avail, reinstalled the wifi adapter and made sure all firmware for the router and adapter were up to date as well as XP. I also tried with my firewall shutdown but I still loose the connection. So I then reluctantly did a clean install and even with the bare essentials it still stopped working. I also bought a 15ft USB extension to get a better signal but still, even though I have a good or excellent signal I still have problems. My latest thought was this was the only machine running firefox 4 so I went back to 3 and that didn't either. I checked my usage with my ISP and I am no where near the 250GB a month.
I keep getting disconnected and blocked from using even LAN on my computer. This happens whenever I visit certain websites. For instance, I registered on a website that has me "kept signed in", and whenever I click to view that website, it partially loads and then for precisely 1 minute any network activity I try (like visiting my router configuration page, or clicking refresh or home to load google) will not go through. Only after that one minute is over with, I can resume browsing that website; however, if I leave it for too long, and then return, the same thing happens.
I've also noticed that if I sign out of that website and then visit it, that disconnect issue won't happen.But that isn't the case with other websites, as they require no accounts and are just pages with news and other stuff.I tried uninstalling and reinstalling my ethernet drivers, tried flushing dns, renewing ip, releasing and some other /cmd stuff that I found online.This also doesn't happen on any of the computers connected to my router (although, they are all using wireless - I am using cable to router).I'm on windows 7 x64, using a realtek ethernet card, Nod32 security suite (think it may be the settings on this thing? I set everything to super safe settings so I don't get any dumb viruses). Windows is updated (well, at least 3-4 months ago it was updated). I have no idea what is causing this, and why the precise 60 second interval until I regain access to the internet.I'm using Firefox, but this also happens on IE8 or 9 or whatever I have installed, so I don't think it's a browser issue.Things like facebook, youtube, pennyarcade and other junk work, but as soon as I go to google looking for, say, apartment rentals and open some pages, one of the links in the search results is bound to make my connection freeze.
My office uses a Windows domain network. Is it possible for them to track which IP/Port I'm using through some network software. Sometimes I do SSH access to my server. Can they get notified any how about this ? We use Windows XP SP2.
I am wondering if I can log all activity on my network. Right now I can log activity with MAC addresses, but if I add a device I have to keep adding MAC address. I also have to have several policies because I can only put about 7 MAC address in per policy.
I noticed the option to add 'other machines' and I am not sure how this works. I have tried it and can't get it to work.
I am triing to migrate my old ACS to the new one. I am using ACS 5.3 on appliance CSACS-1121. Sometime, i loose the connection to the appliance and i could not connect to the appliance with SSH, i could not start the GUI and the authentication is switched to the secondary instance. As soon as I have traffic, the connection is restored.
I have a Cisco / Linksys SRW 2016 switch, all was working fine. Powered off and powered back on a day later.Switch powered up and the system light lit.But non of the ports what had cables connected were active....If you connect a network cable to the switch and then a laptop / pc .. The computer knows that there is a connection, but only gives a 169 address. Presumably because the switch cannot get to my dhcp ?I have tried connecting a serial cable to the switch top see if I can see any error, but when running Hyper Terminal I only get the white screen and can not see any POST etc.As far as I under stand it is a straight through cable, do I need a null modem cable to console onto the switch?
My previous setup was a ProSafe GS108 switch, 10/100 Dlink router/switch used only as a switch, and a DI-655 router/switch. With this setup, activity when I wasn't using any of my computers was zero. There would be no blinking activity lights.
I dumped the ProSafe and 10/100 switch, and use the DI-655 only for my internet uplink and wireless, and now have everything else plugged into a Cisco GS200 switch. There is activity now every two seconds. I presume this prevents the Green energy saving features from kicking in as the ports are in use.
What's the difference that's leading to all this activity that presumably wasn't there before?
iam opening a cyber cafe next week.i have one computer (main server) which is connected to 5 monitors by an device named Ncomputing device and software.i have one cpu which is connected to others monitors.my question is how to see other 5 computer" s activity by my host pc?
I recently received an email from my internet provider showing illegal movie downloads through my modem. I have a wireless router hooked up (with password security) for my roommates to use and would like to monitor their internet activities to know who is downloading these movies.
I wonder if there is a free programme that will let me look at network traffic/activity on my network, i'm having real issues with with access and the slow down of the network. Unfortunately my switches are not managed.
This morning I lost wifi connectivity. I reset the router and powered off and on the modem along with the router but to no avail. The blue stripe no longer shows on the top corner of the machine.I am able to connect to the internet using the ethernet ports on the router. I also tried to get into programming using 192.168.2.1 but it is timing out.
how to get the web activity report of clients in Ironport WSA S670. I need each and every URL's visited by the exact clients.As of now i am able to download the client web activity report upto URL categories...but i need exact URL's accessed by the clients.
We currently have about 8 WLC 4400 series controllers deployed around the company, one of these controllers is acting as an Achor controller for GUEST wifi access for visitors to the company, as a result of this we have many users with "LobbyAdmin" access to setup users.
We have recently introduced a Cisco WCS to manage these devices but its not fully implemented/active to see all WLC's.I need to be able to report on the LobbyAdmin users to see who is setting up accounts and for who etc. Currently access to the WLC/WCS is done via Local admin accounts. All accounts for the LobbyAdmin people are setup on our anchor controller.
I have added the anchor controller for this to the WCS system but when looking in Administration/AAA/Groups the LobbyAdmin groups shows No Members.Is there a way that i can import the Lobby Admin names from the anchor WLC to the WCS so i can do reports/audit checks on these users?
In each case, the routers have functioned flawlessly for a period of 2 to 8 months, then suddenly begin to require daily to hourly reboots to keep the speed up, and often times fail to respond to any web activity whatsoever. Ping tests are intermittent, sometimes failing but other times succeeding while web sites remain unresponsiveFor three years I lived with two or more room mates at a time, each of us with our own computer (or 2) and all doing a lot of peer to peer downloading. I realize a router can overheat during heavy use like this, so buying new routers so regularly has seemed vaguely understandable. However it doesn't seem like that is the case in my most recent failure.I've lived alone for the past 3 months, and have owned the Belkin Play Max N600 HD since. I have NOT been P2P downloading or putting a heavy load on my router in any way (or so it seems). Yet as of about two weeks ago, it has suffered a major slowdown just like all of its predecessors. Yet my 30 mbps internet connection roars to life the moment I plug the modem directly into a computer.
My desktop remains on 24/7 but like I said before, I do not do constantdownloading/uploading. Both wired and wireless connections are effected equally, and I have always kept all my routers WPA encrypted.When websites become unresponsive on my Belkin today, it is usually after everything has been sitting idle for some time (overnight, or all day while I am at work). Speaking of work, today is a perfect exampleI remoted into my home desktop and was able to interact just fine, yet when I would launch a browser and try to load any website at all, I get absolutely nothing. I had to transfer a text document through DropBox (which also still worked) because I couldn't get Google Docs (or gmail) to load on the remote computer
Users are facing issue since a long time now . Whenever user connected to wireless is idle say 10 -20 seconds he gets disconnected This happens for all the users and even Mac/Win 7 I changed Activity Timeout on AP and even rebooted but still when I do show dot11 associations all-client I see activity-timeout
Users don't get disconnected when there is continous flow of data its only when user is idle
When user disconnects and hit refersh it starts working again
Is it possible to assign a single ssid to multiple interface groups by assigning the ssid to multiple AP groups?
I have buildings geographically dispersed that are configured with multiple vlans in interface groups so that I can maintain an addressing scheme of dhcp assigned addresses per building. Each building is also further grouped as AP groups. I'd like to know if by assigning the same wlan ssid to each of the AP groups, will I maintain addressing integrity for each building? I'm thinking it will work.
Do the buildings have to be outside AP range of each other to avoid problems?
I have a Linksys model WRT54GS2 with 4 ports, with Ethernet cables connected to ports 1 and 2. I have a laptop connected by wireless connection, with only an Xbox connected using Port 1 and occasionally port 2. Just recently, port 1 shows no activity. When connected to Xbox it doesn't display a check mark showing connection but does with port 2. I've connected it to port 3 and 4, which shows a check mark but won't connect to Xbox live. It's like port 2 only works, what I can do to "fix" ports 1, 3, and 4?
