Cisco :: AP1242 In Autonomous Mode?
Dec 21, 2011
I am in the process of configuring Network Access Protection and just found out you can apply user based ACLs in the Network Policy. Will this work with a Cisco AP1242 in Autonomous mode? I saw some configuration guides for configuring User ACLs using the wireless controllers but not just Radius.
I have added the Vendor Specific Attribute of "Cisco-AV-Pair with two values of
-priv-lvl=15
-ip:inacl#10=deny icmp any any
I would expect all traffic to be denied when the user logs in due to the explict deny at the end of an ACL but I am not seeing that so I was unsure if Per-User ACLs work on standalone AP1240s.
I could add another rule to allow other traffic but I just want to see if the ACL would apply on a per-user/per-session bassis on the AP1200.
View 7 Replies
ADVERTISEMENT
Mar 4, 2012
We have recently converted 1 Cisco Lightweight AP 1041 to Autonomous mode for site-survey purposes. We now want to convert it back to lightweight mode.
View 1 Replies
View Related
Aug 13, 2006
i need to change the IOS in a Ligthwiegth Access point and make it work as an Autonomus AP 1242. I have got the image but im not realy clear about the process. I got to enter the Ligthwiegth Access point true the console port but i dont know how is the upgrading process.
View 6 Replies
View Related
Mar 28, 2012
We purchased some 3502e's and I was told we could set them up as automous ap's to do a site survey. however i haven't come across much online for instructions. i saw one post that mentioned downloading code for another ap model - i think a 1260, but we don't have rights for such a download.
View 11 Replies
View Related
May 5, 2011
I’m configuring a Cisco 1142n AP in autonomous mode. The networking part is successfully working, multiple VLANs, SSIDs etc. I would like to configure one of my wireless networks to work with WAP2-PSK and the other with WPA-PSK.I’m confused as to what encryption to set on each radio and the ciphers to use on the SSID for each vlan to enable the best possible security. I’m not using a RADIUS sever in my network .point me in the right direction with the right CLI commands?
View 12 Replies
View Related
May 7, 2013
i have a air-lap01131-ag-e-k9 that was originally in lightweight mode and configured with a controller, but i am in the process of wanting to convert to autonomous mode, i am having issues with connectivity to the AP from my laptop.
i have followed numerous guides on this forum, i have successfully
downloaded correct firmware
renamed the firmware to .default
placed this in root of tftp server folder
connected laptop via console to view output
connected laptop via Ethernet to Ethernet port of AP
changed static ip on laptop to 10.0.0.2 set subnet mask to 255.255.255.0, default gateway to 10.0.0.1
held reset button on AP when applying power and waiting for radio light to flash red
AP gets a IP address then of 10.0.0.1
But even though both laptop and AP are in the same subnet, i am unable to ping the AP from my laptop and it doesn't start the tftp process
I have disabled firewall etc, and tried with both crossover and straight through cable, it seems there is something missing at this last stage, i even tried on a second laptop but that would not ping either, am i missing something.
View 20 Replies
View Related
Mar 31, 2011
I want to upgrade the ios ap-1240AG me to leave it in standalone mode.What default ip should take my ap?How should we be the tftp command to update the IOS on my ap?I am using tftp server of windows xp?
View 1 Replies
View Related
Mar 8, 2012
we had a problem with a customer wlan in our warehouse (cannel overlapping). The troubleshoot needed a long time. For the future if requipred in case of problems i want to configure one access point in the warehouse as a scanner (please find picture in the attachement). The Autonomous cisco 1242 is now configured as scanner but i can't see any logfiles? Where can i find these informations. This is the cisco description of the scanner mode:Scanner—Functions as a network monitoring device. In the Scanner mode, the access point does not accept associations from clients. It continuously scans and reports wireless traffic it detects from other wireless devices on the wireless LAN. All access points can be configured as a scanner.
View 1 Replies
View Related
May 15, 2011
I am configuring a mobile van that is used for a mobile health clinic to drive to several locations and when pulling into an allocated parking spot the van will connect via wireless automatically. I am using autonomous 1252 AP's and am considering either briding or workgroup bridging.
The issue I am encountering is that the AP inside a van is a router that has to do DHCP across the wireless and because the ethernet interface between router and AP in the van never goes down the router does not know to re-DHCP. I remember from way back there was an IOS command to track a serial interface and drop the ethernet if the serial link goes down. Is there an equivalent command for AP's to drop the ethernet interface if the radio interfaces go down?
View 2 Replies
View Related
Feb 25, 2012
how to downgrade/upgrade AIR-LAP1142N-N-K9 access point to autonomous mode, because i don't have controller. i'm not able to login to access point as its in Leightweight mode.
View 4 Replies
View Related
Apr 2, 2012
I have successfully converted my lap1242ag-c-k9 to autonomous mode. But when i try to set ssid or wep then hit apply it won't the changes i made.
View 3 Replies
View Related
Mar 16, 2013
configuration of a 1310 that will be a root access point and connected to wlc 4402. The AP will be implemented as autonomous and not lightweight.
View 3 Replies
View Related
Nov 1, 2011
I have several AP's of 1131 AG used in autonomous mode. Recently one of them stops responding: i was not able to access web management or ping its NIC. I've tried with reseting device to default but no success, even more when i plug ethernet cable to AP port nothing happens even NIC led's are not blinking at all.
On CLI console i am seeing repeated constantly such entries:
*Mar 1 05:19:04.086: %LINK-3-UPDOWN: Interface BVI1, changed state to up
*Mar 1 05:19:05.086: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
[Code].....
( i have new firmware but how to upload it without this interface running ? )
View 16 Replies
View Related
Aug 19, 2010
I was trying to upgrade the IOS image of the AP and I did a wrong manip.
I downloaded the IOS image (ap801-rcvk9w8-tar.124-10b.JA3.tar) from my TFTP server to the flash of the AP. Everything went find so far. But than I did an archive archive download-sw /overwrite ap801-rcvk9w8-tar.124-10b.JA3.tar and my AP reboot in LWAPP mode.
I should have done: archive download-sw /overwrite tftp://10.0.0.1/ ap801-rcvk9w8-tar.124-10b.JA3.tar instead!
Now I don't how to go back to autonomous mode. archive commando is not available anymore in LWAPP mode.
View 4 Replies
View Related
Apr 20, 2012
Is it possible to convert a 1041 in Autonomous AP mode to Lightweight? Since on the cco page there is no upgrade tool under the 1040 series AP,and also i didnt find any document with the procedure.
View 1 Replies
View Related
Apr 25, 2013
I am trying to have a setup where the AP running in autonomous mode also act dhcp server for the wireless clients.The only thing is that the vlan is switched across to the wired network.
So basically i am having 2 vlans, one for mgmt and other for data (for wireless clients) and both vlans are trunked to the switch.
[CODE]...
View 1 Replies
View Related
Mar 13, 2013
we have 1262 (AIR-LAP1262N-E-K9) and we dont have WLC..and i want to convert it to Autonomous mode..i did the below steps... with using this file (ap3g1-k9w7-tar.152-2.JB.tar) download it from Cisco site. Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30. Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated. Step 3 Set the timeout value on the TFTP server to 30 seconds. Step 4 On the PC where the TFTP server is located, perform these steps.
View 48 Replies
View Related
May 13, 2013
Do we have Option to add MAC address of specific laptop or Mobile to connect to the Access Point in cisco Aironet AP 1260 series in Autonmous mode
View 4 Replies
View Related
Jan 17, 2013
Is the process for converting 1260 APs to lightweight mode any different from converting 1140s or 1250s? I've converted several APs to LWAP mode but this is my first 1260. Four 1260s need to be converted.I have one in a remote location that seems to be comatose. Here are the steps I took to convert the AP. Did skip/miss a step?
1. uploaded code to the AP ap3g1-rcvk9w8-tar.152-2.JB.tar
2. configured the AP for DHCP. It successfully leased a DHCP address. Controller information is provided via DHCP Option 43.
3. saved the configuration
4. verified the code, successful
5. disabled wireless radios
6. installed the lightweight code using the command archive download-sw /safe flash:/ap3g1-rcvk9w8-tar.152-2.JB.tar.The installation was successful
7. rebooted the AP
After that nothing. The AP has not leased another IP address. The switchport is active. The APs MAC address is registering in the switches MAC address table. The AP is receiveing PoE from the switch. I noticed that this AP is only receiving 6.2W of power where the three are getting anywhere between 8.8W and 9.3W. I am unable to ping the old static IP of the AP too.
View 4 Replies
View Related
Feb 4, 2013
What 113X AP model will work in Autonomous and LightWeight Mode? I want to buy some 113X AP's for my lab and want to make sure I don't get stuck with the ones that only run in one mode. I am looking at buying this one AIR-AP1131AG-N-K9 802.11a/b/g. Will this model work in both modes?
View 1 Replies
View Related
Jun 11, 2013
I have an Aironet 1250 AIR-LAP1252AG-A-K9 I am having issues with, and I am hoping for some direction on how to resolve them. I understand this question has been posted many times many different ways, but i have no luck unfortunately. Here is where I am: I can terminal into the AP, which has been set to factory default, with the username and password and enable password of Cisco. Once I am in the enable mode, I get lost.
Usually there would be an option to go to config. t, and work from there, but this AP does not have that option, Actually if I do a ? at the enable prompt, the commands list only starts with the letter C; but none are config.
I also cannot get into the web interface of the AP. The AP gets a DHCP IP from my DHCP server, (192.1681.128/24) but I cannot get into the web interface using the IP it gets from DHCP. The page never comes up. To add to the confusion, I cannot turn off the CLI event logging, although I enter the command "no debug all". Maybe I am off on what to put in. Nonetheless, it drives me crazy with messages every two seconds as I am trying to type while attempting to figure things out.
Overall, from reading the forums and doing Google searches, I am going on the assumption that the AP is now in lightweight mode, as opposed to autonomous mode, which is where I want it to be. I have tried the method of updating the firmware to the autonomous firmware from Jan 2013 for the AP. I use the TFTP method as I have found here on the forums a few times; I hold the mode button down while applying power to the AP, let the system LED turn red and release the button so the TFTP process can go through, but nothing changes.
I have the AP powered from a gigabit POE switch. The computer I am using for the TFTP is on the same sub net as the AP. I have tried using 10.0.0.6/24 for the computer with the TFTP on it, made sure the view all file extensions option was checked, and renamed the firmware to the .default extension-still nothing updates.
I also noticed that once I hold the mode button down for 20-30 seconds then let it go, the CLI output says the AP it is on the 10.0.0.x sub net, but I cannot ping the computer with the TFTP program on it. If i try to, it get a "Command not supported" message. So I will go on the idea that this is most likely why I cannot do a TFTP update.
About 30 seconds after I release the mode button and the AP boots, it will say it has a 10.0.0.x IP address, then it starts going crazy with messages that it cannot find a DHCP server.
View 3 Replies
View Related
Mar 19, 2012
I have 1042 Light weight AP and i want to convert it to Autonomous mode . i dont find any particular image for this conversion ..when i try to find autonomous image for 1040 its showing "c1140-k9w7-tar.124-25d.JA1.tar"........can i use this image ?...
View 1 Replies
View Related
Jun 6, 2013
I have AP AIR-AP1231G-E-K9 with iOS c1200-k9w7-tar.123-7.JA2 and I want to convert it to Lightweight Mode with iOS image c1200-rcvk9w8 tar.124-21a.JA2. First of all, is it possible? Because I tried to convert from tftp server command (archive download-sw /overwrite /reload tftp://ipaddress/image.tar) and I cannot see in the controller. (controller and aps are in the same network)
View 11 Replies
View Related
Jan 10, 2013
we have a couple of AP1262N-E-K9 access point with firmware version 12.4(25d)JA1 operating in autonmous mode.
I attempted to measure the signal quality between the APs by setting one device to repeater mode while all others are in root mode. Then, I execute the following command: dot11 Dot11Radio 0 antenna-alignment
1. The output of "show dot11 antenna-alignment" is incorrect, the % value represents the signal strength in dBm without the - (minus). E.g. "-25 dBm" is displayed as "Signal 25% 0 dBm".Now, I know that is only a display error but still this is not clean. Is this a known issue?
2. Why are the measured signal strength values not displayed on the SSH console during the antenna-alignment test? Is it obligatory to use the console to see these values? Or is it also a known bug which might be fixed in later firmware versions?
View 2 Replies
View Related
Aug 28, 2012
I have a brand new AP1242.. the issue is that i can't access it by Console nor by GUI on it's default IP Address 10.0.0.1.
View 0 Replies
View Related
Jul 15, 2012
How to configure LAP 1242AG to authenticate it self as a supplicante on the 802.1x interface switch ?
View 5 Replies
View Related
Jan 14, 2013
I am having trouble getting the bridge to work. The setting is as follows: I have to buildings, separated by a road. Distance is apx 35-40 meters. From the main building there is a network which I am trying to extend to the other building by a wireless bridge. I am using two 1242 (autonomous) for this. I have also external directional antennas (7Db) mounted on a pole 8 meters above ground on each buildings. These are of course directed to eachother. The antennacabel used between the ap's are shielded Cisco-cables.
The config on the root AP:
dot11 ssid Valhalla01
authentication open
authentication key-management wpa version 1
[Code].....
View 2 Replies
View Related
Nov 11, 2012
Im looking for possibilities to remote recognize attached antennas to AP1242. I have a lot of devices which not working properly. I think most of them have only one antennas installed , but I cant be sure if its fitted into primary connector. Do You have any idea how to check numbers of attached antennas and if only one if its fitted into primary connector?
I want to disable diversity when I'll find APs with only one antennas.
View 1 Replies
View Related
Apr 15, 2013
I have an AP1242 near a couple of conference rooms. I get complaints when we have a large contingent in there and some try to download documents. The bandwidth consumption is meage - less than 2Mbps. But there could be say 50 people in those training rooms. I see no errors at the FE interface on the AP but I do see a good number of Transmit Discards.
Are 50 users connected to an AP1242 simply more than should be expected of the device? 802.11g is the radio.
Are transmit discards indicative of some kind of configuration problem? The users in these cases are generally very close to the access point - within a few feet even.
If it is indicative of a configuration problem would that be an issue of the configuration of the laptop wifi cards or a problem at the AP?
View 2 Replies
View Related
Sep 22, 2010
Do AP1242 access points support Kron commands?
View 4 Replies
View Related
May 3, 2012
I have 1242 Configured with 12.4.21a-ja1 and I have many of these. however I have 4 on the same location that have just started rebooting. The crashinfo logs ell me that cmd: PASSWORD statement not printed..Dont know if thats the issue....but something is wrong.. We are running SNMP and thats about it...
View 1 Replies
View Related
Jul 12, 2012
I recently configured a Cisco AP 1242, software version 12.4, via the web interface using the default Cisco credentials. At that time I setup an administrator account with read/write access and changed the Cisco to a read only access. Now went I attempt to login to the web interface it won't accept the administrator password. It will except the administrator password in a telnet session however. So via the telnet session I setup another user with privileged exec level access and that wont work on the web interface either. The Login box keeps coming back requesting a password. Strangely enough, I can login to the web Interface using admin username, with the Cisco password; but I can't do anything, and I also can't view everything. I've tried the following:
I've turned on SSH and created a certificate in the AP, but the login box continues to pop on the https://url.I've attempted to setup a user with a non-encrypted password, but have been unsuccessful.I've tried a different browser - login box continues to pop.I've made sure the web interface is activated in the API've tried a differnet computerI've tried disabling password-encryption service. Reset the enable password , I've successfully setup other 1240 APs but must have done something wrong on this one.
View 1 Replies
View Related
Sep 16, 2012
I got an ASA 5510 system currently in single context mode, with CSC SSM installed. Single ISP uplink to internet, no VPN. And now customer would like add another ISP uplink, without invest another box for HA.What come across my mind is make the current box into multi context. There's some area i need to concern and also need yours perspective on it.
Question 1: For making the firewall into multi context, am i need to do it from scratch, issue mode multiple command. Then rebuilt the current production config into one of the context, then another context meant for the new IPS uplink, and one admin context?
Question 2: For CSC -SSM licensing requirement, model ASA 5510 with security plus license is able to support 2 context. So if i split my firewall like what i mention in question, what exactly number of context do i own (admin, context A, context B)?
Question 3: For CSC-SSM module in multi context mode, so the management port of CSC SSM must attach at admin context?
Question 4: After configured all the policy and traffic to scan, how exactly i should do in order apply this policy to the interface? Should i only enable at admin context, then firewall service-policy rules, and apply it global, OR should i also do the same action on context A and Context B?
View 3 Replies
View Related
