Cisco :: Configure WLC To Log Guest Activity To NGS?
Jul 27, 2012
We presently have a guest wireless solution in place using 4400/5508 WLC controllers authenticating guests via a NAC Guest server. This has functioned well for the last year or so, but now our security team has requested that we begin logging guest activity. I already have RADIUS accounting set up on the WLAN configuration pointing to the NGS,I have added the NGS to the syslog set up on the controller (I have tried various syslog levels) but I am not receiving any guest activity info in the reports on the NGS. Any way for getting this data?
View 2 Replies
ADVERTISEMENT
Nov 21, 2012
I have belkin n750 router. I cannot get the guest network to connect to internet. The Main one connects to internet. How can I solve this problem?
View 1 Replies
View Related
Nov 24, 2012
I have one SRP521W-K9-G1 and need to provide guest internet access without access to my network. What is the best way to configure this?
View 3 Replies
View Related
Mar 30, 2013
1 router 881w with a site-to-site VPN connected to a switch and a wireless which allows internal users to access the VPN via wireless (this is like a backup, if the switch fails, then they can use the wireless). Everything's working fine so far. Now I want to configure a second WLAN for guest but I'm not really sure if this configuration will work:
ROUTER:
ip dhcp excluded-address 192.168.100.1 192.168.100.200
!
ip dhcp pool GuestNetwork
network 192.168.100.0 255.255.255.0
default-router 192.168.100.1
dns-server 8.8.8.8
[code]....
If it's not clear I want that everyone that is connected to the guest WIFI receives an IP address from the range I wrote before and then goes directly to the internet.
View 11 Replies
View Related
Apr 17, 2011
I would like to configure a guest-vlan and restricted-vlan on a 2960 switch, but I can not.
I am trying to configure the interface using the following commands: [code] similar result is obtained while trying to configure a auth-fail vlan. the full configuration file is attached.
View 4 Replies
View Related
Jan 11, 2012
One of my customers asked me to configure a WLC 2106 and 2 LAP 1131AG (lightweight) for corporate/guest Wifi. Basically they want to implement a good wifi connection for internal use and a guest one with different QoS. The two lans should both have dhcp but they must bet kept segregated so that none from the Guest wifi can access corporate resources.
Since i've never configured a WLC from scrath i lightly supposed it would be quite straigh forward as routers and switches from Cisco.Unfortunately i was totally wrong.
I've downloaded the "Cisco Wireless LAN ControllerConfiguration Guide" (Soft.Release 6.0 June 2009) and after i red it i made up this workflow
for the configurations:
1) Configure Controller: (via serial)
- Set Management Interface parameters (IP- SM - Def GW - Dhcp server IP)
- Set Ap-Manager Interface parameters
- Virtual Interface parameters
- Set Admin Credentials
- Dhcp Configuration (internal and/or external)
2) Ap registration on the controller
- Configure vlan with dhcp request redirection to the dhcp server
3) Configure Wlan following customer's requests.
- Configure Wlan Auth for Corporate/Guest Wifi
- Configure QoS for both Wlans
Unfortunately i'm experiencing issue while trying joining the AP to the WLC.It appers that the IT guy of my customer tried to configure one of the Ap.In that Ap's flash i find files referring to a "mesh" configuration like: [code]
View 11 Replies
View Related
Feb 1, 2013
The situation is Main house running Linksys EA4200, I have a garage apartment rental that is to far away to receive the wireless guest network.I ran a cat5e to the apartment, can I configure the EA4200 to allow the WAP54G access point to use the guest network? I want to prevent my renters from having access to the home network, but just have basic internet access separate/outside my network.
View 6 Replies
View Related
Mar 17, 2012
Is there a way to configure one of the GigE ports on the E4200 to only work on the "guest" network? Basically I have a need to setup one of those ports to get to the Internet, but I don't want it to be able to get to anything else on the private side.
View 1 Replies
View Related
Apr 7, 2013
Is there any way to configure a wired guest network with a combination of 5508 and 2504 wireless controllers? I am aware that the 2504 does not have wired guest functionality, however is it possible to set up a wired guest on the 5508 and using mobility anchors, transmit the l2 information through eoip to communicate with the remote vlan?Home built NAC solution, using 802.1x authentication on switchports for public areas. If user is an employee, communicates with the supplicant on their machine, and places them on an internal vlan.If user is a guest, user fails 802.1x check and is placed on a "guest" vlan with an ACL and external DNS.If placed on the guest vlan, the user has to accept a terms of use form.This is working currently with our 5508s without any issue, however we have some remote offices we'd like to roll this out to that are using 2504 controllers. I'm hoping there's a way that I can use the 5508 as an anchor or vice versa to make this work.
View 1 Replies
View Related
Oct 17, 2012
Any problems with the guest network on the ea4500 with the cloud firmware? I am losing guest clients after about 24 hours and the re-authentication fails. you enter the guest password and nothing happens until you reboot the router.
View 2 Replies
View Related
Apr 29, 2012
we recently purchased a sg300-52. i was told i would need to setup a port trunk to connect it our main catalyst. However, i was able to connect a patch cable on the two devices and ping endpoint devices on both switches. I also noticed that the activity lights are constantly blinking. I'm not sure why. Is there something i can do to slow the activity light? it blicks constantly even in times of very low activity by the endpoint.
View 2 Replies
View Related
Oct 7, 2012
detect botnet acitivity from network point of view.
View 15 Replies
View Related
Oct 16, 2012
I want to secure our WLAN via Web Authentication with our new Cisco 2504 WLC. But where do i find user activity logs?
View 2 Replies
View Related
Jan 5, 2013
I am using Bit meter (on Windows 7 64-bit) to measure up/down activity on the network adapter connected to the RV042 in load balancing mode. Is there a way I can, in real time, have a visual indication of up/down network activity on the WAN 1 and 2 port separately on the RV042?
View 1 Replies
View Related
Aug 30, 2011
I'm running a wpa2-secured guest ssid on a particular vlan that allows traffic to the web but restricts any access to internal network resources. It had been working fine for a couple of weeks, until the network started intermittenly dropping - at first I tried swapping channels and rebooting, but there has been no progress. I keep a running log at all times as long as the network is still active, but once it drops, the only message I'm getting is
'Line protocol on Interface Dot11Radio0, changed state to down'
My understanding would be that this is the same message logged when a user manually turns off the radio from a terminal window, is this correct? Or am I missing some basic troubleshooting steps?
View 3 Replies
View Related
Aug 2, 2012
I was examining my router's logs the other day and I noticed a recurring entry stating that my PC's IP address was sending packets to the IP 172.16.30.115 on port 80, and that the router was dropping them.Except for the fact that my home LAN uses the 192.168.1.0/24 network EXCLUSIVELY. That is all it has ever used since this router was set up, and the only other networks we have EVER used are 192.168.0.0/24 and 192.168.2.0/24. So why, I wondered, is my PC repeatedly sending (presumably) HTTP traffic to a private IP that is not and never has been on my network?I wasn't worried about what these connections might be doing, since I figured they couldn't do anything, but I was kind of concerned about what was generating this traffic in the first place. So I downloaded Wireshark and ran a capture for 30 minutes. Upon completion, I filtered results to show only packets that contained the IP 172.16.30.115, as either the source or destination IP.Based on the router logs, I expected to see three packets with my PC's source IP address and a random source port sent to 172.16.30.115, port 80 every 10 minutes.And I did see that. These are TCP packets, and they appear to be completely empty. The only thing I noticed about them is that the SYN flag is set. I don't know what the significance of that is, if any, but that's what I noticed.
What I DIDN'T expect to see were the packets that had a source IP of 172.16.30.115. These packets (also TCP) had the ACK and RST flags set, and they contained the text "Go away, we're not home." So not only are there packets being sent to an IP that cannot possibly exist within my network, but there are also packets coming FROM the impossible IP telling me to go away.All of that is scary enough on its own. But then I hopped on Google and did a search for the phrase "go away, we're not home," and almost every result was related to the decline of the Storm worm. After reading about Storm, I was more confused, not less. In its heyday, Storm used UDP traffic to communicate between peers, and my mystery traffic was TCP. Storm usually did not use well-known port numbers, such as 80, which I read was part of what made it so resilient. Not to mention that the most recent posts I could find regarding the Storm worm were dated 2010 and were about the possibility of a second Storm, and I didn't get this PC until May 2011. Plus, even if we ignore all of this and operate under the assumption that I have the Storm worm on my PC, that still doesn't explain the fact that the traffic from my computer is heading to a private IP that is NOT, I repeat, NOT being used on my network, my router says it's dropping this traffic, but my PC is still somehow receiving a response from an IP address that 1) isn't on the network and 2) can't be having any packets forwarded to it, since the router says it's dropping the traffic.So, operating under the worst-case scenario assumption, I used two different virus scanners (not simultaneously, of course) to do the deepest scans they are capable of doing. They both turned up completely clean. In fact, I've had AVG Free installed on my computer since I got it, and even if you look at my virus history you only see a few tracking cookies, a corrupted EXE from the Skype setup folder, and a Trojan dropper that I never even ran because I thought the file properties seemed fishy so I scanned it and promptly deleted it. So I now have to go back to operating under the assumption that I do NOT have the Storm worm, and I am back to the drawing board.
View 2 Replies
View Related
Mar 30, 2012
REmote desktop connection times out when there is no activity, I mean I open rdp to work computer from home ,If I am away from the computer I am not using keyboard , after few minutes I get a blank screen and if it is very longthe connection times out and I have to relogin to my computer, I need suggestion on how to retain the connection so that no blank screen appears and I alos dont loose connection .
View 1 Replies
View Related
Dec 28, 2012
I heard my brothers' conversation in our house. One was asking another, if he is downloading things. The other one replied, saying no, he didn't. And then the one that was asking said, he knew he was lying. He can detect and monitor that person's IP address to know enough if the other person is downloading or not.
View 6 Replies
View Related
May 24, 2011
Sometimes when I actively use the LAN (copy a file or stream media), my PC loses connection to both the internet and LAN. It doesn't always happen though. I can always fix it by opening network connections and disabling Local Area Connection and then re-enabling it. However, if I don't do this, the connection stays off indefinitely. The PC that loses connection is on Windows 7 64-bit with Asus P5K integrated ethernet controller with latest drivers. Modem/router is Linksys WAG320N.
View 10 Replies
View Related
May 11, 2011
During the last month or so my internet connection keeps stalling and will not work until I repair the connection, however I am still connected to the network, I just can't send or receive packets. In particular when I am downloading things, it will stop after 2MB is downloaded or 300MB, it just random. After sending/receiving 7,000 packets or 700,00. This only happens to my computer with the wifi adapter. Prior to this I didn't have any issues for over two years. My phone and laptop still connect via wifi to the internet. And the xbox and blu ray player are connected via ethernet and have not had any problems. The log for my router states "deauthenticate reason 3", which I have found to mean "The access point went offline, deauthenticating the client". So, I figured that the issue could be the wifi adapter which I installed on the laptop and that too never had an issue. I used inSSIDer 2.0 to see the close by networks and changed channels to get away from the strongest ones. I tried switching to wireless n only instead of g and n, the problem still persists.
Then I figured the issue must be my computer and no malware, spyware, adware nor any virus was found. The same thing happened while in safe mode. I also tried the winsock fix to no avail, reinstalled the wifi adapter and made sure all firmware for the router and adapter were up to date as well as XP. I also tried with my firewall shutdown but I still loose the connection. So I then reluctantly did a clean install and even with the bare essentials it still stopped working. I also bought a 15ft USB extension to get a better signal but still, even though I have a good or excellent signal I still have problems. My latest thought was this was the only machine running firefox 4 so I went back to 3 and that didn't either. I checked my usage with my ISP and I am no where near the 250GB a month.
View 1 Replies
View Related
Dec 25, 2011
I keep getting disconnected and blocked from using even LAN on my computer. This happens whenever I visit certain websites. For instance, I registered on a website that has me "kept signed in", and whenever I click to view that website, it partially loads and then for precisely 1 minute any network activity I try (like visiting my router configuration page, or clicking refresh or home to load google) will not go through. Only after that one minute is over with, I can resume browsing that website; however, if I leave it for too long, and then return, the same thing happens.
I've also noticed that if I sign out of that website and then visit it, that disconnect issue won't happen.But that isn't the case with other websites, as they require no accounts and are just pages with news and other stuff.I tried uninstalling and reinstalling my ethernet drivers, tried flushing dns, renewing ip, releasing and some other /cmd stuff that I found online.This also doesn't happen on any of the computers connected to my router (although, they are all using wireless - I am using cable to router).I'm on windows 7 x64, using a realtek ethernet card, Nod32 security suite (think it may be the settings on this thing? I set everything to super safe settings so I don't get any dumb viruses). Windows is updated (well, at least 3-4 months ago it was updated). I have no idea what is causing this, and why the precise 60 second interval until I regain access to the internet.I'm using Firefox, but this also happens on IE8 or 9 or whatever I have installed, so I don't think it's a browser issue.Things like facebook, youtube, pennyarcade and other junk work, but as soon as I go to google looking for, say, apartment rentals and open some pages, one of the links in the search results is bound to make my connection freeze.
View 1 Replies
View Related
Aug 2, 2012
My office uses a Windows domain network. Is it possible for them to track which IP/Port I'm using through some network software. Sometimes I do SSH access to my server. Can they get notified any how about this ? We use Windows XP SP2.
View 3 Replies
View Related
Jan 4, 2013
I am wondering if I can log all activity on my network. Right now I can log activity with MAC addresses, but if I add a device I have to keep adding MAC address. I also have to have several policies because I can only put about 7 MAC address in per policy.
I noticed the option to add 'other machines' and I am not sure how this works. I have tried it and can't get it to work.
View 2 Replies
View Related
Apr 28, 2011
Is there any way to hide my activity on the network? My network administrator monitors our network activity, specifically chat.
View 1 Replies
View Related
May 29, 2012
I am triing to migrate my old ACS to the new one. I am using ACS 5.3 on appliance CSACS-1121. Sometime, i loose the connection to the appliance and i could not connect to the appliance with SSH, i could not start the GUI and the authentication is switched to the secondary instance. As soon as I have traffic, the connection is restored.
View 3 Replies
View Related
Apr 8, 2013
I have a Cisco / Linksys SRW 2016 switch, all was working fine. Powered off and powered back on a day later.Switch powered up and the system light lit.But non of the ports what had cables connected were active....If you connect a network cable to the switch and then a laptop / pc .. The computer knows that there is a connection, but only gives a 169 address. Presumably because the switch cannot get to my dhcp ?I have tried connecting a serial cable to the switch top see if I can see any error, but when running Hyper Terminal I only get the white screen and can not see any POST etc.As far as I under stand it is a straight through cable, do I need a null modem cable to console onto the switch?
View 1 Replies
View Related
May 24, 2012
My previous setup was a ProSafe GS108 switch, 10/100 Dlink router/switch used only as a switch, and a DI-655 router/switch. With this setup, activity when I wasn't using any of my computers was zero. There would be no blinking activity lights.
I dumped the ProSafe and 10/100 switch, and use the DI-655 only for my internet uplink and wireless, and now have everything else plugged into a Cisco GS200 switch. There is activity now every two seconds. I presume this prevents the Green energy saving features from kicking in as the ports are in use.
What's the difference that's leading to all this activity that presumably wasn't there before?
View 2 Replies
View Related
Jan 20, 2013
iam opening a cyber cafe next week.i have one computer (main server) which is connected to 5 monitors by an device named Ncomputing device and software.i have one cpu which is connected to others monitors.my question is how to see other 5 computer" s activity by my host pc?
PC SPECS:
intel i3 2120
h61 mobo
windows 7
View 3 Replies
View Related
Feb 17, 2011
I recently received an email from my internet provider showing illegal movie downloads through my modem. I have a wireless router hooked up (with password security) for my roommates to use and would like to monitor their internet activities to know who is downloading these movies.
View 3 Replies
View Related
Jul 26, 2011
I wonder if there is a free programme that will let me look at network traffic/activity on my network, i'm having real issues with with access and the slow down of the network. Unfortunately my switches are not managed.
View 2 Replies
View Related
Jan 2, 2013
This morning I lost wifi connectivity. I reset the router and powered off and on the modem along with the router but to no avail. The blue stripe no longer shows on the top corner of the machine.I am able to connect to the internet using the ethernet ports on the router. I also tried to get into programming using 192.168.2.1 but it is timing out.
View 1 Replies
View Related
Jun 18, 2012
how to get the web activity report of clients in Ironport WSA S670. I need each and every URL's visited by the exact clients.As of now i am able to download the client web activity report upto URL categories...but i need exact URL's accessed by the clients.
View 1 Replies
View Related
Jan 26, 2011
We currently have about 8 WLC 4400 series controllers deployed around the company, one of these controllers is acting as an Achor controller for GUEST wifi access for visitors to the company, as a result of this we have many users with "LobbyAdmin" access to setup users.
We have recently introduced a Cisco WCS to manage these devices but its not fully implemented/active to see all WLC's.I need to be able to report on the LobbyAdmin users to see who is setting up accounts and for who etc. Currently access to the WLC/WCS is done via Local admin accounts. All accounts for the LobbyAdmin people are setup on our anchor controller.
I have added the anchor controller for this to the WCS system but when looking in Administration/AAA/Groups the LobbyAdmin groups shows No Members.Is there a way that i can import the Lobby Admin names from the anchor WLC to the WCS so i can do reports/audit checks on these users?
View 2 Replies
View Related
