In our setup we have WiSM modules installed on cisco 6506-E, ACS 5.3 virtual appliance. We are trying to implement EAP-FAST for our Wireless using WPA/WPA2 802.1x on the WLC side.
I have followed the instructions in the following document step-by-step: [URL]
Still I have no success. Tried most of the permutations on ACS EAP-FAST configuration.
I am using ACS 5.3 for certificate based authentication for lan workstation. Now few times I received this message from ACS.5411 EAP session timed out : EAP session timed out?
View 1 Replies View RelatedI've got ACS currently authenticating wireless users - using EAP-MSCHAPv2. There are a large number of failures being reported as:
View 4 Replies View RelatedWe're having trouble trying to deploy 802.1x authentication on a brand new site.
Our primary and secondary ACS are located in Paris and the new site located in Toulouse, France. Both sites are connected through the WAN. Everytime a computer/user connects to this new site in Toulouse, ACS 5.2 sends a "5411 EAP session timeout" error message.
I have upgraded Cisco ACS from 4.1 to 4.2, I have Cisco Access Control 1113 apliance, as soon as I upgraded I am getting error in failed logs "Authen session timed out: Challenge not provided by client", what is wring with this?
View 4 Replies View RelatedIs Ciscoworks LMS 3.2 supports WISM 2?
View 3 Replies View Relatedweb authentication when using Android devices. I've been testing it and it seems to be caused by certificates (as it has been said in others discussions). With https disabled in the WLC (Wism 6.0.196.0), the portal authentications loads, but no with https. In addition, another issue I've detected is the DNS resolution of my controller by 1.1.1.1 when redirection takes place. With https enabled, DNS resolution and redirection works fine, so I don't think DNS server misconfiguration is the cause of the problem.I've only been able to see the portal with https disabled and entering manually 1.1.1.1/login.html
View 13 Replies View RelatedBasically my friend has a game server with a particular IP. But lately I don't seem to be able to even 'see' that server. Pinging the IP gets a timeout. I did a tracert on the IP and from the first hop onwards it gives me 3 stars followed by a 'Request Timed Out' until the 30'th hop.
View 15 Replies View Relatedis there a way for pre deploying the new ap images? We have around 500 APs and my inspection windows isnt long enough to upgrade via controller......
View 6 Replies View RelatedWe are currently upgrading from WISM-1's to individual 5508 WLC's. Is it possible to export the config from controller on the WISM to the 5508?
View 5 Replies View RelatedI dont think my cards are faulty (4 cards in 2 6500 switches),I connect directly to my WISM cards, boot them (insert them), I see it turning on, enabling services, and as soon as the "username:" prompt apears, the Status led turns off and I lose console. [code]
View 21 Replies View RelatedThere are 8 existing W LAN's in our WISM controller & it is working fine without any problem. Now the problem is any new W LAN's are not broadcasting from WISM to APs, I am able to create & enable it in WLC but it these W LAN's are not reflecting in associated APs.
FYI: WISM controller is in 6500 switch & FWSM module also in the same switch, earlier there was rule with any any traffic in the FWSM but recently we have removed the FWSM & all rules moved to checkpoint. We have check the in firewall there is traffic is blocking.
we have two wisms in a cat6500, I wonder how can you log into the wism from the switch. to be more specifically, how can I know the processor number?
View 4 Replies View RelatedWe have Cisco WiSM modules on our 6500 switch. I tried to register a 1142 access point to the WiSM. Is there any difference in the way an AP registers and appears on the WiSM as compared to the Wireless Lan controller?
I could see the AP get an ip from dhcp pool ( configured on the switch ) and Ap was visible on the cdp neighbor of switch.
However, i could not locate the new AP on the WiSM module. Do i need to add MAC address to the WiSM as same as WLC.
I see many errors in the ACS 5.1(or 5.3) :5411 EAP session timed out..Becasue I checked the "remember my username and password everytime login" in the wireless network properties, and I can succeed to login finally. but in the ACS will see many errors like ”5411 EAP session timed out“
(Cisco Controller) >debug client 58:1f:aa:8f:ea:44
Fri Apr 13 16:09:36 2012: 58:1f:aa:8f:ea:44 Sending EAP-Request/Identity to mobile 58:1f:aa:8f:ea:44 (EAP Id 1)
Fri Apr 13 16:09:36 2012: 58:1f:aa:8f:ea:44 Received EAPOL EAPPKT from mobile 58:1f:aa:8f:ea:44
Fri Apr 13 16:09:36 2012: 58:1f:aa:8f:ea:44 Received Identity Response (count=1) from mobile 58:1f:aa:8f:ea:44
Fri Apr 13 16:09:36 2012: 58:1f:aa:8f:ea:44 EAP State update from Connecting to Authenticating for mobile 58:1f:aa:8f:ea:44
Fri Apr 13 16:09:36 2012: 58:1f:aa:8f:ea:44 dot1x - moving mobile 58:1f:aa:8f:ea:44 into Authenticating state
[code]....
I have 2 ACS 5.2 (VMWARE) in my network configured as primary and secondary. When my AAA clients are configured for Primary ACS authentication works fine.But the clients configured with secondary fails authenticating.My replication status of the secondary box is showing UPDATED.
View 1 Replies View RelatedI have a strange issue where the first ping always times out, but the following goes through fine.I have Cisco877 and connection to the internet is fine. I connect a PC to one of the Fast Ether ports and I am able to ping the router without any issues. However, the moment I ping an external website [URL], the first ping request fails. after that the following request come through quickly.
View 24 Replies View RelatedI first noticed it in games, and decided to ping my router in CMD. I see the occasional "request timed out", and not sure how to fix it.My other computers connected to the network are working fine, and I've tried USB Wireless adapters in my laptop which work fine, which implies the problem lies with the inbuilt adapter itself.I've tried reformatting, and updating drivers, but to no avail.I thought maybe the adapter might just be faulty, but then I decided to test it on Linux. I pinged the router in the terminal and... it seemed to work fine. I thought maybe some background process in Windows might be doing something to cause the problem, so I started in safe mode (with networking)... still the problem remained.
View 5 Replies View RelatedI currently have a vlan/SVI on my 6506 for the WiSM service-port. The WiSM has an address on the same subnet. To manage the WiSM, I either https to the Management interface address or use 'session slot X proc Y' from the the 6506. Since I am essentially only using two addresses from a subnet for this service-port I would like to free up the subnet. Can I keep my current functionality by having a vlan only (with the wism service-vlan XX command) with no SVI?
View 7 Replies View RelatedI have issue to access one of the wism on 6509 switch however other wism is ok both wism on switch are up and functional how to enable remote access on wism.
View 13 Replies View RelatedI have a facility, where all the access points almost 250 of them are connected to two WisM's (One in each core switch ) . They are running in 6.0.199 firmware . These two WisM's are managed by WCS , which is running 6.0.188.
As i need to add more access points and to make fully redundant , 5500 controller was ordered and it has with firmware 7.0 installed. Couple of queries related with it .
1. Can 5500 be added in the WLC group, so that existing Access Points can be configured to use primary controller as 5500 and secondary / tertiary controller as WISM ?
2. Will 5500 be able to be detected by WCS , as the version of 5500 is 7.0 and WCS version is 6.0.188 ?
3. As WCS was already deployed and live, is it possible to upgrade, if the client has support contract like SUSA ?
WISM v7.0 VLAN Select. If the VLANs subnet to be configured under interface group MUST be having the same subnet.
Eg. VLAN1 - mask 255.255.255.248
VLAN2 - mask 255.255.255.120
Would these two VLANs be able to work together in interface grouping?
WiSM WLAN Service Module WS-SVC-WISM-1-K9 in 6509e running VSS IOs s72033-ipservicesk9_wan-mz.122-33.SXI2a.bin having trouble to get the IP from service-vlan DHCP.The pertinent config is as follows.
!
vlan 300
name WiSM_Service_Vlan
!interface Vlan300
description *** WiSM Service-Vlan
ip address 192.168.200.1 255.255.255.0
[code]....
The service IP is supposed to have been populated with an address from the dhcp pool. I am also unable to connect to it by doing a session switch 1 slot 4 processor 1. I get the following upon attempting to do so:
HO2NET0001##session switch 1 slot 4 proc 1
The default escape character is Ctrl-^, then x. You can also type 'exit' at the remote prompt to end the session Trying 0.0.0.0 ...
What this card is and what is it used for?
from show module command, it appears that it is a sub-module of the wism blade.
what is it's primary function?
I think I already know the answer, but I cannot find any solid documentation. Does the WiSM2 support the 1231G AP.
View 3 Replies View Relatedmy college using WisM (WS-SVC-WISM-1-K9) as wireless controller , Cisco 1130 access point and Cisco Secure ACS 4.X Solution Engine 1113 Appliance as radius server. For username and password, we take it from existing Oracle database.
The problem is the password that store in oracle database is in encrypted format. Base from feedback from database administrator, the encrpytion is done by oracle - application layer and cannot be decrypt back.
To tackle this problem, we decide to use external script in php to verify the username & password...The php script will check directly from oracle database. If the username & password match, it will sent a boolean true (1) to the Wism controller and if the username & password not match, the script will send boolean false(0) to the Wism controller.
My question is, can WiSM module talk to php script? Can it receive boolean parameter from php script?
I want to upgrade software of the {WISM(Forign controllers 6.0.196) 4400(Anchore controllers 6.0.196) and WCS 5.2.0} to 7.0 code for all,
View 1 Replies View RelatedI am getting an alarm on WCS where a one controller is down, unreachable from WCS, while the other one is reachable on the same WiSM module. Upon investigation, Status of controller is shown as "Oper-Up" for all controllers on Supervisory engine. Hardware platform is Cisco 6509-E.
WLAN
Slot Controller Service IP Management IP SW Version Status
----+-----------+----------------+----------------+-----------+---------------
2 1 192.167.10.11 172.19.47.65 6.0.196.0 Oper-Up
2 2 192.167.10.12 172.19.47.66 6.0.196.0 Oper-Up
However, I can not ping the managment interface of the down controller while the other controller management interface is pingable. All these interfaces are in the same VLAN.
ping 172.19.47.65
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.19.47.65, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Problem is fixed when I reboot the problematic Controller. However, this problem re-appears after some time. I am not able to figure out why controller is not able to ping its default-gateway which is an SVI interface on Supervisory card on the same chassis, and showing status UP/UP. Is it a software bug or backplane fault or any other reason ?
We have a WISM in a 6509. The 6509 lost power (the UPS failed) and upon reboot the WISM isn't allowing AP's to connect. The WISM is blade 4. Upon consoling in, I get this error message for all 8 ports: 42w6d: %EC-SP-5-CANNOT_BUNDLE2: Gi4/1 is not compatible with Po407 and will be suspended (trunk mode of Gi4/1 is dynamic, Po407 is trunk)
View 13 Replies View RelatedI have the following on my 6509:
Mod Port Model Serial # Versions
---- ---- ------------------ ----------- -------------------------------------
1 10 WS-SVC-WISM-1-K9 XXXXXXXXXXX Hw : 2.2
Fw : 12.2(14r)S5
Sw : 12.2(18)SXF16
Sw1: 8.6(0.306)R3V39
WS-SVC-WISM-1-K9-D XXXXXXXXXXXX Hw : 2.1
There are few documents that tell me different requirements for the WISM cards to configure VSS.
I have a Cisco 1801 Router, but whenever there is anything plugged into the integrated 8 port switch for example two computers, I cannot get them to ping each other. All of the ports are on the same vLAN.
I am a Cisco newbie, so sorry if this question/query is really basic. Is there anyway I can test the integrated switch to see if it is faulty.
I can't access the following a specific website from any computer in my house. I am able to access all other sites. I have tried Firefox, IE, Chrome. All i get is the following error: "The connection has timed out" I called my ISP this morning, and they asked me to try adding a proxy server in IE. That is, Internet Options > Connections > LAN settings > Proxy server > proxy.tpg.com.au:3128, After doing this i was able to access the site! What could this mean?
View 3 Replies View RelatedI'm looking to replace my Thomson router with a router capable of being programmed so it can turn wireless off at a certain time.
View 8 Replies View Related