Cisco :: LMS 4.0.1 - Changing Device Credentials
Jun 20, 2011I need to edit device information for multiple devices using feature Edit Credentials. I'm not able to overwrite all device credentials using a new set.
View 2 Replies
ADVERTISEMENT
Cisco :: LMS 4.0 Device Credentials Verification Report?
Jan 3, 2012I have a problem when doing this report. If I do a device credentials report on a user defined group (40 devices) 11 of these devices fails to connect via SSH. I can make an SSH connection to all 11 devices from the CiscoWorks server, but 11 devices still fails on the report
Device Name Read Community Read Write Community SSH
1. 149.212.XXX.164 Ok Ok Failed to connect.
2. 149.212.XXX.153 Ok Ok Failed to connect.
3. 149.212.XXX.152 Ok Ok Failed to connect.
4. 149.212.XXX.151 Ok Ok Failed to connect.
5. 149.212.XXX.150 Ok Ok Failed to connect.
[code]....
Cisco AAA/Identity/Nac :: ACS 5.3 Error When Changing Device Group Or Location
Jun 13, 2012I am trying to move a device from the Default location to a sub group and get the following message when I try (either with IE or Firefox)
This System Failure occurred: Index : 0, Size: 0. Your changes have not been saved. Click OK to return to the list page.
it also gives me the same error if I try and change the Device type from default to a sub group. I'm sure I could do this previously. The ACS build is (VMWARE install):
Cisco Application Deployment Engine OS Release: 1.2ADE-OS Build Version: 1.2.0.228ADE-OS System Architecture: i386
Copyright (c) 2005-2009 by Cisco Systems, Inc.All rights reserved.Hostname: ACS1
Version information of installed applications---------------------------------------------
Cisco ACS VERSION INFORMATION-----------------------------Version : 5.3.0.40Internal Build ID : B.839
I'm suspecting it a read/write issue with the database or a database corruption. I have stopped and started the application acs via the console and show application status acs has the following to say about itself.
ACS1/admin# show application status acs
ACS role: PRIMARY
Process 'database' runningProcess 'management' runningProcess 'runtime' runningProcess 'view-database' runningProcess 'view-jobmanager' runningProcess 'view-alertmanager' runningProcess 'view-collector' runningProcess 'view-logprocessor' running
Cisco AAA/Identity/Nac :: 802.1x Credentials Failure With ACS 5.2
Jun 20, 2011I recently tried to deploy an ACS appliance with version 5.2 installed on it for a customer.
After setting up the WLC to use the ACS as a radius server, and successfully testing connection from the ACS to the AD, I get an error message " 12321 PEAP failed SSL/TLS handshake because the client rejected the ACS local-certificate" anytime a client tries to connect to the network.
This is surprising because I had already generated a certficate for the ACS from a CA and binded the CA signed certificate with the ACS, I also specified the CA in the client machine's wireless properties and checked the "validate certificate" button.
When I tried to connect using the internal identity store, the client was successfully authenticated without any certificate issues.
Cisco Firewall :: ASA5510 Credentials Are Invalid
Jan 4, 2012I am setting up a new ASA. Actually it's an old 5510, but this is a new temporary install until the one we ordered comes in. Everything is working except for SSH. I have SSH open on the inside and outside interfaces and I get a prompt when I try to SSH to it from either the inside or outside. But after I put in my username and password it tells me that my credentials are invalid. I am using a local username/password, not AAA and it accepts that username and password for the console. Console and telnet (password only) both work so I can get in to make changes. When I debug SSH, the error states that my username and password are incorrect. But this happens even when I create a new, simple username/password to test. I've even gone so far as to copy/paste the username and password into the login window just to be safe (making sure I don't copy spaces, etc). Below is a copy of the SSH Debug output followed by a sanitized copy of the config. I have AAA configured for remote VPN users, but not for access to the ASA. Also, this problem existed before I created the AAA settings for the VPN users. Also, I have zeroized and regenerated the RSA keys a couple of times to no avail. [code]
View 2 Replies View RelatedCisco WAN :: 877 / Setup A PPP Dialer To Present Empty Credentials?
Sep 7, 2011I am trying to copy a setup from a Nortel IAX100 where the carrier provides two ATM PVC's over ADSL - one for voice (VoIP) and one for data (IP). Relevant lines from the backup of the IAX's configuration include the following for the PPP authentication over the voice circuit:
<wan_8_32>
<entry1 vccId="1" conId="1" name="Voice" protocol="PPPOE" encap="LLC" firewall="enable" nat="enable" igmp="disable" vlanId="-1" service="enable" instanceId="1509949441"/>
</wan_8_32>
<pppsrv_8_32>
<ppp_conId1 userName="" password="" serviceName="" idleTimeout="0" ipExt="disable" auth="auto" useStaticIpAddr="0" localIpAddr="255.255.255.255" />
</pppsrv_8_32>
The null username and password for the PPP connection have me a bit stumped. Does the PPP connection not use any authenetication at all? (Is that possible/likely? How could I deubg it?) Or does does the IAX100 supply a chap/pap response with null credentails? (If so, how would I duplicate that using an instruction to a dialer interface?I am configuring an 877 with 12.4T and advanced IP services.
Cisco :: 1141 - Logging Onto Wireless With LDAP Credentials
Dec 18, 2011I have 2 Cisco 1141 aironets access points.
I've fallowed this tutorial: [URL]
I have an Ubuntu server running free radius authenticating against an LDAP server. Now I'm able to log into the AP via ssh with my LDAP credentials.
What I can't figure out is how do I setup the AP so when people connect to the AP's wireless they are prompted to use their LDAP credentials.
Cisco :: Upgrade From LMS 3.0.1 To 3.1 Or 3.2 - INVREP0102 / User Credentials Are Invalid
Feb 20, 2012How to upgrade from LMS 3.0 December 2007 update to LMS 3.1 or LMS 3.2. The problem is the large number of C2960S-24TS-L switches that my organization has and cannot managed them.. I tried to upgrade devices through Software Center but always Ciscoworks informs me with the following message."Error while downloading package information from [URL] for the selected products. See the log file for details". Also i can not run EOL/EOS inventory report. The message is " INVREP0102: Cisco.com user credentials are invalid. Enter correct credentials." I check my credentials and is right. The server has access to www through proxy without any restrictions. In the past I've already updated devices through the software center. Also in the past i ve run EOS/EOL inventory reports.The LMS 3.0 December 2007 has the following products LMS3.0.116 May 2008
CiscoWorks Common Services3.1.102 Jul 2009, 07:44:58 EEST2.Campus Manager5.0.511 Oct 2009, 07:36:10 EEST3.CiscoView6.1.702 Jul 2009, 07:45:05 EEST4.CiscoWorks Assistant1.0.102 Jul 2009, 07:45:05 EEST5.Device Fault Manager3.0.512 Jun 2010, 07:31:48 EEST6.Internetwork Performance Monitor4.0.102 Jul 2009, 07:45:11 EEST7.Integration Utility1.7.102 Jul 2009, 07:45:14 EEST8.LMS Portal1.0.102 Jul 2009, 07:45:16 EEST9.Resource Manager Essentials4.1.102 Jul 2009, 07:45:17 EEST
Cisco Wireless :: 4400 WCS Templates - Invalid Credentials
Nov 7, 2012i'm having some trouble pushing CLI templates to controllers in my lab. i get an invalid credentials error but it is random. sometimes i can push the template fine but 30 seconds later if i push the same template it will fail with error. several minutes later try it again and it fails. i have verified the credentials by reconfiguring them consistantly accrosss the devices but if the credentials were actually wrong it should fail every time, not intermittently. there are also 2 controllers i am testing this against and it is also random which controller fails. on the instances where i don't get the credential error my CLI template fully executes without error.
i am using WCS 7.0.230.0 on WIN2K and two 4400 controllers running 7.0.230.0.both controllers are configured with SNMPv3 and SSH. telnet and lower versions of SNMP are disabled.
Cisco Firewall :: ASA 5510 - Authentication Based On AD Credentials
Nov 13, 2011What i want to do is simple. Being able for any member of Administrators group to authenticate on our ASA5510 based on the AD credentials.
What is correct CISCO procedure for that?
Cisco :: 2100 WLC - Guest Access / Passing AD Credentials
Aug 31, 2011We have a building with 6 Cisco Airnet 1140 connected to a Cisco 2100 WLC, all tied into a nice Central Certificate server and a Win2008 NPS/Radius server on a Win2008 AD. Our trusted PC wireless access is fine, with domain laptops with certificates authenticating with DHCP all round the building. We use GP to apply settings to an AD integrated Proxy server for internet access.
The problem I now have is with guest access...
We are an education establishment, so students could turn up with anything from a laptop to an iPad to an Android phone, which immediately rules out using proxy PAC files to configure the proxy.
What I really want is a method of using the radius to verify the guest user against their existing AD user account, which I believe is possible. The one snag we have is in order to avoid the user having to configure the Internet proxy we would have to switch it to a transparent mode, which immediately restricts our ability to report on AD username, we would only have an IP address to report on, which is next to useless!
We've looked at a Gateway product (Astaro), which integrates the Filtering onto the Gateway, but the downside is that you have to use their APs, so we would be replicating existing work, whilst also managing two filters.
Cisco :: ACS 3.3 / Configure WLAN Authentication On WCS To Prompt Users About Credentials
Aug 28, 2012I'm trying to configure WLAN authentication on my WCS to prompt users about their credentials.I'm using a Windows 2008 NPS as Radius server but I can also use a Cisco ACS 3.3 if needed.With each setup I tried, the credentials are sent automatically to the Radius server using the Windows user session credentials.How can I force the WCS to ask for a username and password before sending them to the Radius Server ?
View 4 Replies View RelatedCisco Wireless :: WCS 7.0.172.0 - Adjusting The Guest Account Credentials Page
Jul 4, 2011To enable our receptionits to print a guest user ticket on a small A8 ticket printer I'm looking for a way to adjust the layout and formatting of the guest account credentials page.
I have searched through the javascript and css files but with no success.
We are using WCS 7.0.172.0
Cisco AAA/Identity/Nac :: Wp1430161 Downloadable ACL Dependent On User Credentials?
May 7, 2012I have been reading article url....wp1430161 and I am trying to get my head around the type of port authentication Methods & Modes I am going to require for a Proof of Concept using a Cisco ISE as the Authentication Server.
The switchport will have a single IP Phone in a Voice VLAN and then a Single host in a Data VLAN. Reading this article, I think I should be configuring "802.1x" authentication method using "Single Host" Mode.
However will that support a Downloadable ACL dependent on the user credentials? And will it allow a restricted ACL to be downloaded if authentication of the Machine or the User fails.? I dont really want to create & manage Guest & Remediation VLANs with thier respective ACLs on every switch in my enterprise, including our remote branch offices.
User Can't Login Into Domain With Right Credentials In Active Directory
Feb 19, 2013user can't login into domain with right credentials in active directory
View 6 Replies View RelatedCisco AAA/Identity/Nac :: ACS5 / One User / Two Credentials (external Token Versus Cert)
Nov 30, 2011I have ACS4 and i am planning to upgrade to ACS5.I would like to have such a rules:I have user1, one ASA device which is VPN concentrator for remote users.ASA have two different tunnel-groups: one which allow for logging via certificate (with mandatory pki authorization thru ACS) with disabled Xauth,and second tunnel-group with allow login thru typical Xauth with authorization thru ACS which users external database (RSA Tokens).So i have one user1 which can login thru VPN using RSA tokencode or certificate.For example: on phone user1 uses certificate, and on PC station the same user1 uses token password.For tunnel-group with pki authorization ASA checks username in ACS and in typical scenario login="CN from certificate" and password="CN from certificate". So we would need "two credentials" for the user - one for pki authorization, and second one external database (RSA token).Is such scenatio possible under ACS 5 ? where one user uses different credentials based on tunnel-group usage ?
View 2 Replies View RelatedCisco Wireless :: Does WLC 5508 Has Capability To Create Login Credentials With Specific Time Of Validity
Jul 18, 2011Does WLC 5508 has capability to create login credentials with specific time of validity? Could it be used in hotel set-up to provide prepaid access account to guest?
View 2 Replies View RelatedCisco Firewall :: 5510 Giving Credentials / Username And Password In Web Page / Page Is Not Responding
May 8, 2012I have ASA 5510 with CSC-SSM-10 .ASA 5510 IOS version- 8.4.2 and CSC-SSM-10 IOS version 6.6.1162.Web filtering is working fine with respective to my configuration.From yesterday morning, i was facing issue with the sites like gmail, webmail.After giving credentials like username and password in the web page, the page is not resonding.In troubleshooting process, i removed all the acls, class maps which will direct all the traffic towards the CSC. In this scenario all my mail service sites are opening.If we apply the these ACLs and Class-Maps, only my mail service sites only affecting.
View 1 Replies View RelatedLinksys Wireless Router :: WRT120N - Can't Accept Login Credentials When Login From IE10 Browser
May 9, 2013We have a Linksys WRT120N wireless router set up at one of our small offices. I noticed recently when trying to log in to the router to make some admin configurations that it will not accept the login credentials when trying to log in from IE10 browser. Works fine from Chrome, IE9, ect. logging in to a linksys router with IE10?
View 3 Replies View RelatedCisco :: LMS 3.2 Failed To Start Acquisition / Device Unreachable / Enter A Valid Device
Jan 3, 2013We are using LMS 3.2.1 with SP1 and Campus Manager 5.2.2.Server runs Windows 2003 R2.Everything runs fine except for User Tracking on two Catalyst 6500 switches running CatOS. These devices are discovered, reachable, SNMP works fine, neighbors seen. But when we try to launch acquisition, the UT utility complains with this error message:"Failed to start acquisition: Device unreachable. Please enter a valid device."When we wanted to add ports via Device Trap Configuration, LMS has fired a different error message: "There are no ports to configure for the selected device(s).Check whether you have selected any router(s)." I have checked the portsData.xml file, which doesn't have any ports included for the two devices: [code] We have tried to exclude / include the switches in the data collection, but that didn't work.
View 3 Replies View RelatedLinksys Wired Router :: BEFSR81 / Add Device Names To DHCP Device Table?
Nov 30, 2011My BEFSR81 is my primary router and has DHCP turned on. The router's DHCP range is set to accommodate 12 devices. I have three computers wired to it and their Host names (as specified in the set-up of each computer) show up in the router's DHCP device table. I also have two printers (one old Brother HL5250DN laser printer and one new HP Photosmart Premier C410a inkjet printer) connected and there are blanks where the Host name should go. I would like to be able to tell which printer is which when I am looking at the DHCP device table. How can I get a names associated with each printer's IP address in the router's DHCP device table? (The real problem is that the router seems to have both printers at the same IP address (192.168.1.100) and if I can get one of them to change I'd like to know which one it was!)
View 1 Replies View RelatedGPS Tracking Device / Gps Device Without Screen Or Applications?
Feb 11, 2013The problem: I need to track a bus from city to city in real time.I'm thinking of a gps device without screen or apps, it only sends the current location to a server. Is this possible? What device can be useful?
View 1 Replies View RelatedCisco :: ASA 8.4(1) Changing Inside To Outside IP
Mar 10, 2011My exchange server should have an outside interface ending in .82 which is one of public IP's assigned to it.Inside 192.168.168.250 -> Outside x.x.x.82 How can I configure this in ASA 8.4(1)?
View 3 Replies View RelatedChanging From Dialup To DSL?
Jul 29, 2011I've finally gotten tired of Netzero Dialup and want to change to dsl from U Verse. That brings up some questions. Do I cancel Netzero when I start U Verse or do I need Netzero to make it work? If I have to cancel Netzero can I transfer my favorites over to dsl? How difficult is it to set up dsl? Does the box come by UPS of Fed Ex?
View 6 Replies View RelatedChanging From WEP To WPA Now No Internet
Apr 23, 2011I tried changing the WEP to WPA because I recently found out our neighbors were stealing internet from us. However after doing all this changing around I used 192.168... And all that and was able to change the ssid and the passphrase but after doing so the Internet stopped working. We are able to connect but it says there's no service or limited connectivity so no web pages or anything loads. Now I can't get back to the router page by typing that 192.168. stuff because there's no Internet. Don't know what to do. This is my fathers ISP and it's not the greatest considering the location. I've tried unplugging the router and whatnot but that's not working either. I think we need to get back on the router page and fix something but it's not allowing us to since there's no Internet. Am I going to have to change back to a WEP.. I dont really want too. The router may need to be upgraded too because it's pretty ancient.
View 4 Replies View RelatedNo Internet After Changing WAP To WAN
Feb 7, 2012A router restart. I changed the wpa to wen so I could connect my ds to wifi.So far what I have done was restart the modem, it's a Cisco wag120n. This is a wireless so the moment I changed to wen, I lost connection. I then used a cable to connect to the modem and managed to change the settings in the router page 192.168.1.1 back to wpa but with no success connecting to the Internet. I then tried ressetting the modem and computer with no luck. I cut the power to the modem router and turned off computer for 5 minutes. I then turned the modem back til it was stable and then the computer, again with no luck. I then factory reset via the button manually and via the modem page but both ended up with the unable to connect to primary DNS server.
View 6 Replies View RelatedCisco :: Changing ARP Timer From Its Default Value
Jul 19, 2011how to change the ARP timer in CISCO. I know how to change th mac-address aging timer, but can't seem to find any documents on how to change the ARP timer from 4 hours.
View 2 Replies View RelatedCisco VPN :: Changing The Server IP In A ASA 5505?
Sep 28, 2012I know know nothing about cisco devices. Just wanted to get that out there. I recently came to a job that has a 5505 setup as the network gateway, and as a vpn for employees to work from home via the Cisco VPN remote client program. We had one main server that was domain controller, dns, and dhcp. It was a old 03 box, and I setup a new 08 r2 box on a different IP, and migrated all the above functions to it. Old server was a xxx.xxx.xxx.31, new server xxx.xxx.xxx.6. I found the java ASDM program(6.1) and connected to the ASA, and I have changed .31 to .6 in as many places as I can find, however, vpn clients on the outside can no longer connect to their desktops, as when i open a command prompt on their computer, the only IP they can ping is xxx.xxx.xxx.31, pinging xxx.xxx.xxx.6, or any other address fails. I'm guessing maybe it's in the firewall of the asa, but have no ideal really. Was there anything else I was suppose to do? Someplace I overlooked?
View 7 Replies View RelatedCisco :: Changing Password On WLC-2100?
Aug 31, 2011I am currently running WLC - 2100 with software version : 7.0.98.0
My question is :
How to change the existing password ( not reset ) but change the password with the web interface ?
If that cant be done, then my guess is I have to do it via telnet/ssh session
Cisco WAN :: Asr 1002 Changing A Route Map
Oct 23, 2012I have route-map defined on my ASR 1002 12.2(33)XNE and applied to my gi0/0/1 interface. I need to change the IP address defined on the "set ip next-hop ..." line. My question is, when I make the change in just the route-map definition, does the change take effect immediately, or do I need to remove and re-apply the "ip policy route-map ..." statement on the interface? If I do have to remove and re-apply, will this be service-affecting for all the traffic flowing through the interface? I'm just not sure what to expect.
View 2 Replies View RelatedCisco VPN :: Changing Peer IP On ASA 5520?
Jun 10, 2013I have a few site-to-site VPNs connecting to my ASA 5520, but one of the remote VPNs is changing it's public IP, how can I change this IP on the ASA without starting again? On the ADSM it is greyed out so I can't edit it, but can I just change it in the CLI?
View 2 Replies View RelatedCisco AAA/Identity/Nac :: ACS 4.2 Changing IP Address
Apr 6, 2013I need to change the IP address of existing primary cisco ACS 4.2 (windows based). What is the required procedure to change the IP address?
View 4 Replies View RelatedCisco WAN :: 1603 Changing State To F5
May 5, 2011I want to configure an access RNIS with a router Cisco 1603.When I plug a cable in interface ISDN BRI with the command "ALL DEBUG EVENTS" start, I have this message : "BRI0 : changing state to F5", and after nothing. How the interface BRI 0 can arrive to State F7?
View 2 Replies View Related
