I have just installed LMS 4.1 on a Win2008serverR2. Getting started and discovery are OK. Then I tried to configure all parameters under the Admin Menu. I have a problem with SWIM : the "repository" directory does not exist ! I also tried to import an IOS file into the repository : no way.
View 3 RepliesI'm using a CISCO1921/K9 with IOS 15.1(3)T1 and licensed fetaures ipbasek9, securityk9, datak9, SSL_VPN. After a working setup of webvpn I'm running in troubles after a reload - of course, the running-config is copied before reload ; )
This config line: webvpn install svc usbflash0:/webvpn/anyconnect-win-2.5.3055-k9.pkg sequence 1
is missing after a reload. Consequence: the "Anyconnect Client" refuses to connect. What can be the reason? Is it the sequence "1" - I only have one sequence and not more of them? I use this CLI input
webvpn install svc flash:/anyconnect-win-2.5.3055-k9.pkg sequence 1
to install - the line above appears in the running-config output - is this the right way?
Icon missing from network connections after fresh install
View 1 Replies View RelatedI did a re-install of my operating system the other day and im sure i messed up something because i deleted the whole parameter first or whatever its called then reinstalled with the CD that came with my laptop. this is an older model 5160 Inspiron Pentium 4.Everything seems to be working fine except that there is no wireless connection icon or anything of the kind now. I have looked and looked and the only icons to connect with are the local area connection - no wifi connect.
View 2 Replies View RelatedI am using a win server 2008 in my company, recently my staff have being using internet a lot for downloading and many other unnecessary software therby redusing overall bandwidth.Is there any software solution i can use for controlling bandwidth of my client computer from server2008 computer.
View 3 Replies View RelatedI have a customer that wants to restrict SSIDs that groups get based on their AD credentials. Currently, he is using Windows 2008 Radius Server and AD with Cisco 5508 WLCs. I found examples that shows this is possible but my question is if I have 2 user groups (teachers and students) in AD and apply a policy for the Radius to send SSID x to teachers and SSID y to students. Upon successfully authentication, would this deny teachers access to SSID y and students access to SSID x?
View 10 Replies View RelatedThis is a new install of LMS 4.2 evaluation. I have a current install of LMS 3.2 which is working. When I run an Add job for our core 6509 in Software Repository using cisco.com on the 3.2 LMS it works normally. When I attempt the same job in LMS 4.2 for the same device the device is not selectable in the left hand window and it has a message that says (This operation requires Containment data in Inventory. Either this is unavailable) Or (Add Image from CCO not supported). Also and probably related is that LMS 4.2 cannot complete an inventory update on the 6509s that we have and does not say why the inventory job collection failed. So far as I can tell the other devices inventory and offer IOS updates correctly. I ran a job to get all device package updates before I ran any of the jobs. The devices all pass credential checks except for HTTP, which is not activated on the devices.
View 4 Replies View RelatedI have a problem with LMS s/w backup procedure. It outputs the following error: SWIM0036: Could not add this image to software repository.
View 8 Replies View RelatedRecently we upgraded a switch with an image from the repository in LMS. After the installation of the image it seemed corrupt.
My question now is : Can we do a MD5 checksum on all the images in the local repository to verify that all images are ok to use?
I have two ACS1152 appliances running as a redundant pair. I notices that secondary box keeps losing its repository information in the config.
View 2 Replies View RelatedI have a case for an LMS 4.0 running in a Live environement (With devices already discovered and organized into seperate groups), where the Device Credential and repository DCR is showing suddenly as empty and only i can see the groups listed, but without any devices in them (Through Inventory > Device Administration > Add/Import/Manage Devices).After a restart of the whole LMS server a few weeks ago, the problem was fixed and the devices appeared again, but now the same issue re-appeared.
View 5 Replies View RelatedHaving problems configuring an SR520 to support SSL VPN with Active Directory authentication. I set up the domain and a user in the SR520. and get the login prompt remotely but when attempting to login using the active directory account i get a login error. I can login fine using local authentication.
View 5 Replies View RelatedI have installed ACS 5.2 and configured it to join the Company's Domain as an External database with Active directory 2008. I'm facing a problem that the user once authenticated using it's active directory account it's cached in the ACS and take a while for the ACS to clear this username. For example, if user TEST authenticates and then we removed this user from the AD and then tried again; it authenticates although this users is removed from the AD !!! same thing happens when we change the user group on the AD, it takes a while for the ACS to clear the old user attributes and get the new ones from the AD.
it there an aging time for this caching mechanism, or can i clear the dynamic users manually just like in ACS 4.X ?
I have cisco's CUCM version System version: 7.1.5.10000-12 when I do a corporate lookup (form my 7970 I hit Directories - 5) Corporate Directory) I see all sort of accounts that have no phone extensions I.E. our windows service accounts, our administrator accounts that have no number associated with them. is there a way for me to hide them?
View 1 Replies View RelatedI am not sure why but when I try to connect with my IPSEC VPN client, authentications are failing. The ldap test passes on the ASA but when I try to login, the VPN client gives me authentication failure even though debugs show authentication was successful.User 'test1' should be able to authenticate based on group membership.User 'test2' shouldn't be able to.I already removed the attribute-map to see if that was the problem but I am still failing authentication.
View 9 Replies View RelatedI am receiving a RADIUS authentication failure stating user must change password; however, password has been changed in AD and is not requiring change password any longer on the AD side.
Is there a cache on the ACS that needs to be cleared? AD connection from ACS to domain is fine. All other accounts authenticate.
It appears that if a user lets their account expire is when this happens. Account has been reenabled in AD and password has been changed. Still will not authenticate via ACS.
I'm attempting to integrate an acs 5v into the domain through the gui. The connection will establish, and the status will read 'connected', just as it lists the domain I've submitted. However, I can't seem to find anything listed under the directory groups, and when I run a connection test, I simply get 'Global Catalogue port status error.' Eventually, I'd like to configure this as a radius server.
View 1 Replies View Relatedquestion 1. in the typical active directory environment and doing wireless/wired 802.1x authentication on endpoints, should ACS join as a domain computer?
question 2. for the endpoint (domain computer) join the domain, in this case is the endpoint will trust the ACS ( also domain computer) ?
question 3. what if there's a GPO policy to install the rootCA certificate toward the endpoints. In this case, ACS should issue the CSR and let the domain CA to signed as the identity certificate? Am i correct?
I am working with ACS 5.2 and using Radius authentication for vpn client.
The authentication method used is Active Directory in an Windows enviroment with multiple domains in the same forest.
My problem occurs when i change a user from one group to another in Active Directory. After that i receive the following message when try to connect:
15039 Selected Authorization Profile is DenyAccess
The message is because match the default policy. Another user in the same AD group works fine. All domain in the forest have trust relation each other. I am using universal groups to include users from all domain belongs this forest.
I recently bought a Cisco WLC 2500. I want to configure a WLAN with Active directory authentication.How I can do this?
View 4 Replies View Relatedi need a documentation or a procedure to how make integration LMS 3.2 with microsoft active directory to make usernames of devices appear in end hosts reports.
View 2 Replies View RelatedA customer uses Active Directory where some group names contain special characters (ç ~ '^). The Cisco ACS 5.2 is presenting the warnings: "Not all Active Directory user groups are retrieved successfully. One or more of thegroup's canonical name was not retrieved "(Category CSC Oacs_ Identity_ Stores_Diagnostics; code 24457).
What are the results of these warnings to the customer's network? Slow? Loss of access?
configure the Cisco ACS to authenticate the users from MS Active Directory. Cisco Acs = 4.2.1(15)Currently, i have multiple users configured as local databse. but now i want to authenticate with the domain users.
View 11 Replies View RelatedI have an ACS 5.1 and am trying to integrate with windows 2008 R1. The ACS has a valid AD account and indicates that its connected but when I try to list any directory groups my windows IE browser hangs?
View 2 Replies View RelatedI have installed 4 unit Cisco Aironet 1250 acting as Autonomous AP each. I want to integrate these AP to Windows Active Directory for authentication level.
When I read configuration guide on Cisco Aironet, they must be authenticated via RADIUS server.
Is it possible that these AP directly authenticated to Active Directory via LDAP protocol?
I am trying to set up a small domain for my business. I just purchased a Windows 2008 server and would like to use it as my domain controller.Also, I just had a new ATT DSL line put in. It came with a 2Wire modem/4-port router/wireless router device, therefore the modem can handle DHCP. The line has a static IP address as well so that I can eventually use my own exchange server and web server.I have tried 2 different configurations and couldn't get either to work) I tried to put the router into Bridged Mode and use DHCP server on my server using a PPPoe connection to connect to the Internet. I was confused as to what my static IP address and default gateway of my server should be.2) Then I tried to turn DHCP server off on the server and routing back on the modem/router. This didn't work either.What method would you recommend and why? Also I have some additional questions on each method.
Method 1)
* What is the static IP address of the server. Is it in the 192.168.1.x address or the static IP assigned to my account?
* Do I need a second Nic Card And Router to connect to the rest of my network or can I use the router provide
* What would the Static IP addresses of the additional PC be. Do I need more than 1 static IP from AT&T Method 2)
* Will this allow me to use all internal IP addresses on my machines and use port forwarding if I want a specific box to be a web server or exchange server.
I know that when you create a user account in active directory, the user's computer is also added to active directory. However, in what circumstance would you add a computer to active directory in which there are no user accounts created, or used ?For instance, my Linksys wrt54g router, on the main configuration tab has a space to name the router, which is appropriate called, "Linksys", and it has space to enter it's domain name, which if I named it, I guess it would be. LinksysRouter.**.local.Why add a router to an active directory domain ?Why add any other computer to an active directory domain with no users associated with it ?
View 11 Replies View RelatedNETWORK CONNECTION PROBLEMPOPUP ERROR states"\<name> is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. Access denied."When trying to View the two PCs through My Network Places> View workgroup Computers in MSHOME?I was able to map the shared folder manually.
View 1 Replies View RelatedI have 1 server where i enabled dhcp server and active directory on it . I still have to install something like ISA server on it as isa doesnt support 2008 r2. point me out on the networking , like how should i connect the clients to the server. And how the wireless router and switch should be connected to the server?
View 1 Replies View RelatedI've got a fully working active directory with mandatory profiles. I'm looking into adding MS Office 2007. I have the disk and everything, but I'm wondering how to go about installing it. Must I go around each workstation installing it?
View 1 Replies View RelatedI've got this problem with our Operations Manager's laptop not letting him log in once he is offsite(at home). We use an Active Directory server here for all out workstations to log on to the domain but once he is offsite he cannot log in because the laptop obviously cannot find the sever to authorize the user. For now I just have him logging in locally to his laptop and not to the domain when he is offsite but this creates a problem; it makes two users/desktops for him, one user.domain and user.local. Is there a way to tell the machine locally that his username is authorized to let him log onto the domain account though it cannot connect to the domain server?
View 3 Replies View RelatedI have been rolling out new IP Phones that use extension mobility and the biggest issue Im finding is the need to log-in every day, People t like change and they hate the fact that they have to login every day.I have been to the people at the top and gave them the options of remembering the last user logged so users just need to enter their pin or have EM not log users out at all… both got rejected.
View 2 Replies View RelatedI have a 5515 ASA that has the webVPN configured on it and it is using active directory to authenticate. The client would like to set up groups in active directory and restrict access to those groups when they are connected to the webVPN. For example, they have a group in active directory that they only want to access their "web" interface. What is the best way to configure this on the asa?
View 2 Replies View Related