Does the MIR feature on the MSE 3350 requires the Context-Aware Service to work? I read that the system uses location, signal strength and coverage data in conjunction with monitor mode APs at each exit to trigger the roam. I just don't know if MIR does this on it's own or needs to get location from Context-Aware service.
View 2 RepliesI would like to know does MSE 3350 supports HA mode,I have 2 M|SE 3350 appliance and I want to configure one as primary and second as redundent for the primary,I am not finding any documentation for the same in the cisco website.
View 2 Replies View RelatedI am getting a hard time in order to understand the real difference between the two types of context aware licenses for the MSE:
1 . AIR-CAS-1KC-K9 - Context Aware License For 1K Clients and Tags (RSSI based)
2. AIR-CAS-1KT-K9 - Context Aware License For 1K Tags(RSSI, Chokeponts and TDOA)
For a regular network without any devices with tags such as RFID, I understand I do not need to get the .2, only .1, even though the .1 also is shared with clients at 1K of each. Also, the .2 does not say clients, only tags and advanced features as TDOA. Going through the Q&A it does not clearly says the difference, when to use one or the other.
I have access to free wireless service but it requires a security key? How do I get this key?
View 3 Replies View Relatedwhat´s going on with an asa540 configure in multiple-context mode. I Have a cacti server on my lan and now I´m try to monitoring the interface with snmp. When I try to get this information returns the error message:
CISCOASA/CONTEXTA#
JUN 11 2013 01:52:00: %ASA-1-1-6021: Deny UDP reverse path check from 10.6.6.6 to IP_SRV_CACTI on interface inside
JUN 11 2013 01:52:01: %ASA-1-1-6021: Deny UDP reverve path check from 10.6.6.6 to IP_SRV_CACTI on interface inside
If I try to ping returns the same error:
CISCOASA/CONTEXTA#
JUN 11 2013 01:56:09: %ASA-1-1-6021: Deny icmp reverse path check from 10.6.6.6 to IP_SRV_CACTI on interface inside
Following attached the conf of my asa My question is Why I can´t ping or even use snmp ?
I have a dual 5508 controller /NCS deployment. I deployed my first clean air AP today, a 3502I.
The Clean Air feature does not seem to work, however. "No information is available because CleanAir is disabled or otherwise not available for this radio. If no information is available and CleanAir is enabled then you can try rebooting the AP XXXX".The thing is that CleanAir is enabled on this AP.
Cisco Router 2851 connected with one ISP using 2 serials. the case is :
1)s0/0/1.1 is the only utilized and s0/0/0.1 utilization is zero. 2)when shutting down s0/0/1.1 : the other ,not utalized, link work perfect and forward all the traffic.
Attached the configuration file with output of show interfaces command.
Is it possible to use 1 or 2 of the 4 gigabit ethernet ports from one ACE straight into the other ACE for redundancy? So ACE_01 gig0/4 to ACE_02 gig0/4.If so, is it a case of just having the layer 3 config instead of trunking etc..Also - is it possible to create a context within the same vlan as the Admin context?
View 4 Replies View RelatedOn my production environment I have a firewall with already two contexts defined (15% of CPU used) and I want to add a new one.
This context is going to use the same interfaces as the others contexts. When I will enable the context, can I have some sort of repercussion on these two context ?
I have two ASA 5510 in an Active/Active failover configuration; On the first ASA I have a license for five security contexts, on the second one I have the default two. On the pair I configured seven security contexts and everything works as expected; so far so good. Let's suppose now that the first ASA (the one with the license for 5 contexts) goes up in smoke; all the contexts migrate to the surviving firewall and life is still good. But what happens if, for some reason, I need to reboot the second ASA before the first one is repaired? My guess is that it will come up with just its own license for two contexts and that I will not be able to operate all my virtual firewalls.
View 2 Replies View RelatedSo just recently my Internet has been running a lot slower than normal at different times of the day (completely random, could be fine for hours then just turns slow). I know it's not the Internet itself, since it's only happening on my computer, and none others in the house - and I'm far from capped. I've run AVG, Spybot & Malwarebytes' scans and have found no infections of any kind. I've run TCP Optimizer and used the "reset to windows default settings" feature, which also hasn't worked one bit. I've tried different Ethernet cables and different plugs in the modem and no improvement.
View 8 Replies View RelatedI was searching a lot , but I couldn't find any good example, how to configure DHCP server for our wireless clients on Cisco Autonomous AP. I'm looking for example how to configure Dot 11 radios and BVI interfaces.
I have no problem to configure DHCP server on BVI 1 and VLAN 1 ( native VLAN ) interfaces, but there is a problem with other BVI's and VLANs. Maybe this feature isn't supported? Maybe DHCP server feature is supported to work just with default BVI and native VLAN?
I just want to know if FTP service can be done without internet? I want to setup my file transfer locally just w/n the campus.. All resources will be centralized in one server..
View 4 Replies View RelatedI have an issue about ACS v5.3 Appliance.I have an ACS v 5.3 wo authenticate wireless users, together with a cisco wlc. One profile is to corporate users and the second profile is to guest.
The corporate users should authenticate with Active Directory and the guest with WLC. Guest users should authenticate with the ACS Local Database. I have configurate two service selection policy that match with protocol Radius. The first rule is to users of Active Directory and the second is to users in
the Local Database of ACS.When i try to authenticate users with active directory is OK, but when try to authenticate users with Local Database (Guest Portal) the ACS try to find the
the internal user in the Active Directory, because math the first rule, and the second profile can not authenticate.When I change the order, first the Rule of internal users and second the rule of users of Active Directory, the internal users can authenticate in to ACS, but
the users in the Active Directory can not authenticate.I think my ACS only authenticate the first rule of radius to Active Directory, no two rules of radius in the same time. Or maybe exists an issue in OS of the ACS.The authentication by separately is OK.
I have just changed my ISP and received a Thomson TG712 Modem, router and VoIP Gateway. Nice device, but I would like to extend my wi-fi network and connect a couple of PCs to another router in a different area using an almost new Linksys E4200 as a second router.I have already wired a network cable from the TG712 to the location where the E4200 is, tested the connection using a laptop, but cannot configure the E4200 to work receiving Internet service from the TG712.
View 2 Replies View RelatedI am trying to set up a custom service on my netgear configuration page. I have a netgear router model# Wnr834m. every time i click the "add custom service" button the page redirects to "system authentication failed" and logs me out. What can i do to set up the new port?
View 1 Replies View RelatedI have a scenario where I may have to run VRFs on a router that is currently facing an ISP as a BGP peer. peering two BGP peers, one of which is VRF aware (and hence configured within the address-family ipv4 vrf X subsection) and the other is not? (the BGP aware and internet facing segment will go into its own VRF where previously this router was only in that VRF and hence had no awareness).Are there any caveats or restrictions? Does the presence of the VRF throw the ISP peer?
View 3 Replies View RelatedAre the RV042 and RV082 routers SIP AWARE?I haven't had any luck finding documentation stating such.
View 2 Replies View RelatedI need to upgrade my location appliance. I am currently running a 2710, WCS version 6.0.196.0 and 21 4402 controllers on 6.0.182.0. There are 11 sites spread accross Canada and the Northern US. There are going to be a minimum of 4 more this year. The majority of my sites are outdoors and use 1522's. I have some indoor sites on 1242's, the biggest being an office building with 32 radios.The problem I have is I've hit the limit on clients that can be tracked on the 2710. For the record, I don't run rogue detection on all radios. I spread it out so that I don't get too many overlaps. I am looking at moving to the 3350 but see that the WIPS software does not include 1522's. Does that mean I lose my ability to detect disassociation floods etc if I go to the new platform? Or, does the context aware software still provide some notification.
View 5 Replies View RelatedAny info on performing this upgrade. The release notes that I have looked over make it sound like if I want to do the data migration that I must first upgrade the MSE to version 7.0.201.204 and then go to 7.0.220.0. This is only what I have come up with, this isn't clearly stated from what I have read. How to performe this upgrade with the data migration?
[URL]
Does Cisco MSE 3350 comes with two NICs. I want to configure them as a team bound to one IP address and send each to a separate 6509 switchport all in the name of redundancy and failover.
View 2 Replies View RelatedI installed Ad-Aware Pro 30 day trial. I enabled safe browsing but it doesn't allow me to open some websites. Ok, perhaps thats the point of safe-browsing but I need to enter those sites. So, I decided to disable it, but I don't know how. I clicked "off" on Ad-Aware's "Home" window, but the sites still not working. Theres a possibility that the websites I'm trying to enter are not going to work after I disable safe-browsing because there's something wrong with internet(I'll open another topic for that). But still, I'd like to see Firefox's "cannot found" window, not Ad-Aware's.
View 9 Replies View Relatedwe have installed the MSE 3350 with the lates Context Aware Sup Service from AeroscoutBut the Service still terminated because of unexpected null node message (see below)
View 7 Replies View RelatedI had upgraded the MSE to 7.0.202. Release code. The Upgrade along with the 4 database zips went smooth.But the MSE status shows following
View 2 Replies View RelatedI have a Cisco SG200 26 Port Switch, 2 Cisco WAP4410N Access points, and a VLAN aware Router. I have created 4 VLAN's. For the sake of this conversation lets call them.
98 - Intel Vpro
99 - Management
100 - General
101 - Guest
The Access points are capable of doing V LAN tagging so I plan on having them tag a guest network as V LAN 101. That can get sent to the V LAN aware router and out. No problem. I have some devices, or management pages that I don't want accessible from the general network. (Intel V pro KVM, Remote Management Cards, AP Config Menus, Switch config menu...) . I need to be able to take a V LAN unaware device, plug it into port 1, and have it communicate with V LAN 98, 99 and 100.
Is it possible for end user to repalce the System Battary with new on, The Server is 4 Years old.
View 1 Replies View RelatedI work at a hospital and one of our department uses specialized software created by Varian Medical Systems. It has been brought to my attention that one of those applications has trouble opening during the day. I had the users demonstrate the issue and from what they explained to they are supposed to be able to open the application, log in, and be presented with a list of radiology images to choose from. Unfortunately, during the day this fails often and they have to try 3 or 4 times before it actually works. It behaves differently after 4 pm, and seems to work after the 1st or 2nd time at that time of the day. According to what I've been told this has been an issue as long as they can remember.
Varian has told me that they have done a number of things on their side to rule out their software and they think it is a network issue. We used Solar winds Engineer's Tool set (specifically the Network Performance Monitor) to monitor their switch and it is reporting no errors and the utilization graphs show that the ports involved have very little utilization. The most heavily utilized port is hovering between 10 and 5 person (Fa0/40). I've included a network diagram, but basically we have 1 10/100 Cisco 3350 switch (c3550-ipservices-mz.122-25.SEB4.bin), 4 clients, and 2 servers involved. They all are connected to the same switch at A-Full/A-100mbps. Although the Network Performance Monitor doesn't show any errors or over utilizaton of the ports in the the CLI I do see 35 output buffer failures and 35 under runs on the port connected to one of the servers (Fa0/40). They were a little higher and I cleared them about two weeks ago and then rebooted the switch, because I found that it could alleviate these types of errors.
They say the software use ports 5000, 55000, 55010, and 55020. We tried a packet capture, but I didn't have enough experience/knowledge to get anything useful out of it. I also checked the event logs on the clients and servers and nothing there indicates a issue in the software. They want us to replace the switch with a gigabit switch, but we have a REALLY limited budget and I would rather not if it isn't necessary. What I could try in order to rule out the network?
I have a dell vostro 3350. I use it with both Windows and Linux OS (Mint, Ubuntu).
Recently I faced an issue with my motherboard (I guess it was a matter of short-circuit) so I called the Dell assistance and they quickly came out and substitute my motherboard. After that intervention, my wi-fi and figerprint reading stopped working at all. So I called again Delle assistance and they substituted both the wi-fi and the fingerprint reader. Everything seemed to work fine... since my PC went in hibernate mode.
In fact now the wi-fi card is disabled (not even seen by the OS) after the PC goes in sleep/hibernate mode or even if it is turned off and than on again. I need to turn off and on the PC at least one more time the PC in order to make the wi-fi card found (and working) again.
I checked with all the three OS I have in my PC so I guess the issue isn't related to the drivers. On the other hand, it looks like the wi-fi works totally fine... when it works. It is quite a systematic effect and not related to bumps or mechanical sullicitations, so I guess it is not a matter of wrongly-connected card either..
I'm working for KOREA TELECOM, and currently providing MPLS VPN.We're planning to provide our customer with traffic report using NetFlow..
I read some documents which reads Netflow ver.9 can be enabled on Cisco GSR 12000 Series, but no mention about catalyst switches. Netflow ver 9 can be activated on catalyst 6500 series.. because the point where switch is located already have mpls encapsulated packet ( mpls vpn packet).
When I create a service object or group and add the object to a new rule it never works.I mean the traffic match not the rule. I see not hits.I placed the rule on top of my access list to check if I do somethink wrong but it is not working. When I place only a service for example tcp/23 it is working.
my ip service object
object-group service g-as400 description access client 2 as400 machine service-object tcp-udp destination eq 397 service-object tcp destination eq 137 service-object tcp destination eq 2001 service-object tcp destination eq 3000 service-object tcp destination eq 445 service-object tcp destination range 446 447 service-object tcp destination eq 449 service-object tcp destination eq 5010 service-object tcp destination eq 5544 service-object tcp destination eq 5555 service-object tcp destination range 8470 8476 service-object tcp destination eq 8480 service-object tcp destination eq
[code]...
We have a situation where services are stopped on the real servers. The probes fail and we confirm the services are not running on the server. We cannot access the ports from the ACE directly. We can still however acces the VIP on the TCP port (L4 VIP class-map). So we can still telnet to the VIP on the port from thr Client side of the network.This is on ACE 20 Modules deployed in Routed mode. The version of software is A2(3.3).
Tried removing multi-match and loadbalance policies as well as class-map and re-applying then re-appyling the service policy to interface. Same behavior,This is a problem at another level as some services are being monitored by GSS via TCP keep-Alive and this obviuosly causes a problem as the service then never goes off-line.
I have a fresh installation of LMS 4.0 on windows server 2003, when i click to open topology i get error message : ANIServer service may be down or Host name isn't DNS resolvable
i tried pdshow -brief ANIServer ===> service UP
DNS is working using host file in driversetc i restarted the server
restared the crmdmgtd
unistall / install java plugin
pdterm ANIServer
pdexec ANIServer
NO change ..
I have site with two links, one for internet traffic and one for voice, they have seperate public IP ranges. There is an existing site to site VPN between the site and a datacentre. The site device is a 2801 with a WIC-4ESW and the datacentre is an ASA 5510. The internet link is heavily contended and due to certain priority users complaining about the pseed of their connection, we decided to route these users over the voice link, and I did this using PBR. I created an SVI on the router and used one of the ports on the 4ESW to connect to the voice router.
I wanted to also create another site to site with a peer address on the voice link, so I configured a VRF, put the SVI into that VRF and created a static default route for the VRF. I set the VRF for a subnet of the existing LAN using PBR and I created a keychain for the VRF, set up an isakmp profile for that VRF and created the crypto map.
The site to site won't come up, and debugs are showing some weird stuff in the Proxy ID's and indicate that there is no crypto map exists for the interface.
I wish I could use VTI, but due tio the ASA at the remote end, I can't.The configs and debugs are below.
ip vrf VOICE_ROUTER
description **VRF for VPN PBR and QoS for Finance Users**
crypto keyring VPN2MH vrf VOICE_ROUTER
pre-shared-key address 2.2.2.2 key *********
[code]....