I wonder if there is a way to rename an existing SSID on aironet 1142 without destroying/recreating. I tried downloading configuration/ changing name/ re-uploading however that didn't have desired effect. There doesn't seem to be a way via web-GUI.
View 3 Replies
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
LAB1#sh runBuilding configuration...
Current configuration : 2321 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname LAB1!logging rate-limit console 9enable secret 5 $1$9EWD$kxrbg8KxikRFypOieKiZh/!aaa new-model!!
[Code]....
how can we rename an existing username on ACS 4.2 Application.I don't want to rename the group just the username.
View 3 Replies View RelatedIs it possible to rename an existing VDC on Nexus7000 without deleting it and creating it again with the new name ?
View 2 Replies View Relatedhow do I rename my ssid on belkin n600 db. it did not come with a cd rom and all the online manuals do not discuss it.
View 1 Replies View RelatedI'm running a wpa2-secured guest ssid on a particular vlan that allows traffic to the web but restricts any access to internal network resources. It had been working fine for a couple of weeks, until the network started intermittenly dropping - at first I tried swapping channels and rebooting, but there has been no progress. I keep a running log at all times as long as the network is still active, but once it drops, the only message I'm getting is
'Line protocol on Interface Dot11Radio0, changed state to down'
My understanding would be that this is the same message logged when a user manually turns off the radio from a terminal window, is this correct? Or am I missing some basic troubleshooting steps?
About every 20 minutes 12 of 300 APs keep rebooting. I have tried moving them to different controllers. I have tried downgrading the code and then upgrading the code. I have tried replacing the AP. I have tried swamping out cables. They are all connected to a 3750 stack but plugged into different switches in the stack. Here is the result that I could capture when I saw it disconnect from the controller. This is the output from the AP:
DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.40.212:5246
*Jul 28 14:33:19.595: %WIDS-5-DISABLED: IDS Signature is removed and disabled.
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jul 28 14:33:19.655: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
[ code].....
I have removed the ip addresses for security reasons.
I have 4 autonomous AP 1142 with 2 ssids : SSID10,vlan10 & SSID20,vlan 20.I use ACS 4.2 in order to authenticate users (EAP-FAST). How can i restrict access base on ssid or on vlan?I want users that connect to SSID 10 to not have access to SSID 20 and the opposite.
View 7 Replies View RelatedWhen I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
View 4 Replies View RelatedI have an Aironet 1142 access point.
Is it possible to direct it to a webfilter hardware firewall for internet access. For example the IP of the firewall with webfiltering capabilties would be 192.168.0.1
We are hoping to provide customer wifi web access but need to filter what they can access.
I have a 1142 that I purchased that needs to be set to factory defaults so that I can configure it. I do an escape at the boot sequence and I get to the
ap:
prompt, the reset instructions that Cisco provides says that I should rename the old config.txt and reboot and that I will then be able to start my reconfig. The problem is that I can't find a config.txt file in the flash space:
Directory of flash:/
2 -rwx 260 Jan 1 1970 00:04:28 +00:00 env_vars
3 -rwx 112947 Apr 1 2011 15:17:10 +00:00 event.log
5 drwx 128 Mar 1 2002 00:01:54 +00:00 c1140-rcvk9w8-mx
9 drwx 256 Apr 1 2011 14:30:32 +00:00 c1140-k9w8-mx.124-21a.JHB1
8 -rwx 5144 Mar 1 2002 00:00:27 +00:00 private-multiple-fs
I checked in the directories listed above and still found no config.txt.
I'm using the Express Security Set-up tab to configure an Aironet 1142 (stand-alone) access point with EAP.
Objective is to make it a RADIUS client and have laptops authenticate through this access point to a Windows 2008 NPS (Network Policy Server) using computer (machine) certificates - EAP-TLS.
When I select "EAP Authentication" under the "SSID Configuration" I was literally floored to see mention of WEP encryption (a security joke) and no possibility to prefer some variant of WPA (well, apparently not with EAP).
WPA2-Enterprise is what I've selected for "Authentication" and "AES" for encryption in Group Policy (so the laptop clients automatically connect to the access point).
WEP? I bought a Aironet 1142 access point for WEP encryption? How can I configure this securely?
These are currently configured settings as displayed under the "SSID Table" heading:
SSID - "MYSSID"
VLAN - none
Encryption - WEP Mandatory !!!
[Code].....
We have a Cisco aironet 1162N connected to a Wireless Controller (LIGHTWEIGHT mode), the device failed and it needs to be replaced.We have a Cisco aironet 1142N in stock available to use.Can we proceed with the change just with disconnect the failed AP (model: 1162N ) and connect the new one (model: 1142N)? Or there is any other task to be done before the change? since the WLC manages the configuration for each AP.
View 8 Replies View RelatedThe GUI times out after 60 seconds.
Since the the "exec-timeout" setting has a default of 10 minutes (if I'm not mistaken), I don't think I could change the timeout value with that command.
Under the "Association" tab of the GUI, there is an "Activity Timeout" subtab and settings for 5 device classes, all set at 60 seconds.
I would guess the setting in question can be configured here. Is the client station device class what I'm after?
We have 5 pcs Cisco Aironet 1142 Access Points without controller at the same building. SSID is same for all of them. Our problem is client connected via wireless disconnecting randomly and continues working after a few seconds. IOS versions are same for all of them you can find detailed information about versions and configurations below.
[code]....
I am tryign to set up an Aironet 1142, I have created a reserrvation in DHCP using the MAC address, and the reservation shows as active, but I cannot connect to the device with my browser.
View 1 Replies View RelatedAironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
First, my configuration, (then the problem down below):
I have an Aironet 1142 with multiple SSIDs [mapped to V LANs] connected to Gi1/0/2 on a 2960 switch in a user-accessible area. This switch is up linked to another 2960 switch in a wiring closet, and the Microsoft NPS server is connected to the wiring closet 2960.
Aironet -- 2960 [user area] --- 2960 [closet] -- NPS RADIUS
I have the user-area 2960 configured as an authenticator switch for dot1x, and port Gi1/0/2 is authenticating the Aironet via MAB to RADIUS. RADIUS is sending VSA device-traffic-class=switch to the 2960. The closet-2960 has no special 802.1x configuration, nor is it an authenticator switch; it just has a manually-configured trunk port to the user-area 2960 [for now; I'm trying to take this one step at a time!].
The user-area 2960 correctly converts port Gi1/0/1 to a trunk port when the Aironet is authenticated [via MAB]. The Aironet boots up, the port is opened, I can ping the Aironet on the native V LAN, and all is well [so it seems]. The Aironet dot11Radio is configured for two SSIDs and mapped to V LANs, which are being spanned via STP thru the user-area 2960 and the closet-2960. STP is correct and verified on all switches.
I have DHCP snooping configured on the user-area 2960 but only for V LAN 1 [but NOT the wireless user V LANs], the trunk port to the closet 2960 is a trusted port. Hosts on the wired ports on the user-area 2960 are able to get DHCP IPs. On the Aironet, "show dot11 associations" shows hosts on the SSIDs are getting DHCP addresses. Again, I am *NOT* running dhcp snooping on wireless SSID V LANs [i read elsewhere that can cause problems as users roam between Aironets].
I do have CISP configured on the user-area 2960. I do not have CISP configured on the closet-2960 [best I can tell, that's not required at this stage, but I could be wrong]. Despite the alleged documentation, I could not get the Aironet to use a dot1x credentials profile to authenticate to NPS/RADIUS as an 802.1x supplicant, which is why I resorted to MAB for this exercise. The Aironet simply would not run dot1x [best I could tell]. The documentation and configuration didn't seem complex, so I was quite confused.
I have upgraded the Aironet to the latest 12.4(25d)JA2 software, and the 2960 is at 12.2(55)SE7 [i saw 12.2(58) has some issues, but I'm willing to be persuaded otherwise, based on sound advice]. Ok, now the problem:
Users on the guest wireless SSID (V lan 20) say they cannot connect. Yep, classic. V LAN 20 is trunk and spanned to all the sufficient places. The Aironet shows users in the associations list for that SSID with IP addresses from the DHCP server! DHCP snooping is not configured on that V LAN. I read another support forum post saying CISP and MAB could cause problems with "disappearing" ARP entries. I appear to have that problem. However, the user on the Staff wireless (V LAN 10) has full access. Am I running into a problem with "multi- host" authentication config? Via tcpdump on my firewall, I see nothing but broadcast and multicast traffic coming from a host on VLAN 20. What puzzles me is how I do see *SOME* traffic from a V LAN 20 host on this SSID, but no uni cast traffic!
Since you're going to ask, here is my port config for this AP on the 2960 authenticator switch in the user-area, and the AAA config pieces:
#sh run br | in ip dhcp
ip dhcp snooping vlan 1
no ip dhcp snooping information option
ip dhcp snooping database flash:dhcp_snoop.txt
ip dhcp snooping
[code]......
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
View 3 Replies View RelatedWe have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.
View 1 Replies View RelatedI have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
View 5 Replies View RelatedI have a "standart" settings of Cisco Aironet 1240AG with ENABLED broadcasting SSID, encryption is WPA2 (AES). I can see the wifi network (ssid) with windows system but with MAC OS 10.5 and MAC OS 10.7 also with iPhone the wifi is acting like hidden. But If I manually enter the wifi ssid and set the proper encryption the connection work normally. Also I have a separete windows partition on one MACbook and this windows 7 have no problem to see the SSID of my network. But If i Boot to the MAC OS the WIFI is "hidden" until the manually connection. (same problem on iphone, manuall connect with manually entered SSID is working well).
View 2 Replies View RelatedI am working on setting up a new WLAN infrastructure. I have set up different SSIDs connected to different VLANs, in the AP. I also want to use Windows NPS for authenticating users on the different SSIDs, with different authentication methods based on which SSID the user/device is connecting to. To do that, NPS needs to get the SSID, but the Aironet 1240 only sends its MAC address in the Called-Station-Id. I have read a bit about this, and found out that if I have a WLC, it will add the SSID to to the Called-Station-Id. But since we do not have a WLC, I am trying to get this to work anyway. Is it possible to modify the Called-Station-Id to include the SSID on an Aironet 1240? If not, is it possible to send the SSID as a separate attribute that can be read by the NPS?
View 10 Replies View RelatedWe have three Access Points, two Cisco Aironet 1260 and one 1240AG. Originally, the SSID was hidden on all three AP's and users had to go to Other Networks and type in the SSID and password to access the WAN. About a few months ago, the network started broadcasting to the public. I am trying to make the SSID hidden again. I have tried going to the Security tab, choosing the SSID Manager and setting single guest mode to none but it has not worked.
View 4 Replies View RelatedI am using a Aironet 1100 series access point (AIR-AP1142N-N-K9) with IOS version c1140-k9w7-tar.124-21a.JA1. I want to create two seperate SSID's on the access point with WEP encryption. There is no VLAN configured and i want it to be like it. Also I need to broadcast both the SSID's at the same time, so the some of my users need to login with the first SSID and the others to login through the other.
View 2 Replies View RelatedI have configure my AP with to SSID (11 & 12), but I cannot connect to 12. It authenticates, and while trying to acquire IP address from 12, it fails and connects me to 11 (if I have already saved the SSID connection).
The following is my AP status:Product/Model Number:AIR-AP1231G-A-K9 System Software Filename:c1200-k9w7-tar.123-8.JEE System Software Version:12.3(8)JEE Bootloader Version:12.3(2)JA4
The SSID 12 already have 4 clients connected, And I am tring to connect a 5th one (smart phone), but cannot connect to 12, instead coneected to 11. Also tried with a laptop, but cant get the IP address, and give Limited Connectivity error.
I'd like to change the SSID name on Aironet 1200 which is currenty used by my wireless network.
View 3 Replies View RelatedWe have multiple Cisco Aironet 1131AG devices, all wired on one Cisco L2 switch(2560) who is connected to L3 switch (3550). We assigned one VLAN for access point in L3 switch who acts as vtp server (L2 switch is vtp client). All ap's will have static ip address and all will have same SSID and no security and they will be using multiple channels (ex. 1,6,11). They will operate in 3 floor building for roaming wireless client. We won't using any wireless controller.
How to configure APs-all the same with different ip's, can we use L3 switch to create dhcp server for access points VLAN (pool for clients, and the rest for static ip for ap's)?
i've been looking for a way to isolate clients on a Cisco Aironet 1121 on a certain SSID, and i cant find anything, tried pretty much everything i coudl remember, but since im no expert on Cisco wireless.
Quote:
Cisco IOS Software, C1100 Software (C1100-K9W7-M), Version 12.3(7)JA1, RELEASE SOFTWARE (fc1)
Technical Support: [URL]
Copyright (c) 1986-2005 by Cisco Systems, Inc.
[Code].....
Can I configure Multiple SSID (Guest/Corporative) on Cisco Aironet 3600i AP via Cisco 2504 Wireless controller?
View 1 Replies View RelatedI'm facing a problem on vWLC. I configured the vWLC and Aironet 1252, I created 2 SSID with below settings.
1. WPA2 Auth 802.1X
2. Web-Auth
Inside Wireless, I configured this AP Mode as "Local", but all of the client device such as iPhone, Laptop can't find these SSID.
how i can configure a second ssid for guest access in our environment. this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time. My AP config is attached below.
Do i need to redesign the whole network to have a native vlan other nthan the data vlan? Does the access point need to be aware of the voice vlan? Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?
how to change our wireless setup. Currently, we have 2 Cisco AiroNet 1130 WAP's in the office that go directly into the 2 POE ports on our Cisco ASA 5500. These WAP's have 1 SSID and are using WEP for security. After demonstrating the flaws of WEP to my boss, he has agreed that we should use something more secure and I've suggested WPA. We want visitors to our office to be able to hop on our wireless but on a separate guest SSID with WEP.
I'd like the internal SSID to route to the ASA and take the default route to the internet (it will be our new fiber connection once it's installed in a couple weeks). The default route is whichever connection is working since our ASA 5500 will fail over when it detects an outage.
I'd like the guest SSID to route to the ASA and then go over our existing cable connection. This connection will be our backup once the fiber connection is installed. Since we won't be using it very often, but will be paying for it, I advised that we send all guest wireless traffic over this connection since 50/5 is plenty for guests.
The current SSID (which will be the internal SSID) has no VLAN. We do currently have a few VLANS on our network, one for voice (.42) and one for data (.100) and the default (.0). What device to I create the VLAN on (Cisco 5500?) and how to I setup the WAP? I need very basic instructions to start and I'm also trying to do this without causing downtime if possible.
I've attached a diagram of what it should look like. Red indicates our internal network and Blue indicates the guest network. I can send screenshots as well.
