Cisco Switching/Routing :: No Client DHCP Using ASA 5505 And AIR-AP1041N-A-K9?
May 23, 2013
I need to configure public and private wireless access using an ASA 5505 and an Aironet AIR-AP1041N-A-K9. I need to be able to do this via ASDM and http if at all possible. I simply do not have the time to learn hundreds of lines of arcane CLI code. The Aironet connects to the ASA successfully, and receives an IP. I can then connect to the AP wirelessly, but do not receive an IP. I have setup a second SSIDVLAN on the AP, and can't connect to it at all.
View 4 Replies
ADVERTISEMENT
May 17, 2012
I can ping [URL], from the router but not from a client attached to the router dhcp interface(10.1.3.1). When I turn on ip routing I cannot ping at all. Here is the config I have now that can ping the internet from the router.
sh runBuilding configuration... Current configuration : 1191 bytes!! No configuration change since last restart!version 12.3no service timestamps debug uptimeservice timestamps log datetime msecno service password-encryption!hostname
[code]....
View 7 Replies
View Related
Jun 26, 2012
1 Cisco switch stack (SGE2010) in L3 mode, 2 Vlans.
Vlan 1 = 192.168.0.253/24, untagged on all ports except 14/15
Vlan 2 = 192.168.22.1/24, untagged on port 14 and 15
SGE2010 default route 0.0.0.0/0 next hop 192.168.0.1 (Checkpoint UTM)
DHCP Relay enabled
DHCP server set to 192.168.0.16
DHCP interface set to Vlan2
[code]....
Expanding the ICMP entry, it appears that the destination is the pc client since it shows a Dell mac address, and the source is the Checkpoint UTM (Sofaware).
I can ping and tracert from the Checkpoint to my static IP on Vlan 2. The same goes for the DHCP server to/from Vlan2, so I am confused as to why the routing is failing. I have tried adding Port Fast to the stack ports, but nothing changes.
View 3 Replies
View Related
May 31, 2012
i am not sure if this is something with my DHCP setup or not, but it certainly seems to be the culprit. I am running a 3560G and using it as DHCP and to do V LAN routing (Geiger protocol). I have 10 pools configured with a few static addresses per pool. Now to get down to the problem. I have a computer (and this problem seems to be a gremlin as it changes what computer is affected quite often) that will connect, get its IP, immediately disconnect, then send out a DHCP req again. The computer has a static assignment in the pool, and for the brief second that it connects, it gets the right address. If i move the computer to another v lan, all works right. If i delete the static entry it will get an address in the right v lan no problem. The command i have been using to add static entries is:
address xxx.xxx.xxx.xxx client-id 01xx.xxxx.xxxx.xx
That seems to have been working on all my static routes except for a bank of computers in vlan3. I have went as far as to delete the pool and recreate it, heck i even recreated the v lan and i am still having issues. Below are some snippets of the running config for review.
The DHCP Pool for the affected LAN:
ip dhcp pool Dev3
network 192.168.3.0 255.255.255.0
boot file bootx86wdsnbp.com
next-server 192.168.1.78
dns- server 192.168.1.8 192.168.1.78
[Code] .....
View 4 Replies
View Related
May 29, 2012
I have upgraded a C3750G-12S-E to c3750-ipserviceslmk9-tar.122-55.SE5This switch is a distribution layer switch for one of my remote sites. it contains an ip helper-address on the site vlan's SVI.DHCP relay is no longer functioning for client PCs. Static address assignment allows full network functionality. I enabled debug ip dhcp server packet. [code] Actually I am betting you upgraded your IOS from something before 12.2(50)SE to 12.2(50)SE or later. We added enhancement CSCso19800 which will validate DHCP options when we are a relay agent.
View 1 Replies
View Related
May 13, 2012
We recently upgraded our 5505s to 8.2(5) 26 and noticed that each will crash after a cerntain amount of time. Some crash every 30 minutes other will crash every 4 to 8 hrs. The only difference would be the user's home ISP and/or home router, if they have one. They are configured with a dynamic dhcp IP address for the outside interface and the crash files starts with the following:When we downgrade back to 8.2(5) 13 the problem goes away. Any known bugs for this version? I haven't been able to find anything yet. We do have one 5505 that does not have this issues. The only thing that may be different is that it was never at 8.2(5) 13. We had downgrade it from a 8.3 version.
View 2 Replies
View Related
Jul 30, 2012
How to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?
The company i am working in has 5 vlans which have been set an lay-3 switch(3560), uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X) well , that works ok~
Now , I got my problem: I need to force the client only can get ip by dhcp-relay server, that means if anyone set static IP manunally , he can't really access to anywhere (to provent anyone set static IP with malignancy )
I know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )
the how to configure on a cisco 3560 ?
View 1 Replies
View Related
May 7, 2013
I am trying to configure interface vlan1 to get an ip address from dhcp by entering the commnad ip address dhcp ios rejects the dhcp portion of my command as not recognised although it is referred to in Cisco manuals.my IOS version is c2950-i6k2l2q4-mz.121-22.EA14.bin.I get the same problem when I try to configure ip http secure-server on the switch. Is this a known bug or whether I have the correct IOS version for these commands?
View 6 Replies
View Related
Feb 23, 2012
Haveing issue with DHCP server handing out IP addresses to client connected to VLAN5 interface.ISP Router>Firewall -(WatchGuard Drop-in mode) I have several 3750 switches and one acting as a L3 switch. The L3 is configured as follow: [code]
If I connect a laptop to int fa1/0/10 I DO NOT get an IP address from the 10.100.0.8 scope. If I connect to another interface within the VLAN 1, I get an address from the 10.100.0.0 range.
View 7 Replies
View Related
Nov 11, 2012
I have some DHCP trouble since I subnetted my network with a 2921. My clinets are in 172.16.2.0/23 and DHCP servers are in 172.16.5.0/24.Sometimes, randomly I guess, I get NACK from my DHCP server, and if I look into DHCP logs I got something like this:
15,11/09/12,09:52:27,NACK,172.16.3.172,switchE51D12.host.com,A0CF5BE51D12,,0,6,,,,,,,,
15,11/09/12,09:52:28,NACK,172.16.3.172,switchE51D12.host.com,A0CF5BE51D12,,0,6,,,,,,,,
15,11/09/12,09:52:29,NACK,172.16.3.172,switchE51D12.host.com,A0CF5BE51D12,,0,6,,,,,,,,
[code]....
View 6 Replies
View Related
Apr 3, 2012
Have a client wanting to hand out public ip addresses to all clients from a PFSense Firewall terminating the internet connection.
How do I allow the Cisco Switches currently in place, configured with private ip addresses in the 10.10.x.x ranges and Vlans, where the main 3550 layer 3 has defined dhcp scopes for each vlan, to relay dhcp requests from all vlans to the PFSense firewall?
I assume I would take off the currently defined dhcp scopes for the vlans and configure each vlan/switch with the ip helper address and specify the PFSense firewall and that Nat would have to be disabled onthe firewall?
View 1 Replies
View Related
Apr 21, 2013
Do the problem caused by the modems itself or it just sign of faulty Ethernet switch (using 20 port Allied Telesis ethernet switch).
Sometimes I cannot connect to internet due to "unidentified network" buy i can resolve this problem by restarting my modem + switch.
View 4 Replies
View Related
Mar 20, 2012
i have a question about tunneling a software EasyVPN client to a client ASA Network. It looks like this:
EasyVPN Server 192.168.202.0/24 Network extension mode to Client EasyVPN ASA 192.168.1.0/24 This works fine in both directions. But now i want to connect the client ASA network via EasyVPN software client from outside. The user are already able to connect to the ASA Server on its static outside IP obtaining an IP from a 192.168.21.0/24 pool. This works fine. But how am i able to connect to the 192.168.1.0/24 network from this client?
View 5 Replies
View Related
Feb 26, 2012
If client gateway = 192.168.64.9 then next-hop = 192.168.64.8 else use default-route 0.0.0.0
I know it's possible to do a route-map match ip-address ACL list. But is it possible to match on gateway?
Some info about hardware and config:
6509-E in VSS (IOS 12.2(17r)SX5) withVS-S720-10G supervisor.
All routes are static, IP for 192.168.64.9 is on SVI vlan.
View 3 Replies
View Related
Feb 1, 2012
I've setup the following AP1041N configuration, but for the life of me - the radio will not enable.
++
sho conf
Using 3234 out of 32768 bytes
!
[Code]....
View 10 Replies
View Related
Jul 18, 2012
I have WLC 4402 working with AIR-AP1131AG-E-K9. Need to buy another pair. I looked to the side air-ap1041n-e-k9. Tell me whether or not the compatibility of the controller and the AP1041n? One more question. When buying in 1131 is still in the box and power cord to the point. The new 1041, the purchase comes with the point of the power cord?
View 13 Replies
View Related
Apr 21, 2012
I have a problem with my AIR-AP1041N-E-K9, i do not seem to get an ip-address assigned after a reset to factory defaults.I do see the AP with CDP:
Device-ID: ap
Advertisement version: 2
Platform: cisco AIR-AP1041N-E-K9
Capabilities: TransBridge IGMP
Interface: gi5, Port ID (outgoing port): GigabitEthernet0
Holdtime: 163
Version: Cisco IOS Software, C1040 Software (C1140-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)
[code]...
I also noticed that when i connect to the AP via console-cable, i can see the AP boot up in the console session, but then i do not get a login prompt, but it seems like the AP is responding; if i shutdown the interconnecting link between the switch and the AP, i do see log messages appearing in the console-connection.I have tried to debug on the Switch, but i need a password, so i can debug, which i do not have.,
View 2 Replies
View Related
Sep 18, 2011
How do you configure for standalone use. no documentation.
View 1 Replies
View Related
Mar 6, 2012
I'm trying to get confirmation on whether you can have workgroup bridge mode on the 1040 series model.
The 1041N has the same IOS as the 1141/1241 and it has the settings are there, but I read somewhere on the cisco site that workgroup bridge is only supported on 1100 and 1200 series, is this correct or old information?
Scenario is: I have an existing stand alone 1041N AP, on the other side of the building I have a network LAN switch with a couple of PCs, instead of running cables I would like to add an AP as a bridge to link that switch and PCs to the network that the AP is plugged in to. I believe this is called Workgroup Bridge Mode. In fact there already is a cheap non-cisco wireless device doing this but it is unreliable.
I just placed an order for Two 1041N APs, do I need to change the order to Two 1141N instead?
Also even if the 1041N does not support workgroup bridge mode, can it still act as the ROOT Bridge and have 2 1141N APs configured in bridge mode connected to the 1041N?
View 1 Replies
View Related
Jan 23, 2012
I have a fresh install of LMS 4.0 on Windows Server 2008 Standart SP2. I have one NIC with static IP configuration. I also disabled DHCP client.The problem is follows: when I go to Inventory - Device Administration - Add/Import/Manage Devices, I always get this error:Error in communicating with DCR Server. DCR Server may be down. Please start the DCR Server and then refresh the page.Reload server/ Daemon Manager dont solve this.I try to beat this problem 2 days already. Second uninstall also doesnt solve the problem..
About a week ago I tried to clear log files which was 270gb (syslog.log) and after that restarted the server. And all inventory devices suddenly disappear! I could find it from search menu but cant access - cisco works said that there is no such a device in Device Repository or I havent enough right to view it (but i logged as admin). And after this i failed to add any device in Inventory. So I reinstall Cisco Works and get that DCR error..
View 1 Replies
View Related
Sep 11, 2011
some days ago I succesfully converted AIR-LAP1041N (lwapp) to AIR-AP1041N (autonomus).I used c1140-k9w7-tar.124-25d.JA1.tar which is available to download in Download Software Section for this AP.But there are any autonomus to lightweigt firmware for this AP.I tried to use c1140-rcvk9w8-tar. 124- 21a.JA2.tar for 1140 but AP hungs after that. How can i back to LWAPP version in 1041?
View 7 Replies
View Related
Jan 30, 2013
I'm trying to track associations on one of my AiroNets (AP1041N) using the show dot11 associations command, but it does not show anything! e.g.AP1#show dot11 associations allAP1#show dot11 associations all-clientAP1#show dot11 associationsAP1# Is there something I need to enable in the configuration to track associations like this?
View 1 Replies
View Related
Jun 15, 2012
We are setting up a test lab in our DMZ. The path to the internet is basically like this. Anything past the firewall is irrelevant. For this lab lets assume it is vlan 300.
LAB SW ---> DMZ-SW ---> ASA FW ---> INTERNET
LAB IP Range = 172.16.300.0 /24
GW = 172.16.300.1 (On FW int)
Trunked all the way through.
I have an int vlan set up on the LAB SW. It is being trunked to DMZ SW. DMZ trunks it to ASA FW where there is a failover with a redundant switch.On the ASA the interface 0/2 is a subinterface 0/2.300 being used as the default gateway.
I have DHCP running in a specific range on the LAB SW and do get an ip address when plugged in. I cannot ping the default gateway on the ASA FW.The GW is defined using default-router command for 172.16.300.1 i.e. default-router 172.16.300.1?
We are running ospf on the firewall. There appears to be a pattern with ospf and a similar subnet setup elsewhere. I was wondering based off of this info would configuring ospf for 172.16.300.0/24 allow me to ping the GW from a client on the LAB SW.Secondly. I trunked 300 on the DMZ SW but I didnt add the vlan to the configuration. i.e. conf t <enter> vlan 300 <enter> Does this really matter? Or is having the vlan in the configuration only pertain to access mode on interfaces?
View 1 Replies
View Related
Feb 15, 2013
We have two Cisco 5505 firewalls connecting to two ISP's . The two internal LAN's on the firewalls are 192.168.184.0/24 & 192.168.186.0/24. We also have a Cisco C3560x layer3 switch with vlan interfaces 184.3 & 186.3. We have two DGS-3100 Dlink layer 2 switches connecting our users to the Layer 3. Ip routing is enabled for intervlan communication & I can reach the Switch interfaces & firewall gateways from machines on both on the vlans.We have pbr enabled on the 3560 & users only on the .186 network can get to the internet. The switch is running the ipservices license & the sdm template is "desktop routing" .
Users on the .184 cannot access the internet but we can ping the layer3 interface & the firewall gateway. [code]
View 20 Replies
View Related
Mar 12, 2013
I have this Cisco 1941 router with two Ethernet ports g0/0 and g0/1. The g0/0 is connected to office LAN with internet access. As my office LAN is DHCP, it will assigned a IP address for g0/0 since this g0/0 is configured as "ip address dhcp". Now my question is that i have a group of 5 pcs, namely PC1, PC2, PC3, PC4 and PC5 that is connected to the switch and one of the ports of this switch is connected to g0/1 of Cisco 1941. Is it possible that let say PC2 and PC3 (both DHCP enabled) could access the internet access from g0/0 and at the same time, the office LAN assigned IP address for PC2 and PC3 automatically?
Office Lan with internet access (DHCP) (Default gateway 10.0.0.1)
|
|
g0/0 (DHCP enable) (DHCP assigned IP address 10.0.0.138)
Cisco router 1941
g0/1
|
|
HP Switch
|
PC1 PC2 PC3 PC4 PC5
Is this operation possible? if possible, how to configure inside the router 1941 to achieve this objective?
View 8 Replies
View Related
Aug 10, 2011
I disconnected and reconnected the powercable while holding on to the setup button until system, alert, setup go amber. The system led light began blinking green. I waited until one of the leds lights on the ports starts blinking green I then connected the ethernet cable connected to my pc. I made sure my lan connection on my computer was set to dhcp.In the docs claim it should take about 1 minute to grab a new ip address. After a few minutes i check the ipconfig on my pc and I get the apipa address.The setup light on the switch remains green while system is amber. The led for port 1 stopped blinking and remains green.My pc is not grabbing an ip address I don't know what else to do.
View 7 Replies
View Related
Nov 30, 2011
We are looking to avoid the need to install an additional device in our network as our core 6509s are not being pushed by any stretch. However, we are having an issue getting the 6509 to assign DHCP addresses and perform NAT.
Most interfaces and V LAN's on the 6509 are using public IPs and have BGP routing at the edge. We have a trunk up link coming into the 6509 on a ws-6816 card via a SMF GBIC in slot 9, port 2 that feeds a wifi link where we are looking to provide guest access to our network.
We created 2 V LAN s on the switch 20 and 21. We assigned a private IP and network to the VLAN20 interface and assigned a new public /30 sub net ip to the V LAN 21 interface. The following configuration was applied which I thought was the required configuration based on how we would typically configure ISR routers for the same services...
ip dhcp excluded-address 10.200.200.1
!
ip dhcp pool WiFi_Pool
network 10.200.200.0 255.255.255.0
default-router 10.200.200.1
dns-server 4.2.2.1 4.2.2.2
[ code]...
What am I missing in this configuration? Note that if I create an access switch port for v LAN 20 on the switch and plug a laptop in directly to the 6509, the laptop is unable to receive a DHCP address. If I assign the laptop an address in the 10.200.200.0 /24 range manually, I can ping 10.200.200.1 from the laptop, however, the laptop will not get to the internet as it appears to be failing to perform nat.
View 7 Replies
View Related
May 12, 2013
I am a newbie to Cisco. I am trying to setup NAT with DHCP in our office on CISCO 819 router. I am having a problem with DHCP not assigning an IP on vlan1. I cannot figure out what i'm doing wrong. Below is my config and debug from DHCP.
router#sh config
Using 4328 out of 262136 bytes
!
! Last configuration change at 05:56:39 UTC Mon May 13 2013 by cisco
! NVRAM config last updated at 05:57:16 UTC Mon May 13 2013 by cisco
[Code]....
View 3 Replies
View Related
Apr 25, 2013
I have a Cisco ASA 5505 I've configured as a DHCP server. I'm getting DHCP on workstations attached to the appliance, but I'm getting the following message when the appliance loads:DHCP Client: can't enable DHCP Client when DHCP Server/Relay is running on the interface DHCP: Interface 'inside' is currently configured as SERVER and cannot be changed to a CLIENT by a CLIENT featureI'm not trying to configure this thing as a client, so I'm not sure why the system is producing this message.
View 2 Replies
View Related
Oct 19, 2012
Can I have two asa firewall between dhcp client and dhcp server. if yes what solution i have to have to get dhcp leases. should i have to configure dhcp relay on both the asa.
View 5 Replies
View Related
Feb 4, 2013
I have a WLC5508 , we are using external DHCP for WLANs
one WLAN is able to get IP from DHCP server but another WLAN not , the DHCP server is same , only 2 different scopes.
This is debug
*DHCP Socket Task: Feb 05 21:26:43.106: e8:06:88:9b:a8:04 DHCP received op BOOTREQUEST (1) (len 308,vlan 1, port 1, encap 0xec03)
*DHCP Socket Task: Feb 05 21:26:43.106: e8:06:88:9b:a8:04 DHCP processing DHCP
[Code].....
View 2 Replies
View Related
Jun 21, 2011
how I can get to the DHCP client table on a Cisco 891 Router ? We just upgraded our router from a WRVS4400N to the Cisco 891. THe WRVS4400N has the feature DHCP client table that I can see the Client host Name and IP address,Mac Address I have CCP and CCP express installed on my system?
View 1 Replies
View Related
Apr 25, 2012
I have intergrated wlc module in 2800 series cisco router, switch, cisco 1130 lightweight access point, i configured dhcp on router for wireless client, deal is that AP taking ip address from router its ok, but client cannot take dhcp, what im doing wrong? here is configuration of wlc router and switch
wlc configs/
config interface address management 172.16.1.10 255.255.255.0 172.16.1.250
config interface address ap-manager 172.16.1.11 255.255.255.0 172.16.1.250
[Code].....
View 1 Replies
View Related
