I would like to integrate our intranet web page with Cisco WLC 2500. Is it possible to integrate custom web page with WLC. I know, that I can create custom authentication page, but what about creation of the user?
View 5 RepliesThis is the first time I am trying my hands on wireless gears. I have 2500 WLC and 1142 AP (which I converted from Standalone to LAP).I have a layer 3 POE switch where i am using port 1 for the WLC which is a trunk port.
Port 2 is for the AP using access vlan 111
Port 3 is trunk port going to a router where i am running dhcp server for the VLANs which are as follow:
VLAN 110 -Corp Wireless (10.1.110.0/24)
VLAN 111 - AP-Mgmt (10.1.111.0/24)
VLAN 999 - Guest (10.1.101.0/24)
I wanted to block the traffic from the Guest VLAN 999 but when i apply the ACL on the Guest Interface created on the WLC, I dont see any pings going across and neither I see any hit counts on the deny statement as if the ACL is never applied.
I have a WLC 2500 which I would like to configure with guest access. I want to set up a web passthrough with email input. Is it possible to collect the email address information? Is it stored somewhere in the controller or do I need some external server?
View 1 Replies View RelatedAlrighty, a little misdirected here. been reading docs for a little while and experimenting around maybe someone can point me in the right direction, How to you create a Guest Network in IOS Zone Firewall. For some reason Cisco, while using the term DMZ, applies differently on their routers than it does on their ASA's. I know how to do this on ASA's all day long however on the router it is a little different story.
View 5 Replies View RelatedHAVE 3 SITES.BUT I WANT TO MANAGE MY NETWORK FROM ONE SITE.I WANT TO CREATE USERS FROM MY MAIN SITE FOR ALL SITES.
View 1 Replies View RelatedI have a wired DLink DGL-4100 as my main router and DHCP server. Attached to this, I have a hard-wired Linksys WRT610N which is acting as a dual-band access point. All are on network 192.168.1.0/24.I would like to create a second "guest" wifi network using a spare DLink DIR655 router. Guest clients should have access to Internet but absolutely NO access to machines and resources on the 192.168.1.0/24 network.I connected the DLink DIR655 WAN port to one of the Linksys LAN ports (since it is basically a switch). I configured the DLink DIR655 with LAN IP 192.168.2.1, activated its DHCP to give out 192.168.2.100-105. I set the DLink DIR655 WAN Internet Connection Type as Dynamic IP (DHCP). The DLink DGL4100 assigns an IP to the DIR655 on the WAN side (e.g. 192.168.1.200).With this setup, wireless clients on the DLink DIR655 2.0/24 network get assigned an IP on the 2.0 network. They can access the Internet. However they can still see all the 1.0/24 clients. how come the networks aren't isolated?How should I set this up properly?Do I need to use the DMZ setting on the DLink DGL4100?I know I could get rid of the Linksys and use the Guest Access feature on the DLink DIR655. However I would like to use the Linksys for its dual band feature.
View 4 Replies View Relatedhow we can prevent learners from creating files or folders on Drive C without restricting the users from running programs installed on the C drive. We dont want learners sending tests or answers of tasks to one another by copying it in drive C. We are running Windows Server 2003 Enterprise Edition.I know you got a plan for us
View 1 Replies View RelatedMy customer need creates some separately web portal for some SSID (Guest and Staff), 01 web portal for Guest and 01 Web portal for Staff. Can WLC2504 can support this features ?
View 2 Replies View RelatedI just read that starting from version 7.4, the 2500 controller can be used to terminate guest anchor tunnels. have a question regarding the performance of the internal DHCP server when used in guest environments.
View 1 Replies View RelatedWe have a customer with ACS 4.2 Appliances who currently uses the Layer 3 web-redirect guest function to authenticate users against AD via ACS and LDAP to the AD, its a mixture of un-managed Windows, Mac & linux clients.
They want to move to an 802.1x solution.
Now MS-CHAPv2 is proably the obvoius choice (maybe it isnt considering Linux and MAC clients ... comments???). However the only option to integrate with AD is LDAP i.e remote agents or an upgrade to 5.x is out of the question.
I am a restaurant owner and have a wireless network set-up via DLink DSL 2730U router. Now some times I get customers who demand to use the network and they use it for free which I find irritating. I have found one solution of 'Guests/Virtual Point' but I need to limit the time (say 15 minutes) for which they can use the network.
View 1 Replies View RelatedOur Guest access system seems to be having problems with DHCP. It seems to take a while to deliver an IP address making the client device show the "limited or no connectivity" message, which of course makes the users complain. On one occassion I have seen my own client eventually picking up an address even after the limited connectivity message appeared. On another I saw the debug showing "Dhcp request for autoconfig address", which I suspect is a symptom of the problem.
Our Anchor Controller is the DHCP server and is a 4402 running 7.0.98.0 - I've attached some DHCP packet debug.
I run a business and have customers who would like to use my wireless internet. I previously had a completely open network that I would allow them to use, until someone illegally downloaded a movie and got us in trouble. I would like to allow use of the network again, but limit activities like this. Basically, so they could only do basic web browsing, etc.
View 1 Replies View RelatedWe recently implement WLC 5500 Series, I found out guest user once period of that user expired it will not appear at lobbyadmin page where you can see list of users.
Is there any way to see expired guest users and also IP address which assign to guest user?
I have a cisco wlc 2504 is deploying authentication services to guest users toward a portal web customized and configured. I need to install my certificate verisign (certificate.cer) in to cisco wlc because my users don't like the page no trusted (The wlc is showing me ''There is a problem with this website's security certificate'') when they are trying to access to ssid to users guests.
View 2 Replies View RelatedHave a WLC 5508 running 6.x code with LAP's providing wireless for our internal laptops (WPA2 and EAP-TLS). I want to provide guest wireless which goes out a different port on the WLC to a guest firewall/cable modem. However, we want to prevent our internal laptops from being able to use the guest wireless. I have RADIUS (IAS) and LDAP for my AD available. We would prefer not to have use Lobby Ambassador and just have the guests use a simple password or web passthru. Guests may be laptops or smartphones. What options are available? I have tried a test setup using dynamic vlan assignments from RADIUS using the IETF flags, but can't seem to get it to work. Is there a way to identify the SSID is being used at the RADIUS server?
View 13 Replies View RelatedMy customer has multiple sites, each with a 2504 WLC.A data center with a 5508 in the DMZ acting as Anchor for the remote sites.ACS 5.x and NCS Prime.All guest users will egress to the internet via a Vlan in the DMZ.Authentication is currently web-auth on the Anchor, but will move to NCS once that is fully deployed.
Is it possible to put a printer in each site for Guest WLAN users to use?
I hava Cisco ASA 5520 with AIP-SSM module. I would like to have the below features with ASA installed in Transparent mode.
1. Traffic shapping per user
2. Traffic shapping per IP subnet
3. Traffic shapping per Application
Is it possible with ASA installed in Transparent mode?
How can i share application so that other users can directly use application in network without installing in his/her system. I have ubuntu server 12.0.1 installed and users are using windows 7. I will install any other os as server if necessary.
View 5 Replies View Relatedi have a cisco ACS version 5.0, I need to authenticate a wireless users connected to WLC 2100 controller when i connect the controller to a Dot1x port in the switch , the port go down.
View 6 Replies View RelatedI recently installed a 2951 with a security plus license..I hate it (security featuers not router) and would like to put the asa back in place.how to integrate the asa with the 2951, I believe I need to run it in multi context mode.
View 3 Replies View Relatedhow to integrate NetFlow to some Ciscoworks module.
View 3 Replies View RelatedWe have a core 6500 switch that has a PRI module in it that binds (4) T1 lines together and we also have a 2600 Rtr that binds 4 other T1 lines together and pipes them into a ASA5520. We are changing WAN vendors but still have to maintain the (8) T1 connections until our contract runs out, which will be in a few years. The 8 T1's are not enough bandwith for our operation and we will be adding a 20meg WAN link in the next month. What I am trying to figure out is how to best integrate 3 different WAN links into one LAN. What I am thinking of doing is to leave the 6500 core switch as is and then to purchase a router that can hold (4) T1 wics and the 20meg link. Is it possible to bind those 5 links together even though they are different vendors?
View 4 Replies View RelatedWe have LMS 4.1 in our network. We had recently installed Remote Syslog Collector on a new Server to collect logs from all the devices. How can we integrate the Remote Syslog Collector with the LMS Server?
View 3 Replies View RelatedI have installed 4 unit Cisco Aironet 1250 acting as Autonomous AP each. I want to integrate these AP to Windows Active Directory for authentication level.
When I read configuration guide on Cisco Aironet, they must be authenticated via RADIUS server.
Is it possible that these AP directly authenticated to Active Directory via LDAP protocol?
We are looking at possibly adding a second 5508 controller to our network and running in HA mode. I see now that there are 5760's available that run on IOS. Is there any way we can integrate a 5760 into our existing network instead of going with a second 5508? I would prefer to invest in newer hardware whenever possible.
View 15 Replies View RelatedI have a question. What is the requirement of integrate ACS 4.2 Appliance and AD about CA server? it has to be windows 2003 server enterprice o windows 2008 enterprice? or it can be windows 2003 and 2008 stand alone? another question is about multi domain, i have domain father and children. the installation of CA Server is in domain father to enable 802.1x with AD with all domain children integrate? or I can be install the CA server in the server of domain children and is it work (CA server installed in server in domain child and it working all domains child and father)?
View 1 Replies View RelatedI planning to integrate cisco asa5505 device in runing enviornment for filter ip traffic.Internet ----router----ciscoasa----lan.Ip series is public(25.263.25.0/24) througout of network (no privateIP)now how do I set asa in such case and filter traffic from comming into lan and going out to internet.
View 5 Replies View RelatedWe having ACS version 5.2 0.26 with Active/Standby. We need to integrate active directory with ACS. Domain name given by Server team was as xyzcompy.local. When I tried to resolve the same domain name I got five servers ip address against the same domain name. however we given the ip reachability to only for two servers. We we try to save we get error saying that "Can not resolve the network address".
So my questions are;
- does ACS should have ip reachaibility to all five servers
- does the username/password we entered in the ACS should have domain admin rights?.
- the given AD is configured with windows NTP [URL] but when we configured ACS as windows NTP it was taking local server as active NTP..?
When we check the ACS logs, we saw the following error;
in acsLocalStore:
AdminName=acsadmin, DomainName=qatarconvention.local, ADOperationResult=unable to create secured connection against AD server, switching to non-secured connection. javax.naming.CommunicationException: simple bind failed: qnccad02.xxxxconvention.local:636 [Root exception is java.net.SocketException: Connection reset],
in ACSADAgent;
32484]: INFO dns.findsrv FindSrvFromDns failed: res_query failed _ldap._tcp.xxxxconvention.local
Sep 4 12:43:20 acs01-cc4 adjoin[32484]: INFO cli.adjoin Join to domain 'xxxxconvention.local', zone 'null' failed.
I attached some screen print which saw the error and output of nslookup for the domain name.
I cannot integrate Virtual MSE 7.3.101 with my Prime Infrastructure 1.2 After I setup MSE via its wizard, I make a change on WCS username and password. When I try to integrate MSE with Prime Infrastructure, Prime notify me about the mismatch username/password.
Both systems are fresh install on my UCS C220 M3.
I have a 2951 which i want to integrate to the CUCM and wish to plug a Siemens ISDX into it which is the best card to use
NM-HDV2-1T1/E1 or WIC2-2MFT-T1/E1? its QSIG
I have set VPN clientr connection in windows 7 . Afetr connecting to the VPN I am not able to connect my intranet company sites, but I am able to connect the internet sites. I have made host entries in host files. All the other sites are working fine.
View 1 Replies View RelatedI need to integrate Cisco ISE and WLC5508 with FlexConnect (local switching) using EAP-TLS security for wireless clients across multiple floors (dynamic VLAN assignments based on floor level). The AP model used is 3602.
- What RADIUS Attribute can be used for dynamic VLAN assignments based on floor level? Is there an option where I can group all LWAPs in same floor for getting certain VLAN from ISE?
- I intend to use WLC software version 7.2 since 7.3 is latest version. Has someone use WLC software version 7.3 without any major bugs/issues pertaining to FlexConnect and EAP-TLS?
- I read some documents saying L3 roaminig is where the associated WLC has changed. However if user move to different subnet but still associated to the same WLC, would this be consider as L3 roaming too?