I am curious if I can do an either or sitution with a single SSID. If you are on the mac filtering list then you gain access to the network, if not then enter your WPA2-ENT credentials. I have a minimal ammount of users that need mac filtering, but do not want to give them there own SSID.
Cisco WLC 5508 7.4 code
I am trying to block clients based on MAC addresses connecting to our Wireless Guest network.
My scenario is: We have 2 interfaces (corporate and a guest). Users are connecting to our guest network after they have automatically connected to our corporate network and logged into Windows. When they realise that things are not quite working in the way they want (access to servers etc...), they reboot and then find they cannot logon to the laptop at all. This is because the laptop has automatically rejoined the guest network and has no access to AD. I then have to locally logon to the laptop and remove the guest network.
It’s starting to become a bit of a pain as we are an educational establishment and... well... you would wouldn’t you
Hardware: WLC5508, Software Version 7.3
So far I’ve tried enabling MAC Filtering under “Security -> AAA -> MAC Filtering”, but found out that it’s a white list. The opposite of what I’m trying to achieve, but I like the fact you can link it to a specific interface.
I’m just looking at the “Disabled Clients” again under “Security -> AAA ->”, but think this is more a total ban as I cannot see a method at attaching it to an individual interface. I'm kindda stuck and my good old friend Google is not yielding great results.
I’m not by any means a wireless expert, so there is probably a better method. I would prefer to use the controller as a way of achieving this, but if you think I’m wasting my time and should be looking at a Windows Group Policy method then I’ll go with that?
I have a 5508 WLC and 40+ LAP1142N APs spread across 19 locations that allows staff to connect to our private network via wireless. I recently deployed about 40 new laptops all identical make and model HP ProBook 4530's and all have the same client setup for the wireless. Out of those 40 laptops I have 4 that will not connect to the private network. However, these same laptops will connect to my public, open wireless network without issue. In addition to the 4 that will not connect all the others will prompt twice for network authentication.Now, I have about 10 other laptops that are not the HP model and all connect without issue and without dual propt. I don't think this is a wireless network issue but could be some type of issue with this model of laptop.
View 8 Replies View Relatedl have implemented mac filtering auth on my wireless network, l have 2 WLC ( 1 WLC 5508 and 1 WLC 4402, and I wonder if you can migrate the mac address database of a WLC to another and how can l do this.
View 4 Replies View RelatedI had configured one access point CAP3602E in flex connect mode through a WLC 5508 after deploying the access point in flex control mode the local mac-filering is not working. before it was working when ap was in local mode. any body have to know is the mac-filtering working in flex-control mode ?
View 2 Replies View RelatedAny chance the filtering features on the 5508 controller code will make it into WCS at some poiint? Being able to sort these lists would be invaluable.
View 5 Replies View RelatedI have come across articles mentioning that URL Filtering can be implemented by using ASA 5505 with URL Filtering Servers. But Websense and other Web Filtering Servers are paid ones ? Are there any free solutions available ? What exactly is N2H2 ? The reason is I don 't want to increase the CPU utilization of ASA by implementing URL filtering within the device. If I have around 30 nodes which connects to the internet via a 2Mbps line through ASA 5505 and if I want to block around say 10 or 15 URLs , will it increase CU utilization beyond permissible limits ? Currently the CPU Utilization is around 10 - 15 . Here's the infrastructure setup .
------------------------------------------------------------
Nodes -->Switches-->ASA 5505-->Internet
-------------------------------------------------------------
Not sure if this belongs here on in a different section. We are in the process of purchasing a new ACS 5.x appliance. I would like to take a look at implementing WPA2 Enterprise with our Cisco APs.
View 4 Replies View RelatedHow to get the 1231g to work with WPA2-PSK (AES). My laptops cannot authenticate using this config but connect fine to the 1242AG. Below are some of the specifics:
1231G
Radio Type: AIR-MP31G
IOS Ver: 12.3(8) JED
Multiple SSID
Encryption: AES
Key Management: Mandatory WPA
*Laptops can connect to SSID with WEP
I, at work, have recently deployed a very small stub network in Papua New Guinea, an office that has no more than 7/8 users. This simple network consists of:
1 x 2611xm Router
1 x 2960 24port Catalyst Switch
1 x 1131ag AP
[Code].....
how to configure WPA2 /AES on 877W. Also how to enable IPS on the router. My ios is 12.4.11T1
View 7 Replies View RelatedI have 3 computers running Windows and 1 running XP Pro.ISP is Charter. All these were connecting fine until Tuesday night storm came through. Power was out for a while due to a power pole being knocked down. Cable was on this same pole I think. Next day none of my computers could connect wireless.Used Ethernet cable direct to modem and finally got connection. To make a long story shorter, I find that now I can only connect unsecured or WEP. Can't connect using WPA2 at all.I wonder if it is possible that the ISP has blocked something to limit the speed?
WEP is only 54 MHZ
WPA2 is upto 300MHZ
Tried 2 different Netgear routers with same results Currently configured for WEP shared
System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Pentium(R) Dual-Core CPU E6600 @ 3.06GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 8190 Mb
Graphics Card: Mirage Driver, 2 Mb
Hard Drives: C: Total - 476837 MB, Free - 428341 MB;
Motherboard: Gigabyte Technology Co., Ltd., G41MT-S2PT
Antivirus: Norton 360, Updated and Enabled
My WPA2-Personal wi-fi connection doesn't find any wired computers to my dsl router. I am having 5 computer in my network, 2 wired 3 wireless. When I switch back to WEP everything is fine tho but then I am loosing the n standard connection. My router is "Linksys Wireless ADSL2+ Gateway".
View 1 Replies View RelatedI have a Gateway connected to my router with wpa2-psk and have internet access. I have on old Dell with an an old d-link card that can't access the router because it won't do wpa2. I'd like to connect it to the other laptop to gain access to the internet because it is inconvenient to plug the old Dell directly into the router.
View 1 Replies View RelatedTrying to get my wife's older laptop to connect to our wireless network. The laptop is a HP pavillion zv5000 running windows XP sp3. The network adapter is a Broadcom 802.11 b/g WLAN. The router is a cisco linksys WRT54G2 V1.5. The security on the network is WPA2 using TKIP+AES encryption. I can't get it to connect to the wireless network. If I bump the security down to WEP it will connect just fine.
View 5 Replies View RelatedI want to know how to have a double SSID but it's forbidden to have a wireless interruption with the wep which is on my cisco aironet 1242AG. I need to have wpa2 in addition of the wep.
View 2 Replies View RelatedI am in the process of moving our office and part of the task involves relocating our existing wireless access points. They are all 1242AG's running the c1240-k9w7-mx.124-10b.JDA3 IOS. I would like to change the security on the access points to WPA 2 but that selection is not available. I think upgrading the IOS will solve this problem but I am not sure. So I guess I have two questions:
1) Does this Cisco model support WPA 2 ?
2) If so what IOS do I need to load to make WPA 2 available?
I purchased quite a few of these APs as they listed the ability to function in WPA2-PSK mode, but on initial configuration I see that this may only apply to standard AP mode? Is there any way to configure WPA2-PSK on an AP541 to AP541 bridge? Unfortunately, this is a must have for our client. If not, what would allow for this with an external antenna port?
View 4 Replies View RelatedI am looking for an example configuration of a Cisco 1310 running 123-7.JA2 Z Ios, for Wpa2 using an external Cisco acs radius server.
View 3 Replies View RelatedI have two Cisco 1260 autonomous access point setup with WPA2-PSK. They are up and running. In that configuration it is Personal security since the security is only provided by the shared key. I'd like to add MAC filtering so in my open authentification I just scroll down to "with MAC filtering" and save. Doing that crash everything and switch to Enterprise security which need to have a Radius server (the shared key is not saved anymore and by using a device I now see 802.1x security).
View 1 Replies View RelatedMy customer has this OOOLD deployment where some AP1231 are still working they are upgrading part of the WLAN to LWAPP but may need to leave some AP in stan alone for a while.I need to configure a new SSID that needs WPA2 enterprise AES but it seems that this version does not support WPA2. If it doesn't, from what version on is supported?
View 9 Replies View RelatedWith this customer they have 4 floors with on each floor a Cisco Aironet 1130AG. At the moment they are using WEP as a protection with a really long key. The users find this annoying, but I am more concerned about the security perspective. So I want to implement WPA2 with a shorter key for the people to remember. On one floor, I also want to add a public network when other people want to connect and just need internet access. How to change the current set-up and regarding the security and implementation. If all of the Access Points could work togheter and just be 1 wireless network. I don't know if this is possible and how to do it? For the public network I know there also need to be some changes in VLAN's. The firewall is a cisco ASA5505.
At the moment I am running this configuration: I tried setting up this with the GUI, but it doesn't look like the configuration at the moment is shown in the GUI or maybe I am just looking in the wrong places. [code]
At home I have router provided by my ISP, unfortunately it does not cover my entire house. I have Cisco AP 1131 and would like to run it as repeater for my existing wifi network. I tried to google it but could not find good tutorial how to setup Cisco AP as a repeater for WPA2 secured network.
View 2 Replies View RelatedI have a Win2008 server set up as a radius server (192.168.32.71) and a stand alone AP (192.168.201.9) [code]
View 3 Replies View RelatedCisco 1120B APs don't support WPA2/AES by default. However, I was wondering if there is any firmware upgrade that could make this AP model compatible with WPA2/AES or should I just replace these APs?
View 3 Replies View RelatedI have a problem with Cisco WLC 2106 (SW: 7.0.98.0) and LAP1262. The client roams to new AP, associates with the new AP and authentication (WPA2 with EAP-TLS) runs fine until WPA2 key exchange.
The first WPA2-Key-paket from AP (1 / 4) is sent twice. On a closer look at those packets with Wire shark, i've found out the first is encapsulated into a 11n-frame (A-MSDU). The resent frame isn't. This figure shows the first WPA-Key-packet:
The next figure shows the 2nd key-packet, without 11n-encapsulation: The problem, that occurs a very long roaming-time with about 5 seconds. As you can see on second figure, the second wpa-key is sent 5 seconds after the first.
Some details:
Client: Tablet PC with Intel 6230 agn
Controller: Cisco WLC 2106
AP: LAP 1262
Controller SW: 7.0.98.0
Encryption: WPA2-AES
Authentication: EAP-TLS
This problem occurs just on 5-GHz interface with 40 MHz channel bandwidth.
I'm trying to connect an old HP desktop I have (running windows XP) to my home network, which uses WPA2 encryption. I'm pretty much a network noob so I have no idea what's going wrong. Right now it's stuck on "validating identity" when I try to connect to the network.
So far in my quest to solve this problem, I have:
1. Downloaded Service Pack 3.
2. Tried disabiling Authentication for the network.
From reading around forums I've learned that apparently after downloading Service Pack 3, I should be able to choose 'WPA2' as an option for "Network Authentication" on my Network's properties page. It still isn't showing up for me though.
Since my desktop can't connect to the internet, I couldn't download Service Pack 3 directly so I downloaded it on another computer, put it on a flash drive, and then uploaded it to the desktop. I'm not sure if this could be the problem or not, but if it makes a difference, I can verify on my Computer's properties page that I am running Service Pack 3.
My network adapter is a "Hawking Technologies HWP54G Wireless-G PCI Card". Is it possible that this card does not support WPA2? How do I tell? If it doesn't support WPA2, am I **** out of luck for trying to connect to my network without upgrading the card itself?
Why doesn't "WPA-2" show up as an option for my Network Authentication type?
Is there anyway to have my wireless network secure on an WPA2? I am sharing with my landlords network. Everytime I try to create a 14 digit password it disables my connection. Does my landlord have to create a password or can I just do it myself?
View 1 Replies View RelatedCould you find wpa2 of the airlink 101 super g wireless router for me?
View 1 Replies View Relatedwhat is my wireless internet wpa2 password.
View 1 Replies View RelatedI have bought B&N Nook color it is an e-reader. And it couldn't connect to my WiFi use the WEP so I changed my wireless setting to WPA/WPA2 now my e machine N-10 will not connect to the network.
View 1 Replies View RelatedI have an old computer (xp circa 2005) and I would like to connect to my n router wich is using wpa2. The old computer doesn't seem to have wpa2 as an option, is there anything I can do?
View 1 Replies View RelatedI just bought a new samsung laptop and i was not able to connect to my wireless router
--I go into Wireless Network Connection and i am able to see my router along with the other routers in the area
--I try to connect it doesnt let me, i change the pw on my router doesnt let me, i remove the pw from the router doesnt let me.
--I connect a Ethernet cable to my laptop, im able to connect.
--i Go to the samsung website dl all the drivers for the wireless network, cant connect
--I use a wirelss adapter that i have for my desktop which works on my desktop, it cant connect
--i grab my little brothers cell phone and activate wireless hotspot, i can connect
--i switch my router settings from WPA2 Personal to WPA, i can connect
--while connect to WPA i switch it back over to WPA2 personal, i get disconnected.
my question now is. why cant i connected to WPA2 personal? Is my connectivity limited on my laptop? can i only connect via WPA or WEP?
--Asus wireless router i connect my tablet,cell phone adapter with my desktop, 2 other phones, another 2 laptops, 2 other tablets and another desktop to it. I never had an issue with any of these items.
--Windows 7 on all machine except for Linux on 1 laptop.
--Samsung laptop has all the windows updates install and all the drivers for the network and even gpu up to date.