Recectly we replaced Cisco 2100 Series LAN controller to Cisco 5508 Wirless LAN controller , I downloaded WebAuth Bundle from my Old LAN Controller ,when i am trying to upload to my New Wireless LAN controller ,its not uploading and also it gave me uploading failure error message .
View 2 RepliesI have a new fresh 5508 release 7.0.98.0 When I try to download (I mean upload to the controller) a customized Webauth bundle in .tar format I have the following message error in the syslog :*TransferTask: Oct 29 12:56:08.894: %UPDATE-3-UNTAR_CMD_FAIL: updcode.c:2832 Error during untar of webauth bundle. Tar returned 256.
View 17 Replies View RelatedI have in the past downloaded the webauth bundle to a wlc 5508 running 7.0.98 successfully. I am trying to upload a new bundle after modifying the AUP but I get an error after the download to the wlc.
The error with FTP or TFTP is
% Error: Webauth Bundle file transfer failed - Unknown error - refer to log
I've tried to copy the unmodified bundle from the zip and get the same error so I don't think it's the login.tar file.
I would like to get webauth bundle sample to create custom page for our AP controllers but I'm unable to find the sample .tar within the WCS itself.Some other WCS manuals has references in them that says there should be link to download sample from WCS but clearly 2106 hasn't got one.There's one in download section "webauth bundle 1.0.2.zip" but this is for registered partners and costumers, we are not registered as partners and cannot download the sample ourselves.
View 2 Replies View RelatedI understand that Cisco have at long last provided a facility to separate HTTP web authentication from HTTPS WLC management on WLC code 7.2.x for the new 5500 series WLCs.
My question is does Cisco intend to provide the same much needed functionality on the 4400 series WLCs that are running 7.0.x code? I was looking through the release notes for v7.0.235.3 code and that did not seem to mention this functionality. I know we can get around the problem by purchasing an SSL certificate so that guest users with web authentication do not have to see the same security warning each time they log in but the idea to separate the HTTP web authentication from HTTPS WLC management seems so much simpler.
I have powered ON WLC(2100 Series) and connected LAN port from WLC to my PC. To access WLC GUI what is the factory default IP address?
I connected Console Port of WLC to Serial port of my PC. I have configured WLC as per the WLC quick guide.
Management Interface IP address :: 10.40.0.4
Management interface Net Mask: 255.255.255.0
[Code].....
The result is same even when below commands are used Configuration modeport adminmode all enablenetwork webmode enablenetwork secureweb enable
I have a problem with our WLC 2100 series (2125). Basycally internal DHCP server configured on WLC is not working. I have one AP connected to port no 7 (PoE) to bypass and eliminate problem with other equipment.
Port no 7 details:
IP Address: 192.168.30.10
Netmask: 255.255.255.0
Default router: 192.168.30.1
DHCP Server: 192.168.1.250(code)
We need WiFi security on our corporate SSIDs locked down using certificates, we are using wlc cisco 2100 series. We need these on every workstation, laptops etc.
View 6 Replies View RelatedWe have 4 1142N LAPs that I want to divide between an internal wireless and a guest wireless network using the controller. Currently all of the APs are on an established internal network, but I want to migrate one over to a test guest network before buying more LAPs to augment the networks further. Currently the port connecting to the WCS from the 3560 switch is configured as an access port using VLAN 10. Whenever I make it a trunk port carrying VLAN 10 as well as the other ports we will be using for the guest and ap-manager networks, I lose connection with the controller. To me this implies that the port on the controller is configured as an access port as well. In the documentation I found for the controller it states that by default the ports are al configured to be trunks, but it appears as though something was changed by the previous tech. All of the APs are connected to other switches, not to the controller itself.
1) How can I get the port on the controller back to being a trunk port
2) Can I use the internal DHCP server for the guest network if the subnet is different than the management subnet, or will I have to use another external server and relay/proxy it through the controller to give guest clients IP addresses?
I'm trying to test fast roaming using a Cisco 2100 Series controller and 2 1140 APs. The initial authentication succeeds fine and the wireless connection works ok using WPA2+CCKM and LEAP with a Cisco ACS radius server.The problem is that the client does not attempt to preauthenticate with the other AP because the RSN Capabilities IE in the AP beacons and probe responses do not set the RSN Preauthentication capable bit. I can't figure out what it takes to get the APs to indicate to clients that it can do preauthentication. I'm been crawling through all the documentation I can find, to no avail.
View 1 Replies View RelatedI have a Dell Latitude D530 - I am only able to,download at a speed of 2.95 while I can upload at nearly 7,My PC that is attached to the same provider will,download at 7.84 and upload at 7.96.
View 7 Replies View RelatedI have 2 5508s (foreign and anchor both running 7.2.110.0) with an open WLAN configured via mobility anchors. This configuration works and has no problems. My next task is to incorporate a webauth page (accept/reject) to present the clients with AUP information, etc. On the foreign controller I created a test WLAN (open) and setup webauth Passthrough using the Cisco webauthbundle (wap.html), this works as intended, no issues. However I am at a loss as to how to incorporate the webauth Passthrough functionality on the WLAN that is configured for the mobility anchor.
View 2 Replies View RelatedI am using webauth and need to install a SSL cert to prevent the "There is a problem with this website's security certificate" message. I have a Wildcard cert that was issued by Network Solutions that I use on a couple web servers I run, and want to know if I can use that for the WLC? It's a pks cert and I think the WLC needs to use a pem cert, so I converted the wildcard to pem. Or do I need to purchase a cert that is not a wildcard and is in pem format?
View 7 Replies View Relatedi am getting an error during the Upload of Login page for WLC 5508 customized.After the upload is completed i receveid the error "Error extracting webauth files."I tried to create the file *.tar with different program (winrar, 7zip, gnu tar, etc)
View 3 Replies View Relatedgetting process to upload my website on WWW Server?
View 1 Replies View Relatedevery couple of minutes my internet stop sending data but the downloads keep running, i can see it in my net meter, my skype get disconnected, online games too, this happen specially between 11 am and 9 pm, i know that my isp during pick hours is most probably the problem, but my friend that lives close dont have this problem with the same isp. is there anything i can do to solve this?
View 1 Replies View RelatedI was wondering why are upload speeds so much slower then download speeds with residential IPS. I know downloading is alot more common then uploading something. Does it cost more or something, for the ISP to send information out.
View 5 Replies View RelatedI'm trying to install a webauth certificate -- it works fine when unchained, however once I add the additional information the installation fails. I am using the same root and intermediate certificate information as last year, and it worked fine then. I can recreate last year's pem file with the chained information and it installs fine, so it's only when I include the new device certificate information that it fails. The certificate installs fine when it's not chained, I'm not receiving any openssl errors, and I'm not using openssl 1.0.
View 1 Replies View Relatedi've upgraded our WLC 5508 from 7.0.220 to 7.2.115.1.For our guest WLAN we use web authentication with customized startpage, no login error page and no logout page. The customized login page is displayed correctly. After successful authentication the browser is forwarded to the default CISCO login page "login.html". No further autentication is possible, also no internet access.Reload the customized webauth bundle to the controller didn't change anything. Is there a change in the HTML/Java code of this controller version? I didn't find any hint in the release notes. Or do I need the newer web authentication bundle with version 1.0.2?
View 6 Replies View RelatedFirst this is my setup, i have a 100x100 mb fiber pipe at a location i am working at. i am comming out of a cisco fiber router to ethernet. i am coming straight from the fiber switch to the computer at a 1gb connection. So my problem is when i try to upload to my ftp server via windows explorer i can never get about 1.5mb, but if i upload via command prompt it goes at about 60mb upload, so the pipe is good. So you say why dont you just use the command prompt, well i have specialized gear here that run xp emmbedded and it does this via the windows explorer. I have tried 4 other computers and they all do the same thing. I tried a UDP video stream and worked at over 10mb stream. but all the ftp uploads cap out at 1.5mb.
View 3 Replies View RelatedMy broadband seems to have stopped uploading data. I run broadbandspeedchecker and it shows download of 8 and then upload doesn't work at all and shows 0.I can browse some pages, but don't have full use of all pages like my CMSA admin, can log into my hosting using FTP, but can't access directories, Skype doesn't connect.Even stranger is it all works for a few seconds, even connecting Skype, but then stops again.I have completed a few system restores going back a week before the initial problem and still no joy!
View 7 Replies View RelatedBasically i'm an employee of a Pro-Gaming team, and as a Job I stream games live, as well as upload game videos to youtube. I've been encountering a problem for a month or so now and had little success of fixing it, which is costing me quite a lot of money and viewers! Basically, I use a program called Xsplit to stream to a website called Twitch.tv (no-one else i've spoken to has the problem I have). I will randomly disconnect/reconnect instantaneously which puts my stream down for 5-10 seconds at a time, then goes back up again. Ultimately the viewing experience is ruined by this and I am on the verge of being replaced!The problem can occur either once a week or once every minute.. it just does it whenever it wants. I have 200mb/10mb internet so my upload should in theory not be an issue.
Things I have tried and done so far:
- Replaced the Ethernet Cables.
- Replaced the Routers.
- Bought a Network Card to try as opposed to my Motherboard port.
- Reformatted my computer and installed a different version of Windows 7 multiple times.
- Spoken to Twitch.tv and Xsplit about their programs as well as used multiple versions of the Xsplit client.
- Spoken to my ISP who say everything is fine.
Region : Australia
Model : TL-MR3420
Hardware Version : V1
Firmware Version : TL-MR3420_V1_121123
ISP : BIGPOND
My problem is whenever I upload anything, my modem disconnects. My USB Dongle is a Telstra Ultimate 3G Sierra Wireless AirCard 312U. The problem is not present whenever I connect the dongle directly into the USB port on my LapTop.
I have a DSL connection with AT&T. It is rated at 6Mbps / 768Kbps, but it closer to 4Mbps / 600Kbps. I have a speed stream 5360 connected to the DIR655. Devices on my network are primarily wireless and include; several laptops, a desktop (which is wireless n), a couple phones / Ipods and a Wii that I watch Netflix on.
I do a lot of Photography and a handful of video work, and backup / share everything online. When I am uploading photos, even with "conserve bandwidth" turned on in the uploading application, browsing sites is very slow, but reasonably functional. If I try to upload a video to YouTube, I can barely manage to do anything else the entire time it is uploading. I've tried to plan and run all my uploads overnight, but then Netflix is unusable when I want to watch it at night.
I've tried several different things, first off, with getting the Wii to function for Netflix, I turned on the QOS engine, for the IP that is assigned to it, and set it to priority 1 for all ports. I also have a entry in the QOS engine for SSH on port 23 with a priority of 10 because of how laggy my SSH sessions are. I do not have any other entries in the QOS engine, is that a problem? Should there be entries that cover other services and assign them a lower priority?
I have enable traffic shaping and Automatic uplink speed turned on. It measured the uplink speed at 695kbps, which is pretty accurate. I have Automatic Classification off, and Dynamic Fragmentation on. WISH is enabled also. I'm set to mixed n, g, and b, I'm not positive, but I do think my older laptops only use wireless b.
Even more importantly than the Netflix would be to allow me to use the Internet in a functional manner while I am uploading, that would solve a lot of problems. It seems that the uploads just hog every last bit of upload bandwidth and don't want to make room for even the small requests that one needs to send to view a web page.
We have disabled the WebAuth SecureWeb on our 5508 WLCs so Guest users can access the guest splash page without the certifiacate error. The controllers are currently running 7.3.112.0. Everything works fine with the WebAuth SecureWeb enabled, but once we disable the guest users are not redirecting to the splash page anymore. I remember having to reload the controller in the past to disable HTTPS completely, but is this still the case? I don't see any documentation supporting the need to reload.
View 2 Replies View RelatedI have a custom webauth page installed that I am using with web passthrough authentication on my WLC2006 in order to put up a acceptable use policy page. The WLC uses HTTPS to display this which causes a security certificate warning to appear if I go with the WLC's own self-signed certificate. Is there a way I can get the WLC to use plain HTTP to display this page instead so I can eliminate the warning? I have already tried installing a trusted 3rd party certificate on the WLC, but I have this very strange problem where mucking with the WLC's web authentication certificate in any manner causes all network activity on the WLC to break except for CDP and ARP, essentially leaving the WLC dead. Three weeks of troubleshooting with Cisco TAC has yielded no progress on that front so now I am trying to bypass the need for a security certificate altogether since I really don't need to encrypt my acceptable use policy page.
View 13 Replies View RelatedWeb auth redirect URL gets dropped if stateful firewall is between webauth host and switch management interface. Aaron at Cisco live london kinda hinted about maybe Cisco working on this ? We can't disable stateful inspection. Is there any other solutions or workarounds ?
"Although this approach introduces additional hops in the return path from the switch to the host, it produces negligible load on the default router and intervening infrastructure since only the WebAuth traffic from the switch to the host follows this path. In campus designs that do not use SVIs on the data VLAN,6 a default route is typically already configured. In this case, no additional configuration is required to support WebAuth.
However, problems may arise in the case in which traffic to the default router is bridged through a stateful firewall. The original SYN packet in the TCP handshake is consumed by the access switch, so the first packet that the firewall sees is the SYN-ACK packet from the access switch. Stateful firewalls typically drop SYN-ACK packets if they have not seen the original SYN packet.In this case, you will need to turn off stateful inspection for ports 80 and 443 on the firewall."
We are trying to get the waep template (default no changes) from the Cisco WebAuth bundle to work on a 5508 controller.
We've setup the controller to use the custom login.tar that comes with the waep template folder in the bundle. We setup the WLAN to work off the global template and we used the config network web-auth secureweb disable command to allow only http rather than https (which is supposed to work in 7.2 code)
When we test with the custom bundle, we get no answer from the controller, just a url of [URL]
If we turn custom off, and use internal everything works...
Just to be clear.. we aren't looking for authentication (user and pass) we are trying to do the enter your email and click accept to the aup method.
I have been given a task to upgrade 8T1's bundle to DS3 Fractional circuit. We are currently using 2821 router with 4 VWIC-2MFT. What card/module I need to order for upgrading to fractional DS3. Also are there any compatability issues with ISP or local router.
View 6 Replies View Relatedhow can i remove webauth files from WLC?I have few versions of login.tar file used for web-authentication. After uploading a new login.tar file, the wlc still show old webauth bundle files. I tried to remove customized webauth login from wireless LAN, issue clear webauth-bundle and show>custom-web webauth-bundle WebAuth Bundle does not contain any files but when i upload new login.tar that does not include files from previous login.tar, i still get the old webauth. Is it possible to delete extracted webauth files from the controller using CLI?
WLC is running 7.0.116.0 code.
What is the command that can show the ACE Bundle (Like: ACE-4710-02-K9, ACE-4710-04-K9). We have ordered one ACE with 4G BW, and another one with 2G BW. But nothing shows this fact using "show hardware" and "show inventory" commands !
View 1 Replies View RelatedI need to understand security bundles. I purchased a Cisco Security Bundle, Advanced Security, 64F/256D. part number CISCO3825-SEC/K9. My expectation from this device was that I will get an IOS based firewall with no need for an additional firewall module. however, the supplier is telling me that I have to buy a firewall module to use the feature. Isn't the bundle supposed to come with all I needed since is a bundle?
Is there any command I can use to verify if this device is really what I paid for? what can can I check for in the sh inv and sh ver commands? I don't see any information from these commands.
To understand and configuring VPN setup to give secure access to my DB & Application Server exist in my Datacenter, to other Service Provider organisation. They need to access those DB & Application Server sitting at their company LAN itself.
My DC Setup :-
1. Core Router 7609 with SPA-IPSEC-SSC400-1 ( Cisco 6500/7600 IPSec VPN SPA Bundle 1 )
2. Core Switch 6513 with FWSM, ACE, SVC ( Network Analyser ), SUP 720
3. Distribution 6509 SUP 720
All the DB & Application Server connected to Distribution Switch in various VLAN,The Server support team from another company need the access to those, for that we will take MPLS link connecting out Core Router.