I got a new 1042 AP and connected it to the network. I have a 2504 contrller with 6 AP's already on it. I thought I could just plu in the new AP and it would show up in the AP group. Instead it shows up as a rouge AP. How do i get the new AP to show up in the default group?
View 24 RepliesI was searching a lot , but I couldn't find any good example, how to configure DHCP server for our wireless clients on Cisco Autonomous AP. I'm looking for example how to configure Dot 11 radios and BVI interfaces.
I have no problem to configure DHCP server on BVI 1 and VLAN 1 ( native VLAN ) interfaces, but there is a problem with other BVI's and VLANs. Maybe this feature isn't supported? Maybe DHCP server feature is supported to work just with default BVI and native VLAN?
Wireless is working on one laptop but not the other. Default gateway not showing when running command prompt, ipconfig /all
View 5 Replies View RelatedWhy is it that when SNMPv3 user "TestV3-User" was added to my SNMPv3 implementation on my 6506 switch, the group/MD5/Emcryption settings are missing for this user (See "sh snmp user" output)???
router#sh snmp user
User name: TestV3-User
Engine ID: 80000009030000249706EFC0
storage-type: nonvolatile active access-list: test
[Code]....
Is it possible via Group Policy to prevent the domain computers from automatically creating default favorites when the users log in? Currently on the Favorites Bar it creates "Web Slice Gallery" and "Suggested Sites", as well as a "Websites for United Kingdom" folder. The domain controller is running Windows Server 2008 R2, and the clients are running Windows 7.
View 4 Replies View RelatedI want to set up FWSM 4.1 on Cat6509 with multiple bridge groups in one transparent context. (as the manual says it can support up to 8 bridge-groups and the intent is to save security contexts) For a host in VLAN21 (b1_inside) to talk to a host in VLAN41 (b2_inside), traffic needs to be go out to MSFC which routed back the traffic through the FWSM. My question is how can I define a default route per bridge-group, I would assume FWSM should take the following two default routes per bridge-group interface but it won't;
route b1_outside 0.0.0.0 0.0.0.0 10.11.75.1 1
route b2_outside 0.0.0.0 0.0.0.0 10.11.76.1 1
seems like it allows only one default route per the context and gives me an error - "ERROR: Cannot add route entry, possible conflict with existing route"
How can I achieve outside per individual bridge-group?
FWSM context config:
Interface VLAN11
nameif b1_outside
bridge-group 1
security-level 0
!
Interface VLAN21
nameif b1_inside
[code]...
I'm currently working on a plan to migrate our 6500's over to our new 7010's. At the time of the migration I want to tighten up our OSPF design and configure OSPF for "passive-interface default" then allow only those interfaces that should have OSPF neighbors to send the hellos. The issue is that the command is not showing up under the OSPF process. What's even more interesting is that the Nexus 5.x Unicast Routing Configuration Guide shows that the "passive-interface default" command should be an option to enter.
I'm currently running version 5.1(4) (though looking to upgrade to 5.2 during my migration testing). I would rather configure the passive-interface via the routing process versus having to enter it on every interface.
Can 2 Aironet 1042's using WDS handoff a session between them without any other network hardware needed?
View 1 Replies View RelatedI'm trying to mesh a 1522 MAP through a 1042 RAP but this doen´t work. I get strange messages on the trap log:
1 Mon Mar 26 18:40:19 2012 Mesh child node 'f0:25:72:d9:69:6f' has changed its parent to mesh node '58:35:d9:c6:60:10' from mesh node '58:35:d9:c6:60:1f'. .. .
3 Mon Mar 26 18:37:13 2012 Mesh child node 'f0:25:72:d9:69:6f' has changed its parent to mesh node '58:35:d9:c6:60:10' from mesh node '58:35:d9:c6:60:10'. 4 Mon Mar 26 18:34:00 2012 Mesh node 'f0:25:72:d9:69:6f' has changed its parent 5 times in last one hour.
5 Mon Mar 26 18:34:00 2012 Mesh child node 'f0:25:72:d9:69:6f' has changed its parent to mesh node '58:35:d9:c6:60:10' from mesh node '58:35:d9:c6:60:1f'. 6 Mon Mar 26 18:33:44 2012 Mesh child node 'f0:25:72:d9:69:6f' is no longer associated with mesh node '58:35:d9:c6:60:10'.
[code]....
If i debug the 1042 i also see "... has 1 AES-CCMP TSC replays messages..."I have some 1522 MAP meshing through 1142 working fine on same 5508 controller version, i think there are few differences between 1042 an 1142.
I have an Aironet 1042 wireless AP if I create an SSID with no security it shows up as wireless N when I see it on a windows 7 laptop. As soon as I apply any security settings is shows up as G and not N. I just want to be able to authenticate with a Windows 2008 server running NPS - this works fine but I obviously want to connect at N speed and not G.
View 13 Replies View RelatedI have a Mesh architecture with 2112 WLC and 1042 APs I want just to know if I can connect one 1310 AP to the ethernet port of a mesh 1042 AP with ethernet bridging enabled.
View 4 Replies View Relatedi'm trying to enable WDS with authentication on a Cisco 1042 AP. The unit itself will be the WDS master and Radius server as well it will serve clients (not that many). The AP is running version 12.4(25d).After multiple tries of configurating, I keep getting the same issue: as soon as I connect to the SSID, I can enter the username and password but authentication fails - hence the message in my console:
%DOT11-7-AUTH_FAILED: Station xxxx.xxxx.xxxx Authentication failed. Every configuration I made was started from factory defaults of the AP.My current tests are with one AP only and if tests go successfully, I will add more infrastructure AP's to the setup.
hostname WDS_SERVER!logging rate-limit console 9enable secret 5 $1$FcRQ$T5MglV/0ybzKEfk3DoN/J0!aaa new-model!!aaa group server radius InfraAP server 192.168.28.34 auth-port 1812 acct-port 1813!aaa group server radius Clients server 192.168.28.34 auth-port 1812 acct-port 1813!aaa authentication login APlist group InfraAPaaa authentication login WirelessClients group Clients!aaa session-id common!dot11 ssid Test authentication open eap WirelessClients authentication key-management wpa version 2 cckm guest-mode!username Cisco password 7 14341B180F0B!bridge irb!interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid Test ! antenna gain 0 station-role root bridge-group 1 bridge-group 1
[code]....
I've tried the configuration from the Cisco config guide as well but without any luck [URL]
my computer is a dell dimension 1100, with a Linksys WMP54G wifi card, running vista home basic.In the wifi thing in the notification area, it shows two wireless networks, One is my normal SSID (Lower Net), and one is "Unidentified network". They are both on one wireless connection (Wireless Network Connection 3). When i try to go on the internet, it says i'm not connected. i tried disconnecting from the unidentified network, but that disconnects me from lower net too.
View 13 Replies View Related2504 WLC, 1042 AP's
I have my NPS server setup, Group Policy, Certs (RAS+IAS), DHCP option 43, DNS A record
If I look in the event viewer on NPS, it says
Log Name: Security Source: Microsoft- Windows -Security -Auditing Date: 5/22/2013 12:36:37 PM
Event ID: 6272Task Category: Network Policy Server Level: Information Keywords: Audit Success User: N/A Computer: mfs1.Mitchell. internal Description:Network Policy Server granted access to a user.
[Code] .....
But the laptop won't connect or get an IP.
What dbm or mw each of the power local settings are? I see on a 1042 from -1 thru 20 and am assuming 20dBm is 100mW.
OM-ess-lab-WLAN1(config-if)#power local ?
<-1 - 20> One of : -1 2 5 8 11 14 17 20 maximum Set power to allowed maximum
Do the 1042 Autonomous APs support GRE tunnels?
View 4 Replies View RelatedThere is WLAN with Nortel APs witha captive portal. We are migrating to a Cisco Solution and we have AP 1041 / 1042
How can I configure Captive Portal in the 1041/1042 APs
I ordered controller 2504 and will arrive soon. I want to know that after configure the initial setup of 2504 (i.e. AP manager , Management IPs etc) and defining the DHCP for AP. Will the 1042 lightweight AP will register with the controller automatically or i need to manually define the AP (MAC address) on WLC. and also whether the Option 43 and 60 are correctly defined?
Management Interface: 10.10.22.15
AP Manager Int: 10.10.22.16
ip dhcp pool WLAN103
network 10.10.3.0 255.255.255.0
[code]...
this note is from the 5508 controller config manual, does this apply to 1040 access points in a mesh network?
Note:The recommended power source for MAPs is either a power supply or power injector. PoE is not a recommended power source for MAPs.
I am not able to join 1042 wireless AP with 2106 controller, even i mention that controller ip is 192.168.200.5 it try to join with controller on 192.168.200.6 ip address always. following are the error logs i can see on console.
*Nov 30 19:50:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:20.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Nov 30 19:50:21.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.200.6 peer_port: 5246
*Nov 30 19:50:21.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.200.6
*Nov 30 19:50:21.436: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
[code]....
I would like to confirm if it is possible to downgrade AP 1042 from CAPWAP to autonomous? I want to buy the AP model AIR-LAP1042N-A-K9. But i don't sure if in the future it could support this feature.
View 9 Replies View RelatedI have a 5508 WLC licensed for 100 APs. I have 1 - 1042 LAP connected for testing. I have DHCP configured for the AP, and it gets an address of 192.168.254.100/24 - the controller's management interface is 192.168.254.99/24. I can see that the AP is getting an IP and I can ping it from the controller. However, I simply do not see the AP associating. I enabled capwap debiugging and watched the events, but I didn't see anything crazy that clued me in. What am I doing wrong?
The controller is v6.0.199.4
Every time I have set these up in the past they have been pretty straight forward. I haven't gotten too deep into the config on the WLC becuase I don't want to cause more issues.
I am trying to configure a Cisco 1042 autonomous AP and have ran into some problems. I require 2 broadcasted SSIDs that use WPA v2. When I only have 1 of the SSIDs enabled, I can authenticate with no problems. When I have both SSIDs enabled, I can connect to one of the networks, but not the other. I have verified the PSK multiple times, but the logs still show dot11-7-auth_failed. If I remove the working SSID and make no changes to the SSID for which authentication previously fails, everything works fine. Upon adding the other SSID back, I run into the same authentication issue.
View 3 Replies View RelatedWe have purchased Cisco 2504 Wireless Controller (One) and Ciscon 1042 Access Points (Five). At present I am going to use 3 access points only.I have attached a simple diagram of our office network. We have more than 30 VLANs configured in Core Switch, we are planning to give wifi access to only 3 VLANs.
1. VLAN 121 ( IP Segment - 10.52.121.0 /24)
2. VLAN 116 ( IP Segment - 10.52.116.0 /24)
3. VLAN 100 ( IP Segment - 192.168.100.0 /24) (Guest)
I would like to use LDAP or ACS for authentication purpose.
I want buy an Access point which cover 300 Meter coverage Area.
Have any data sheet or link where I can found which AP coverage how many Area, Like 1042 Access Point cover how many Feet Space.
We are experiencing problems with Apple Ipads on a large scale network that we install and maintain, the Ipads seem to join the network with no problems (bit slower than laptops etc) but will then disconnect for no apparent reason at random intervals. We have ran laptops on the same AP's and in the same area and no similar probems occurred, we are using IOS Cisco 1041's and 1042's, we have seen one of the Ipads's sitting quite happily on a 1042 2,4ghz radio and then it disconnected and went to the 5ghz radio. We are getting similar disconnects on the single radio 1041.
View 13 Replies View RelatedIn my class room, a lot of new Dell notebook (university purchased) all of those are the same model. Those came with 2.4&5Ghz WLAN NIC.
So, my WLC-based AP in that room which is Cisco 1x1042 & 1x1252 running in light-weight.This make huge congest on 5 Ghz. All of my 41 NB go for 5Hgz. And Zero client on 2.4Ghz radio, 2.4Ghz is not utilized at all.
I have read a lot of those related discussion. But I even can not find one that need to utilized BOTH of band. Most of those discussion talking to band-select which is "this feature only goes in one direction from the 2.4 GHz range to the 5 GHz not visa-versa."
My constrint is We can not touch the NB. Because this is university, much many diverse user loging in.
I have 1042 Light weight AP and i want to convert it to Autonomous mode . i dont find any particular image for this conversion ..when i try to find autonomous image for 1040 its showing "c1140-k9w7-tar.124-25d.JA1.tar"........can i use this image ?...
View 1 Replies View RelatedMy access point 1042 series in light weight mode reloads itselft every time it booting, sometimes it boot succesfully.
View 2 Replies View RelatedI try to map LDAP Group to ASA Group policy following documentation:
[URL]
This is a config for ASA 8.0. I would have expected it to work on 8.4 as well but I do run into problems. The mapping as shown in LDAP Debug and ASA Log will actually happen but it is overwritten by the "GPnoAccess" Group Policy configured locally in the Tunnel Group. From earlier works with RADIUS I would have expected the user specific Attribute to be "stronger"?
ASA Log:
AAA retrieved user specific group policy (correct Policy) for user = XXX
AAA retrieved default group policy (GPnoAccess) for user = XXX
We use LAP 1042's as our main AP's, and we set those in H-REAP (with Local Switching) in order to let them work properly. This is because our WLC is not located in the AP's local network. This is something that, sadly, cannot change, so this has to stay the way it is now.We also use a freeradius server to authenticate users on our wireless network. In our previous situation, before using Cisco appliances, we would just set our web auth page to a certain URL and make sure that the URL was granted access before authentication. We obviously found out that Cisco implemented this by using a Pre-Auth ACL. As a result we've added the IP adres of that web login page to a ACL and added that ACL to the pre-auth for the WLAN that will use Radius Web Auth. The WLAN also has the Radius servers added to the AAA page, so those are in place.
Now comes the problem though. When I connect to the WLAN that will have to use Radius, and try to open a page it will start trying to load the virtual interface (1.1.1.1) and then it will try to redirect to the web-page that I defined in the External Server. Like I stated, I've added the webpage's IP adres (after resolving it) to the pre-Auth ACL, and when I look at the counters I see that go up every time I try to load a page. Yet the browser on the computer gives me a time-out trying to load the external web-server web auth page.
When I disable Web-Auth all-together, I get internet straight away, so the problem obviously is located in the web-auth settings or ACL settings somewhere, but at this point I just don't know where to look anymore.
I had a new AIR-AP1042N-N-K9 access point and I tried to convert it into lightweight mode with the image c1140-rcvk9w8-tar.124-21a.JA2.tar . I used all the methods but the AP is getting hanged at one position after decompressing the new IOS. The capture of the process is below: [code] After this I am getting the junk characters and everytime AP hangs at this position.
View 4 Replies View Relatedhow to associate an AD group - which i have defined in users and identity stores/external identity stores/Active Directory/Directory attributes to associate with the relevant identity groups - Users and identity stores/identity groups Is there an example of this being done somewhere as i am having problems understanding how to do this from the user guide.All i want to do is associate identity groups with ad groups.
View 3 Replies View Related