Cisco Wireless :: 2112 / Use Windows IAS To Validate WLC Management Users?
Feb 8, 2011
I am having a problem using my Windows IAS radius server to validate management users for my 2112 Wireless Lan Controller.I have defined the radius server and it works ok with the policy for validating wireless clients but not for WLC management users.The Remote access policy seems to be set up correctly as the event viewer on the server shows:-
Event Type: InformationEvent Source: IASEvent Category: NoneEvent ID: 1Date: 09/02/2011Time: 11:06:06User: N/AComputer: UK01DC07Description:User xxxxxx was granted access. Fully-Qualified-User-Name = TRAVEL.OAG.com/Dunstable Admins/xxxxxx NAS-IP-Address = 10.10.45.210 NAS-Identifier = UK03NM01 Client-Friendly-Name = UK03NM01 Client-IP-Address = 10.10.45.210 Calling-Station-Identifier = <not present> NAS-Port-Type = <not present> NAS-Port = <not present> Proxy-Policy-Name = Use Windows authentication for all users Authentication-Provider = Windows Authentication-Server = <undetermined> Policy-Name = UK03NM01 - login Authentication-Type = PAP EAP-Type = <undetermined>
....
But, the WLC log shows:
*Feb 09 11:06:06.612: %EMWEB-1-LOGIN_FAILED: ews_auth.c:2104 Login failed. User:xxxxxx. Service-Type is not present or it doesn't allow READ/WRITE permission..
The WLC just returns the login screen
View 7 Replies
ADVERTISEMENT
Oct 16, 2011
how to configure the backup port for the management interface for a WLC 2112. I see in the documentation that it states:
"Each interface is mapped to at least one primary port, and some interfaces (management and dynamic) can be mapped to an optional secondary (or backup) port. If the primary port for an interface fails, the interface automatically moves to the backup port. In addition, multiple interfaces can be mapped to a single controller port."
But nowhere can I find where it says how exactly to do it. Google seaches have come up empty as well. I am connecting the WLC to a 3750 stack, and would like to have a secondary port from the WLC connected to the second node of the 3750 stack. So far I have connected port 1 (management) of the WLC to a port on node 1 of the stack which is configured as a trunk and everything is workign fine. I have also connected port 2 from the WLC to a port on node 2 in the stack that is configured the same as the port on node one. how to tell the WLC to use port 2 as the management backup if needed.
[URL]
View 2 Replies
View Related
Jul 28, 2011
I have been hacking at this problem for two days and can not figure it out.I built a new computer ASUS M3A78-T and installed windows 7 64bit everything was working fine. I did not validate the version of windows because I was waiting to replace the 500g hard drive with a 120 ssd. By the time I recieved the ssd windows validation time had expired, I tried to validate the version of windows and I could not because the network adapter was now gone! This is strange because when I first built it it as fine and I was all over the internet via broadband ethernet cable.Now the internet box has a red x and will not recognize the cable and no lights are flashing on the back as well. It seems I ned to reinstall the driver so I used another computer and downloaded the only LAN file from ASUS website and nothing.
View 1 Replies
View Related
Mar 12, 2013
we are using ACS4.2 to authenticate wireless users for ssid : copr-wireless. the acs authenticate users via windows database (acs is a member of the windows doamin) no local user defined in acs. there is a mapping between all windows users and a local group in acs (wireless_group) in wireless group i defined the vlan as 80 so that corp-wireless clients will be in vlan 80 and they can take an ip address from one DHCP server in the network. vlan 80 is in our core switch. the dhcp also.
now we added a guest anchor WC with ssid: guest-wireless. we need to auth guests also via ACS/Windows. guests are the same users as corp-wireless but corp for lan only and guest for internet only my prob is that ACS will map guests to vlan 80 because they are member of the domain, however guest users should not have any vlan. it is like if they are in DMZ. they will take ip address from the anchor WC.
View 4 Replies
View Related
Nov 11, 2011
i was able to network my window xp pcs with easy. I control my cyber cafe with handy cafe and it wporks on my xp pc using a switch.(Dlink) My challenge is now how to network window 7 OS pcs that are directly connected to a wireless router for internet. All the systems browse wirelessly via the router but i can't share filesMy major problem is our to use handy cafe to control the systems(15pcs)
View 3 Replies
View Related
Sep 25, 2012
I have a 2112 wlc and 6 1142ap's. I noticed that the 2.4ghz channel is filled with lots of networks but the 5.0ghz area is empty. I tried to manually change the channel but it keeps reverting back to 2.4.
View 11 Replies
View Related
Jan 4, 2012
we are trying to configure WLC 2112 with LAP 1042 but getting following erros on LAP1042. It show the Ap is not supported in controller version 6.0.199.4
*Jan 5 16:52:13.397: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.2.101 peer_port: 5246*Jan 5 16:52:13.398: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.2.101*Jan 5 16:52:13.399: %CAPWAP-
[Code]....
View 1 Replies
View Related
Nov 8, 2012
Do we have enable mod eon 2112 WLC ? Also if we need to access WAP from WLC how can we telnet or ssh?
View 5 Replies
View Related
May 10, 2012
My company has a lot of thier business relying on the wireless network and I am trying to reduce the single points of failulre in my network infrastructure. We have a single Cisco 2112 controller with 10 AP's that I am wondering if it's possible to cluster this with another controller for redundancy purposes?
View 3 Replies
View Related
May 16, 2013
I have a Mesh architecture with 2112 WLC and 1042 APs I want just to know if I can connect one 1310 AP to the ethernet port of a mesh 1042 AP with ethernet bridging enabled.
View 4 Replies
View Related
Jan 2, 2012
I am having a trouble with using iTunes, iPhones and iPads on our Wireless LAN. We have the 2112 WLC and 10 1142N WAPs. If I do a network scan, I can see the Apple TV and see that port 5353 is open, which is Apple's Bonjour service. However, if I try to play music/video in iTunes, or on an iPhone/iPad, I do not see the Airplay icon. If I plug into the LAN, the Airplay icon appears immediately. I have created an allow all rule in the ACL but still no dice.
View 26 Replies
View Related
Mar 11, 2012
I have 8 no. AIR-LAP1131AG-A-K9 and WLC 2112 Wireless LAN Controller,i configured the device and its working at deffent SSIDs but when i am trying to enable same SSID on all LAP it shows "AP on dupplicate SSID found and Layer 2 security found".
View 1 Replies
View Related
Mar 21, 2012
We recently purchased a 2112 WLC, running version 6.0.199.4. I have everything running through a single port on the controller, which is connected to a trunk port on our 3750 stack. Our management VLAN is vlan 40, and AP is plugged into another port on the same switch which is an access port in vlan 40. APs appear in the controller ok, receive an IP address, but we aren't able to connect to any of the WLANs and periodically the APs will disassociate with the following messages: [code] I'm not sure if that's related to why we can't connect to the WLANs or not...
Another wrinkle is that if we plug in the AP directly to one of the PoE ports on the controller, it all works perfectly. I'm guessing its something switch-related since the only difference is that we're not going through the switch when it works.
View 27 Replies
View Related
Jan 18, 2010
I've read some opinions that lowering the RTS threshold can facilitate in some noisy wireless environments. I have found how this can be done on standalone APs but cant seem to implement the change on a WLC 2112. How to do it.
View 3 Replies
View Related
Dec 16, 2012
We are having a 2112 WLC and LAP1042 access points and facing a client disconnection issue. Also signal strength is varying even when client is at steady position. We have a single SSID structure and clients are connecting through 802.1x authentication with WPA2. Access points are joined in H-REAP mode. We also tried by creating a new SSID with open authentication and even on that SSID signal stregnth is varying and client is getting limited connectivity. Attached are the debugs for a particular client and the show tech support for WLC.
View 5 Replies
View Related
May 22, 2013
I have one cisco wlc 2112 with ios 7.0.230.0 with license to support 12 access points. My access points are nine (9) lap1231ag and one (1) lap1310.I just have one wlan (ssid). My scenario of deployment is in layer 3. I have one interface management and ap manager in the WLC. All my Access Points have differents ip address that WLC. I need to configure a unique ssid to associate my six (6) dynamics interfaces (each dymanic interface with different vlan subnet).Each wlan profile (ssid) should have the same security in phase 2 (wpa2/psk). My cisco access points don't support hreap. My wlc support only (4) interface into an interface group, and i need six (6) dynamics interfaces.
View 6 Replies
View Related
Feb 12, 2012
I received a message stating: Info-error attempting to validate the winsock base providers:2 Error- Not all base service provider entries could be found in winsock catalog. A reset is needed. Info- Redirecting user to support call I did the reset in command prompt as I read you told other people with this problem to do. But I still keep getting these messages.This is my sister's Dell Latitude 620.I used AVG and I think pc is clean. When I try to connect to a website page states that Internet Explorer cannot display the webpage.
View 10 Replies
View Related
May 17, 2012
I've configured in an UC520 a SSL VPN.I can access properly and I can see the labels, but I only can access urls which are http, not https:I can access the default ip of the uc520 (192.168.1.10) but When I try to get access to a secure url I get the msg: Failed to validate server certificate I'm trying to access a Cisco Digital Media Manager, whose url is URL Does the certificate of both hardware has to be the same?
View 7 Replies
View Related
Feb 9, 2011
I have some iPhone in my company and they connect to VPN through an ASA (version 8.0.4). The vpn connection use a certificate to validate that the device can connect. All my devices used the ASA IP address to connect, I decide to change that and use a name to connect ( DNS resolution made by the ISP), a generate a new certificate and made a new vpn connection profile. My PC, mac book pro can connect using the new connection, but my iPhone display the message : "Could not validate certificate". I've checked all the configuration and can't find where the difference between my two connection profile.
View 2 Replies
View Related
Jan 23, 2012
i have windows 2008 R2 as CA server. and i also have 2911 router as remote vpn server. Everything works fine for desktops computers and leptops. Users automatically enroll certificates on Microsoft CA server and get connected to vpn. But problem is with ipads. When i try to connect from ipad error massage deslpays "Could not validate the server certificate" and i also get chis error massage from router "CRYPTO-4-IKMP_BAD_MESSAGE: IKE message from x.x.x.x failed its sanity check or is malformed"
With ipads built in vpn client i can see the installed certificate and use it but with anyconnect client no certificates are displayed.
View 4 Replies
View Related
Oct 21, 2012
I have numerous phones and laptops that connect to the router just fine and fastThis ASUS laptop (windows 7) with Centrino N6150 is very slow to validate. At least it appears that's the issue. The icon in the tray starts with a ! in the connection, then in about 45 seconds goes to a blue chase circle, then in about 45 seconds connects.istory. I was getting disconnects from the WIFI router on a continual basis. I decided to put the router back to factory settings, did the pin reset etc, did a full setup and now we have this slow connect issue ALTHOUGH I never get a disconnect if I once get connected. Just seems to take forever to get it to connect.I've looked at conflicting IP's, no avail, seems fine. As mentioned, like the iphones connect almost instantly. The HP laptop connects fast (windows 7) but the asus now isn't happy.
View 19 Replies
View Related
Sep 27, 2012
I am planning to perform a failover drill between active and standy CSS loadbalancers which are configured in a cluster pair. I am looking for help to know what show commands I can run to validate that the failover occurred successfully from primary to secondary load balancer and that the VIP's have failed over successfuly as well.
View 1 Replies
View Related
Oct 6, 2011
I'm looking to setup a network with 30 users mostly using windows. Would you recommend me getting a router and then a switch to hoook up all those LAN connections ?
View 4 Replies
View Related
Apr 8, 2009
The ACS can authenticate people using local database , it can also authenticate a single user (using windows database) if you are fast after the service is restarted , however after a few secounds, it fails to authenticate any users , the error we are seeing on the logs appear as authentication failure type : internal error. Also on the log files, the authentication request from the user does not appear in the correct group, it is thrown into the default group.
View 7 Replies
View Related
Jan 6, 2013
I've had occasional issues with 5505 upgrades going south when the boot hangs on the image load due to a corrupt image. I need a way to validate the checksum of the new image after it is copied to flash. Remote upgrades become a real pain when you have to go onside just to delete an image, copy it into flash again, and boot.
View 1 Replies
View Related
Jul 6, 2011
I have a network set up with file sharing. I use a Windows 7 PC to host files that are shared with around 8 other PCs - some on Windows 7, some on Windows XP. The file sharing works but sometimes some users are unable to get access to the files. The error message is something like PCNAME is not accessible...
View 2 Replies
View Related
Feb 24, 2013
We are running Cisco Secure ACS for Windows version 4.1(1)b23p5 on a Windows 2000 member server. Starting from today, ACS fails to authenticate users. Using the same external user (andrea-meconi) I can verify successfull and failed authentication. This is the AUTH.log for a genericRADIUS request...
AUTH 25/02/2013 15:30:24 I 0396 3900 External DB [NTAuthenDLL.dll]: Starting authentication for user [andrea-meconi]
AUTH 25/02/2013 15:30:24 I 0396 3900 External DB [NTAuthenDLL.dll]: Attempting
[Code].....
View 1 Replies
View Related
Mar 2, 2012
Airlap 1041n i have air lap 1041n(soft version 12) and wlc 2112 i dont have dhcp server perhaps i use tftpd32 to act as a dhcp server.
my problem is
1. i have configured the wlc 2112 and it's ip is :172.25.1.1
2. i cant configure the air lap 1041n. when i enter the cli mode the following message comes ****continuously***:
Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 01:44:11.310: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
3. my question is how to stop this continuous mgs ?
4. how can i assign an ip to my AP ?
5. how can i join my AP with MY wlc ?
I have to show my office that i can control two ari lap 1041n-k9 with my WLC 2112 and my laptop's wifi and cellphone's wifi are able to get connected with the Access points.
View 1 Replies
View Related
Jul 6, 2011
I have a network set up with file sharing. I use a Windows 7 PC to host files that are shared with few other PCs - some on Windows 7, some on Windows XP. The file sharing works but sometimes some users are unable to get access to the files. It seems to be only on the machines that are on XP that this problem occurs. The error message is something like \PCNAME is not accessible...
The user can connect if the machine storing the files is restarted but it will happen 4-5 times during the day.
View 4 Replies
View Related
Aug 3, 2011
I've got a windows server 2003 running a big application (sage1000) but suddenly it seems that users cannot access the server by unc path.i've also test to access \server on the server itself doesen't work.
View 2 Replies
View Related
Jan 4, 2012
I have a client with a 2112 WLC and 1252AG radios. The clients work fine, but an SNMP management server can not reach any of the clients over the wireless. Before the WLC and new AP's were installed, they were running older Cisco Autonomous AP's and had no problems with SNMP. My monitoring system uses SNMP and it can reach the WLC just fine, so there doesnt appear to be any issues on the switched network. What can be blocking the SNMP on the WLC?
View 4 Replies
View Related
Jun 7, 2011
I want to share any folder or drive only one user amongst 20 at windows xp.How?
View 1 Replies
View Related
Jan 12, 2012
I'm looking into a way of routing users internet connection based on their username or group in a windows environment. Currently there's two ISP connections with their own proxy server. I want a user to be fully redirected to one of the ISPs based on who they are. I was hoping via IE proxy settings, this can be accomplished, but it looks like the primary ISP connection, is still getting most of the connections/routing.
View 1 Replies
View Related
