Cisco Wireless :: 2504 Flex-connect Authentication And Switching Locally
Feb 15, 2013
We are planning to implement Cisco wireless in our central office and branch office using Cisco 2504 WLC and Cisco 1602i Ap. Our branch office is connected via ip vpn and a separate broadband connection for urgent requirements. Usually all users are allowed to browse through central proxy server.I have been trying to find any possibility of giving guest access (web authentication) for branch office guests utilizing only the broadband connection which is connected to the branch office. Is there a possibility that Central WLC is reached using NAT from the BranchOffice AP and allowing guests to authenticate and surf the web at times IP VPN is unreachable.
View 4 Replies
ADVERTISEMENT
Aug 22, 2012
As per my understanding, Cisco Nexus 2232 can only connect to HP c7000 Chassis if we are using a Pass Through Switch in the HP c7000. Cisco Nexus 2232 can only connect to End Hosts and not to a switch. Is there a New Feature added in Nexus 2232, which enables it to connect to a Switch like HP Flex Fabric ?
View 1 Replies
View Related
Sep 29, 2012
I have a wireless 5508 with license base to 50 aps, i use a deployment flex connect. I already registered all my access points, I use web authentication to authenticate users guest, and the service dhcp is in the central site.
My issue is the users in each remote site, can not get an ip address by dhcp from the central site, they can authenticate in the guest ssid, but any users can not get an ip. The request is passing by the wan in this way
Central Site DHCP - Router WAN - Remote Site - Users with notebooks. I use flex connect central deployment (all the traffic consulting to the wlc) .
perhaps i should use local deploy? The wireless is in the central site.
View 17 Replies
View Related
May 22, 2013
I have one cisco wlc 2112 with ios 7.0.230.0 with license to support 12 access points. My access points are nine (9) lap1231ag and one (1) lap1310.I just have one wlan (ssid). My scenario of deployment is in layer 3. I have one interface management and ap manager in the WLC. All my Access Points have differents ip address that WLC. I need to configure a unique ssid to associate my six (6) dynamics interfaces (each dymanic interface with different vlan subnet).Each wlan profile (ssid) should have the same security in phase 2 (wpa2/psk). My cisco access points don't support hreap. My wlc support only (4) interface into an interface group, and i need six (6) dynamics interfaces.
View 6 Replies
View Related
Jul 9, 2012
I created a LAP Template in NCS to configure some new 1142 LAPs that were installed in a remote office. These LAPs need to be in Flex Connect mode with V LAN support. The template is being applied with partial success on every access point. Details of the partial success say the Flex Connect Parameters fail with the following error.
Provision Failure: { URL}.Object Not Found Exception cannot be cast to [URL]
Am I doing something wrong? The Flex Connect portion of the template has V LAN Support enabled, Native V LAN ID, and the Profile Name- V LAN Mappings configured.
Prime NCS version 1.1.1.24 Access Points are AIR-LAP1142N-A-K9s running 7.2.110.0
View 3 Replies
View Related
Apr 4, 2013
We have a WLC 2504, since a few months, it was working fine, we have a guest Wlan configure with web authentication and the DHCP scope for this in the WLC. The problem today is that its no redirecting the web browser to 1.1.1.1, we try it with 3 laptops and they recieve a correct IP from the DHCP but still can not get redirect to the web authentication portal. Have the default configuration Internal (Default).
In laptops we check the firewall, dont have a proxy activate and have google DNS.. 4.2.2.2 8.8.8.8. In fact this laptops connected to this ssid before.
View 1 Replies
View Related
Jun 20, 2012
I configured the 2504 with 2 SSIDs for staffs and guests.I also configured the Lobby admin with web auth. But if a guest wants to connect our wireless he/she has to enter the PSK key and then only they are able to connect with the user id and password given by Lobby admin. Can we avoid this key and let the guests connect straightaway with the web auth?I’m planning to configure 802.1x & Radius dual authentication for staffs SSID..
View 5 Replies
View Related
Jun 12, 2013
I have 2504 WLC with a few access points. the problem is when the PC's go in sleep mode, the users have to re-authenticate when they log in again Is there any way to let the PC's automatically re-authenticate without the user having to type in the credentials again?I have web authentication configured for this SSID and authentication is using the WLC local Data base.
View 6 Replies
View Related
Dec 19, 2012
When I get the web authentication dialog from 1.1.1.1 it starts of with a certificate error. Is there a way to prevent this certificate error while using the self signed certificate? I have not been successful installing certificates on my WLC - problems with OpenSSL and others. Want to get this deployed but don't want users to have to encouter that error.
View 1 Replies
View Related
May 17, 2012
What are the possibilities for configuring a WLC to authenticate WLAN users based on their Active Directory user account?
Is this possible by setting up local EAP on the WLC?
I’ am looking for a solution where there are no changes to the Domain Controller involved and also no setting op IAS/RADIUS.
WLC:2504
View 8 Replies
View Related
Jan 8, 2013
I have cisco 2504 WLAN controller with 7.4 IOS. My query is can I configure the MAC authentication with certificate based. And without using any external servers like Radius, ACS and LDAP.
May I know, If there is a option on WLC…
View 4 Replies
View Related
Mar 18, 2013
I had configured one access point CAP3602E in flex connect mode through a WLC 5508 after deploying the access point in flex control mode the local mac-filering is not working. before it was working when ap was in local mode. any body have to know is the mac-filtering working in flex-control mode ?
View 2 Replies
View Related
Mar 29, 2012
i am trying to get ad authentication working on a WLC 2504, can I use the LDAP server configuration for authentication?
View 1 Replies
View Related
Mar 6, 2013
Can the 2504 WLC be configured to work with one RADIUS Server for Authentication of Management Users and with a second server for 802.1x EAP-TLS certificate authentication for the end users.
Management Users will authenticate on RADIUS Server 1.Wireless End users will request 802.1x EAP-TLS authentication certificate from AAA server 2.
View 5 Replies
View Related
Jul 4, 2012
I have Cisco WLC 2504.I was configured one wlan with external web-authentication.External web server is apache on freebsd.When user connect to wlan and open web browser, wlc redirects client to external web page, where client must input hist credentials.When client click "submit" button on external web auth page, wlc initiates RADIUS request to radius server.Radius server(freeradius) is on the same server, where apache running.
sometimes, when client enter credentials on external page and click "submit" button, wlc suddenly redirect client on internal default auth page.
View 14 Replies
View Related
Apr 24, 2011
One of my VLANS on my 3750 gives a status of act/lshut. I've tried no shut commands on the interface to no avail. From my reading it seems like this means the VLAN is active but shut down locally.
View 8 Replies
View Related
Aug 19, 2012
How can I setup the WLC to accept authentication based on the device itself and not a user?
View 7 Replies
View Related
Mar 17, 2013
I currently have Nexus 5596 pair with VPC peer link Po1 between them. My goal is to connect our new Nexus 7Ks to the 5K's using Fabric Path. My question is during this inital setup with the 7K's. Can I use the same port channel number on the 7K's as I did the 5K's? Is the port channel locally significat?
View 2 Replies
View Related
Dec 3, 2011
I am planning an HREAP deployment; a data centre with multiple remote sites. HREAP has been evaluated and meets our requirements. We are now looking at buying some equipment for this deployment. For controllers, we are considering either the 5508 or the new 7500. Other than cost, scalability and different hardware what are the differences between the platforms? So far I have found:AP's in local mode not supported on 7500, the 5508 supports AP's in local mode.The 7500 cannot be used as a guest anchor controller, the 5508 can.
View 3 Replies
View Related
Feb 5, 2012
Just want to know if it is possible to have a 7500 Flex Controller Cluster in different Locations, like Germany an Australia?
This should be deployed as a redundant system, in case of a failure in one location the remaining Cluster can take over. Also the main maintenance/management should be done in the Headquarter (Germany). Is it possible to configure Guest Access via Web Interface.
Last question: how many AP`s can be managed, example: with one Controller 500 AP can I then manage 1000 with two controller?
View 4 Replies
View Related
Jul 16, 2012
I am trying to configure WLC 2504 with the following setup:
- three WLAN SSIDs
- management/ap-manager interface on VLAN 10
- guest WLAN on dynamic interface VLAN 20
- main WLAN on dynamic interface VLAN 30
- WLAN for tablet and smartphone devices VLAN 40
At this point switch trunking is configured and three WLANs are mapped to three dynamic different interfaces. I can see all associated APs (which are on the same subnet as management interface on VLAN 10), and can ping each of the APs as well as gateways on L3 switch Catalyst 3750-x. Also, on the WLC interface I see that all WLANs are enabled and SSIDs are set to broadcast, all AP radio is in 'up' mode. DHCPs are configured on management interface and on all dynamic interfaces. L3 switch gateways all have ip helper-address pointing to main DHCP. 'sh vlan' and 'sh int trunk' commands on the connected switches show correct settings.
However, I see absolutely no any SSIDs to connect to on any PC or Mac computer I tested.
View 2 Replies
View Related
May 29, 2013
While trying to connect to WiFi at remote sites APs, the connection is getting time out.User are getting error as 'Unable to connect to <WiFi-SSID>' The APs at corporate office are functioning properly and user are able to connect to the APs.
Wifi Controller: 2504 Software ver: 7.3.101.0
Authentication 802.1x
View 7 Replies
View Related
Mar 30, 2013
I just purchased the EA4500 router and went through the setup with no issues. The only problem is I cannot access the router either locally or through the Smart Wifi dashboard. Everytime I go to the page with "Access Router", enter the password and clikc the "Submit" button it does nothing...no incorrect password prompt or idle prompt...almost like the page is broken somehow. I've done all of the usual, restart router, restart PC, restart cable modem, etc. and always having the same result.
View 4 Replies
View Related
Jul 15, 2012
I have to setup my first flex stack and wanted to make sure I do it right. I have the physical aspect of the stack down. From what I gathered I have to setup the master switch as the highest priority and then provision the other two switches. But I have configs on the other two switches, do I have to delete them? And do I have to setup individual ips for the two slave switches, because from what I saw the master switch is the only one with an ip address? The master switch is a poe 2960S-48LPS and the two other switches are 2960G-48TD
View 5 Replies
View Related
Mar 29, 2012
What is the maximum number of supported RADIUS servers on the Flex 7500 Cloud Controller?
View 2 Replies
View Related
Apr 24, 2013
One of my customer has an Apple IPAD 2.The IPAD is getting registerd through Cisco WLC 7.2.The APs that are being used is AP 1252 & AP 1242. The AP are configured in flex mode. The issue that we are facing is all the laptops and IPADs other then Apple IPAD are working but the Apple IPAD are not working through AES WPA2.It gives him a dismiss message and at time it gets connected but take a long time to get connected. Incase when the IPAD gets connected the following happens.
While connecting to the SSID it will ask for the preshared keyAfetr entering the preshared key it takes time to acquire an IP addressAfter the IP address is assigned it gives a dismiss message. If we do not click on the dismiss message then it will take anothere 30 seconds or so and get connected.
View 1 Replies
View Related
Feb 8, 2012
I need to be VPN'd in to work all day but during the day I need to print to my home network printer. The work around has always been to press print then disconnect from VPN, wait for the document to finish then reconnect VPN. This is starting to get on my nerves and I was hoping that there was a way to be on VPN through my physical LAN and maybe print over my wireless network. Is there a way to separate traffic in Windows 7?
View 2 Replies
View Related
Apr 1, 2011
I have a computer that can no longer connect to the internet whether through the wireless or wired directly to the router. The computer will recognize and connect to the network locally. Two other computers are on the network and they are connect just fine.
[code]...
View 13 Replies
View Related
Apr 12, 2012
I am running a webserver locally and I am unable to resolve it by domain name (e.g. mydomain.com) when I am inside my network. However, I am able to hit it internally (e.g. 192.168.0.10) just fine. When I try to access mydomain.com from inside my network it comes up with my Actiontec router's admin page on 192.168.1.1.Here is my configuration:Actiontec FIOS router 192.168.1.1 (connected to internet)DHCP disabled Netgear Router 192.168.1.2 is in the DMZHas cable running from Actiontec's LAN port to Netgear's WAN port[CODE]
View 7 Replies
View Related
Mar 27, 2012
Should I trunk the port to the AP or not. I have a WLC 5508 in the head office and have AP in the remote office. I do not want traffic in the remote office to traverse the wan back to the WLC. I want the users at the remote office to use the local sub net at the remote site.
Should I then trunk the AP port on the switch to the AP as I have multiple ssid's with different sub nets?
View 3 Replies
View Related
Dec 20, 2010
I redistribute our MPLS eBGP routes into our internal EIGRP process at each site. This action undesirably redistributes locally generated BGP networks (via network command) that are meant from the MPLS cloud into our internal routing process.I currently have a route-map on my 'redistribute bgp' command that filters each network manually with an ACL. This works but adds obvious administrative overhead; each WAN router advertises different networks, and the ACL must be updated for each new network.Would it make more sense to simply deny routes from BGP to EIGRP with a metric of 32768? Something like this,route-map deny-local-bgp deny 10 match metric 3276 router -map deny-local-bgp permit 20,router eigrp 100 redistribute bgp 65104 route-map deny-local-bgp.
View 19 Replies
View Related
Sep 14, 2011
I configurated ipsec remote vpn at catalyst 6500.
192.168.14.0/24-- my servers are assigned this subnet
vpn user:10.10.10.0/24
192.168.10.229 ---- webserver ip address
[code]...
View 3 Replies
View Related
Jan 13, 2012
VPN client 5.0.07.0410 on Windows Vista sp2 when I try to connect to my cisco 851.Secure VPN connection terminated locally by the client Reason 412 The remote peer is no longer responding.I turned on debug crypto isakmp and debug crypto ipsec no information displayed on the console.I was a lot futher before but now do not know where to turn.
View 3 Replies
View Related
