Cisco Wireless :: 5508 - Multiple Office Extend APs Behind NAT To Single Address
Feb 29, 2012
I have a situation where a user needs more than one office extend AP in his home. My office extend controller is a 5508 running 7.0.220.0. Are there any issues NATing multiple OE APs to a single address? My initial lab results indicate that each of the AP's associate with the controller and establish a DTLS tunnel. I see the SSIDs get pushed to the AP and then it seems to restart the process never being fully operational. Is there a workaround that will allow me to run mutliple OE APs?
View 12 Replies
ADVERTISEMENT
Jul 6, 2010
I have finally got my office extend AP to connect to my companies 5508 controller by enabling NAT on the management interface and can see all the cooperate SSID's. However when I try to connect to the SSID my client either gets a local IP address from my home router or then cannot get any IP address.
View 9 Replies
View Related
Dec 18, 2011
I am having an issue with internal and external clients. When we have the nat ip configured on the controller we cannot connect internal ap's at all. When we take the nat ip out it works fine. We are on code 7.0.220. I have tried the following command <config network ap-discovery nat-ip-only disable> and it did nothing.
View 1 Replies
View Related
Feb 4, 2010
If we have a mixed environment of 4400 and 5500 controllers will the office extend features still work or will we have to run a seperate wireless domain from the 5508 for the aps that we need office extend on?
View 2 Replies
View Related
Aug 28, 2011
We're looking at deploying both office extend and also a guest wlan. Both would require a WLC in the DMZ.My question is can one 5508 WLC be both a guest anchor and have office extend APs on it at the same time?
View 2 Replies
View Related
Feb 2, 2012
How the ACL Ports/Protocols which must be opened (in- and outbound) to enable a communication between a CISCO Office extend AP and a 5508 WCS.
View 3 Replies
View Related
Dec 15, 2011
I have attached a diagram of the current topology. At present, we have two 5508 connected to our core. We also have a 4402 behind the firewall (DMZ) just purely for guest access. So the staff users connect to the access point which in turns connects to the Staff WLC 1 (if this fails then to Staff WLC2). any guest user connect to the access point which in turn connects to Staff WLC which anchors to Guest WLC which then provides access. Since the guest is behind the DMZ they can only access the internet and not out internal network.
Now we want to office extend our network - we want our users to use 1132 AP at home to access the Infrastructure. is there a way we can do this without disturbing the existing infrastructure. On reading Cisco website, i know the best practice is to use 2 5508 (one behind the firewall and the other anchored to this access the internet network ) i thought since we have a Cisco (dmz) switch (48 port) and only the 4402 (Guest WLC) is connected to it, maybe purchase another 5508 WLC and connect to the 48 port Cisco (dmz) switch. will this work?
View 13 Replies
View Related
Aug 26, 2012
Is it possible to assign a single ssid to multiple interface groups by assigning the ssid to multiple AP groups?
I have buildings geographically dispersed that are configured with multiple vlans in interface groups so that I can maintain an addressing scheme of dhcp assigned addresses per building. Each building is also further grouped as AP groups. I'd like to know if by assigning the same wlan ssid to each of the AP groups, will I maintain addressing integrity for each building? I'm thinking it will work.
Do the buildings have to be outside AP range of each other to avoid problems?
5508 controller
7.2.110.0 code
6 buildings
6 interface groups
1 ssid
View 4 Replies
View Related
Feb 14, 2012
I need to put a few cameras, without a server, on a static WAN ip address. Do I just assign them a static LAN ip address(for example 192.168.1.200), make sure the port they use is open, then type the WAN static ip address then colon and the last address? Like this.....I'm making up the WAN address....45.34.55.334:200
View 1 Replies
View Related
Apr 9, 2013
I have a i-ball 150M wireless-N ADSL2+ Router device in that , in the NAT tab, i have activated DMZ at my static ip with a private address 192.168.1.224 , so that that ip enabled device can be access to anywhere in public network.I want that using this single static ip , How to configure two private address devices in DMZ, so that both of ip enabled devices can be access in public network.
View 3 Replies
View Related
Jan 17, 2011
Just recently got a new 881W router. i have downloaded the 2.4 software upgrade. I go into the Office extend AP login and i get just a enter button. when i click on the enter button the AP page does not come up.
View 7 Replies
View Related
Feb 13, 2012
Does cisco 3600 support office extend feature? If yes, is there a controller requirement? I know cisco AP 600 supports office extend
View 24 Replies
View Related
Feb 15, 2012
I have an 1131ag AP attached to our 5508 as an OEAP over the Internet. Everything with the corporate SSIDs is working correctly, so no issue there. I was wondering if a local ssid can be configured on the AP, similar to what can be done with the OEAP600, in order to provide wireless access to the Internet only? On the WLC, on the H_REAP tab, there is a button labeled "Reset Personal SSID"
View 3 Replies
View Related
Jan 18, 2013
I am setting up office extend with 1142 APs on a 5508 controller. All seems ok and I see my SSIDs on the remote AP. However when I try to connect I don't get a dhcp address and the connection fails. When I look at logs and some debugs I see dtls keepalive failures and the AP is actually disconnecting and re-associating with the controller.
View 24 Replies
View Related
May 13, 2013
I am trying to build a new network from scratch, I have the WLC 5508 w/ Aironet 3600e APs connected to my Netgear Smart Switches and a Linksys RV082 router that I'm using as my DHCP server with several VLANs for several stuff on my Switches.
I have 2 questions:
1. Can I have 5 Interfaces configured on 5 different VLANs, each SSID on each a different Port:
Port 1: Controller management only=> 192.168.x.x /24
Port 2: SSID 1: WiFi Internal=> 172.16.x.x/12 (Radius Auth with no sharing)
Port 3: SSID 2: WiFi Internal w/ sharing=> 192.168.x.x/24 (Radius Auth with sharing)
Port 4 :SSID 3: WiFi Guest=> 10.0.x.x/8 (Web Auth)
Port 5: SSID 4: WiFi IT=> 192.168.x.x/24 ( Radius or certificate Auth with access to the controller management interface)
2. How can I use the Controller as the DHCP server for all the WiFi traffic, and how should that be configured to work with my other DHCP server?
View 3 Replies
View Related
Mar 13, 2012
Recently i have setup a WLAN with inside and anchor 5508 controllers. Standard setup. However, one issue I have is I wish to extend the length of time between password changes for users connected in on the guest wlan. At the moment, 30 is max. I dont have an option on the controller to creat accounts for any longer than that. How to I extend it to 90 days or 120 days?
View 1 Replies
View Related
Oct 12, 2011
I have two 1142n LWP ap converted into standalone, as client doesn't have any controller there. They just want to extend their network via wireless.
L3 switch (trunk port gig 1/48) -----> connected to AP1
L3 switch (trunk port 2/48) -----------> connected to AP2
client is looking for 3 vlans on the floor ( users might multiple vlans might associated same AP ). They have a dedicated DHCP/DNS server and he will be configuring 3 vlans on L3 switch with correct ip helper address on SVI interfaces.
I'm i allowed to created 3 SSID's on 1142n standalone AP ?
What would the various optiosn to achieve this requirement ? Is there any simplest way to achieve this ? Do i need to go for 802.1x ? I remember client told their users are authenticating by using AD for wired network. This is their first request for wireless environment
View 2 Replies
View Related
Feb 27, 2013
I read from this forum some discussion about the WLC VLAN Select feature. [URL]. I see that you can use this feature to have multiple VLANS (interfaces) to map to the same WLAN (SSID).
What I try to learn is under what scenarios would people need to have mutliple vlan mapped to single SSID?
In my environment, I have 50+ AP int he campus on 20+ Cisco 4500 switches. I have single WLAN and it is mapped to one subnet. All wireless users would be on that subnets, whereas wired users are on 20+ subnets of their own.
View 6 Replies
View Related
Jul 16, 2012
I am setting up a Cisco 5508 wireless controller and was looking for some feedback or assistance. Basically I already have my guest SSID configured and functioning. Created an interface group containing my vlans and applied the created ACL "Guest Policy - internet only", which is also working.I want to setup a second SSID called "staffstudent" and use RADIUS for authentication. I have already created two separate network policies on the radius server: staff and student. Each only allows certain user groups. I want to be able to differentiate on the controller side which profile they are logging in on and then apply the correct ACL. I have two currently configured: one for staff and one for student. It appears to me that since you have to apply the ACL at the interface level I cannot use both since my interface is accepting both staff and students. Is there a way I can filter them using RADIUS so that when they login RADIUS can return a "student" value and then apply the correct ACL? Same for staff?
View 2 Replies
View Related
Jun 21, 2012
We are installing a set of 5508 controllers at one site in Tennessee. At another divisional site we have another controller that covers that division.
Both sites utilize the same DNS structure and would like to use the DNS entry CISCO- CAPWAP- CONTROLLER entry for bringing new AP onto the controllers at their sites, how would we go about configuring this?
View 6 Replies
View Related
Apr 2, 2013
I have around 60 , 1142 N APs . As of now i have only management VLAN ( for IP ) & one user vlan 350 configured on the access point . All the users connect to VLAN 350 and they get IP as required.However in our new set up there are couple of requirements have come up were in SSID will be the same however we have created many VLANs for different kind of user group and all these VLANs should be mapped to this single SSID and pick the IPs from their respective VLANs .
We have done configuration on the RADIUS server side were in we have mapped the users in their respective VLANs and they are getting authenticated via AD . Now how do i map my these 4-5 VLANs in a single SSID in Access Point.
View 16 Replies
View Related
Feb 11, 2013
I just bought a Linksys EA6500 (AC 1750). Now after a week, seems to stop rresponding at times and I am get 5+ MAC Addresses from 1 IP address. I have only one NIC installed and it is configured to have a static IP.
See attached screen capture. ( Server-PC, IP: 192.168.1.130)
View 8 Replies
View Related
Mar 17, 2013
We have some older Honeywell Dolphin 7900 Series Handhelds that have issues with wireless communication. Very unreliable communication. One recommendation from Honeywell is to disable the G standard and only allow B. Basically have a WLAN that is solely b radio enabled. I see that their are options to go B/G only or A only, but no options in the radio policy to go B only.
We are using WCS 7.0.240 and the controller is a WLC 5508 running the same code revision.
Is this doable on a single WLAN while leaving G available on other WLAN's?
View 4 Replies
View Related
Aug 12, 2011
how to set WLC 5508 to allow single create web authentication user account to get connected in a same time. i found that i can use the same username and password combo to be login in 2 machine in the same time.
View 4 Replies
View Related
Jan 26, 2011
do not have fast internet service so we must need to combine two or more different internet providers and get one speed kindly reply do you know any router/modem/switch which can do this for us.
View 2 Replies
View Related
Nov 9, 2011
Am trying to understand how we can have multiple IP addresses on a single NIC and what are the restrictions on the same. If i can have two IPs from two different networks present on a single NIC, then why would i ever get a new NIC?
Also, i want to understand the concept of virtual IP and how it fits into this picture.
View 6 Replies
View Related
Nov 2, 2012
I have an older DELL power edge 2800. Currently we have 2 NIC's one for the WAN one for the LAN. I wish to increase my users access speed. Can I team and or bond up to Four NIC's on the LAN side and leave the single NIC for the WAN? I am having trouble finding any info on the net for pulling this off. I have 67 users and throughput is getting a little rough.
View 1 Replies
View Related
Apr 1, 2013
I have a home office with multiple VLANS/subnets I have many VPNs that connect only a specific subnet to a specific remote offfice. On a 5520, can I create a S2S VPN to different remote offices that have the same IP scheme, but from different home office subnets? For example at my home office let's say I have two independant, distinct VLAN/subnets: 192.168.140.0/24 and 192.168.150.0/24. Can I create an S2S from the 140 subnet to a remote office with a 10.10.10.0 addressing scheme and another S2S from the 150 subnet to a totally different office also with a 10.10.10.0 scheme?
View 1 Replies
View Related
Jan 23, 2011
I'm going to move offices into a shared situation with 3 companies. Each company will want its own private network so there's no snooping between companies. I am planning on using VOIP for the phone system (Nextiva cloud based). Is it possible to set up the system so that each company has access to the VOIP system but yet remains sequestered in the their own network for everything else. I was hoping to do this with one data port at each workstation using Cisco SPA-303 phones. The way I understand this, is that the phone plugs in to the data port and you daisy chain the workstation off from each phone. Is this possible to do this while having the system I described? Another wrinkle is that I'd also like all the networks to be access shared printers.
View 7 Replies
View Related
Mar 31, 2011
some of the servers are not pinging from one switch but they are pingable from other redundant distribution switch. So I took the IP addresses from the redundant switch, with that I found MAC addresses from the access switch.But when I tried to see to which ports these MAC are addresses are connected to, multiple MAC addresses are resolving to the same switchport. like 5 MAC's are showing to 1 port and other 3 MAC's are showing to other port, like this there are many. All these MAC's belong to virtual servers.
View 11 Replies
View Related
Mar 30, 2012
I just want to keep one PC as a server and one switch connect to it (For LAN). I want to connect multiple client/screen to that server, so I can use single servers for multiple screen/client.(Client machine will not have any CPU, they will utilize servers memory.)
View 1 Replies
View Related
Jul 22, 2012
I currently have mutiple computers at my place. Once the computer turned on i want the option of which login for the current computer to use, it can login it current computer or the mutiples computer with their content/data all inside. So more like an computer linked. Example, it can only to A or B, A is the current computer data, while B have all the data of the different computer monitor datas, and if i login B it will show that current computer info. And same goes to the B computer, i can login to A or B on the B computer. What makes this very good is that, both the computer logins are sort of connected, for example if im on actual computer A, but logined to computer B and downloaded/changed some files/data on the B login, once i login on computer B to login B, the changes will apply even tho the changes are done in computer A.
View 1 Replies
View Related
May 18, 2013
My 5508 WLC which runs version 7.4 is configured as a DHCP server for the clients and here's my problem:
-One AP is attatched with an interface which has the vlan 10 and a ssid in AP groups
-One AP is attatched with another interface which has the vlan 20 and the same ssid in AP groups
And there are two DHCP pools in WLC, one is for vlan 10 and one is for vlan 20.For now, a PC accesses AP-1 and get an IP address from DHCP pool vlan 10, then I power off AP-1, then the client accesses AP-2 but still get the IP address from DHCP pool vlan10, i need to get the IP from DHCP VLAN20, what can i do now?
View 7 Replies
View Related
