Cisco Wireless :: 5508 - NAC Guest Server Allow Password Change

Dec 25, 2011

i see there is an option to "allow password change" or "force password change" for guest roles in the NGS. But when i created a guest account using this guest role, after webauthentication , there is no prompt to change password. Is this the intended behaviour or is there anything else that i need to configure. Looking at it, i am not sure how the NGS would allow a "guest user" to really overwrite the password by allowing password change. ? is that not a security risk as well for the NGS ? my setup has 5508 anchor controller and NGS communicating via RADIUS.

View 7 Replies


ADVERTISEMENT

Cisco :: 5508 WLC / Guest Wireless - Redirect Page - Username / Password

Feb 19, 2012

I have a 5508 WLC running 6.0.202.0. It functions as the Anchor Controller for the guest network. It sits in our Internet DMZ and is isolated from the rest of the network. It does not connect to AD, ACS, etc. The guest wireless WLAN is configured for Web Policy - Authentication. I have a customized login page. Credential management is done by WCS.
 
Users are connecting to the guest wireless network and entering their creds with no issues using mobile devices (iPad, etc). Then the mobile device goes to sleep / turns off and when they go to use it again, they have to type their creds in again. They dont like retyping their creds throughout the day.
 
good way mitigate the multiple logins? Something like a 'save password' option on the customized page?

View 5 Replies View Related

Linksys Wireless Router :: E4200 - Change Text Of Guest Password Entry Pop Up On Message?

Sep 11, 2012

I just bought a E4200, is there a way change the default text of the pop up message that is used when the client is requested to put in the password to access the guest SID for the e4200?

View 2 Replies View Related

Cisco Wireless :: DHCP In 5508 / Change WLC User Accounts Password Too?

Jul 24, 2012

I just get to hands-on on my new WLC 5508?

1) I'm using a single subnet eg 192.168.1.0/24 for my wireless clients and i'm assigning them via the DHCP server from the WLC. As the clients are however made up of laptops and scanners, i would like to assign a range from 50-150 for the laptops and 151-250 for the scanners for easier identification. But it seems that from the WLC DHCP menu i'm not able to do this unless i segment them into a different network with different gateways.
 
2) Is there anyway to change the WLC user accounts password too? I dont seems to be able to find the option unless i delete the account and re-create it with the new password.

View 5 Replies View Related

Cisco :: 5508 NAC Guest Server And WLC Lobby Admin

Apr 15, 2012

Why do need Cisco NAC guest server when we have WLC 5508 already configured. The Guest user access can be given by the WLC itself too. We can create users in WLC also and grant access to the user to access internet for specific time frame. My query is - what is so different in Cisco NGS that it is considered good in terms of Guest users access. What are the advatages of NGS.

View 4 Replies View Related

Cisco AAA/Identity/Nac :: 5508 - NGS Guest Server Authentication Error

Apr 29, 2011

I installed NGS 2.0.2 for wireless guest user management and authentication. I implement webauth via webauth page on wlc deployed.One Branch with a WLC5508 version 7.0 wireless anchor controller is working on the NGS.But now I integrate next branch with WLC4402 version 6.0.188 and the authentication of users at the new branch gets an error, wrong user/password.
 
I double checked configuration and user/password but I can't find any configuration error. Also stopping and starting of radius service and reboot of NGS still does not work. I tried to debug the radius via web interface and watched for the loggfile and there is still a reject.I also tried the freeradius command radiusd -X but I got an error when starting the radiusd -X.
 
1.) How can I figure out, if I will get the correct password from my WLC ? Are there any debug options to see more ? e.g. some cli commands, radiustest utilities or how to get the received password from the chap challenge of the debug ?
 
2.) I have appended a part from my radius loggfile. How can I find the detailed error in the radius log file? Is it correct that the password in the debug file is empty ? raiuds logg line "[radius-user-auth] expand: %{User-Password} -> "

View 3 Replies View Related

Cisco :: Prevent Guest From Doing Peer-peer Communication On Guest 5508 Controllers

Jan 24, 2013

I want to prevent guest from doing peer - peer communication on my Guest (5508) controllers.  Is this a feature on the WLC or only by applying an ACL on the router interface?

View 2 Replies View Related

Cisco Wireless :: WLC 5508 Guest Access Via WAN?

Jan 28, 2012

Is it possible to provide wireless guest access over the WAN from another office via the WLC. I have WLC 5508 in a central office and have other remote offices that have one Access Point in each office that are autonomous; I will be converting these to LWAPP. Is it possible to route guest traffic back to the WLC then forward this traffic out to the internet? How would I route this traffic out as well? install a secondary WLC in the DMZ and use anchor points. I only have one WLC

View 7 Replies View Related

Cisco :: 5508 - Monitoring Guest Wireless?

Jun 2, 2013

, I have a requirement by a customer that they will want to monitor the guest wireless access. Currently, we are proposing a Cisco Wireless Controller 5508 together with APs and the setup would be a dedicated VLAN for guest. I am wondering if Cisco ISE together with Cisco MSE would be sufficient?
 
Stuff to monitor and log are:
 
1. Guest username (I guess this would be self sponsored)
2. Company name
3. Websites accessed
4. Time, date and duration.
5. Logs are to be kept for 3 months at least.

View 3 Replies View Related

Cisco Wireless :: Guest Access On 5508 WLC

Feb 3, 2013

I'm looking to implement guest WiFi access with web authentication on one of our 5508 WLC (currently deployed within a sandbox environment), but looking for some assistance. The WLC currently has a single connection from port 1 to the 'Test Site 2' switch. This is a dot1q trunk. On the WLC, the interface (for port 1) is configured as follows: [code] Currently, I have one WLAN configured with the profile name 'Guest Test 1', it's enabled and broadcasting the SSID. Security is L3 only with web authentication configured. The WLAN is configured to use the interface names "guest_wifi".
 
The issue is that when a client connects to the WLAN, it receives an IP address okay (10.99.254.x address), but doesn't seem to be able to contact the WLC to get the web authentication page. Eventually, the WLC terminates the connection due to an authentication failure.does it sound like I'm taking the correct approach here? The idea is that clients connect to the guest WLAN, which puts them on VLAN 99 and routes traffic through to the ASA and then onto the internet.

View 13 Replies View Related

Cisco Wireless :: 5508 Printing The Guest Account

Nov 20, 2011

I working with guest accounts on a WLC 5508.if there is possibilty to print out the account information directly from the controller. If possible how to print out this accounts ?

View 3 Replies View Related

Cisco Wireless :: Wlc 5508 Guest Logon Page?

Jun 5, 2012

Where do you turn this option off? i have looked under security and did not see any thing. 

View 1 Replies View Related

Cisco Wireless :: 5508 -Architect Guest Access

Apr 11, 2012

I just got a new requirement for our wireless roll out and I need some help. Plan the best way to provide employee and guests wireless access w/ the guests separate from the production environment.
 
We have a 5508 controller w/ 1142 APs. I have two GBICs in the interfaces (only one is being used). I want to use a back haul connection for the guest access. I am having a hard time in visioning how to physically set up the cabling from the patch panel. Again, the requirement is to not allow guest users to connect to our production network but I still want/need to manage the AP. This will eventually need to be supported for remote sites tunneling back to the primary location. 

View 7 Replies View Related

Cisco Wireless :: WLC 5508 - Guest Internet Access

Oct 28, 2011

I am running a 5508 WLC with 10 Access Point. we need to allow Internet Access to Guest. 10MB DSL Internet is dedicated for Guest. This link is terminated on a regular ADSL modem without being part of our network. We want all Guest Internet traffic to reach the ADSL Router. where should I create the Guest VLAN / where the DHCP for Guest users should be created. what is the best practise for similar setup.
 
Our Network is simple
ISP_Reuter-------ASA_Firewall--------------4505------------LAN-switch 2950
 
ADSL_modem------------ users connect via wireless but restricted to certain area only.

View 9 Replies View Related

Cisco Wireless :: Wired Guest Network On WLC 5508?

Oct 3, 2012

Could I setup wired guest Internet connection without layer 3 web authentication and how?I want guest users access Internet without going through web authentication.

View 2 Replies View Related

Cisco Wireless :: WLC 5508 - Segregate Traffic Log Guest

Dec 30, 2012

We have Cisco WLC 5508 in our network and right now ,this WLC is connected to two ports of each core switches.Both CORP and GUEST SSID are configured on this WLC. Now we want to segregate the traffic log GUEST to on core switches from WLC. SO my question is ,how can we achieve this without using guest anchor controller ? Can i use one interface Cisco WLC 5508 and connect it to the firewall or any device ?

View 17 Replies View Related

Linksys Wireless Router :: How To Change EA3500 Guest Network Name

Aug 17, 2012

I have just bought the EA3500 3 days ago.Also, I have been trying to find the way to rename the Guest Network to something without the -guest prefix.[url]....

View 1 Replies View Related

Linksys Wireless Router :: Change Guest Network Name On E4200?

Nov 11, 2011

Is it possible to change the Guest Network Name on the E4200? And if so, is it possible to do so without having to do a complete reset of the router and without using the Cisco Connect software?

View 4 Replies View Related

Cisco Wireless :: 5508 WLC - IPhone Ver 6 Unable To Connect Guest

Nov 27, 2012

Guestconnect SSID configured on 5508 WLC with Pass through athentication (NAC guest server). No issue with Laptops and Iphone/Ipad ver 4and 5. Only Iphone Ver 6 users unable to access Guest connect .

View 9 Replies View Related

Cisco :: 5508 - Wireless Guest Account Lifetime Limits?

Jun 6, 2013

We currently have ACS 5.4 and Cisco WLC 5508's deployed. We have wireless lobby admin accounts that can login and successfully create and modify guest wireless accounts. What we are trying to do, however, is give the lobby admins the ability to create wireless accounts with lifetimes longer than 30 days. Currently our setup will only allow the creation of permanent accounts (by entering all 0's in the lifetime fields) or accounts that last up to thirty days.     

View 4 Replies View Related

Cisco Wireless :: WCS Creates User Guest Access On WLC 5508

Feb 23, 2012

In my Wireless network, I have two appliances WLC 5508 running version 7.0.116.0.I have a WCS running version 7.0.172.0, deployed on a windows 2003 server.I've imported the two WLCs in my WCS in order to centralize the monitoring and the configuration tasks.Now I'm facing an issue when I want to create a guest user from the WCS, rather than creating this user access on each WLC. The creation of the user account is working good, the replication is done on the both WLCs, but on one of my WLC the guest user account is deleted after one hour(around).On the second WLC, the same user account remains during all its life time.In attachment a screen shot of the advanced parameter of the guest user.You can see that the user was created on the both WLC but is only active on one ... and unfortunately the wrong because the AP is associated with the other WLC.

View 2 Replies View Related

Cisco Wireless :: 5508 - Export Guest User Accounts To New WLC

Dec 19, 2012

I've got a WLC5508 (7.0.116.0) that is managed by WCS (7.0.172.0). I set up another WLC5508 with the same code and managed by the same WCS. Now I'd like to export all the 800 guest user accounts with the passwords from the old WLC and import them into the new WLC.

View 10 Replies View Related

Cisco Wireless :: 5508 - Anchor And Guest Controller IOS Version

Dec 5, 2011

I know that the recommendation from Cisco for the mobility anchor feature to work well  is to use the same IOS version on the anchor WLC and local WLC controller. Now I´ll install on a new site a 5508 local WLC with a newer IOS version which is installed on the other controllers ( Guest and local ). Later I´ve planned to update also the other controllers to the same IOS version. Now my question is, must I upgrade all other controller at the same time ?

View 4 Replies View Related

Cisco :: WLC 5508 - Keeping Internal Users Off Guest Wireless

Mar 22, 2010

Have a WLC 5508 running 6.x code with LAP's providing wireless for our internal laptops (WPA2 and EAP-TLS). I want to provide guest wireless which goes out a different port on the WLC to a guest firewall/cable modem. However, we want to prevent our internal laptops from being able to use the guest wireless. I have RADIUS (IAS) and LDAP for my AD available. We would prefer not to have use Lobby Ambassador and just have the guests use a simple password or web passthru. Guests may be laptops or smartphones. What options are available? I have tried a test setup using dynamic vlan assignments from RADIUS using the IETF flags, but can't seem to get it to work. Is there a way to identify the SSID is being used at the RADIUS server?

View 13 Replies View Related

Cisco Wireless :: 4402 Guest Anchor Controller 5508 Software 7.2

Nov 6, 2012

We currently have all of our foreign AP controllers on software version 7.0.116.  This consists of a mixture of 4400 and 5508 WLC's.  Our guest anchor is a 4402 on version 7.0.116.  We are replacing the guest anchor with a 5508.  We are also upgrading our 5508 wireless controllers to version 7.2 to support the 3600 series AP's.  My question is what is the recommeded code that the anchor controller should be on?  Should it also be upgraded to 7.2?  If we upgrade the anchor controller to version 7.2, will this affect anchoring to 4400 series foreign controllers still on7.0.116?                 

View 9 Replies View Related

Cisco Wireless :: 5508 Setting Up Guest WLAN With Landing Page

Aug 1, 2012

I've been asked to create 2 wireless networks for guest access. They are to be used by clients of 2 different companies and they have asked for the website of each company to automatically open as a landing page. e.g.

-WLAN1 - password is companyname1 - landing page = www.companyname1.com
-WLAN2 - password is companyname2 - landing page = www.companyname2.com

Is this possible with our 5508 WLC? I have googled it and can see that you can set a web auth page but I need different landing pages depending on which WLAN is connected to.

View 11 Replies View Related

Cisco Wireless :: 5508 Second Guest SSID On Controller Not Giving DHCP Out

Feb 28, 2013

i have two 5508 ver 7.3.0, one is the primary and one is the guest controller. mobility is up and running. i have an exising guest ssid working with wpa2-psk and web authentication and its working fine but i require a second guest ssid that only uses a wpa2-psk for ipod/ipads as i cant use passive client on primary controller. i presently have the one vlan range and dhcp setup on the guest controller to give addressing to either ssid. i know you can have multiple ssid setup on the guest controller but in other sites i have only had one guest connection comming from the primary controller, just a primary controller on each sites was only creating one link to the same guest controler.

View 3 Replies View Related

Cisco Wireless :: 5508 - Maximum Number Of Wired Guest Clients?

Jul 10, 2011

which is the maximum number of simultaneous wired guest clients on a 5508? And in a 2112 controller?
 
Wired clients count as wireless clients??
 
What about anchoring limitations, what is the effect of wired guest clients on the anchor controller?

View 2 Replies View Related

Cisco Wireless :: 5508 Office Extend And Guest WLAN Setup

Aug 28, 2011

We're looking at deploying both office extend and also a guest wlan. Both would require a WLC in the DMZ.My question is can one 5508 WLC be both a guest anchor and have office extend APs on it at the same time?

View 2 Replies View Related

Cisco :: 5508 - Guest Wireless Traffic To Blue Coat Web Proxy

Jan 17, 2012

In my lab I have a Guest Wireless network setup and fully functional. Here is a brief diagram:
 
Client -> AP -> LAN switch and WLC-Foreign -> Core router -> DMZ switch and WLC-Anchor -> Edge Router -> Internet

I have NME for credential management on the LAN as well.The WLC-Foreign is a 5508.In my DMZ, I have two networks - 1 for normal DMZ management and 1 for Guest Wireless.
 
I now have to add a Blue Coat web proxy appliance into the DMZ and have Guest Wireless traffic pass through it. I have tried multiple scenarios including connecting the WLC-Anchor to the Blue Coat directly and making the Blue Coat the gateway for my Guest Wireless network. Any good design for the DMZ networks and/or routing to enable the Guest Wireless traffic to go to the Blue Coat and then out to the Internet?

View 11 Replies View Related

Cisco :: Wireless 5508 Controller - Guest Wlan Time Of Day Restrictions?

Oct 2, 2011

Looking to add time of day restrictions to our Guest WLAN that is currently in its pilot phase.
 
Is there a way to config time of day access to a WLAN ?

View 7 Replies View Related

Cisco Wireless :: 5508 Static IP Address For Guest Wired Network

Dec 4, 2012

I setup a guest wired network on the WLC 5508 with 7.2.110.  A postage machine can only be setup for static IP address over guest wired network.  Is any one how to get it configure on the WLC 5508?

View 3 Replies View Related

Cisco Wireless :: 5508 WLC / Lobby Admin Guest Account With Two Controllers?

Feb 14, 2013

I have two 5508 WLCs.  Both have APs attached to them.  If I create a guest account with the lobby administrator on one, will that user account be able to log in to the network if the client is attached to the ohter WLC?  So far, I have found that I need to create the same user on both WLC's, in order to have the user login.

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved