I have finally got my office extend AP to connect to my companies 5508 controller by enabling NAT on the management interface and can see all the cooperate SSID's. However when I try to connect to the SSID my client either gets a local IP address from my home router or then cannot get any IP address.
View 9 RepliesWe're looking at deploying both office extend and also a guest wlan. Both would require a WLC in the DMZ.My question is can one 5508 WLC be both a guest anchor and have office extend APs on it at the same time?
View 2 Replies View RelatedI am having an issue with internal and external clients. When we have the nat ip configured on the controller we cannot connect internal ap's at all. When we take the nat ip out it works fine. We are on code 7.0.220. I have tried the following command <config network ap-discovery nat-ip-only disable> and it did nothing.
View 1 Replies View RelatedIf we have a mixed environment of 4400 and 5500 controllers will the office extend features still work or will we have to run a seperate wireless domain from the 5508 for the aps that we need office extend on?
View 2 Replies View RelatedI have a situation where a user needs more than one office extend AP in his home. My office extend controller is a 5508 running 7.0.220.0. Are there any issues NATing multiple OE APs to a single address? My initial lab results indicate that each of the AP's associate with the controller and establish a DTLS tunnel. I see the SSIDs get pushed to the AP and then it seems to restart the process never being fully operational. Is there a workaround that will allow me to run mutliple OE APs?
View 12 Replies View RelatedHow the ACL Ports/Protocols which must be opened (in- and outbound) to enable a communication between a CISCO Office extend AP and a 5508 WCS.
View 3 Replies View RelatedI have attached a diagram of the current topology. At present, we have two 5508 connected to our core. We also have a 4402 behind the firewall (DMZ) just purely for guest access. So the staff users connect to the access point which in turns connects to the Staff WLC 1 (if this fails then to Staff WLC2). any guest user connect to the access point which in turn connects to Staff WLC which anchors to Guest WLC which then provides access. Since the guest is behind the DMZ they can only access the internet and not out internal network.
Now we want to office extend our network - we want our users to use 1132 AP at home to access the Infrastructure. is there a way we can do this without disturbing the existing infrastructure. On reading Cisco website, i know the best practice is to use 2 5508 (one behind the firewall and the other anchored to this access the internet network ) i thought since we have a Cisco (dmz) switch (48 port) and only the 4402 (Guest WLC) is connected to it, maybe purchase another 5508 WLC and connect to the 48 port Cisco (dmz) switch. will this work?
Just recently got a new 881W router. i have downloaded the 2.4 software upgrade. I go into the Office extend AP login and i get just a enter button. when i click on the enter button the AP page does not come up.
View 7 Replies View RelatedDoes cisco 3600 support office extend feature? If yes, is there a controller requirement? I know cisco AP 600 supports office extend
View 24 Replies View RelatedI have an 1131ag AP attached to our 5508 as an OEAP over the Internet. Everything with the corporate SSIDs is working correctly, so no issue there. I was wondering if a local ssid can be configured on the AP, similar to what can be done with the OEAP600, in order to provide wireless access to the Internet only? On the WLC, on the H_REAP tab, there is a button labeled "Reset Personal SSID"
View 3 Replies View RelatedI am setting up office extend with 1142 APs on a 5508 controller. All seems ok and I see my SSIDs on the remote AP. However when I try to connect I don't get a dhcp address and the connection fails. When I look at logs and some debugs I see dtls keepalive failures and the AP is actually disconnecting and re-associating with the controller.
View 24 Replies View RelatedRecently i have setup a WLAN with inside and anchor 5508 controllers. Standard setup. However, one issue I have is I wish to extend the length of time between password changes for users connected in on the guest wlan. At the moment, 30 is max. I dont have an option on the controller to creat accounts for any longer than that. How to I extend it to 90 days or 120 days?
View 1 Replies View RelatedI presently have a fiber internet connection to my office with about 40 wireless users on a single AP. The connection keeps dropping. Probably due to too many users on a single AP?
1. My question is similar to aniketchitale's, can get another wireless router, create a different SSID (eg. router1 and router2), but both wireless routers still connected to the same fiber connection. In other words, I would like to segregate the first 20 users to router 1 and the next 20 users to router 2.
2. By having 2 wireless routers each with their unique SSID, will all the users still be able to access to the same printer in the office?
I've a WLC 2106 and it is running IOS version 7.0.240. I am trying to setup a wireless mesh and used the Ethernet bridge port on the MAP to extend the network. The wireless mesh works fine but I can not get the switch to work that is connected to the ethernet port on the MAP.I'm using two different Access points. I'm using a Air Cap 3502i as the RAP and a Air Lap1142N as the MAP.The switch port that is connected to the RAP and MAP is configured as the following:
switchport mode trunk
switchport trunk native vlan 2
switchport trunk allowed vlan 10,20,30,40
[code]....
The wireless mesh between the RAP and MAP works fine. I can connect a device to the MAP wirelessly and access the network with no problem but I can not get anything to work that connects to the switch that is connected to the MAP ethernet port.
how do i setup a wrt54g router as a wireless access point to extend wifi signal from e3200 which is broadcasting the internet?
everyone keeps saying to remove the stock firmware and instal the dd-wrt firmare to do this. can i do this with the stock firmware?
I just got a new-to-me multifunction printer that's "network ready" (ie, has an ethernet cable port.) I also got myself an asus wl-520gu router. For now the router has the factory installed firmware on it, but i could put tomato or ddwrt on it. also in my house I have a linksys router already set up with a WEP encrypted wireless SSID which me and my 5 roommates share. I guess for the purpose of this post we can call that network "Kermit" and pretend it has password "ilovepiggy" This router sits on the second floor landing in our three story house. My printer and this asus is going to be in my room, which is on the first floor. I'd like to
a) get better signal strength/speed in my room
b) network my printer so that I and others can print to it / scan from it wirelessly over the network. Can I do both things? and what would that setup be like? Would it mean making the ASUS a wireless repeater? at what point in the process and how do I add the printer?
I have a Any Connect setup and able to VPN into my office.i bought a ASA5505-SW-UL that is unlimited user (UL) software license but now the vendor tells me that: From the ASA you can saw the unlimited license is for inside hosts, instead VPN client's, by default, ASA 5505 included only 2 VPN client's and can supported up to 25 VPN client's, your license look only default 2 VPN client's. If need more VPN client's connect, you have to purchase the additional VPN client's license. I am just wondering his statement TRUE/FALSE, because i thought ASA5505-SW-UL means unlimited license
View 4 Replies View RelatedI have a problem with a branch office setup, and I can't for the life of me think of what the problem is.I have a remote office setup, using an ASA 5505 that is set up to establish an easy vpn connection to the central network. The connection at the branch office is a 20/5 cable modem, the central network has a 25/25 fiber connection.
The issue I have is this. Wired clients work fine at this branch office, at least 95% of the time. I have a lightweight AP there that can come up and join the controllers at the central network, no problem. I haven't done anything with H-REAP because there are really no resources locally they need that would allow them to do their work, so all traffic is tunneled back to the WLC.
Wireless clients can authenticate to the AP, and I can get 15-20ms ping responses from them all day. Latency never comes close to the 600ms proposed limit with CAPWAP. Yet, for some reason the performance of the clients is problematic. Webpages will frequently not load correctly, they experience some freezing, and with one application we use - it refuses to load completely.If we bring these same computers to an AP connected to our central network, on the same SSID, they work flawlessly.
Something about this particular location is causing a lot of grief for our users.For what it's worth, we are running WCS 7.0.230.0 and the WLCs are on 7.0.116.0. The ASA is running a pretty basic configuration, pretty much out of the box with the easy vpn configuration entered.
I was into IBM iSeries all these years (15 years) and just got into Microsoft Programming(.NET) I have done a program in csharp.net which gets input from the users and dump it into a database. 50 users are going to do the data entry with just one database. As I dont have much knowledge on sharing/accessing applications/database in a network environment (PC based).
View 1 Replies View RelatedI have been tasked with the technology update of our office and have have MAJOR questions which I hope can be answered here, so here goes;
First a little history, I have an electronics degree and a certificate in computer technology, so computers are not something new to me, however networking IS.I have a VERY LIMITED budget to work with, which I'm sure is not unheard of before, with the following equipment already available:
1 MFP currently on lease connected via network
3 totally junk PCs running 3 different versions of Windows from XP to 7
A DSL internet connection
A wireless router
A wired 8 port switch
What I would like to do is begin with a basic server, 7 clients, shared internet on all machines (including external via login), An MFP, at least 1 NAS for data storage, 1 NAS for backup of all drives.
I have recently managed to configure a setup where I have 2 srp527's one at office one at home.Have 1 fixed IP at the office and 1 fixed ip at home.I have configured the srp at work to be a vpn server and have configured the group and 2 user profiles. This allows me to have 2 concurrent sessions over the vpn to my office from desktop and laptop at the same time. Connections fire up perfectly no problems.From the desktop, I connect using vpn client with user profile 1 Once connected, I then connect to my workstation machine at the office using remote desktop.This gets me super fast access to office files and large spreadsheets without downloading the whole file over the vpn and is working perfectly.
If I then additionally connect from the laptop using the vpn client with user profile 2 the remote desktop connection drops.Disconnect the laptop connection, remote desktop comes back.Have isolated this to being 2 connections arriving at the srp at the office from the same external ip. If I connect my laptop to my phone as a hotspot rather than using my home LAN, both connections are made and remote desktop has no interruptions. Is there a way I can overcome this through re-configuration of the srp at the office or is this a limitation with the srp?
I just joined this company and they already ad a VPN to one of their partners that provides them access to some resources. We have now added a 2nd location but the partner wouldnt allow a 2nd VPN tunnel so the decision was made to give the new location a ASA5505 to tunnel thru the main office to access the resources at the partners site.Using ASDM i believe i was able to setup the tunnel to the main office but there is no resource there to use. Now i'm stuck and i do not know what to do to get to the partner site
View 4 Replies View RelatedI have 3 different office location and I need to set up a LAN so that all three are connected and can share info?
View 1 Replies View RelatedWhat are the best network engineering practises for a small/medium sized office?Currently I have set it up like this:The top floor has all the sales people, each desk has a hub underneath which connects all computers at that desk together, and the hum is connected to a switch under the floor. There are about about 8 desks each with about 4 computers, so 8 hubs.They all go into a 10/100 switch, which is then connected to an 1gb switch on the bottom floor via a 1gb port on the top floor switch, via a cat6 cable.We then have internet > modem > router > the 1gb switch. Our main server is also connected to that switch along with all the computers for the ground floor, except these computers have 1gb switches under the desks instead of hubs. The main server is the DHCP, DC, DNS and file server. We have also setup another server which acts as a backup DC and is also a DNS server.Is there anything wrong with this configuration? We have been having problems with the router losing connection to the internet and warnings on the main DNS server.
View 6 Replies View RelatedI setup RV042s at a clients offices for the VPN support and am now finding that multiple sip clients behind the router does not work. I found a thread on tech and it looks like there's a case open for the issue. url... How to get this working other than assigning IPs for the phones and dealing with different ports.
View 1 Replies View RelatedI have got two 1841 and one 881 cisco router. I can keep any one of this router at HO and remaining at branch office. I have got a static internet IP at HO but dynamic IP at branch office. I want to setup a VPN to connect to HO from branch office through router. The branch connects through a private IP for internet purpose. Which VPN is the most secure and best for this purpose.
View 1 Replies View RelatedXYZ Corporation currently employs eight people but plans to hire 10 more in the next four months. Users will work on multiple projects, and only those users assigned to a project should have access to the project files. You’re instructed to set up the network to make it easy to manage and back up. Would you choose a peer-to-peer network, a server-based network, or a combination of both?
View 1 Replies View Relatedi'm trying to setup a local DNS server to manage small office local-only domain names for our servers. i have the DNS working properly (resolving local machines and using the ISP dns if it can't). so i put the DNS server ip into the "Static DNS 1" field of the router settings. the other 2 static dns fields are empty.the problem is that the router is still using the ISP dns server as the primary and my local dns server as the secondary. i verify this in two places. first, if i go to the "status" tab, DNS 1 shows the ISP server while DNS 2 shows my local DNS server. secondly, if i connect to the wireless device with a linux-based machine, the /etc/resolv.conf file shows the nameserver ips in the same incorrect order.
View 1 Replies View RelatedI bought 2 RV180 to setup a VPN tunnel between a remote site and central office.The VPN tunnel is established, I can ping from central office to remote site but browsing on that server fails. [code]
Seems the routing is not really working through the VPN Tunnel.
how to setup the 5508 Series LAN wireless controller. The online documentation are not details. What different between Service Interface IP and Management interface IP. The device IP is using what type service or management interface.
View 2 Replies View RelatedI have a Cisco 5508 setup an running with Cisco 3502 AP. with same SSID
however i need segment the network using 3-Diff VLANS:
1. vlan 1-----students
2. vlan2----- Visitors
3.vlan3------ Staff
the students and visitor are not ment to login to the corporate network, however the staff are to be login using their Active Directory User name and Password how to i achieve this ?
I have a new from the box 5508 which I am attempting to follow the initial setup process to IP it. When I make it through the initial setup the box reboots buts brings me back to the "terminate auto-install" prompt again for some weird reason?
View 2 Replies View RelatedI've just installed a standard Cisco wireless install (5508, 3502i, local and flexconnect setups) all working swimmingly.
The customer has asked for a new WLAN for a particular group of staff that will route to a different gateway than the general wireless staff.
The 5508 is connected to a older Avaya L3 switch that is the customers core swtich, but it isn't capable of PBR so it routes on desitnation only and its default route is not where I need the new WLAN traffic to route to. An ASA will be connected to the Avaya switch (which is the alternate gateway I need to get the new WLAN users to). So my question is probably routing 101, but if the ASA interface, the Avaya swtich and the WLAN interface all reside in the same VLAN, can I give the wireless clients the ASA as their gateway via DHCP and successfully get their traffic to the ASA?