Guestconnect SSID configured on 5508 WLC with Pass through athentication (NAC guest server). No issue with Laptops and Iphone/Ipad ver 4and 5. Only Iphone Ver 6 users unable to access Guest connect .
View 9 RepliesIn our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest
Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) -
Mobility Group: Same configs at both ends
SSID Anchor : Anchor SSID on local and local SSID on Anchor.
AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
I have a WRT120N that is connected to a cable broadband modem. I have my desktop computer connected via cable to the WRT120 and that works fine. However, I am not able to connect to the WRT120N with the iPhone. I get the message, :Unable to join the network "<network name>".I've searched on the boards, but cannot find anything specific to the WRT120N and iPhone.
View 9 Replies View RelatedI just recently installed a RV220W at my office and (almost) everything works fine. I have noticed that when my iPhone is connected to the RV220 wi-fi network, I get the message "The connection to the server failed" when checking my email. If I disable the wireless on my iPhone, it connects up to the exchange server perfectly fine so it must be a setting with the wireless somewhere but I cannot find it anywhere.....
View 1 Replies View RelatedI have a Linksys WRT120N which had suddenly and unexectedly stopped working after disconnecting my roku box. I didnt worry about it until I got an Iphone and now .I was able to re-establish the wireless connection on my netbook today after a ton of research and messing around with the settings and then downloaded network magic, which finally fixed the problem. I believe that it automatically transmitted the WEP key to the Netbook, which is what I am missing when I try to log into the network on the Iphone.How do I get this password to show up on Network Magic? When I look at the settings, it does not show the actual numbers, they are hidden.
View 6 Replies View RelatedI just successfully setup my wireless Netgear router to work with my laptop and desktop. I now want to get my iPhone to connect to it as a WiFi connection. It sees the available network after I enable WiFi, but when it tries to connect, it just says "unable to connect" or something after I input the password.
My current password shows in the Netgear router (through 192.168.1.1) in the "passphrase" field under Wireless Settings, and it's cp6s-n3rb-ziav. This is what I put in the password field for my particular network in the iPhone before it tells me it can't connect.
There is an option on the left column in the router for "Set password," but it's just to change it to something else. If my iPhone won't accept the current one, I don't see why it would accept a new one, and then I'd have to go and change it in the laptop, too. Without knowing if that's the issue, I'm holding off on that for right now.
I recently tried resetting my router (dlink dir-655). I am able to connect using my iphone and my mbp if I did not make use of a secure connection. I tried putting a password on a new ssid. My ipad 2 and 2 other windows laptops are able to connect without any problem. My iphone 4s was having a hard time connecting to the new ssid. It does not connect automatically just in case I turn on and off my wifi connection for the iphone. I have to type in the wpa password whenever I had to go online again. FYI, I tried resetting my iphone several times and I still get the same response. As for my mac, it was far more much worse. Whenever I tried to connect to my router. It usually says connection time out. I tried resetting the router one more time again. I had to put in the old ssid and the old wpa password. My Iphone 4s was abe to connect automatically. My mbp did the same thing also.
View 1 Replies View RelatedI have a Wag 160n router which works fine with desktop pc connected by ethernet & wirelessly to laptop. My nokia phone finds the wi-fi signal but apple i-phone & ipad dont!
View 0 Replies View RelatedWe are implementing a new corporate wireless network with Cisco 5508 WLC's and C3602I LWAP's. We are not running any RADIUS or EAP at the moment and are starting with WPA2 w/ AES with a pre-shared key to begin piloting. The issue we are having is iOS based devices (iPhone/iPad) do not seem to want to connect. We just get a could not join wireless network messages. We have had success with several Windows based laptops, my MacBook connects, as well as several different Android devices.Looking at the logs on the WLC I see these entries which correspond to the MAC address of my iPhone.
*apfMsConnTask_6: Jul 17 17:25:20.620: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:376 Could not check supported rates. Missing Supported Rate. Length :0. Mobile MAC: 24:ab:81:92:4d:97.
We have Cisco wlc 5508 and cisco 1252's.
I have a SSID as WPA2(PSK).
The problem is, when an iPhone joins on the wireless, it only holds the connection for a short period of time, then reverts back to 3G.
I've already tried; disabling/re-enabling Aironet IE, Disabling/re-enabling Client Load Balancing, Disabling/Re-enabling Client Band Select, changing to G only, changing supported speeds up to 12Mbps and disabling lower ones.
on a 5508 WLC can we create new SSID for I PAD / IPHONE Users without having ISE, only I phone / I PAD are allowed to be authenticated rest all should be denied. IS this possible?
View 8 Replies View RelatedWe have two SSID's Guest and Corp. We are using 5508 controllers.
The problem is that if an iPad user is connected to Guest SSID and then try to connect to Corp then it fails saying "Unable to connect to Corp". After 10-15 retires the same iPad connects successfully. The problem doesn't happen on windows PC. I have attached debug for one of the clients.
I have a 5508 WLC and 40+ LAP1142N APs spread across 19 locations that allows staff to connect to our private network via wireless. I recently deployed about 40 new laptops all identical make and model HP ProBook 4530's and all have the same client setup for the wireless. Out of those 40 laptops I have 4 that will not connect to the private network. However, these same laptops will connect to my public, open wireless network without issue. In addition to the 4 that will not connect all the others will prompt twice for network authentication.Now, I have about 10 other laptops that are not the HP model and all connect without issue and without dual propt. I don't think this is a wireless network issue but could be some type of issue with this model of laptop.
View 8 Replies View RelatedWe have a centralized WLC with some branch office with AP's in Flexconnect Mode. The Wlans are configured to use Web Authentication (Landing Page). The Landing Page is Cisco Default.
We're experiencing some problem with Apple Devices, on some the Landing Page apperars on some not. The WLC Software is about 1 year old. On a XP machine the landing page doesn't appear too, but you can type in the address manually and it works.
Whats the best solution to include the Apple Devices successfully in the WLC Wireless World.
I want to prevent guest from doing peer - peer communication on my Guest (5508) controllers. Is this a feature on the WLC or only by applying an ACL on the router interface?
View 2 Replies View RelatedIs it possible to provide wireless guest access over the WAN from another office via the WLC. I have WLC 5508 in a central office and have other remote offices that have one Access Point in each office that are autonomous; I will be converting these to LWAPP. Is it possible to route guest traffic back to the WLC then forward this traffic out to the internet? How would I route this traffic out as well? install a secondary WLC in the DMZ and use anchor points. I only have one WLC
View 7 Replies View Related, I have a requirement by a customer that they will want to monitor the guest wireless access. Currently, we are proposing a Cisco Wireless Controller 5508 together with APs and the setup would be a dedicated VLAN for guest. I am wondering if Cisco ISE together with Cisco MSE would be sufficient?
Stuff to monitor and log are:
1. Guest username (I guess this would be self sponsored)
2. Company name
3. Websites accessed
4. Time, date and duration.
5. Logs are to be kept for 3 months at least.
I'm looking to implement guest WiFi access with web authentication on one of our 5508 WLC (currently deployed within a sandbox environment), but looking for some assistance. The WLC currently has a single connection from port 1 to the 'Test Site 2' switch. This is a dot1q trunk. On the WLC, the interface (for port 1) is configured as follows: [code] Currently, I have one WLAN configured with the profile name 'Guest Test 1', it's enabled and broadcasting the SSID. Security is L3 only with web authentication configured. The WLAN is configured to use the interface names "guest_wifi".
The issue is that when a client connects to the WLAN, it receives an IP address okay (10.99.254.x address), but doesn't seem to be able to contact the WLC to get the web authentication page. Eventually, the WLC terminates the connection due to an authentication failure.does it sound like I'm taking the correct approach here? The idea is that clients connect to the guest WLAN, which puts them on VLAN 99 and routes traffic through to the ASA and then onto the internet.
I working with guest accounts on a WLC 5508.if there is possibilty to print out the account information directly from the controller. If possible how to print out this accounts ?
View 3 Replies View RelatedWhere do you turn this option off? i have looked under security and did not see any thing.
View 1 Replies View RelatedI just got a new requirement for our wireless roll out and I need some help. Plan the best way to provide employee and guests wireless access w/ the guests separate from the production environment.
We have a 5508 controller w/ 1142 APs. I have two GBICs in the interfaces (only one is being used). I want to use a back haul connection for the guest access. I am having a hard time in visioning how to physically set up the cabling from the patch panel. Again, the requirement is to not allow guest users to connect to our production network but I still want/need to manage the AP. This will eventually need to be supported for remote sites tunneling back to the primary location.
I am running a 5508 WLC with 10 Access Point. we need to allow Internet Access to Guest. 10MB DSL Internet is dedicated for Guest. This link is terminated on a regular ADSL modem without being part of our network. We want all Guest Internet traffic to reach the ADSL Router. where should I create the Guest VLAN / where the DHCP for Guest users should be created. what is the best practise for similar setup.
Our Network is simple
ISP_Reuter-------ASA_Firewall--------------4505------------LAN-switch 2950
ADSL_modem------------ users connect via wireless but restricted to certain area only.
Could I setup wired guest Internet connection without layer 3 web authentication and how?I want guest users access Internet without going through web authentication.
View 2 Replies View RelatedWe have Cisco WLC 5508 in our network and right now ,this WLC is connected to two ports of each core switches.Both CORP and GUEST SSID are configured on this WLC. Now we want to segregate the traffic log GUEST to on core switches from WLC. SO my question is ,how can we achieve this without using guest anchor controller ? Can i use one interface Cisco WLC 5508 and connect it to the firewall or any device ?
View 17 Replies View Relatedi see there is an option to "allow password change" or "force password change" for guest roles in the NGS. But when i created a guest account using this guest role, after webauthentication , there is no prompt to change password. Is this the intended behaviour or is there anything else that i need to configure. Looking at it, i am not sure how the NGS would allow a "guest user" to really overwrite the password by allowing password change. ? is that not a security risk as well for the NGS ? my setup has 5508 anchor controller and NGS communicating via RADIUS.
View 7 Replies View RelatedWe currently have ACS 5.4 and Cisco WLC 5508's deployed. We have wireless lobby admin accounts that can login and successfully create and modify guest wireless accounts. What we are trying to do, however, is give the lobby admins the ability to create wireless accounts with lifetimes longer than 30 days. Currently our setup will only allow the creation of permanent accounts (by entering all 0's in the lifetime fields) or accounts that last up to thirty days.
View 4 Replies View RelatedIn my Wireless network, I have two appliances WLC 5508 running version 7.0.116.0.I have a WCS running version 7.0.172.0, deployed on a windows 2003 server.I've imported the two WLCs in my WCS in order to centralize the monitoring and the configuration tasks.Now I'm facing an issue when I want to create a guest user from the WCS, rather than creating this user access on each WLC. The creation of the user account is working good, the replication is done on the both WLCs, but on one of my WLC the guest user account is deleted after one hour(around).On the second WLC, the same user account remains during all its life time.In attachment a screen shot of the advanced parameter of the guest user.You can see that the user was created on the both WLC but is only active on one ... and unfortunately the wrong because the AP is associated with the other WLC.
View 2 Replies View RelatedI've got a WLC5508 (7.0.116.0) that is managed by WCS (7.0.172.0). I set up another WLC5508 with the same code and managed by the same WCS. Now I'd like to export all the 800 guest user accounts with the passwords from the old WLC and import them into the new WLC.
View 10 Replies View RelatedI know that the recommendation from Cisco for the mobility anchor feature to work well is to use the same IOS version on the anchor WLC and local WLC controller. Now I´ll install on a new site a 5508 local WLC with a newer IOS version which is installed on the other controllers ( Guest and local ). Later I´ve planned to update also the other controllers to the same IOS version. Now my question is, must I upgrade all other controller at the same time ?
View 4 Replies View RelatedHave a WLC 5508 running 6.x code with LAP's providing wireless for our internal laptops (WPA2 and EAP-TLS). I want to provide guest wireless which goes out a different port on the WLC to a guest firewall/cable modem. However, we want to prevent our internal laptops from being able to use the guest wireless. I have RADIUS (IAS) and LDAP for my AD available. We would prefer not to have use Lobby Ambassador and just have the guests use a simple password or web passthru. Guests may be laptops or smartphones. What options are available? I have tried a test setup using dynamic vlan assignments from RADIUS using the IETF flags, but can't seem to get it to work. Is there a way to identify the SSID is being used at the RADIUS server?
View 13 Replies View Relatedmy iphone will not accept my router password. when i begin entering the p'word in the iphone setup screen the "join" button turns off.
View 2 Replies View RelatedWe currently have all of our foreign AP controllers on software version 7.0.116. This consists of a mixture of 4400 and 5508 WLC's. Our guest anchor is a 4402 on version 7.0.116. We are replacing the guest anchor with a 5508. We are also upgrading our 5508 wireless controllers to version 7.2 to support the 3600 series AP's. My question is what is the recommeded code that the anchor controller should be on? Should it also be upgraded to 7.2? If we upgrade the anchor controller to version 7.2, will this affect anchoring to 4400 series foreign controllers still on7.0.116?
View 9 Replies View RelatedI've been asked to create 2 wireless networks for guest access. They are to be used by clients of 2 different companies and they have asked for the website of each company to automatically open as a landing page. e.g.
-WLAN1 - password is companyname1 - landing page = www.companyname1.com
-WLAN2 - password is companyname2 - landing page = www.companyname2.com
Is this possible with our 5508 WLC? I have googled it and can see that you can set a web auth page but I need different landing pages depending on which WLAN is connected to.