I am quite new to wireless side and had a small Q regarding watching debug output while i am ssh to the WLC? I tried the other day and did not see any messages, now this could be for the reason that nothing triggered or perhaps it needs something like terminal monitor?? i couldnt find any such command. my WLC is 5508 running 7.3 version.
View 2 RepliesI have a user authentication issue with our WLAN deployment. My issue relates to the guest access WLAN. First a brief descrition of our setup. We have a local WLC in the branch office (5508) with two SSIDs configured, CorpNet for the internal network and GuestNet of external guest access. We also have a WLC (5508) in the DMZ to provide the guest access. We are using Cisco ISE server to authenticate guest users via a web portal.
The authentication process works as it should. An external client gets an IP in the DMZ and is redirected to the web portal to authenticate their account. When they do they are able to access and browse the internet. No problems. My issue is that if we disable their account (ie suspend or delete it) in ISE it does not seem to terminate the users session and they can continue to have internet access. What I would like to happen is that when the account is disabled in ISE then the associated device's access to the internet is removed.
I have a strange issue with clients connected to a WiFi network.I have configured AP in FlexConnect mode and 2 SSID's. After a reboot of the AP the network is stable for almost 45 mins. Then each client will go UP and Down, mostly with a delay of 5 mins.
What could be the source of this. The clients are Windows CE handheld with fixed IP adres. I already configure persitent client and have play arround with APR timers as well. Thereby an Windows desktop or an iPad has less connectivity issues but even they expert pakcteloss once in severall minutes.
Session timer is turned off
The iPad for example can play music, but each 5 mins you hear a little hickup and 2 subsecond ping are loss.
Controller version is 7.3
For guest clients , we have configured guest vlan and applied external web authenication on WLC 5508 , the session timeout value is 2700secons . When a client open a browser to internet page , wlc will redirect to URL and get the login page . After completed the login , he can go to internet page .
We find the iPhone and ipad clients will get the login page again ahfter ~ 5 mins , it is mismatch with session timeout value 2700 sec (45 mins) .
I am running a guest wireless network on a Cisco 5508 WLC with 6.0.202.0 code. My syslog is filling up with the following error message:
WLC: *May 15 12:32:59.244: %AAA-3-VALIDATE_GUEST_SESSION_FAILED: file_db.c:3968 Guest user session validation failed for guest_user10. Index provided is out of range..
The user that is assigned to the guest_user10 account works fine and has no idea this error is occurring.
This error message is occuring exactly every 15 minutes 24x7.
I believe I have a rogue user who has setup a device to try and login to the guest network automatically, every 15 minutes with the guest_user10 credentials. I need to track this device down. I need a way to find either the MAC or IP address of the device that is causing this error message. I have tried turning on AAA debugging on the controller but I dont get anything more than the above error. I have also tried using WCS to look at the client history but it only show the normal activity.
I have my wireless connection set up and everytime I open a video file, my wireless connection disconnects and then re-connects after 30 odd seconds. It also happens when trying to stream video through Veetle or Sopcast. I have spent hours on google trying to find the solution to this and can't find anything. I have tried switching my firewall off, changing tons of settings of my wireless connection. I also updated my Broadcom wireless driver to the most recent one.
View 3 Replies View RelatedSince I've bought a new Cisco router last summer,, a Linksys E1200 (v.1 updated...) (always in the wireless mode), my laptop (Sony, Vaio VGN-NW110D) freezes when I stream videos online or when I use skype video calls. It sometimes freezes for a few minutes (in that case it's just really extremely slow and it sounds like a satanic robot), and then comes back (but does it again a few minutes later. Or sometimes, and this is more frequent with skype video calls, it completely freezes, and I have to reboot the hard way...This never happened to me before and I've been watching videos and video skyping for years. I have windows 7, service pack 1 (32 bits) now . I have windows 7 now, since about the same time I bought the router. But what makes me think its related to the router is that when I'm at work, or at my parents, or sisters, or boyfriend's house, this problem does NOT occure.... I don't know if this information could be relevant, but this does not happen when I make videos calls with skype on my iphone.
View 1 Replies View Relatedi have WLC5508 and many 1142 AP . client have authenticated by ACS .but sometimes client's PC has occurred this pheonomenon. and has reconnectioned.
View 11 Replies View RelatedI have a blueray player that I want to put in the computer that works as a server for me. The server is the computer that I have the vpn attached to and is therefore the one that gets all of the downloads as well.I am also thinking of upgrading the network for this to 1000 bit - N standard? With the faster throughput on the internet will it be feasible to stream a blueray across the network?
View 2 Replies View Relatedi often want to watch a live streaming but after a while i disconnect from the internet with no apparent reason.Sometimes the internet comes back in some seconds, sometimes in minutes, sometimes in hours and sometimes it just wont come back even if i reset the modem.Restarting the laptop always works...!I saw some threads in regard of the same matter but i couldnt work anything out.
View 3 Replies View RelatedI have a NAS (DLink) connected to my router, and my samsung smart TV. I currently use a Boxee Box for the family in another room, and it works great. However, I now want to be able to watch the movies (.mkv's) stored on my NAS, on my smart TV in my room. I want to be able to do so without leaving my PC on. The TV uses a Samsung 'dongle' to connect to my WiFi.
View 4 Replies View RelatedI have a HP DV 5000 laptop XP.I want to watch online videos,movies,sports,etc?
View 2 Replies View RelatedIs there such a possibility in the firmware or through telnet?
View 3 Replies View RelatedI keep getting disconnected from internet every once in while. Maybe for a minute or less, but there was never any obvious sign of disconnection, IE. my tray icon never says disconnected or limited connectivity. But there are signs of getting disconnected when I am either gaming or watching videos online. The video would buff a bit then get stucked, then loads after a few to 30 sec delay. When gaming, I would lag out or have everyone waiting for me to connect back (warcraft3, starcraft When I am downloading files, this does not ever happened, no matter how big the file size is. This problem started a few days ago. I tried restart the modem but I cannot possible do that every 15 mins. Another problem that could possibly be also be the same is that I am connected but cannot browse websites. If I am downloading anything, it will still keep download, i just can't browse or log on to online games.
View 9 Replies View RelatedI don't have a DVD drive in my Windows Media Center PC that's connected to my TV. I was wondering if there's a way I can insert the disc into a networked PC that has a DVD drive and watch the movie on my Media Center PC.
View 1 Replies View RelatedI want to know how could I configure a Router Cisco DDR2201v1 for watching my IP Camera System from anywhere with a internet connection. I already try to open a port in the NAT virtual server configuration but it didn't work.
View 2 Replies View RelatedAlthough our usage policy clearly states NO PORN, i'm still catching users watching porn. I'm to the point where i'm going to start shunning mac addresses. Before I do that I would like to first send them a message, like Net Send used to do, warning them to stop.
View 2 Replies View RelatedMy internet worked for like 4-5 days then suddenly stopped while I was watching some random movies on youtube then I keep getting this error :"Local area connection" doesn't have a valid IP configuration, I could go see the university support, but the problem is they don't work during the weekend and that's the second time I have this problem within a week. That's annoying and leave me without internet for couples of days[CODE]
View 10 Replies View RelatedI keep loosing internet conection when i`m watching youtube videos. Conection is wired and super fast fiberopticks internet. Trouble shooter says: no valid IP adress and one other thing. As soon as i restart the laptop everythig fine untill i try to watch again. Afraid i will destroy the computer by constantly restarting
View 1 Replies View RelatedWhile watching anything from Netflix thru my Wii gaming console, i keep getting disconnected and have to restart. When I plug the ethernet cable directly into the Wii, this problem does not occur. I have a Linksys BEFSR41 ethernet 4 port router.
View 2 Replies View Relatedi have 3 access-list configured IN | Out on my Border router (MARTIAN) ,i have to look which one block some of the traffic passing through ,for that matter i have enabled the below commands on my ISR 2900: with nothing output.
View 3 Replies View RelatedMy tunnel had been running fine for a couple of months. Now, not so much.Here is some debug.
View 6 Replies View RelatedI have been using "debug ip packet" on a Cisco 2921 running IOS 15.1(4)M1. The problem I have is that, although I am using an ACL to limit the output, I am seeing some output that is distracting from what I am trying to see. Specifically, I am seeing the following:
Mar 19 20:22:36.135: IP: s=192.168.20.253, d=224.0.0.2, pak 30DB6D4C consumed in input feature , packet consumed, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
[ code]...
These would appear to be HSRP messages. But I don't understand why they are appearing when I configure "debug ip packet 101". The ACL is pretty simple:
access-list 101 permit icmp host 96.87.145.1 host 192.168.20.1
access-list 101 permit icmp host 192.168.20.1 host 96.87.145.1
So I thought the implicit "deny ip any any" would block these messages. I even tried to block them specifically using an extra line:
access-list 101 deny udp host 192.168.20.253 host 224.0.0.2 eq 1985
But still they show up!
Is there a way to debug syslog messages? Something like "debug ip syslog"?
View 11 Replies View RelatedUsing 'debug ip packet acl# det on a 2911. On an older Cisco router you could set up an ACL
access-list 150 permit tcp any any eq 1023 and then run debug ip packet 151 det and this would give a good debug output for any traffic matching a TCP port of 1023.Now when I try this on a 29xx ( Version 15.1(4)M3 ) I get the screen filling with a lot of multicats HSRP communications.
I have tried rewriting the acl to have other deny statements after the permit to limit the source or destination hosts and/or the ports but the HSRP data is still there.
like this
access-list 150 permit tcp any any eq 1023
access-list 150 deny udp any any eq 1985(code)
how to debug an ACL I've created on a 4404 WLC, specifically I want to monitor what packets are being denied by the ACL as something that should be working isn't
I've created an explicit deny statement at the end of the ACL and verified that the counter increases each time I try the problem software update.
What I can't work out is how to get the WLC to tell me what packets are being denied by the explicit deny statement, all I can find are 'show acl' commands which just give me the counts.
The equivalent on a router would be debug ip packet acl and adding the log keyword onto an ACE. I suppose I could configure a SPAN session on the WLC uplink to the switch but that seems overkill?
Iam fairly new to Cisco IOS and am having trouble getting an IPSEC tunnel to come up between 2 cisco 881-s. I have entered both debug crypto isakmp and debug crypto verbose but when I try to ping an internal IP at the other location through my VLAN1 interface no debugging info comes up.
Also my ACL-s for the crypto maps show no activity. I have tried many things so my configuration files are starting to get really messy.
[code]...
I'm attempting to debug an ipsec tunnel on an ASA 5510 (8.4(3)) and when I turn on `debug crypto ipsec` and then execute `logging monitor` I get an constant stream of TCP debugging events, is it possible to only view ipsec messages?
View 2 Replies View RelatedDebug is not showing up on the console. I have configured logging console. My older switches, if an interface goes down or is brought up, it shows up on the console, but not on the new 4507s.
WS-C4507R-E
cat4500e-ipbase-mz.122-53.SG2.bin
TG-4507#sh loggingSyslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
[code]....
I'm troubleshooting one way audio with our anyconnect phones.I think it is a routing issue.typically I wouldnt run debug ip packet detail on a production router, however I just found out that you can use acl's to specify the traffic to be debugged.
R1(config)#access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1
R1(config)#access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1
R1(config)#end
R1#debug ip packet 199 detail
IP packet debugging is on (detailed) for access list 199
The use of debug commands requires the allocation of system resources like memory and processing power and in extreme situations can cause a heavily-loaded system to stall. Use debug commands with care. Use an ACL in order to selectively define the traffic that needs to be examined to reduce the impact of the debug command. Such a configuration does not filter any packets.
Any way of narrowing down a degub for a peer address only? For example, I currently run 'debug crypto isakmp 127' which captures everything, but can I run the same dVPN debug for peer address 1.1.1.1?I know you can run 'sh crypto ipsec sa peer 1.1.1.1'.We're using an ASA5520 (8.4.2).
View 2 Replies View RelatedWhere can I find information on using debug on the SGE2010P switches? The information in the admin and reference guides is extermely limited.
View 1 Replies View RelatedI have a 2600 with a PRI card, when I try to do an isdn test call int s1/0:23 ######### the debug constantly comes back with "Cause i = 0x83E020 - Mandatory information element missing" Vendor states he doesn't see the SDN 'flag' coming through. I have both the isdn nsf-service, and the dialer map configured to use a class with the outgoing sdn command.
View 10 Replies View Related