Recently i have setup a WLAN with inside and anchor 5508 controllers. Standard setup. However, one issue I have is I wish to extend the length of time between password changes for users connected in on the guest wlan. At the moment, 30 is max. I dont have an option on the controller to creat accounts for any longer than that. How to I extend it to 90 days or 120 days?
View 1 Replies
I 'm administration an Aironet 1242ag, and we are currently buying an AIR-ANT1728 as antenna. The standard cable for the antenna is 0.9m long, and It could be insufficient for my needs.
So a few questions:
Can i extend it ?
AIR-CAB050LL-R could fit?
The connectors should be 1 male, 1 female?
We are required to change passwords every so often at my job. I am trying to change the password for one of the local user accounts on a 5508 WLC running 7.0.98.218 - How can I accomplish this task? The option I get is to remove the users.
View 1 Replies View RelatedI have finally got my office extend AP to connect to my companies 5508 controller by enabling NAT on the management interface and can see all the cooperate SSID's. However when I try to connect to the SSID my client either gets a local IP address from my home router or then cannot get any IP address.
View 9 Replies View RelatedI am having an issue with internal and external clients. When we have the nat ip configured on the controller we cannot connect internal ap's at all. When we take the nat ip out it works fine. We are on code 7.0.220. I have tried the following command <config network ap-discovery nat-ip-only disable> and it did nothing.
View 1 Replies View RelatedIf we have a mixed environment of 4400 and 5500 controllers will the office extend features still work or will we have to run a seperate wireless domain from the 5508 for the aps that we need office extend on?
View 2 Replies View RelatedI have a situation where a user needs more than one office extend AP in his home. My office extend controller is a 5508 running 7.0.220.0. Are there any issues NATing multiple OE APs to a single address? My initial lab results indicate that each of the AP's associate with the controller and establish a DTLS tunnel. I see the SSIDs get pushed to the AP and then it seems to restart the process never being fully operational. Is there a workaround that will allow me to run mutliple OE APs?
View 12 Replies View RelatedWe're looking at deploying both office extend and also a guest wlan. Both would require a WLC in the DMZ.My question is can one 5508 WLC be both a guest anchor and have office extend APs on it at the same time?
View 2 Replies View RelatedCan the Cisco 3750 and Cisco 2911 enforce password length? Is there a default password length? I had read the following:You can specify a password length but not special characters etc..security passwords in-length
View 1 Replies View RelatedI have set up a home network with Time Capsule as the primary router. I would like to use my WRTG54GL to connect to the network via ethernet and extend it for wireless access at the opposite end of my house. I changed the settings to disable the DHCP server, I named the network the same as the Time Capsule and duplicated security mode and password. I can connect with my laptop, but it initially connects with full internet access, but after about 10 seconds, I can see Airport searching for a network. It reconnects, but for about 45 seconds I have no internet access and then access returns and works fine. On my iPad, however, although it shows I am connected to the network, there is no signal indicator at the top of the screen, and all connectivity seems to be through 3G -- not the network. I assume there is a setting on the Linksys that needs changing, but I can't figure out what it is.
View 10 Replies View Relatedwe have installed TACAS server for all kinds of authentation. What i came to face is that when i configured enable mode password on ASA 5520 or 5510....maximum length this password is of 8 character but i need to more character.
View 10 Replies View RelatedI set the password for the router management consisting of 115 characters. Now I can not log into the router.
1. What is the maximum length of passwords to manage the WAG320N router?
2. What are valid characters in a password for this router?
How the ACL Ports/Protocols which must be opened (in- and outbound) to enable a communication between a CISCO Office extend AP and a 5508 WCS.
View 3 Replies View RelatedI have attached a diagram of the current topology. At present, we have two 5508 connected to our core. We also have a 4402 behind the firewall (DMZ) just purely for guest access. So the staff users connect to the access point which in turns connects to the Staff WLC 1 (if this fails then to Staff WLC2). any guest user connect to the access point which in turn connects to Staff WLC which anchors to Guest WLC which then provides access. Since the guest is behind the DMZ they can only access the internet and not out internal network.
Now we want to office extend our network - we want our users to use 1132 AP at home to access the Infrastructure. is there a way we can do this without disturbing the existing infrastructure. On reading Cisco website, i know the best practice is to use 2 5508 (one behind the firewall and the other anchored to this access the internet network ) i thought since we have a Cisco (dmz) switch (48 port) and only the 4402 (Guest WLC) is connected to it, maybe purchase another 5508 WLC and connect to the 48 port Cisco (dmz) switch. will this work?
Have WLC 5508 running 7.4 code; have wlan setup to allow access to internal network. Users on ipads should be able to connect to this wlan and authenticated via certificate instead of PSK. We have setup laptops that are part of domain to use internal CA for authentication to WLAN. Ipads are not part of domain so we are not able to use the same model, or can we use the same model for authentication?How to setup WLC to authenticate ipad users via certificate instead of PSK while connecting to the WLAN?
View 1 Replies View RelatedWe are implementing a WLC infrastructure in our company following the below scenario:
- WLC 5508, OS 7.2
- APs AIR-LAP1142N-T-K9
- 3 Wlans (1Open w/ Web Auth, 1 WPA2 and 1 802.1x)
Issues:Everything seems to be fine, but some users loses connectivity (when connected to 802.1x network) at least 3 times by day.
- I cannot see anything at WLC logs concerning the association/deassociation of any of these users.
- Only strange line in the logs is "RADIUS server 172.21.44.50:1646 deactivated in global list" (authorization server config)
- Also I see some "Coverage hole pre alarm for client" but that doesn't look like a problem...
Have a WLC 5508 running 6.x code with LAP's providing wireless for our internal laptops (WPA2 and EAP-TLS). I want to provide guest wireless which goes out a different port on the WLC to a guest firewall/cable modem. However, we want to prevent our internal laptops from being able to use the guest wireless. I have RADIUS (IAS) and LDAP for my AD available. We would prefer not to have use Lobby Ambassador and just have the guests use a simple password or web passthru. Guests may be laptops or smartphones. What options are available? I have tried a test setup using dynamic vlan assignments from RADIUS using the IETF flags, but can't seem to get it to work. Is there a way to identify the SSID is being used at the RADIUS server?
View 13 Replies View RelatedI have a wireless 5508 with license base to 50 aps, i use a deployment flex connect. I already registered all my access points, I use web authentication to authenticate users guest, and the service dhcp is in the central site.
My issue is the users in each remote site, can not get an ip address by dhcp from the central site, they can authenticate in the guest ssid, but any users can not get an ip. The request is passing by the wan in this way
Central Site DHCP - Router WAN - Remote Site - Users with notebooks. I use flex connect central deployment (all the traffic consulting to the wlc) .
perhaps i should use local deploy? The wireless is in the central site.
I work at a campus and use the WCS to control access to my network for staff and only internet access for students. The Staff are assigned Username/password thru active directory and the student uses another SSID with only WPA --a password for all. I was tasked with adding more securing for students -- by adding a user/password. I do not want them connecting to my Active Directory for two reason--security risk and I have too many to input (over 1000). So, I wanted to use our internal database to validate users. I create a webpage with "WebAuth" that opens my logon page from my site and validates the login fields against the database. It works and this allows the user to navigate thru my website but not outside the site. If they try an outside url it redirect them to my logon script. I now understand why, so I'm looking for code I can add to my logon page that would allow me to redirect me to the controller's (once users are authenticated by my database) to call the WCS controller so I can enter a preset username/password so the policy management file would allow them access. I presently use "External" and don't know if "Custom" would work. Finding a way in using a database instead of adding one person at a time?
View 3 Replies View RelatedI have a Cisco 5508 running version 7.0.116.0. This controller hosts an open public wifi that requires users to accept a terms agreement via a Web-Passthrough setup that redirects them to the terms splash page. For most people this works without any issue. However, if a user has their homepage for their default browser set to a https site, such as [url]..., then they are never redirected to the terms splash page. The page will just spin and spin until finally they get a timeout error.
View 7 Replies View RelatedIs it possible to rename the default webauthentication URL from [URL] to something like [URL]. We are running on 7.0.98.0, is it possible to do http for web authentication and https for Mgmt access if we upgrade the controller software?
We configured our guest wireless with no layer 2 authetication so users can associate with an AP and get an ip adress but they can't go anywhere unless they have a valid username and password(web authentication) - does this affect the performance of an AP since there will be many people associated with each AP, is there any setting in the WLC to de associate a client from an AP if its idle for certain time.
I would like to set a time limit for how long a client can be continously connected to the WLAN that provides my guest internet access. The user name/password is hosted on my ACS and authentication is provided by my Cisco NAC. I am using 5508 controllers (7.02) and WCS.
Somewhere in this combination of stuff, there has to be a way to set a two hour time limit.
I am a restaurant owner and have a wireless network set-up via DLink DSL 2730U router. Now some times I get customers who demand to use the network and they use it for free which I find irritating. I have found one solution of 'Guests/Virtual Point' but I need to limit the time (say 15 minutes) for which they can use the network.
View 1 Replies View RelatedLooking to add time of day restrictions to our Guest WLAN that is currently in its pilot phase.
Is there a way to config time of day access to a WLAN ?
what is the ideal timeout for users when no activity is performed while connected to network via wireless
-WLC model 5500
-AP model 1200 series
users get disconnected every 15mins when machine is Ideal and where do i see this option.
As of last night my router has been producing slow connectivity when multiple users are connected to it, but it's perfectly fine when only one user is connected. I am on a laptop myself, but we also have a second laptop and a desktop where the modem and router are set up. I have upgraded the firmware so that is up to date. We have Comcast Fiber Optics so my internet speed is normally quite fast even when all of my computers are connected.
I am using DHCP Configuration. My Channel Width is set to 20 MHz and I am using Channel 11. The Security Mode is set to WPA Personal. I had it on WPA2 Personal but I read that changing to WPA Personal might work and so far it doesn't seem to have done anything. I set the Beacon Interval to 50, Fragmentation Threshold to 2304, and RTS Threshold to 2304. Everything else is set to the default factory configuration.
Just today I received a notice that said "Windows has detected an IP Address Conflict", but ever since I reinstalled the Firmware it hasn't come back. I've rebooted both my laptop and the desktop to confirm it hasn't come back as well. I've tried everything that I could think of including reconfiguring my router and restarting my modem as well.
Does WLC 5508 has capability to create login credentials with specific time of validity? Could it be used in hotel set-up to provide prepaid access account to guest?
View 2 Replies View RelatedI have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running Win XP PRo SP3.
View 1 Replies View RelatedI have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running WinXPPRo SP3.
View 4 Replies View RelatedI have DIR-615 Cx (bought in Taiwan) Hardware C2 ver. I reflashed with DIR-615 firmware from Singapore to get English interface. I connect to a internet through another router on which I setup D-Link on DMZ with port forwarding. Router works fine, I have internet connection. So the question is: I have small cafe and want to offer customers WiFi connection. I want to setup a time limit and allow them to browse only internet not internal network. (When I connect laptop to D-Link Wifi I can see my NAS on different subnet connected to cable modem/router) And if its possible to limit bandwidth. Can I do it with DIR-615 and how to configure such a setup?
View 1 Replies View Relatedgetting the E1200 and was reading over the PDF user's guide re. guests. It says "The [b]first time[/b] your guest tries to access the Internet through a web browser, they will see the Guest access screen To continue, they must enter the password you provided in the Password field, then click LoGIn." Should I take this to mean after the first time it won't prompt them again for a password? I was wondering If my roommate wants to use my internet account if she can use the guest account every time without a password or not. If she has to enter it each time it might be easier to just add her computer to the network.
View 2 Replies View RelatedI am using web authentication with my Wlc 5508 and I would like to check all users currently connected (ip, login used, MAC address, ...) with SNMP.
I am using an external web server and my client are authenticated with ldap.
I know I can receive these information with traps, but I would like to create a short program which will check all users when I click on a button.
Having an issue with Cisco ACS v5.1.0.44 and the Cisco WLC 5508. Cannot get users to authenticate and keep getting error messages referring to EAP session timeouts from WLC filling our logs. Seems to be with this model WLC because we have Cisco 4400 WLCs pointing to the same ACS with no issues. Is there a bug or special configuration that is necessary to marry the 5508 with ACS v5.1.0.44?
View 9 Replies View Related
