Cisco Wireless :: AP1242 - Privileged Exec Password Works For Telnet But Not Web Interface

Jul 12, 2012

I recently configured a Cisco AP 1242, software version 12.4, via the web interface using the default Cisco credentials. At that time I setup an administrator account with read/write access and changed the Cisco to a read only access. Now went I attempt to login to the web interface it won't accept the administrator password. It will except the administrator password in a telnet session however. So via the telnet session I setup another user with privileged exec level access and that wont work on the web interface either. The Login box keeps coming back requesting a password. Strangely enough, I can login to the web Interface using admin username, with the Cisco password; but I can't do anything, and I also can't view everything. I've tried the following:

I've turned on SSH and created a certificate in the AP, but the login box continues to pop on the https://url.I've attempted to setup a user with a non-encrypted password, but have been unsuccessful.I've tried a different browser - login box continues to pop.I've made sure the web interface is activated in the API've tried a differnet computerI've tried disabling password-encryption service. Reset the enable password , I've successfully setup other 1240 APs but must have done something wrong on this one.

View 1 Replies


ADVERTISEMENT

Cisco Firewall :: SSH To ASA 5500 Into Privileged Exec Mode Without Enable

Mar 27, 2011

Is there a way to configure a ASA 5500 firewall so that when i access the firewall via SSH, my user is in privileged exec mode immediately after i have entered the log in credentials? So no need to enter "enable" anymore. I know how to do that with a router but couldn't figure it out for the ASA.

View 2 Replies View Related

Cisco Routers :: 2800 - Change Default Command Mode To Privileged EXEC?

Feb 14, 2013

I am currently setting up a 2800 Series router, and prefer a username/password type authentication rather than a single enable password. To do this, I did:
 
Router(config)# username <myuser> privilege 15 secret 0 <mypassword>
Router(config)# username2 <myuser> privilege 15 secret 0 <mypassword>
Router(config)# aaa new-model
Router(config)# aaa authentication login default local
 
This basically does what I want - when I connect to the router through console, it immediately asks me for a username and password. The thing is - as soon as I provide the right credentials, it takes me to USER EXEC mode (the default command mode). Is it possible to change that so that after entering the credentials, I go right into privileged exec mode?
 
Bonus question: As it is now, I just have no enable password, so when I login with my credentials, I issue "enable" to enter privileged exec mode without it prompting for an additional password. Is it safe to do it this way - having no enable password but requiring a username and password for login?

View 3 Replies View Related

Cisco WAN :: 861 SSH / Telnet Privilege Exec Level 15 Enable Not Working?

Aug 10, 2011

I have a customer with a 861 ISR.I want to block all the privilege 0 users from access the enable command
 
If i telnet into the device, as a priv=0, enable does not work
If i telnet into the device, as a priv=15, enable does work 
If i telnet into the device, as a priv=0, enable does not work
If i telnet into the device, as a priv=15, enable does not work
  
I have issued the command:privilege exec level 15 enable Should block everyone except 15's from accessing the enable command SSH and TELNET are on the same vty:
 
line con 0
login authentication local_authen
no modem enable
line aux 0
line vty 0 3

[code]....
 
Basically TELNET is following the rules ( priv=0 not allowed to access enable ) but SSH is not following the rules ( both priv=15 and priv=0 cannot access the command ) is there a way from blocking somes users from login in completely?

View 9 Replies View Related

Cisco :: AP1242 Ag As A Supplicant On Interface Switch

Jul 15, 2012

How to configure LAP 1242AG to authenticate it self as a supplicante on the 802.1x interface switch ?

View 5 Replies View Related

Cisco Switching/Routing :: 6500 - TACACS Doesn't Work Via Telnet / Works Via Console

Apr 18, 2013

I have a pair of OLD Cat6500's running CatOS:
WS-C6509 Software, Version NmpSW: 7.6(16)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Dec 22 2005, 16:37:19
System Bootstrap Version: 7.1(1)
System Boot Image File is 'bootflash:cat6000-sup2k8.7-6-16.bin'
System Configuration register is 0x2
 
I know these are no longer supported, but I have to ready them for migration. Recently a problem began with these switches.  What happens is that when I telnet to them, I cannot authenitcate via TACACS.  This works fine for all our other IOS equipment, just not for these 2 switches.  The error is:" % Error in authentication"  and then I get kicked back to the login prompt.
 
The odd thing is that when I connect to the switch via the console port, I can authenticate fine with TACACS.
CMS> /c 14

[Code].....

View 2 Replies View Related

Cisco WAN :: Can't Telnet On 851 Via Vlan 1 Interface

Dec 18, 2011

I have Cisco router 851 at my region site. It has five Fa ports. One of them is connected to ISP and has ip address 10.1.1.2 (for example). It also has vlan 1 interface, that has ip address 192.168.0.1 (also for example). I also have Tun0 interface that goes through ISP network and connects to my hub network. The rest of Fa interfaces are swithcable and they are in vlan 1.The problem is that from hub LAN I can telnet to 10.1.1.2 ip address, but I can't telnet to 192.168.0.1. Whereas I can Ping 192.168.0.1 from my hub LAN.

Topology:
 
Hub LAN -------ISP---------Spoke Router 851

View 8 Replies View Related

Cisco Firewall :: Asa 5505 Cannot Telnet Or Ssh To The Outside Interface

Sep 9, 2011

I setup a site-to-site VPN tunnel at the remote ASA5505. I am able to asdm to the outside interface but not ssh. I switch to telnet and still not allow me to access. I added an ACL to allow telnet any to the outside interface but still not working. In ASDM I see the log Here is the second issue. When I want to change the telnet back to ssh using ASDM I got the following error.

View 2 Replies View Related

Cisco Firewall :: 2801 Disable Telnet On Outside Interface

Jun 14, 2011

I am using a Cisco 2801 Router and currently have Telnet enabled on all interfaces.  How do I change that so it is enabled from all inside networks, but not on the outside interface? 

View 12 Replies View Related

Cisco WAN :: Telnet To Other Devices From Nexus 7000 Loopback 1 Interface

Mar 29, 2011

how do I telnet to remote devices from nexus 7000 with source interface as loopback 1?

View 1 Replies View Related

Linksys Wireless Router :: Wrt54gs - Password Protected Network Works But No Internet?

Apr 9, 2013

Model wrt54gsWindows xpI got the wireless network setup and password protected and my computer and phone can sign o the wireless network, but when I try to go to a website it doesn't work. If I connect te computer directly to the modem then it works.

View 2 Replies View Related

Cisco Wireless :: Can't Access AP1242

Aug 28, 2012

I have a brand new AP1242.. the issue is that i can't access it by Console nor by GUI on it's default IP Address 10.0.0.1.

View 0 Replies View Related

Cisco VPN :: ASR 1002 - Disconnect / Connect WAN Interface / Router Not Reachable Via Telnet?

Aug 13, 2012

We have 400 branches is ended on ASR 1002 router. ASR 1002 is the Hub router. When we disconnect/connect WAN interface  or Shut/no shut tunnel interface, at the moment, router is not reacheable via telnet. 

But if i disable the EIGRP on tunnel interface, tunnel are ok, then when i enable eigrp on tunnel interface, all eigrp neighbourhoods are OK.Is there any way to limit NHRP or EIGRP packets ?

View 1 Replies View Related

Cisco Firewall :: 5570 - How To Change Telnet And Enable VPN User Password

Jun 17, 2011

how do i change the telnet and enable and vpn user password on asa 5570.

View 4 Replies View Related

Cisco Wireless :: Recognize Attached Antenna To AP1242

Nov 11, 2012

Im looking for possibilities to remote recognize attached antennas to AP1242. I have a lot of devices which not working properly. I think most of them have only one antennas installed , but I cant be sure if its fitted into primary connector. Do You have any idea how to check numbers of attached antennas and if only one if its fitted into primary connector?
 
I want to disable diversity when I'll find APs with only one antennas.

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 7010 IP Telnet Source-interface Command Not Working

Aug 20, 2012

I have configured the ip telnet source-interface Loopback 0 command on a Nexus7010, but when I telnet to another device and do a show users, the ip address is of the closest interface to the device I telnet to, not the ip address of the Loopback. All interfaces are in vrf default. I am running 5.1(6) NXOS.

View 6 Replies View Related

Cisco VPN :: PIX-525 - VPN Works On Inside Interface But Not Outside

Sep 25, 2011

I have a PIX-525 with an UR license.  I was trying to get my VPN to work from my iphone over the weekend but to no avail.  I then changed the interface to the inside to see if my iMac could connect and bingo!  It worked.  I then tried to connect via inside interface with my iphone and it worked.
 
I connected a PIX-515e and, using the same settings, can connect to the outside interface via my iPhone.

Now, to answer the pressing questions, yes I changed the server IP address in my IPSEC client settings to reflect the outside and inside interfaces as I was testing each one.  I was using a preshared secret.  Yes, the secret was entered correctly and they all matched...yes, the tunnel name was entered correctly.  I was using local user database for authentication with username/password (i.e. no certificate authorization to make things simpler for debugging).  I changed the syslog to debugging and I see absolutely no errors when trying to connect my iphone to the outside interface (i.e. turning wifi off so I'm on my 3G data network).  The only thing I see is where my iphone hits the outside interface and it does a teardown (or whatever its called) but that's it.
 
Why would this work like a charm with my PIX-515e and not my PIX-525?  Could the VPN accelerator card in the 525 be at fault?  The 515e does not have the aecellerator card.  why I can esablish a VPN connection on the inside interface but not the outside?

View 6 Replies View Related

Cisco Wireless :: AP1242 Excessive Transmit Discards And Performance Complaints

Apr 15, 2013

I have an AP1242 near a couple of conference rooms.  I get complaints when we have a large contingent in there and some try to download documents.  The bandwidth consumption is meage - less than 2Mbps.  But there could be say 50 people in those training rooms.  I see no errors at the FE interface on the AP but I do see a good number of Transmit Discards.
 
Are 50 users connected to an AP1242 simply more than should be expected of the device?  802.11g is the radio.
 
Are transmit discards indicative of some kind of configuration problem?  The users in these cases are generally very close to the access point - within a few feet even.
 
If it is indicative of a configuration problem would that be an issue of the configuration of the laptop wifi cards or a problem at the AP? 

View 2 Replies View Related

Cisco Wireless :: Do AP1242 Access Points Support Kron Commands

Sep 22, 2010

Do AP1242 access points support Kron commands?

View 4 Replies View Related

Cisco Wireless :: Ap1242 Rebooting Every 5 Minutes / Crashinfo Files Generated

May 3, 2012

I have 1242 Configured with 12.4.21a-ja1 and I have many of these. however I have 4 on the same location that have just started rebooting. The crashinfo logs ell me that cmd: PASSWORD statement not printed..Dont know if thats the issue....but something is wrong.. We are running SNMP and thats about it...

View 1 Replies View Related

Cisco WAN :: 2900 Router - Does Self Ping Works On Dialer Interface

Sep 11, 2011

I have the below configurations done on a 2900 router. [code]I would like to know, if the IP address assigned to dialer1 interface "20.1.2.133" would be listed in "show arp" ?, as it failed to list on our router and I want to know if this is an expected behavior ?
 
Secondly, does self ping 20.1.2.133 (dialer interface IP) work ? [code]

View 2 Replies View Related

Cisco WAN :: C3560 Cannot Login Privileged Mode

Oct 2, 2011

Cisco cannot login? Currently i cannot login to the two of my cisco 3560 with the password that i usually used to login. and it is strength to me that its Configuration register is 0xF.

[BEGIN] 10/4/2011 10:22:57 AMshoTC-NGN-C3560-1>show verTC-NGN-C3560-1>show version Cisco IOS Software, C3560 Software (C3560-IPSERVICES-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2007 by Cisco Systems, Inc.Compiled Thu 19-Jul-07 18:15 by nachenImage text-base: 0x00003000, data-base: 0x01300000
ROM: Bootstrap program is C3560 boot loaderBOOTLDR: C3560 Boot Loader (C3560-HBOOT-M) Version 12.2(25r)SEC, RELEASE SOFTWARE (fc4)
TC-NGN-C3560-1 uptime is 50 weeks, 6 days, 9 hours, 34 minutesSystem returned to ROM by power-onSystem image file is "flash:c3560-ipservices-mz.122-35.SE5/c3560-ipservices-mz.122-35.SE5.bin"

[code]....

View 1 Replies View Related

Routers / Switches :: Password For Wifi No Longer Works?

Aug 16, 2011

the name of my wifi network changed and I do not know why, therefore the password for the former name will not work with the new network name

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ASA 5550 - Authentication To Privileged Mode

Aug 22, 2011

I'm trying to configure ASA 5550 t8.4 so, that ssh and https access users would authenticate themselves vs Radius (or LDAP) server and they would be directly logged in with privilege mode 15.
 
I have Windows 2008 NTP acting as RADIUS server. And the network policy is: Service-Type - Login, Vendor-Specific - shell:priv-lvl=15 and allow full network access. All my AP's and switches with IOS are able to use that policy and i am able to get directly to exec mode (privilege lvl 15)
 
But on ASA, the user has to "enable" itself.
 
ASA conf:
#aaa-server <group name> protocol radius#aaa-server <group name> (inside) host <ip address>  key 013B072C5A26070B2475411C350A18192218313A6A671F1A1B
#(config)aaa authentication ssh console <group name> LOCAL
#(config)aaa authentication http console <group name> LOCAL

How to get authorization working with LDAP (Active Directory)?

View 2 Replies View Related

Cisco WAN :: 877 - Privilege Exec Mode

Nov 11, 2012

I am experiencing a problem that when I telnet a router ip.It prompts for username and password.After entering username and password the router enter into exec mode with  > prompt.But when trying to enter in privilege exec mode by typing en or enable it gives error: 

"Translating "en" %unknown command or computer name.or unable to find computer address".
  
This problem started on removing easy vpn configuration which include aaa new model configurations. The router is in production environment and have remote and console access.             

View 11 Replies View Related

Cisco :: AP1242 In Autonomous Mode?

Dec 21, 2011

I am in the process of configuring Network Access Protection and just found out you can apply user based ACLs in the Network Policy.  Will this work with a Cisco AP1242 in Autonomous mode?  I saw some configuration guides for configuring User ACLs using the wireless controllers but not just Radius.
 
I have added the Vendor Specific Attribute of "Cisco-AV-Pair with two values of

-priv-lvl=15
-ip:inacl#10=deny icmp any any
 
I would expect all traffic to be denied when the user logs in due to the explict deny at the end of an ACL but I am not seeing that so I was unsure if Per-User ACLs work on standalone AP1240s.
 
I could add another rule to allow other traffic but I just want to see if the ACL would apply on a per-user/per-session bassis on the AP1200.

View 7 Replies View Related

Cisco :: Ap1242 - Bridge Connectivity Failing

Jan 14, 2013

I am having trouble getting the bridge to work. The setting is as follows: I have to buildings, separated by a road. Distance is apx 35-40 meters. From the main building there is a network which I am trying to extend to the other building by a wireless bridge. I am using two 1242 (autonomous)  for this. I have also external directional antennas (7Db) mounted on a pole 8 meters above ground on each buildings. These are of course directed to eachother. The antennacabel used between the ap's are shielded Cisco-cables.
 
The config on the root AP: 
 
dot11 ssid Valhalla01
authentication open
authentication key-management wpa version 1

[Code].....

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ASA 5520 Failover Exec Authorization Failed

Mar 14, 2013

I have a pair of ASA 5520 firewalls running in active/standby mode on 8.3.2.34 code. My configuration performs authentication/authorization into ACS 5.1, however command authorization is failing when I try to execute a command on the standby from the active unit...
 
failover exec standby dir disk0:/
 
Fallback authorization. Username 'adminuser' not in LOCAL database Command authorization failed
 
I don't even see the authentication attempt going into ACS.

View 2 Replies View Related

Cisco :: Show Run From Exec Mode Does Not Work As Expected 4948

Jul 2, 2012

I've got very basic problem but I cannot find the solution... I am sitting on the Cisco 4948E switch. And, I wanted to allow to guys who have not enable password to issue command sh running-config.I used the the following command to do that:SW4948E(config)#privilege exec level 1 show running-config.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: To Auto Enter Priv Exec Mode Upon Login On ASR1002

Jul 5, 2011

how to straight away enter priv EXEC mode when authenticated for asr1002?? Using XR12000, it can be done but asr1002 have to input enable passwd...my username for asr1002 have privilege 15 and i want to enter priv EXEC mode straight away after login without asking the enable passwd.

View 4 Replies View Related

Wireless :: Wireless Not Works But Wired Network Works

Apr 6, 2011

this computer was working on this router no problem. computer crashed and noiw computer is fine i connected it to my cable from ny desk top comutyer and works fine. It just cannot hook up to the wireless connection?

View 1 Replies View Related

Cisco Switching/Routing :: 881 Configure Dialer Interface With Username And Password

May 19, 2013

i am having cisco 881 router i want to know whether i can configure dialer interface with username and password for my dsl internet connection.

View 2 Replies View Related

Cisco Wireless :: WPA2000 - SSH / Telnet Set Up Via GUI?

Jan 13, 2013

I am trying to set up SSH/Telnet on a WPA2000 Wireless-G Access Point. I have looked for documentation but am unable to find any that says how to do this via the GUI, and I cannot see any obvious place where this could be. How to set this up? I would prefer SSH but telnet will do.

View 4 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved