Cisco Wireless :: Adjusting Maximum Power Level Assignment Value With AIR-CAP35021
May 1, 2012
I have a deployment of AIR-CAP35021 APs. They are in 2 buildings with multiple floors. They are installed in a row down the hallways. I want to increase the power levels by using the controller and not configuring the APs individually. I have set the TPC value to -50 but I still do not reach the outer walls of the floors in some areas. I need to know what to set the Max Power Level Assignment or Min Power Level Assignment to to get the APs to power up some more. If the MAX value is 30 and the default is 30 then how to adjust that value?
We are using WiSM WLCs and WCS to control a variety of 1131,1142 and 1252 APs utilising AP groups.
I've noticed on WCS that the power of certain APs is at a low setting, even though the APs surrounding them are also at a low setting. This is causing some gaps to appear on the heatmaps. I was under the impression that the WLCs would regulate the AP power to compensate for any gaps. Currently the global TX power level assignment method algorithm is set to automatic every 600 sec.
Now, obviously I could change this to fixed (not ideal as I may not want all my APs to run at max power all the time) or to on demand (also not ideal due to the increased admin).
Is there a way I can verify that the automatic power levels are adjusting as they should? Why are there gaps appearing in my heatmaps?
*NB It's not just the gaps on the heatmaps, I'm getting reports of dropping wireless signals from users hence me looking at the heatmaps and they just happen to correspond.
We have a WLC 4402 controlling 40+ LWAPs. Is there a way to keep Tx power level assignment dynamic, but set the time of day it does it? I'd like to minimize user impact. (Firmware v. is 7.0.116.0)
I have been searching through the cisco docs for a while and i just cant seem to find this info. Can I run aironet 1600's with my wism running 7.0.116? Also, could I run my 1130 series ap's with a wism2? Basically, what is the minimum code level for a lightweight 1600, and what is the maximum code level for a lightweight 1130?
My question is about the maximum possible transmitting power in a Cisco 1242AG-E-K9.I did an update of my AP on a new ios version and since then, the maximum power for me is limited to 17 dbm. I check this within the console and the "show controllers dot11radio0 | include Power:" command. I thought that I had 20dbm before the update, but unfortunately I can't proof this by myself because I have no AP left with the old firmware.
Is it possible that the upgrade did this? I read about the regulatory domains for the transmitting power. I live in Switzerland, so I thought I could use 100mW if I want to. I read it's not possible to use the 100mW at each speed but I think I should stull be able to select the 20dbm/100mW or am I missing something?
I will be doing a site survey using the client's Cisco 1262 with only 1 radio (g/n), 3 antennas. What is the maximum transmit power, 20dBm or 23dBm? I need to set the transmit power in the Airmagnet to 50% or 3dBm down as recommended by Cisco.
I am looking for the Maximum Power Settings Spec for the 3600 AP. The one from 2008 is too old. Does an update exist? The AP Spec itself does not show power levels by channel and regulatory domain which is what I need. If I can't get the spec, I will have to query the AP using "show ap config 802.11x apname" for each config I need.
I have an C4900M with twingig converter and SFP GLC-LX-SMD in. So the SFP supports DOM function. It is running on 12.2(53)SG2.
I would to the see the optical power level of the SFP, but it does not recognize 'show interface transceiver' command as showed in 4500 software guide.
I am relocating UPS units and will need to buy longer power cables to extend from our 4506 and 4510 to the new location.I think I am looking at 15 to 20 feet but I am going to confirm. Is it okay to use longer cables?
I am trying find out what the nominal power draw is for the following switch. The installation manual and data sheets says that the power draw for the units are 15.1W and 15.7W maximum at 18VDC. I am trying to use the switch for a solar application (12VDC) and would like to find out what the nominal draw would be when the device is in standby or if all of the ethernet ports are unused. I plan to use the two fiber SFP's and one copper port.
Some deep technical questions regarding the AP541N access point? What I want to know is, if the AP has: - Watchdog per IP - ACK time adjusting - Site Survey.
To enable our receptionits to print a guest user ticket on a small A8 ticket printer I'm looking for a way to adjust the layout and formatting of the guest account credentials page.
I have searched through the javascript and css files but with no success.
We have two L3 3750 switches running HSRP and routing for various Vlans on our corporate network. Rapid PVST is running across our entire WAN. We are introducing a third party solution for remote communications over MPLS. When interconnecting this equipment to our core network, we have experienced less than desirable failover times of 32 seconds and recovery times of 60 seconds. The vendors engineers are telling is that the interoperability between IEEE spanning tree and Rapid PVST is the culprit.
They are suggesting two scenarios - either converting our corporate network to MST (which I prefer not to do but provides us the fastest fail/recovery times) or adjust the timers on our Rapid PVST forwarding timer to 4 seconds. What would the implications be to change these timers on our network, and if I choose to do this, do I only do it at the core (on the two devices that would become root bridge)? I have been doing some reading that says to not mess with the timers, but nowhere do I see reasons why.
Just discovered I can change the focus on a DCS-920 by adjusting the black ring around the lens. It can be focused from very close, just inches, to infinity. I don't see this in any of the DLink documentation.
I was wondering if it is possible to do dynamic VLAN assignment on the Cisco Wireless Controller 5508 without using Cisco ACS but use Microsoft NPS server instead?
Does the WAP4410N support Dynamic VLAN assignment by means of 802.1x authentication?
The reason why I ask this; I am able to configure a SSID on a WAP4410N with WPA2-Enterprise, in combination with 802.1x PEAP network authentication. I can succesfully connect Windows, Windows RT, Windows Phone, iOS and Android devices. But.. I am unable to designate them to another VLAN based on access/connection policies. For example; I want mobile devices such as iPhone and Windows Phone to be assigned to a specific VLAN. The Wireless Access Point (authenticator) must be able to support that.
This is my setup:
Spplicants: Windows 8 / iPad / ... Authenticator: WAP4410N Authentication Server: Microsoft NPS (Network Policy Server)
I used 802.1x PEAP (Protected EAP) with password (domain user) authentication. In fact, the suplicants communicate with 802.1x to the authenticator. The authenticator communicates with RADIUS to the authentication server. NAP is not in between. It's just plain 802.1x authentication.
I keep getting alerts from our WCS stating that our 1252s are drawing low power. Now I am aware that they require enhanced PoE (up to 20W) but as we only have standard PoE in that building we purchased the 1252 series power injectors to go with them.
However, even with the correct power injectors the WCS still reports the draws low power error.
Is this a bug? Running WCS 7.0.172 at the moment.
Forgot to say we are using the PWR-INJ4 and the injector status is enabled and you see the injector MAC address when you drill in to the AP status.
I have been monitoring the alarm summary but have been off couple days and i see one of my controllers is down. Getting critical level security and message is port is down on the controller, condition link down. The other issue is config difference found between NCS and Contoller, I tried getting them to sync together but still getting the same message.
I'm setting up a large rambler house with a large footprint, and the only broadband connections are at opposing points of the house. Right now, I'm using two Linksys WRT54GS routers running Tomato in a WDS setup. A router, positioned in the middle point of the house, acts as a wireless access point so that the computer on the far end of the house can pickup the wireless signal. (One WRT54GS on its own doesn't have the power to go all the way across the house.)
I would like simplify things with a single, hi-power, hi-speed router at one end of the house. I know I can get better speeds with Draft N routers, but I need more signal strength as well. Are there any products currently available that can perform much better than my WRT54GS routers right now?
I need to go about 125 feet, through a number of walls.
We have a cisco 2500 wireless controller with LAPs.Our devices require Broadcasting to be enabled. So I had to enabe broadcast forwarding under the Controller tab.It appears this option is a global seeting. Is there a way to enable Broadcast Forwading for an specific WLAN or SSID?Can we isolate broadcast data to an SSID or a WLAN?
In the settings, there is a spot in which you can set the range of IPs to assign to connected computers and other devices. This particular option is available under the "LAN" options. What I am seeing is that the only IP that is assigned within the range is the one and only device hardwired to the router. Everything else is being assigned IP addresses outside of the range. Am I missing something? I was under the assumption that any IP addresses assigned dynamically would be within the range whether they were wired or wireless
The Wireless_Employees authorization profile,assign vlan 666 for wireless employees.ISE is passing VLAN 666 to the WLC - see attachement Radius Auth-VLAN666.jpg then I look on the WLC at a wireless employee who has successuflly connected to the network, WLC is still placing him in the pre-configured VLAN 7.
1. can VLAN be pushed from ISE to the WLC (code 7.2.103) for specific user session?
I have Remote Access VPN users (IPsec) who are terminated on Cisco ASA 5520 (v8.2). For those users, AAA is done on the ACS. Group-policies and tunnel groups are defined on ASA. Initialy I had all VPN users defined on ASA and group policies were associated with each user. Each group policy had it’s own IP pool for users. Now, I moved users to ACS. How can I associate group policy, defined on ASA, with users group defined on ACS? Is it possible that ACS send to ASA information about IP pool for different group policy? Users will use ONE vpn profile BUT based on the Active Directory group they belong to they obtain a different IP address for each group.Can it be done ? ACS version is 5.2.
is it possible to use the asa dhcp server function to assign based on mac address (yet)? I have read numerous places that it was not possible (as of 8.2) at least, but I am workin in 8.4. I should have mentioned that I've already tried commands (asa 5510 btw)
I have gotten the assignment of constructing a fictional network for my school.. and i cannot quite agree with myself upon which equipment i should choose.. its supposed to be all cisco. i need to supply 5000 users all in all, but only 300 on this site. i need to know which connections would be the most reasonable to use and of course which routers "if any" and switches i need.. (+ additional modules if needed) i have tried to make a visio representation, but i just think something is way off.
I have just upgraded our WLC from 4.0 to 7.0 (via 4.2). Before the upgrade we had our ACS returning a VLAN based on user group. This seemed to be working without an issue. Now that the WLC is on version 7 this is no longer working correctly. The ACS is returning a VLAN and passing the user but the client can not get an IP from the DHCP server configured.
Example configuration:
SSID-----VLAN
PN-CSC-----CSCVlan: Works PN-Others------OthersVlan: Works
PN-Others-----CSCVlan: No DHCP
When users are trying to be allocated to a vlan that is different from the native one the DHCP fails however both WLANs are configured to point to the management interface so dont have any real connection to the vlan other than by name.
Have there been any changes I haven't seen in the way the dynamic vlan allocation works in version 7?
I'm having a strange issue with a Cisco 3845 ISR router. I am setting up basic ACL and NAT but 2 issues occur. When using pat (overload) and a static nat assignment on the same subnet, the host with the static assignment has no wan connectivity except for icmp. The host is not reachable via the wan and the static public ip. Running show ip nat translations show the correct inside local and inside global addresses. The other issue is when applying an extended ACL to the outside or WAN interface coming in. No host on the inside has connectivity (icmp, tcp etc.) even to the gateway. I've cleared out all the ACL's as well as the ipsec tunnel settings and created only the nat overload and a single static assignment with the same results.I'm posting the running config below.
version 15.1 no service pad service timestamps debug datetime msec service timestamps log datetime msec [Code]...
I have a home desktop, home laptop, and work laptop that I use. I have Ultra VNC setup on my work laptop that allows me to remote into that machine when I am traveling for work. I have always been able to use the external IP address (not private) to login into the machine with no problem. This week, for some reason, I can no longer do that. When I started doing some discovery, I noticed that when I have all 3 machines booted up at home that the exact same external IP address is assigned to all 3 machines. The internal IP addresses are all different as they should be.Shouldn't each machine have a seperate external IP address assigned as well? Or is this working the way it should? I didn't change any setting on my router or DSL model. But I think the conflict that VNC is having on my work laptop is that it has the exact same IP as the destination computer and it fails. I can remote in if I use the private IP address (192.168.x.x) just fine.
I want to use RADIUS (of Secure ACS 5.3) to authenticate users within an ISP environment. Users log connect to a network using a point to point connection (L2) and then they are sending a RADIUS request to get IP adresses. Secure ACS is not quite easy to look through in that case.
my admin user is still being assigned privilege level 1, as shown in AAA Protocol > TACACS+ Authentication Details report.The report seems to show that the user is getting the right shell profile (Selected Shell Profile: Net-Admin -- is the one I setup for this user's group with both Default Privilege and Maximum Privilege set to Static 15). But still not the right privilege (Privilege Level: 1).Also, I found this document via Google: [URL] The router configuration examples all show this "aaa authorization exec tacacs+|radius local" command, which my device does not have.So I am wondering if I am not reading the ACS report right, or the device actually was assigned the correct privilge but that does not work without the "aaa authorization exec" command in the configuration?
