Aironet 1142, two units, using WPA Radius to IAS on Windows 2003. I have a problem with Macs beginning to surface. One laptop, OSX 10.6, ran fine for a couple of weeks. A problem started occurring, while using the network, communication will stop. The Mac still shows connected on the laptop, and it shows associated in the interface on the Airnonet. However, there is no data transfer. I open a terminal and ping, there is no response. After sitting for awhile trying to ping, it will start again and communicate. After letting the laptop sit for awhile, the same things happens. The connection can be disconnected and reconnected on the laptop to restore connectivity. I did a round of things on the Mac to eliminate problems in configuration there. The same thing happens with both Aironets. Today, the when the problem occured, a user with an iPhone experienced the same thing. This was a first for that iPhone. Another Mac laptop, a newer model, did not experience the problem.
As I am writing this, a user with an iPad now just emailed that he is having trouble connecting. We just recently upgraded this customer to Aironets and disconnected a conglomerate of other products. The last one to be disconnected was a low cost Trendnet, that this iPad user was previously connecting to with no problem. The other device he would have been using in a different area was a Mac Airport WAP.
On the Aironets, I have CCX turned off, have set speed settings to default.
About every 20 minutes 12 of 300 APs keep rebooting. I have tried moving them to different controllers. I have tried downgrading the code and then upgrading the code. I have tried replacing the AP. I have tried swamping out cables. They are all connected to a 3750 stack but plugged into different switches in the stack. Here is the result that I could capture when I saw it disconnect from the controller. This is the output from the AP:
DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.40.212:5246 *Jul 28 14:33:19.595: %WIDS-5-DISABLED: IDS Signature is removed and disabled. *Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY *Jul 28 14:33:19.597: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY *Jul 28 14:33:19.655: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down [ code].....
I have removed the ip addresses for security reasons.
Have a Cisco 2500 WLAN with Cisco 1142 Lightweight Access Points.IOS: WLC & AP IOS is 7.4.100.0
Seems to be when the APS reboot or lose power we cannot issue command to bring the APs back up from the WLAN- we have to log onto each AP via a console cable and bring the interfaces up.
When I check the AP join statistics I see the following: Reason For Last Unsuccessful Attempt RADIUS authorization is pending for the AP, I don't run a radius server and don't know how to get around this so that the device can join.
Is it possible to direct it to a webfilter hardware firewall for internet access. For example the IP of the firewall with webfiltering capabilties would be 192.168.0.1
We are hoping to provide customer wifi web access but need to filter what they can access.
I have a 1142 that I purchased that needs to be set to factory defaults so that I can configure it. I do an escape at the boot sequence and I get to the
ap:
prompt, the reset instructions that Cisco provides says that I should rename the old config.txt and reboot and that I will then be able to start my reconfig. The problem is that I can't find a config.txt file in the flash space:
I configured the device manually, not even using Express Setup or Express Security setup so... it is possible I missed something.Anyway, here's the problem. Although the SSID is configured as "AP1", this SSID does not appear among available networks on the client laptop.
The connection, configured in Group Policy for the client, should actually happen automatically, based on the SSID, but since the SSID is not being broadcast, that connection is failing as well.
The Aironet does appear among the available networks as "Other Network" and if I click on "connect" I am prompted to enter the SSID -> AP1
Although, unexplicably, an error message displays (Windows cannot connect to the network, or something to that effect), the laptop *does* connect once I close that window. Network access is complete and functional - I can ping other hosts, etc..
I'd post screenshots but not knowing what setting is missing or incorrect, I'd have to print dozens. So here's the sh run output of the AP obtained via telnet (just below). This is a test network so all information is "real" (nothing changed for privacy):
Note: I even changed the hostname to "AP1" (it's still LAB1 below) but that did not resolve the problem (did not think it would).
I'm using the Express Security Set-up tab to configure an Aironet 1142 (stand-alone) access point with EAP.
Objective is to make it a RADIUS client and have laptops authenticate through this access point to a Windows 2008 NPS (Network Policy Server) using computer (machine) certificates - EAP-TLS.
When I select "EAP Authentication" under the "SSID Configuration" I was literally floored to see mention of WEP encryption (a security joke) and no possibility to prefer some variant of WPA (well, apparently not with EAP).
WPA2-Enterprise is what I've selected for "Authentication" and "AES" for encryption in Group Policy (so the laptop clients automatically connect to the access point).
WEP? I bought a Aironet 1142 access point for WEP encryption? How can I configure this securely?
These are currently configured settings as displayed under the "SSID Table" heading:
We have a Cisco aironet 1162N connected to a Wireless Controller (LIGHTWEIGHT mode), the device failed and it needs to be replaced.We have a Cisco aironet 1142N in stock available to use.Can we proceed with the change just with disconnect the failed AP (model: 1162N ) and connect the new one (model: 1142N)? Or there is any other task to be done before the change? since the WLC manages the configuration for each AP.
Since the the "exec-timeout" setting has a default of 10 minutes (if I'm not mistaken), I don't think I could change the timeout value with that command.
Under the "Association" tab of the GUI, there is an "Activity Timeout" subtab and settings for 5 device classes, all set at 60 seconds.
I would guess the setting in question can be configured here. Is the client station device class what I'm after?
We have 5 pcs Cisco Aironet 1142 Access Points without controller at the same building. SSID is same for all of them. Our problem is client connected via wireless disconnecting randomly and continues working after a few seconds. IOS versions are same for all of them you can find detailed information about versions and configurations below.
I am tryign to set up an Aironet 1142, I have created a reserrvation in DHCP using the MAC address, and the reservation shows as active, but I cannot connect to the device with my browser.
At my office we have a simple network using a Netgear WGR614 V7 router. 4 XP machines are connected via Ethernet cable and three other people are connected wirelessly (one XP laptop, one Win7 laptop and one Win 7 netbook). It appears that whenever the netbook is on the network, the other two laptops lose connectivity. The wired machines are fine. Power cycling the router and rebooting usually solves the problem.
I am using an Aironet 1142 standalone AP and want to use Apples Bonjour Service between iOS devices e.g. iPad and Apple TV.I have found here some posts that suggest to disable igmp snopping but this didn't worked for me.All devices are in the same vlan/subnet. Do I need to configure something special?
We have recently aquired a remote location which has a pre-existing flat network (172.16.X.X/16). Before we are able to convert them over to our new IP scheme, they have a need to have wireless connectivity on site. We have 4 1142's which I need to configure for them. I have experience configuring WLC's and autonomous AP's for networks with multiple vlans but have never configured AP's for a flat, single subnet network. I need to configure them for either guest access (internet only) or corporate access to network resources with radius authentication. Do I configure a native vlan as I would for a typical multi vlan network? Do I configure the switch port as an access port as opposed to a trunk beacause of the lack of layer 3? I basically need a sample configuration for this situation.
I have installed/setup a cisco 2504 wireless controller and 3 aironet 1142 access points using the basic config on a windows sbs 2008 domain, the problem is that the clients that are connected to the 2504 aint getting the there ip addr from the AD but from the wireless controller, and there cant reach the clients on wifi from the clients that are connected to lan, is there anyway that i cant change this so that a client on lan can see the client on wlan and vice versa.
I have an RV220W running firmware 1.0.4.17. I have a couple of wireless laptop users that connect to the wireless without problems, but frequently cannot access the Internet. They can always access local network resources, but for some reason when laptops are first powered up or are idle for a prolonged period of time, Internet access is lost. Wired clients never experience this problem and always maintain local network and Internet connectivity.
To get the laptops to access the Internet over wireless, we have to run a TRACERT command from the command prompt to a public IP address, and then all Internet access is restored.
Just bought a WRT400N and set it up using 5ghz and 2.4ghz bands, and using WPA TKIP for both. Problem is that both my laptop and my iphone occasionally lose connectivity and my iPhone says that my WPA key isn't valid.
I wonder if there is a way to rename an existing SSID on aironet 1142 without destroying/recreating. I tried downloading configuration/ changing name/ re-uploading however that didn't have desired effect. There doesn't seem to be a way via web-GUI.
First, my configuration, (then the problem down below):
I have an Aironet 1142 with multiple SSIDs [mapped to V LANs] connected to Gi1/0/2 on a 2960 switch in a user-accessible area. This switch is up linked to another 2960 switch in a wiring closet, and the Microsoft NPS server is connected to the wiring closet 2960. Aironet -- 2960 [user area] --- 2960 [closet] -- NPS RADIUS
I have the user-area 2960 configured as an authenticator switch for dot1x, and port Gi1/0/2 is authenticating the Aironet via MAB to RADIUS. RADIUS is sending VSA device-traffic-class=switch to the 2960. The closet-2960 has no special 802.1x configuration, nor is it an authenticator switch; it just has a manually-configured trunk port to the user-area 2960 [for now; I'm trying to take this one step at a time!].
The user-area 2960 correctly converts port Gi1/0/1 to a trunk port when the Aironet is authenticated [via MAB]. The Aironet boots up, the port is opened, I can ping the Aironet on the native V LAN, and all is well [so it seems]. The Aironet dot11Radio is configured for two SSIDs and mapped to V LANs, which are being spanned via STP thru the user-area 2960 and the closet-2960. STP is correct and verified on all switches.
I have DHCP snooping configured on the user-area 2960 but only for V LAN 1 [but NOT the wireless user V LANs], the trunk port to the closet 2960 is a trusted port. Hosts on the wired ports on the user-area 2960 are able to get DHCP IPs. On the Aironet, "show dot11 associations" shows hosts on the SSIDs are getting DHCP addresses. Again, I am *NOT* running dhcp snooping on wireless SSID V LANs [i read elsewhere that can cause problems as users roam between Aironets].
I do have CISP configured on the user-area 2960. I do not have CISP configured on the closet-2960 [best I can tell, that's not required at this stage, but I could be wrong]. Despite the alleged documentation, I could not get the Aironet to use a dot1x credentials profile to authenticate to NPS/RADIUS as an 802.1x supplicant, which is why I resorted to MAB for this exercise. The Aironet simply would not run dot1x [best I could tell]. The documentation and configuration didn't seem complex, so I was quite confused.
I have upgraded the Aironet to the latest 12.4(25d)JA2 software, and the 2960 is at 12.2(55)SE7 [i saw 12.2(58) has some issues, but I'm willing to be persuaded otherwise, based on sound advice]. Ok, now the problem:
Users on the guest wireless SSID (V lan 20) say they cannot connect. Yep, classic. V LAN 20 is trunk and spanned to all the sufficient places. The Aironet shows users in the associations list for that SSID with IP addresses from the DHCP server! DHCP snooping is not configured on that V LAN. I read another support forum post saying CISP and MAB could cause problems with "disappearing" ARP entries. I appear to have that problem. However, the user on the Staff wireless (V LAN 10) has full access. Am I running into a problem with "multi- host" authentication config? Via tcpdump on my firewall, I see nothing but broadcast and multicast traffic coming from a host on VLAN 20. What puzzles me is how I do see *SOME* traffic from a V LAN 20 host on this SSID, but no uni cast traffic!
Since you're going to ask, here is my port config for this AP on the 2960 authenticator switch in the user-area, and the AAA config pieces:
#sh run br | in ip dhcp ip dhcp snooping vlan 1 no ip dhcp snooping information option ip dhcp snooping database flash:dhcp_snoop.txt ip dhcp snooping [code]......
I am running those modules in my Cisco 6500 chassis and having lot of connectivity issues. I lose network connectivity every 5-6 day at around the same time. I have (2) C7000 Chassis with HP VC-Flex 10 Modules connected via 20Gb LAB to each Cisco Cisco 6513 Switches. However, the OA Modules on C7000 are connected via 1Gb uplink to either 6548 and 6148 modules. I beleive this is causing the netwok connectivity issues.What modules would be recommended to replace 6548 and 6148 who only meant to be used for 1Gb desktop connectivity, and not for Server Farm.
When you use either the WS-X6548-GE-TX or WS-X6148-GE-TX modules, there is a possibility that individual port utilization can lead to connectivity problems or packet loss on the surrounding interfaces. Especially when you use EtherChannel and Remote Switched Port Analyzer (RSPAN) in these line cards, you can potentially see the slow response due to packet loss. These line cards are oversubscription cards that are designed to extend gigabit to the desktop and might not be ideal for server farm connectivity. On these modules there is a single 1-Gigabit Ethernet uplink from the port ASIC that supports eight ports. These cards share a 1 Mb buffer between a group of ports (1-8, 9-16, 17-24, 25-32, 33-40, and 41-48) since each block of eight ports is 8:1 oversubscribed. The aggregate throughput of each block of eight ports cannot exceed 1 Gbps. Table 4 in the Cisco Catalyst 6500 Series 10/100- & 10/100/1000-Mbps Ethernet Interface Modules shows the different types of Ethernet interface modules and the supported buffer size per port.Over subscription happens due to multiple ports combined into a single Pinnacle ASIC. The Pinnacle ASIC is a direct memory access (DMA) engine that transfers packets between back plane switching bus and the network ports. If any port in this range receives or transmits traffic at a rate that exceeds its bandwidth or utilizes a large amount of buffers to handle bursts of traffic, the other ports in the same range can potentially experience packet loss. The buffer assignment on these modules is documented in Buffers, Queues & Thresholds on Catalyst 6500 Ethernet Modules.A SPAN destination is a very common cause since it is not uncommon to copy traffic from an entire VLAN or multiple ports to a single interface. On a card with individual interface buffers, the packets that exceed the bandwidth of the destination port are silently dropped and no other ports are affected. With a shared buffer, this causes connectivity problems for the other ports on this range. In most scenarios, shared buffers do not result in any problems. Even with eight gigabit attached workstations, it is rare that the provided bandwidth is exceeded.
The switch can experience degradation in services when you configure local SPAN in a switch, especially if it monitors a large amount of source ports.
This problem remains if it monitors certain VLANs and if a large number or ports is assigned to any of these VLANs.Even though SPAN is done in hardware, there is a performance impact since now the switch carries twice as much traffic. Since each linecard replicates the traffic at ingress, whenever a port is monitored, all ingress traffic is doubled when it hits the fabric. The capture of traffic from a large number of busy ports on a linecard can fill up the fabric connection, especially with the WS-6548-GE-TX cards, which only have an 8 Gigabit fabric connection.The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules have a limitation with EtherChannel. For EtherChannel, the data from all links in a bundle goes to the port ASIC, even though the data is destined for another link. This data consumes bandwidth in the 1-Gigabit Ethernet link. For these modules, the sum total of all data on an EtherChannel cannot exceed 1 Gigabit.
i lose internet connectivity constantly although i still have WLAN connectivity. my connection is lost every 5 to 20 minutes. it dropped my connection in the middle of an A+ exam troubleshooter is useless. sometimes it says DNS unavailable. sometimes it say default gateway unavailable. but when i run ipconfig, DNS and Gateway fields look fine. it's happened when connected to my wireless cable modem (Ubee brand) the wireless hotspot on my mobile phone (an HTC myTouch) and now on my Clear Wireless portable wifi hotspot (Apollo model)[code]
I have a problem with an internet connection with a customer.They have a Zyxel 660 in bridge mode and the public ip is delivered to the eth0/0 outside interface of a 5505 ASA.They lose internet connectivity a couple of times per hour. What solves the problem immediately is disconnecting the ethernet cable from the eth0/0 and then directly plugging it back. Then it runs for 20-30 minutes or so.The isp doesnt't notice any errors on the dsl connection, only that they cannot ping the outside interface from time to time (duhhh)However, yesterday, when problem appeared for first time , I noticed that this Zyxel was very hot since it was placed on top of the ASA. Now it is set apart.In the meantime I already replaced all cables, but I think it's the Zyxel so I urged that the ISP send a new Zyxel.Though it sounds strange. [code]
In my LAN, I have always been used an Aironet 1250 for internal use and always work fine. Now, I added a 3com AP but both AP are not correct. When I turned off the AIRONET 1250, the 3COM AP settings works fine. When both are turn on, the 3COM AP loses connectivity all the time.I have heard about the overlapping channels in 802.11b/g networks.
I've had the Airport Extreme router on our Macs at home for years. Finally upgraded and got the E3200.
With the airports, my wife could print wirelessly to our HP LaserJet, which is still showing as an available printer on the wireless network. However, since removing the Apple router and using the E3200 it won't print. When you choose to print wirelessly from the application, it says "looking for printer" and eventually fails and says printer is offline. (which it isn't).
The printer is connected via USB to an external USB hub connected to a Mac. The printer is not (and has never been) connected directly to a router - not the Apple one, or the new E3200.
On the Mac sharing settings, Printer sharing is turned on, so anyone on our network should be able to print wirelessly.
Does the Linksys require some special permission or setup w/ the CiscoConnect software in order to allow the wireless printing?
I have Linksys WRT320N acting as AP with Mac filtering, yesterday I noticed that even not added Mac addresses can access the network!!The settings in Mac Filter page as following:EnablePrevent PCs listed below from accessing the wireless network.MAC 01: XX:XX:XX:XX:XX:XXMAC 02: XX:XX:XX:XX:XX:XX...when I changed it to "Permit PCs listed below to access the wireless network" no one is able to connect to the network!!!I think the AP is not accepting the MACs I added!I restart the router (Turning on and off) with no luck.Firmware Version: v1.0.03.
A few weeks ago I purchased an E2500 router for wireless wi-fi in my home. I inserted the installation disc and started going through the process, but my hard drive on my MacBook so I couldn't finish setting up the router. I have borrowed someones PC laptop, but it doesn't have a CD drive. Is there any way I can set up the router on line or any other way? Will the set up work for Macs and PC's?
I setup a D-Link DIR-825, VB1, Firmware V2.00NA about a month ago. We have 3 Macs here at home - 1 brand new iMac, a G4 Powerbook, and an old G4 / 933 Tower. The G4 tower is connected via ethernet. The other two through Wi-Fi. My problem is that I can barely use the internet for even a few minutes on the G4 tower, connected via Ethernet, without losing my connection. I can be in the middle of loading a page or an image, and suddenly it will say "Waiting for xxx.com". Then if I try to go to Google.com or something I will invariably get "Looking up xxx.com". The connection usually returns on it's own, but it can take up to 3 or 5 minutes. When I get this message on the ethernet G4 tower, I will also have lost connection on the wireless Macs. For the first couple of weeks the tower was not connected and we were just using the two wireless Macs, and they were working well. It seems that as soon as I hooked up the G4 tower via ethernet, connections became very flaky and intermittent all of a sudden.All the Macs are configured for DHCP. We have a Time Warner cable modem. The G4 tower had previously been used at my office with it's own dedicated DSL modem / router, and it worked flawlessly for months at a time without dropping a connection. I've tried rebooting the modem, then the router, then turning all the Macs back on, several times. Same result. I just tried loading the new firmware but it didn't work. Said the Gateway was too crowded or something.
I moved into the new house with two laptops with Windows Vista installed. Since then I have been experiencing severe problems with the wireless connection. The operator is TalkTalk.
As soon as we realised that the problem seemed to exist exclusively on our Vistas (since the two Macs, of another couple of tenants who had been living here for long, were working correctly as usual) we called the company. They suggested many things I have already read on this forum such as deleting the other networks, re-adding mine manually etc. We then realised that things were more complicated than initially thought and started analysing the problem more in depth. We went through their website and changed different settings, including those listed in the properties of "Manage wireless connection" or sth like that (we changed some IP configurations, the protocol ivp4/6, etc.). The outcome was that my Vistas started working while the Macs stopped.
I called them again many other times but no conclusive solution was ever found. I eventually talked to another operator who drew the conclusion according to which the WEP configuration of our Vistas is not compatible with that of the MAC. In other words either the Vistas would work or the Macs. No way they could both work at the same time!!!!
I tried to add some more MACs to our Controllers through the WCS. I hate mac-filtering. We plan on stopping sometime. Three of the Controllers(4402s) are reporting that we have reached the max which appears to be 506.First, is there anyway to increase this number?Second, if not, any experience with deleting clients? Should I use reporting to find MACs that haven't been used for sometime and delete them? Is there a better way?
I am using lms 3.2.1 and CM 5.2.2. I have even enabled ping sweep but the hosts IP never show on the user tracking report. I can not see any Available Subnets/Available Sources on Configure Subnet Acquisition and Ping Sweep windows. When I try to enable End host discovery on Trunks and click Show Trunks comes a message: "There are no Trunks in the device(s) selected", but every access device is connected to the nexus core via a Port channel:
