Is the Aironet 1400 bridge FIPS 140-2 compliance? Based on the Release 12.3(8)JA, the Cisco IOS software release 12.3(8)JA is undergoing FIPS 140-2 Level 2 validation. Does it mean it is FIPS 140-2 compliance with this software level to run on Aironet 1400 bridges? [URL]
View 1 RepliesI have some problem with 802.11A radio is enabled but the detaild status is still display software status is disabled and hardware status is down. I checked the settings on Enable Radio is checked on enable. I can't get any radio accross. whereelse I can check to get this working?
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
power local 18 <<<<<<<<<<< I can't input this line from the command line. I assume that the bridge is taking the MAX setting.
power client 18
packet retries 128
station-role non-root
rts threshold 4000
rts retries 128
concatenation
beacon period 20
infrastructure-client
Can we make a bridge connection between cisco aironet 1400 series and cisco R5005? In Root and Non Root Manner.
View 1 Replies View Relatedcan we make a bridge connection between cisco aironet 1400 series and cisco R5005?
In Root and Non Root Manner.
Can I associate the non-root bridge model 1310 to the root bridge model 1400? Is there any problems on the configuration I need to be aware of?
View 7 Replies View RelatedWe have acquired few AIR-BR1410A-A-K9 AP's that are for US only. I am in Pakistan. For our market, Cisco proposed AIR-BR1410A-E-K9. This is fine as it is listed on their website as well.However, since we also have the "A" model and now the "E" model, can we place an A model on one end and an E model on the other and make them communicate with each other?
View 3 Replies View RelatedWe have a problem with a Cisco 1400 Bridge. This equipment can not bridge to the other root or not root mode. I can see a message "Interface Dot11Radio0 Radio transmit power out of range" and the MAC Address of Dot11Radio0 appears with 0000.0000.0000.I set the local power to 18 but the MAC Address is still in 0000.0000.0000.
View 1 Replies View RelatedI have two Cisco Aironet 1252 that I want to configure as a point-2-point bridge. Now I want to know if this configuration supports the 802.11n protocol.
View 2 Replies View RelatedI have a pair of Aironet 1310's I am needing to bridge. I have used the CLI to configure the BVI1 with the ip address and verified it. I then tried to access the GUI to configure the device via Internet Explorer and it would not provide access. I read that it had to be older versions of IE but my OS will not support older versions. I then downloaded Netsace Navigator 7.01 as indicated, but still did not get access.
Then I thought maybe if I can access the GUIvia the IPSU tool but I have Googled the Cisco IPSU and cannot find a downloadable link.
I've been getting warning messages from the event log of a 1300 series bridge, which is set as an Access Point in the network, states: 'Packet to client (mac address) reached max retries, removing the client'; I'm not sure why the client is removed. Does 'reached max retries' mean that the client has tried to many times to connect to the AP/Bridge?
View 1 Replies View RelatedI want to connect two buildings. Let's call them Building A (main) and Building B.
„A“ is the main building and provides a wired LAN to an AAA server (192.168.1.2) and the WAN gateway (192.168.1.1). There I placed a 1262N with the IP 192.168.1.3 connected to the wired LAN and configured it as Root-Bridge. Let's call it AP01.
„B“ is a pretty large building and has a wired LAN from one end to the other end.
So I placed two 1262N there, each at one end.
The first 1262N is configured as non-root Bridge (AP02) and connects to the Root Bridge (AP01). The IP address of AP02 is 192.168.1.4.
The second 1262N is configured as Access Point (AP03) and connects to the non-root Bridge (AP02) via the wired LAN. The IP adress of AP03 is 192.168.1.5
My Questions:
1. Do I need tell AP02 about the AAA Server in Building A or acts AP01 like a AAA Proxy for AP02 because of it Root Bridge functionality?
2. How Do I tell AP03 that it should use AP02 as a gateway to building A?
We are experiencing a high amount of retries in one direction between two 1310 bridges with external yagi antennas. What would this indicate? Here is a copy of the linktest:
POOR (102% retries) Time Strength(dBm) SNR SNR Retries
msec In Out In Out In Out
Sent :5000, Avg 5 - 66 - 64 31 45 Tot: 56 10149
[Code]....
how far apart an Aironet 1410 Bridge can be from the Power Injector (Dual Coax feeds). I just can't find the specification details. The device comes with a 20' and 50' F-type and I'm looking at 150' runs for both ends of the bridge pair.
View 2 Replies View RelatedI want to connect with wireless devices two buildings, one in front of another. Short distance (about 20 meters) and no obstacles. I have a couple of aironet 1242 and i was wondering if it would be possible to setup this link with this equipment.
could WGB be the solution?
Is any one can configure basic Point-toPoint wireless bridge. I need to connect two simple LAN with Cisco Aironet1310 AP. I required basic configuration with basic authentication between these two devices which is on IOS "123-8.JEA3".
View 16 Replies View RelatedCisco... Have two new 3750X switches (24P-L, and 48PF) trying to stack. Brought them up together a few weeks ago with the 24P using LANBase and the 48 IPBase. The expected happened. They saw each other in the stack ring, and the 24 port was excluded due to license miss match. This was corrected. Now both are IPBase.Now I have the two switches stacked, and boot the 48 and 24 at the same time. Monitoring the 48 I get a check message "FIPS: Flash key check: End, Not found. FIPS: Stacking Not Found". The 48 does confirm the stack cable is connected. This happens early in the boot process, before master election.OK.... Now looking at the 24 Port. After applying the new license, and actually booting successfully and few times. It will no longer load the boot file. Wants an environment variable. Going to have to dig into ancient history for that. Had to deal with that one about 8 years ago. Do not feel that is part of the stack disable issue though.
View 2 Replies View RelatedI'm keep failing my pci compliance test I have a wrvs4400n and I keep getting "firewall udp packet source port 53 ruleset bypass" i've blocked port 53 but keep getting rejected. How to set the router?
View 1 Replies View RelatedI have to bridge 1400 series which in the virtual interface has a CRC errors, i don´t the reason, maybe the link (point-point bridge) is misaligned.
View 3 Replies View RelatedJust did a dot11 radio link test on a point to multipoint 1400 series bridges. how to read the results of the test?
View 9 Replies View RelatedToday after I restarted my laptop (Dell vostro 1400 running windows), I found that I can't open any pages or sites. My wireless utility icon tells me that my laptop is connected to my router, but neither of my browsers (chrome or firefox) will load anything. However, if I turn off my wireless (there's a switch that I can trigger) and try to load a page immediately after turning it back on, then a page will load, though anything after that will not. I'm positive that it's not my router or my internet because my computer and iPod touch connect perfectly fine, it's just my laptop will not.I thought that I might have accidentally gotten malware so I ran malwarebytes in safe mode and it found one Trojan, which I removed afterwards, though I don't remember what it's name or type was. I restarted my laptop afterwards hoping that removing the Trojan would work but I'm still having the same problem.
View 1 Replies View RelatedI have a Vostro 1400 and my OS is Windows XP. I just bought an Android Smart Phone, my carrier is Sprint.
I have portable ‘Hot Spot’ service. However, I can’t find a wireless program on my computer.
I swapped out my original hard drive after it crashed. I thought that I reloaded everything onto the new one.
Today I replaced my motherboard to fix the graphics card issue on my Vostro 1400. After installing the motherboard I installed the driver's from Dell's site for the networking card.
I get an error stating device driver/software was not successfully installed. I tried a restore point, that didn't work either. I tried the original driver disc that came with the laptop - same problem.
In device manager it is showing: broadcom netlink adapter fast ethernet #2 - does that mean it thinks I have more than one network card? I'm not sure what to do next. I can't access any wireless from that laptop, not even from a hard wire.
I'm running Windows 7 32 bit.
Using LMS 3.2, I've started learning how to use the compliance templates.is there a regex to ignore case? For instance, if I have the line:
clock timezone est -5 in some configs, and
clock timezone EST -5 in others
is there a way to tell the template that upper case and lower case are acceptable matches?
I am installing a new 5520 with IPS for a client, and they were asking about the PCI compliance of the SSL(WebVPN) being self signed. I am not sure what document to find this information from under the PCI DSS. There was also mention about dual authentication being needed, but without seeing the actual requirements, I am just guessing at it.
What is required for making SSL PCI compliant.
During our recent VA we were told that the below vulnerabilities are exist in the ACS SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability on port 443
SSL Weak Cipher Suites Supported on port 2030
SSL Medium Strength Cipher Suites Supported on port 2030
I want to add the command "no logging event link-status" to all switchport mode access ports EXCEPT for the ones with the following switchport access vlans: 4022,4032,4042,4052,4072 & 4082. How do I create a compliance template to do this? LMS 3.2, RME 4.3.1
View 6 Replies View RelatedI am trying to create a very basic template in compliance manager that checks for interfaces that aren't members of specific VLANs. VLAN 10 being one of them. I want to match interfaces assigned to VLAN 20. According to the documentation I have read, the following range statement should work because 10 falls between 3 and 19:
Submode: interface [#.*Ethernet.*#]
- switchport access vlan [#[3-19]#]
With the preceeding statement, however, interfaces assigned to both VLAN 10 and VLAN 20 are matching the rule. With this specific rule (not a range), only interfaces w/VLAN 20 are processed by the template, which is expected. We actually have numerous VLANs that we want to exclude/include. I only mentioned VLANs 10 and 20 for brevity.
I am using a GRE-IPSEC tunnel configuration + EIGRP routing protocol and I would like to confirm if I am right with the following:
Due to I am configuring the IP MTU = 1400 in the Tunnel interface, I am avoiding additional fragmentation after GRE encapsulation because there is enough room for IPSEC encapsulation (no matter which mode I am using - I am considering the worst case Tunnel Mode). However, I would like to know what happens if I ALSO include in the Tunnel configuration the command ip tcp adjust-mss 1360 which is clear operates in layer 4 during the 3 way handshaking process to establish the TCP connection/session between opposite hosts (in this case the interaction is with the respective end routers). By adding this MSS command, I understand that I could also eliminate the initial fragmentation of the 1500 bytes LAN packets (before GRE encap) because the hosts are notified to send 1360 bytes packets to the Router and based on the previous, I would be able to transfer packets without "theorical" fragmentation between both ends.
One more question, how can affect if I include this additional command (TCP ADJUST-MSS) the performance (process + memory) of a router 3845 or 7200 without producing for example a entire crash of the device???. I understand that this TCP MSS negotiation is router process intensive but is less than IPSEC encryption/decryption.
working with a trial version of Cisco Prime 1.2. I am looking for a Configuration Compliance tool. I used it in Cisco Works LMS - but I dont see a way to do the same thing with Cisco Prime.
View 1 Replies View RelatedI'm having a hard time getting Compliance Manager to accept a "banner login" command I'm attempting to use on 6500 IOS switches. I've edited the template, tried cut-&-paste, looked for the archive file on the server to directly modify it (without success), among other things. I have this feature functioning correctly on CatOS switches, but can't seem to get it properly set on IOS switches. What's the limit, as far as the template is concerned, on the number of characters with this type of command? Where are the archive configs located on the server; in the "shadow" directory?
View 1 Replies View RelatedI have a customer asking if Cisco supporst CISPR11 - Class B. All Cisco switches appear to support CISPR11 - Class A only. What is the difference? Is Class B supported?
View 0 Replies View RelatedWe use SecurityMetrics as our vendor for PCI compliance scanning. Of all our servers, only the video server fails their scan, and this is their result: "This scan is inconclusive. Though your server had open ports, we were unable to connect to any of them successfully. There is a high probability that some type of firewall or scan-detection software is blocking us from accurately scanning your server. Please configure any firewall or software that would interfere with our scans to allow all traffic from SecurityMetrics" Our streaming video server is our only public-facing server that has port tcp/udp 1755 open (for the mms protocol). All our other servers behind this firewall pass the test, but they only have standard email and http ports open. I am assuming that their scan of port 1755 triggers some sort of threat detection on the ASA. (I have "Basic Threat Detection" enabled only.)
View 1 Replies View Relatedi am currently trying to use LMS 3.2 Compliance management to verify and alter our access port configurations for 802.1x. Below is our current configuration
View 1 Replies View Related