Cisco Wireless :: Configure ASA 5505 And Aironet 1140 Multiple SSIDs?
Jan 10, 2012
I am in the process of installing an Aironet 1140 standalone AP. I have not worked with these AP's before. I will be connecting it to one of the PoE ports on the existing ASA 5505. My goal is to have 2 SSID's, one for internal network and one for guest internet only, no access to internal LAN. I want to have the internal wifi clients and the guest clients on seperate IP networks. The internal clients obtain DHCP from the existing server and use the ASA DHCP server for the guest clients. And of course, I would like the ability to manage the AP from the internal network. I am providing copies of my current configs for both the ASA and Aironet.
View 4 Replies
ADVERTISEMENT
Nov 18, 2012
I am using a Aironet 1100 series access point (AIR-AP1142N-N-K9) with IOS version c1140-k9w7-tar.124-21a.JA1. I want to create two seperate SSID's on the access point with WEP encryption. There is no VLAN configured and i want it to be like it. Also I need to broadcast both the SSID's at the same time, so the some of my users need to login with the first SSID and the others to login through the other.
View 2 Replies
View Related
Jan 17, 2013
I have recently purchase Aironet Access Point. I'm pretty new to Cisco systems and what i'm try to do is have the access point broadcast multiple SSIDs lets call them Guest and Admin. My problems is when i config router to have a DHCP address it works perfectly fine but when i assign a static IP it shows all the any connected device as unkown with IP 0.0.0.0. So i'm guessing i will need to setup a dhcp server. Is there a way access point can have its own DHCP server and IP address ( i don't want to use any from my STATIC ip subnet as i dont know alot of empty ones left) like home wifi router where they assign each device an IP like 192.168.0.1. Is this possible?
View 1 Replies
View Related
Jan 10, 2012
I need to configure a WAP4410N for use on a small, very simple business network. There should be a corporate WLAN and a guest WLAN. The corporate WLAN should allow anyone connectd to it to access resources on the domain.
In front of the WAP is a cable modem/router and a basic Level 2 (web managed) switch. What do i have to do to segregate the corporate and guest networks.
I thought I would add the corporate WLAN to VLAN1 (assuming the default VLAN in the switch is VLAN1). Then I figured I could create the guest WLAN and assign it to VLAN2 which which will be controlled entirely by the 4410N (DHCP, DNS, etc.) Does this sound like the right way of going about things?
View 1 Replies
View Related
Apr 3, 2012
Can I configure Multiple SSID (Guest/Corporative) on Cisco Aironet 3600i AP via Cisco 2504 Wireless controller?
View 1 Replies
View Related
May 13, 2013
I am trying to build a new network from scratch, I have the WLC 5508 w/ Aironet 3600e APs connected to my Netgear Smart Switches and a Linksys RV082 router that I'm using as my DHCP server with several VLANs for several stuff on my Switches.
I have 2 questions:
1. Can I have 5 Interfaces configured on 5 different VLANs, each SSID on each a different Port:
Port 1: Controller management only=> 192.168.x.x /24
Port 2: SSID 1: WiFi Internal=> 172.16.x.x/12 (Radius Auth with no sharing)
Port 3: SSID 2: WiFi Internal w/ sharing=> 192.168.x.x/24 (Radius Auth with sharing)
Port 4 :SSID 3: WiFi Guest=> 10.0.x.x/8 (Web Auth)
Port 5: SSID 4: WiFi IT=> 192.168.x.x/24 ( Radius or certificate Auth with access to the controller management interface)
2. How can I use the Controller as the DHCP server for all the WiFi traffic, and how should that be configured to work with my other DHCP server?
View 3 Replies
View Related
Apr 22, 2012
I have several Aironet 1231 APs most running 12.3(8)JEA software. There are 4 SSIDs on (each in separate VLAN), with only one broadcasting (called pubwifi). The broadcasting one is an open, unencrypted network: [code] After adding another braodcasting SSID (encrypted, separate VLAN), I encountered weird situation: my WiFi clients are unable to connect to pubwifi. It is not showing in the available networks or is showing as an "unknow" network. New encrypted/bradcasting ssid is advertaising just fine.
View 6 Replies
View Related
Dec 19, 2010
I just installed an Aironet 1140 to replace a Netgear ProSafe access point that I had in my network prior. I'm having one issue that I can't figure out though. None of the client PCs can establish a connection to an external (over the internet) VPN server while on the Aironet wireless. If i unplug the AP and plug a PC into the same port that normall feeds the Aironet I can VPN just fine.
Is there any "VPN Passthrough" option that needs to be enabled somewhere on the 1140 that is blocking this traffic for some reason?
i'm running the following IOS BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(18a)JA3, RELEASE SOFTWARE (fc1) and I've included my running config below
Current configuration : 2092 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname ap!enable secret 5 [omitted]!no aaa new-model!!dot11 syslog!dot11 ssid MetroC authentication open authentication key-management wpa guest-mode mbssid guest-mode wpa-psk ascii 7 [omitted]!!!username Cisco password 7 [omitted]!!bridge irb!!interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid MetroC ! antenna gain 0 speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 port-protected bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled!interface Dot11Radio1 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid MetroC ! antenna gain 0 no dfs band block speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. channel width 40-above channel dfs station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 port-protected bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled!interface GigabitEthernet0 no ip address no ip route-cache duplex auto speed auto no keepalive bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled!interface BVI1 ip address 192.168.1.3 255.255.255.0 no ip route-cache!ip http serverno ip http secure-serverip http help-path [URL]
View 9 Replies
View Related
Mar 28, 2012
I try to setup a 1141 aironet AP to authenticate my user through our Ms Radius Server ( Win 2008 R2).Everything is fine with small Bussiness AP WAP4410N with the following configuration:But I can't setup successfully the aironet 1141 with the same settings and getting it works.Here is my configuration for the Aironet 1141 Vlan 1 is the ssid I want to get it work with Radius.
View 1 Replies
View Related
Dec 16, 2012
We have 6 aironet 1140's throughout the office I have them all configed as one ssid but I would like the DHCP to come from our Windows server. Right now I have set them up with ip dhcp pools. So what is the secret to get them to send dhcp requests to the Windows server?
View 3 Replies
View Related
Dec 10, 2012
If I do a speed test (bandwidthplace.com) while connected to a remote locations 1140 standalone access point, the download/upload speeds are roughly 100kbps. There are no other devices connected to the access point at the time. Wired PCs on the LAN that the access point is connected to are not having a problem.Pings from the laptop, through the access point, to our central WAN router are at <10ms.The WAN circuit (remote location to headquarters) is 5Mbps. No congestion.Circuit out from headquarters to I'net is 50Mbps. No congestion.Access point and router interfaces show no errors or collisions, etc. The configuration is the same as 28 other standalone access points in 28 different LANs on the WAN. They have no problems.
View 5 Replies
View Related
Aug 8, 2012
I have an Aironet 1140 AP that will not connect to the network when on PoE (either using a Cisco PoE injector) or a Avocent Switch that provides PoE.
The AP will boot up and and devices will connect to it (the LED changes to blue) but none of the devices can get access to the corporate network or internet. When the AP is powered by the standard power supply, it operates normally, i.e. devices can access the network. Are there settings that can be changed to get the AP to work correctly on PoE?
View 4 Replies
View Related
Jun 4, 2012
I have recently setup one stand alone aironet 1140 with mostly default settings with WPA key. but, it seems sometimes it's dropping the connections. hardly 15 users are connecting to aironet at the moment.
View 2 Replies
View Related
Oct 31, 2012
Just a few days ago, one of my coworkers computer was unable to see any of our wireless access points - all aironet 1140. He is one of two using a Win 7 machine, everybody else uses Mac with either Lion or Mountain Lion. The Macs can "see" and connect to our wireless AP's just fine.
The odd thing is that is his computer can pick up our neighbors wireless access points, but can't "see" ours. Also, a few peoples phones can no longer detect them either - both iphone 4's (ios 5.1.1 and 6) and androids (2.3 and 4)
No changes were made to our AP's, then people started having wifi issues.
View 10 Replies
View Related
Nov 6, 2012
The command that is given returns an error at the letter a in archive. The command I used was: archive download-sw /overwrite /reload tftp:// obviously with my tftp server info and file name at the end. I logged in with privileged EXEC mode as directed, but archive is not listed when I type ? to get a list of commands. I need to have this AP up and running by Monday.
View 3 Replies
View Related
Dec 28, 2011
For some time now I have been looking for a good business class wireless AP. I've narrowed it down to the Cisco Aironet 1140 standalone (no controller). I'm no stranger to Cisco products. I've worked with their routers, switches and Pix/ASA firewalls. However, I've not had the opportunity to work with their wireless AP's. Anyone using these AP's (more specifically the 1140 standalone), can provide information on the reliability and security of these devices. Some of the features I would like to have like Radio Mgmt. and Rogue AP Detection I see are only available on the controller based units. Does not having these features on the standalone unit reduce its reliability and security? This is for a small business and the budget does not allow to drop for a controller at this time.
View 7 Replies
View Related
Apr 26, 2013
I wanted to know if anyone can say with certainty how many clients can stay connected 'Aironet 1140 series. I state that I should connect WiFi in about 350 clients.
View 6 Replies
View Related
Mar 25, 2013
I am having an issue with my Android Tablet running 4.1 (Jelly Bean). It is able to the SSID, but when I try to connect - it stays connecting and then says saved, and never connects, as it does not pick up an IP address. I updated the firmware on the Aironet 1140 due to my Windows 8 pc's not connecting as well, it solved my Windows 8 problem, just not my Android Tablet problem. My Ipads do work. Just any android device I connect.
View 1 Replies
View Related
Nov 26, 2012
I've got an AIR-AP1142N-E-K9 access point, i've got the Radio0-802.11n(2.4ghz) enabled and the 5.0ghz disabled.
i've got my client real close to the AP and i only get a connection speed of 72Mbs.
Shouldn't i get 150mbs? Maybe some wrong configuration?
View 14 Replies
View Related
Sep 17, 2012
I recently changed the configuration of my Aironet 1140 from WEP to WAP2-Enterprise to make it more secure. I am using the WAP as the radius server. After making the change I connected my Blackberry to the wap as well as a Samsung Chromebook. However when I tried to connect my HP laptop it is unable to connect. Watching from the Aironet's console I see that it is processing the association and windows ask me to enter my uid and password. When I do this I get an authentication error. I have tried several times adjusting parameters on windows but it always fails. Here is the configuration of the WAP:
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
[Code]....
View 2 Replies
View Related
Nov 30, 2011
Users are facing issue since a long time now . Whenever user connected to wireless is idle say 10 -20 seconds he gets disconnected This happens for all the users and even Mac/Win 7 I changed Activity Timeout on AP and even rebooted but still when I do show dot11 associations all-client I see activity-timeout
Users don't get disconnected when there is continous flow of data its only when user is idle
When user disconnects and hit refersh it starts working again
View 1 Replies
View Related
May 28, 2013
I'm installing the first out of 10 Aironet AP's with an inline injector. The lights on the Aironet and alernating blue, green, red. I know the error code is for DHCP, but when I plug it in I see the AP on my DHCP server and it does pull an IP address. I can ping the ip address, but I cannot access it through my browser.
I have tried deleting the entry out of the DHCP and power it back on again. I have also tried another unit with the same results. I don't have a RJ-45 to serial cable.
View 10 Replies
View Related
Mar 27, 2013
I just installed 2 new units and neither will connect to a new HP gigabit switch - no link light, other devices can connect to the switch OK. Their gigabit ethernet settings are set to auto for duplex and speed. I also tried forcing one of them to full duplex and 1000 Mbps which didn't work either. They're both powered by POE injectors. If I connect them to a 10/100 switch they work fine.
View 8 Replies
View Related
Feb 13, 2012
Our office has 4 Cisco Aironet 1140 access points mounted on the ceiling. They are all powered via PoE. Every few days 3 of the 4 access points hang and have to be rebooted. When they hang I am not able to connect to their web interface to check the logs. The fourth, for some reason, always seems to stay alive.
I checked the configuration for all AP's and "Hot Standby" is disabled They are all using static IP addresses. I've tried 2 different banks of static IP addresses and 3 of 4 still hange so I don't think this is an IP conflict. I have saved the configurations and compared them and they are all identical, where possible.
They all have software version: 12.4(21a)JA1
They all have bootloader version: 12.4(23c)JA1
I have tried to download the latest software/firmware, but unfortunately I do not have a valid service contract in place with Cisco and therefore can't download the latest version. All of our CISCO hardware was purchased from Amazon resellers but no luck. I have also tried to contact Cisco and they can't seem to assist either. How I can get a valid service contract that information would also be very useful!!!
why 3 of our 4 access points would hang? When they hang, I can't login to the web interface and the logs seem to reset when I reset each access point. I have also set up an rsyslog server and I don't see a log entry that would indicate a problem.
View 2 Replies
View Related
Sep 10, 2012
Currently my company has 1 primary SSID that is used throughout both floors of the building. We have 1252 LAPs which have 2.4 and 5Ghz antennas. I'm not sure if this issue is only with XP or perhaps it's the computer's drivers but we run into problems with end users going to a different location and having a very weak signal or nothing at all, yet coverage is fine. I believe the problem is the end user's machine selecting the strongest signal and it I have the feeling that switching bands isn't being done as it should when it's in range. So my question,
Should I split up our 1 SSID and created multiple SSIDs according to the location and include 5Ghz or 2.4Ghz in the SSID name so it's easier to ensure that users are connected to the proper signal? I want to ask if multiple SSIDs would still enable users to freely roam (as long as the ssids are configured) throughout the building without noticing a loss of signal but currently just having 1 SSID isn't really enabling people to freely roam around without connection issues.I don't believe having multiple SSIDs will be useful for the computer's choose their connection any more efficiently but allowing the user to manually see what they're connected to and pick something better according to their location.
View 3 Replies
View Related
Mar 26, 2012
I am trying to provision three 1142 AP's so they broadcast multiple SSIDs. I have set the following commands, but I am not able to get more than one SSID to broadcast. As you can see I added the "guest-mode" command to one of the SSIDs which took it without problems. That other SSID does not accept the command.
dot11 ssid Test
vlan 2
authentication open
[Code].....
View 4 Replies
View Related
Dec 2, 2012
I have the need to run a few autonomous APs (1262) for some sites on satellite links. At a bare minimum I need to run two WLANs. One is wide open, and the other with an ACL that heavily restricts access. Is there any way to tie two WLANs to a single VLAN, while applying an ACL to just one WLAN?
View 4 Replies
View Related
Oct 22, 2012
I have two buildings that I'm trying to configure a bridge in between them using 2 1242AG APs.
Building A
PCOFFICE SSID on VLAN 200 Radio G
ROOT_1 SSID on Native VLAN 1 Radio A
Root Bridge
Building B
FDAPC SSID on Native VLAN 1 Radio G
ROOT_1 SSID on Native VLAN 1 Radio A
We are using directional antenna. I know they are lined up properly because I have them both down and in front of me. I'm getting an error on the Building B AP that says " No SSID with VLAN configured. Dot11Radio1 not started." and I'm unable to get this to work. The bridge was working before I added the VLAN and encryption/WPA information for the PCOFFICE and FDAPC SSIDs
View 15 Replies
View Related
Oct 21, 2012
how i can configure a second ssid for guest access in our environment. this is our network setup prior to this request: Internet----Firewall (not ASA)---ce520---C1131AG and CME router is also connecting to the ce520 switch. we only have two vlans: one for voice and two for data.
Presently, there is no vlan configured on the AP because it on broadcasting ont ssid and wireless users gets IP from a windows DHCP server on the LAN. the configuration on the ce520 switch port for the AP and other switches say access vlan is the DATA vlan which automatically becomes the native vlan for all trunk port connecting the AP and other Stiches to the network.
Now with this new requirement, i have made my research and i have configured the AP to broadcast both the production and the guest Vlans. The two vlans are 20-DATA and 60-Guest. I made the DATA vlan on the AP the native vlan since the poe switch is using the DATA vlan as native on the trunk ports. I configured the firewall to serve as DHCP server for the guest ssid and i have added the ip helper-address on the guest vlan interface on all switches while the windows server remains the dhcp server for the production DATA Vlan. I have confirmed that the AP, switches can ping the default gateway of the guest dhcp server which is another interface on the firewall. I can now see and connect to all broadcasted ssids but the problem is I am not getting IP addresses from both the production dhcp server and guest dhcp server when i connected to the ssid one at a time. My AP config is attached below.
Do i need to redesign the whole network to have a native vlan other nthan the data vlan? Does the access point need to be aware of the voice vlan? Do the native Vlan on the AP need to be in Bridge-group 1 or can i leave it in bridge-group 20?
View 1 Replies
View Related
Aug 17, 2011
I have a Aironet 1240AG and have our main SSID set up on Radio0-802.11G. It uses WPA TKIP. Everything works fine on it. Recently we have been getting a lot of visitors who need wireless access, so reather than hand out our main key to visitors, I decided to create another SSID on Radio1-802.11A for guests. For some reason the new SSID does not show up on the available networks on client devices. You can connect to it manually by entering the name and key. But how do I get the SSID to broadcast on the 2nd SSID. A lot of these guests are not very computer smart, so it becomes a real pain to have to walk them through connecting to the guest network.
View 3 Replies
View Related
Aug 2, 2011
I've set up a Cisco Aironet 1301 AP to be used for a guest network. I've got several other of the Aironet 1140-series around the business but none of them are in reach of this one at the moment.
The problem I have is that clients that try to connect to the AP are either not able to connect at all or lose their connection after some seconds. The config is more or less copied from the other APs with the same guest VLAN.
View 2 Replies
View Related
Nov 28, 2011
I just got the E3200 and it's a pretty good router. Configured it to have 1 SSID as the 5Ghz SSID and the other as the 2.4 Ghz SSID. Since there are 2 SSIDs broadcasted, I was expecting machines connected to each distinct SSID to not be able to see each other, ie expecting the 5Ghz SSID to be a private LAN1 and the 2.4 Ghz SSID to be LAN2? It turns out machines on either SSID can see each other, so it looks like it on 1 big LAN even though there are 2 SSIDs.Doesn't a SSID map to a unique LAN even though they are in the same router?
View 2 Replies
View Related
Jun 15, 2012
I have here a couple of APs with c1130-k9w7-mx.124-25d.JA1 loaded as firmware.
I want to configure them with 2 SSID: 1 encrypted, 1 public. Each should go to its own vlan, and thus should have a trunk towards the switch.
My wireless experience approaches zero however, and I cannot get the APs to even send out an unencrypted public SSID.
The config that is currently on the AP, after trying a lot of things is:
gibbs#show run
Building configuration...
Current configuration : 3272 bytes
!
version 12.4
[Code].....
View 4 Replies
View Related