Cisco Wireless :: Purpose Of Remote LAN Feature In 7.0.116.0?
Jul 28, 2011
I have a remote site that has an AP running in H-REAP mode which connects over our MPLS cloud to a WLC, which has one interface on the "inside" network and one on our DMZ. The remote AP in H-REAP mode currently only runs our Guest SSID, but now I need to established an isolated VLAN.
Two of the hosts on this isolated VLAN, which is need to support some conference room devices, need to run on wireless and communicate with two devices on the same VLAN that are hard-wired to the switch.
Getting the wireless devices to connect remotely is easy enough by setting up an SSID that uses an IP subnet which one of the WLC's interfaces actually connects to...but can I do that for a completely remote IP subnet (i.e. one that the WLC does NOT physically connect to?). I'm not sure and I'm wondering whether that's the purpose of the "Remote LAN" feature...which is a very new feature.
View 3 Replies
ADVERTISEMENT
Jan 29, 2013
What is the purpose VPN label?As we know, in the MPLS VPN, the following mechanisms:RD - used to distinguish between overlapping routesRT - used to determine the VRF in which to send the route.But why need a VPN label?
View 11 Replies
View Related
Oct 31, 2012
I have bridged several w/l Tranzeo's together. I have given each of them an IP address on the same subnet as my gateway and manage the units using that addressOther than for management is the IP address of a bridge used for anything else? I have noticed that I can plug in any gateway address I like and the units are perfectly happy even if the phoney gateway does not exist.
View 1 Replies
View Related
Jul 21, 2011
i need to free up my 2811 router memory.so if i remove this package, it will cause impact or i will miss any functionality ?
View 2 Replies
View Related
Aug 12, 2011
What is the purpose of loop back testing.
View 2 Replies
View Related
Mar 28, 2012
I am attempting to set up a proxy on a home network that is used for business purposes. I am not at all a networking person, I know enough to be dangerous. If I follow the steps listed here: URL Will this encrypt the data that is sent to the internet from any computer that connects to my network or just the one I follow the steps on?
View 7 Replies
View Related
Jul 23, 2011
I really need understanding some of the logic behind the default ZBFW settings on my Cisco 881W courtesy of Cisco Configuration Professional. Here are my two questions:
1.) What is the purpose and logic behind consolidating the first class-map (ccp-cls-insp-traffic) in to the second Class-Map (ccp-insp-traffic) as follows?
Code ....
2.) What is the purpose and logic of Policy-Map ccp-inspect is trying to drop traffic from ccp-invalid-src, which is filtering based on ACL 100:
policy-map type inspect ccp-inspectclass type inspect ccp-invalid-src drop logclass type inspect ccp-insp-traffic inspectclass type inspect ccp-protocol-httpclass class-default drop.
Code ....
View 1 Replies
View Related
Apr 27, 2012
On my 6509-E, all the modules show this:
Region F1: INVALID
Region F2: INVALID
Currently running ROMMON from S (Gold) region
Is this alright? Is the Gold region like a default region where ROMMON is always installed. And are F1 and F2 just storage partitions that are available to hold backup copies of the ROMMON? From what I read, it sounds like I can copy ROMMON images to F1 and F2, either the same version as the Gold region or different versions. Is that correct? Why would I want to copy different ROMMON versions to F1 and F2?
View 3 Replies
View Related
Jan 8, 2013
I have a Dell R300 server and it does not have a separate DRAC card. When the system POSTs I see it shows something about DRAC and it even gets an IP address. But I can't do anything (ping, web, telnet, etc) with that IP address.So basically what is the point of the basic DRAC without buying the full DRAC card? Just a placeholder?
View 7 Replies
View Related
Jul 26, 2012
I have always done my port monitoring (SPAN) on Cisco layer 3 switches with no issues. This time I am trying to do this on a Cisco 2901 router:
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
System image file is "flash0:c2900-universalk9-mz.SPA.151-4.M2.bin
I need to have the source port gig0/0 and destination port gig0/1. There is something about the gig port enumeration (slot/port#) that makes the command rejected. It is self explanatory:
#sh ip int brie
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES NVRAM administratively down down
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM up up
Serial0/0/0:0 unassigned YES unset up up
[code]....
It doesn't matter what slot or port number I use, it is always rejected. The command is rejected for Both destination and source gig interfaces. I tried a wide variety of slot/port numbers. To my best understanding the complete port names are: GigabitEthernet0/0 and GigabitEthernet0/1, so why does it think there has to be another digit after 0/0 or 0/1? Does it have anything to do with the Embedded-Service-Engine0/0 being administratively down?
View 4 Replies
View Related
Mar 3, 2011
i two 5550 firewall set up for redundance purpose . in failover we define two different ip add one for primary and one for secondary .interface Ethernet0/0 nameif outside security-level 0 ip address xxxx.0.0.0.1 255.255.255.0 standby xxxx.0.0.2!interface Ethernet1/0 nameif inside security-level 100 ip address 10.0.0.12 255.255.255.0 standby 10.0.0.11.default gateway for host will be 10.0.0.12 (primary fw address) however in case of failover , the secondary fw will be up with ip address that was assigned for primary .in this case the secondary ip add 10.0.0.11 is actually nerver used? similarly do i need to have two public ip address for outside (one for primary and one for secondary ) ? or in case if primary fails the secondary comes onlie and take the ip of primary fw . hence i only need to purchase just one ip address.
View 6 Replies
View Related
Sep 12, 2012
We have two ASA 5500 series Firewalls running 8.4(1). One in New York, another in Atlanta.They are configured identically for simple IPSecV1 remote access for clients. Authentication is performed by an Radius server local to each site.
There are multiple IPSec Site-to-Site tunnels on these ASA's as well but those are not affected by the issues we're having.First, let me start with the famous last words, NOTHING WAS CHANGED.
All of a sudden, we were getting reports of remote users to the Atlanta ASA timing out when trying to bring up the tunnel. They would get prompted for their ID/Password, then nothing until it times out.Sames users going to the NY ASA are fine.After extensive troubleshooting, here is what I've discovered. Remote clients will authenticate fine to the Atlanta Firewall ONLY IF THEY ARE USING A WIRED CONNECTION.
If they are using the wireless adapter for their client machine, they will get stuck trying to login to Atlanta.These same clients will get into the New York ASA with no problems using wired or wireless connections.Windows 7 clients use the Shrewsoft VPN client and Mac clients use the Cisco VPN client. They BOTH BEHAVE the same way and fail to connect to the Atlanta ASA if they use their wireless adapter to initiate the connection.
Using myself as an example.
1. On my home Win 7 laptop using wireless, I can connect to the NY ASA with no issues.
2. The same creditials USED to work for Atlanta as well but have now stopped working. I get stuck until it times out.
3. I run a wire from my laptop to the FiOS router, then try again using the same credentials to Atlanta and I get RIGHT IN.
This makes absolutely no sense to me. Why would the far end of the cloud care if I have a wired or wireless network adapter? I should just be an IP address right? Again, this is beyond my scope of knowledge.We've rebuilt and moved the Radius server to another host in Atlanta in our attempts to troubleshoot to no avail. We've also rebooted the Atlanta Firewall and nothing changed.
We've tried all sorts of remote client combinations. Wireless Internet access points from different carriers (Clear, Verizon, Sprint) all exhibit the same behavior. Once I plug the laptops into a wired connection, BAM, they work connecting to Atlanta. The New York ASA is fine for wired and wireless connections. Same with some other remote office locations that we have.
Below I've detailed the syslog sequence on the Atlanta ASA for both a working wired remote connection and a failed wireless connection. At first we thought the AAA/Radius server was rejecting us but is shows the same reject message for the working connection. Again, both MAC and Windows clients show the same sequence.Where the connection fails is the "IKE Phase 1" process.
-------------------------------------------------------------------------------------------------------------------------
WORKING CONNECTION
-------------------------------------------------------------------------------------------------------------------------
%ASA-6-713172: Automatic NAT Detection Status: Remote end is|is not behind a NAT device This end is|is not behind a NAT device
NAT-Traversal auto-detected NAT.
%ASA-6-113004: AAA user aaa_type Successful: server = server_IP_address, User = user
%ASA-6-113005: AAA user authentication Rejected: reason = string: server = server_IP_address, User = user
[code]...
View 1 Replies
View Related
May 7, 2013
We need U-APSD (a special WMM Feature).Does the WAP321-E-K9 Support this feature?We need it for powersave mode from cordless wlan phones.
View 1 Replies
View Related
Dec 6, 2010
Has used the "Planned AP association" feature in WCS 7 planning mode? I haven't been able to find any documentation on it, but I was hoping that it allowed you to map your planning AP's and locations to freshly deployed AP's and place them on the floorplan when doing a synchronize, but I can't get it to complete successfully.
View 3 Replies
View Related
Jun 3, 2012
I have a dual 5508 controller /NCS deployment. I deployed my first clean air AP today, a 3502I.
The Clean Air feature does not seem to work, however. "No information is available because CleanAir is disabled or otherwise not available for this radio. If no information is available and CleanAir is enabled then you can try rebooting the AP XXXX".The thing is that CleanAir is enabled on this AP.
View 3 Replies
View Related
Sep 6, 2011
I have 2 Cisco WLC 4400's connected to a WCS. I want to use this Location Tracking feature within the WLC 4400s so that i can track movement of particular network devices throughout my facility. I cannot find anything on how to set this up on the internet. I found a PDF explaining the 4 different ways you can track objects but nothing more.
Is this service still supported in the newest versions?
View 8 Replies
View Related
Jun 4, 2011
Cannot use the scan feature of my Lexmark X4550
View 1 Replies
View Related
Apr 1, 2012
Is it possible to use this feature on WLC 2504 ? ( Passive client feature). I found just this note :" The passive client feature is supported on Cisco 5500 and Cisco 2100 Series Controllers. "
View 8 Replies
View Related
Apr 7, 2012
i have a WLC (5508) - trying to enable AP group vlans based on instructions from: url...however, my problem is that i don't have the 'ap group vlans feature enable' checkbox.
View 1 Replies
View Related
Feb 13, 2012
Does cisco 3600 support office extend feature? If yes, is there a controller requirement? I know cisco AP 600 supports office extend
View 24 Replies
View Related
Mar 9, 2011
On wireless (lenovo tabletx61) I cannot connect through the intranet - no problem connecting through internet. When I manage to connect through intranet connection is dropped quite often.No problem connecting via Ethernet cables.
View 1 Replies
View Related
Mar 4, 2013
I have an E900 connected to my LAN acting as a wireless access point (router functions disabled). Can I use the DDNS feature of the router in this configuration? I attempt and get ‘No Internet Connection’.
View 8 Replies
View Related
Jan 8, 2012
I am not able to activate the wireless feature in siemens gigaset se568.
View 1 Replies
View Related
Dec 30, 2012
I switched from comcast to att uverse. I was happy about the guest-access feature of E3000 when using the comcast, where I can directly connect my e3000 to the modem (basically you can see two network, one is XXX, the other is XXX-guest). However, the ATT uverse has a gateway that combines the modem and router together, in order to use my e3000 instead of the built-in router of the gateway, I have done a LAN-to-LAN connection and I can access internet without any problem. But in this case, I can not enable my guest-access feature. When I use Cisco Connect to set up e3000, it says "cannot connect to your router". how to set up the guess-access feature of e3000 when using ATT uverse.
View 3 Replies
View Related
Apr 13, 2013
Region : UnitedStates
Model : TL-WDR3600
Hardware Version : V1
Firmware Version : TL-WDR3600_V1_130320
ISP :
Has anyone gotten the Guest Network feature to work from the new firmware TL-WDR3600_V1_130320?I have my WDR3600 setup as an access point:TPLINK with static IP address connected via ethernet cord from the LAN port and connected to the main Verizon FIOS router which distributes DHCP IP addresses to the netwrok. Can not get the Guest Network feature to work - I see the guest SSID I created but when I connect to it, the IP address assigned is in the 169. range meaning it does not get to my main router.It may be because I have the TPLINK setup as an access point, so are there any people who have gotten Guest Network work either with the TPLINK as the main router or as an access point?
View 1 Replies
View Related
Mar 11, 2013
i have a Linksys modem BEFSR81 v.3 and am trying to reset my wifi password for secure connection. When i log into the the admin page, to my surprise, I could not find the security feature to create WPA or WEP password. i'm stumped. This has never occurred to me before on this modem.
View 6 Replies
View Related
Jul 28, 2011
I can see that the Cisco 881 does not have NTP as standard, but can this feature be used anyway with the latest software upgrade ?
View 1 Replies
View Related
Jul 19, 2012
I am attempting to send net and IPTV multicast to an Entone STB. This STB has some OTT features such as Vudu that need internet access. The DHCP address that we receive from our ISP strictly sends multicast streams to the STB.The first challenge is allowing DHCP options to pass through to the STB.Then I need to figure out a way to pass both the net and multicast to the STB.
View 3 Replies
View Related
Jun 5, 2013
I'm running a cisco 891 with ios Version 15.2(4)M3 ,now I have a dialer 0 interface with fast0 and 1 as well, all is working fine.now I just read about the new sh int 'INT' history feature but when I do it I get nothing.. not a graph or anything I get just nothing as if I just hit enter.anything I need to do to enable the feature?,if I do a sho proc cpu history that works just fine but not the sh int XYZ history commands
View 2 Replies
View Related
Nov 25, 2012
I can see that the Cisco 881 does not have NTP as standard, but can this feature be used anyway with the latest software upgrade?
View 4 Replies
View Related
Sep 11, 2011
I have cisco 3560G with C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(53)SE1 Image. I want to configure it for EEM feature so that when my Gig 0/7 port goes on it will automatically shutdown the port Gig 0/1.
MPLS_WAN_NET#show event manager versionEmbedded Event Manager Version 3.20Component Versions:eem: (v320_throttle)2.1.50eem-gold: (v320_throttle)1.0.4eem-call-home: (v320_throttle)1.0.4Event
[Code]....
View 2 Replies
View Related
Aug 26, 2011
I'm a bit confused about new NAT functionality in Ver 8.4(2). I've gone through all the documentation as well as different blogs but still not clear about the various things.One of these is NAT-CONTROL. I understand that this has now been removed. Does this means that traffic traversing the ASA doesn't need any NAT'ing commands unless specifically required by the administrator? In other words by default traffic is allowed through the firewall without any NAT'ing.
My Second Query
I've ASA5520 running ver 8.4(2). For inside interface, I've created 13 x sub-interfaces under Gi0/1. All have same security level i.e. 100. What I want to achieve is that:Traffic from these sub-interfaces should be NATTed to outside interface when going to internetBut, intra sub-interface traffic should be allowed without NAT'ing. I'm using RFC1918 on both sides i.e. source / destination The first point is not a problem it's working, however. I'm struggling with the second point. On ver 8.2, it wasn't a problem, I used NAT 0 with access-list permitting RFC1918 addresses as source and destination.
View 3 Replies
View Related
Feb 16, 2012
I have upgraded ASA5550 version from 7.2(4) to 8.4(2).
On version 7, I am used to "names" command, like this:
names
name 107.25.1.10 Picard
name 107.25.2.20 Administrativa
By addition, when configuring acls it was very usefull, for example:
access-list inside_access_out line 15 extended permit udp host Picard host 107.25.4.61 eq snmp
On version 8, I have verified that names replacement is no more available:
ASA(config)# access-list outside_access_in permit ip host ?
configure mode commands/options:
A.B.C.D Source host IP address
View 5 Replies
View Related
