Is there any detailed documentation on the Site Survey Client mode on the AP 1200?When using this mode I cannot see any indication that it has associated withthe root AP. I would like to be able to pass traffic from the ethernet port to the root AP VIA the AP in client mode. The Ap in client mode shows the radio in blocking when in client mode, is this normal? Is there a way to manually change this to forwarding mode?
View 4 RepliesI have a question about sitesurveying with ap3500's, I'm going to deploy a wireless network in a new building, i have a company that normaly does my site surveys.
I normally provide them with some AP's configured with a designated ssid and local power modes set to 50%, however this does not seem possible with the new 3500i's i'm willing to use, for there is no IOS image available for it. I dont have any network connectivity yet in this new building, so i cannot f.i place them in a separate ap-group and assign a dedicated wlan to them.
How the full functionality of the Wireless Security and Spectrum Intelligence module is supported in autonomous mode for site survey use, or is a WSC required?
I'm wondering whether we need to invest in more survey/ spectrum analysis kit or could just use a 3602e with WSSI and the inbuilt Spectrum Expert?
I am wanting to use a Cisco Aironet 1552EU to use on a site survey for a future deployment and I need to know if it is possible to configure the AP to broadcast an SSID so that my team can search for that SSID and view the signal strength throughout the site. Is a WLC required to set the SSID or is there an SSID that will be broadcast by default that we can try to connect to?
View 1 Replies View RelatedI know that the deployment guide for 2600/3600 access points states that if you have surveyed for a 3600 deployment, you don't need to survey again for a 2600 deployment. As the the 3600 is the higher specification model, is it safe to assume the reverse? I.e. a site survey carried out using 2600 access points is valid for a 3600 deployment, or is this too simplistic?
View 5 Replies View RelatedWe are in need to perform a site survey with the Aironet 1041N Access Point.
Upon reviewing the site survey software, it seems you need to use an Aironet adapter. However from what i can tell, all the Aironet adapters are PCMICA cards, which most modern laptops do not have, and the PCMICA cards that do exist don't have drivers for windows 7.
Are there USB adapters w/ Windows 7 drivers that can be used to perform a site survey?
Has any tried using a 3500 CleanAir AP as a site survey tool? Could you set it up in multiple locations temporarily and gather interference data and analize through WCS? This would use the 3500 AP like you would the Spectrum Expert product.
View 7 Replies View RelatedI've been trying to connect two DCS-942L to some netgear WNHD3004 (wireless access points a/n WPA2 personal) that I use as access point but I can't find them in the site survey (advanced settings then wireless setup in the camera page).I think I could set manually the network name, security mode and key but since I'm working remotly on these camera, I'm pretty sure it won't work and I'll loose connection (actually they are connected to other access points and work ok).An ipad and macbook pro is able to see and connect to these access points so I don't think they are the problem.I've updated the camera to the latest firmware (1.12 build 1608 agent version : 2.0.15-b11)
View 2 Replies View RelatedFor the past week, I've been looking to implement wireless technology at our educational site. We've conducted some tests with an AP1200 and we were satisfied with the performances of 802.11a standards.
Since one of our requirements is bandwidth, we are looking to implement a 802.11g standard for that need. Unfortunately, Cisco does not offer any client access adapter for that 11g standard as opposed of the competition. What kind of client adapter (PCMCIA) can Cisco recommend to work with AP1200 under the 802.11g ?
I setup RA-VPN under local asa 5510 IP pool (192.168.127.0/24) and all was working fine. I got internet and local network access.
Then i have 5 site to site VPN working fine but when im traying to access to those L2L VPNs from the remote acces client im not able to do that. So after that i decided to obtain IP addresses from my DHCP server so i can obtain IPs from my local network (172.17.16.0/16) and then access normally to the VPN site to site. But the surprise was that the VPN cisco client is getting local IP address (172.17.16.222) perfectly but im not able to access even to my local network.
I have the same-security-traffic permit inter-interface same-security-traffic permit intra-interface enable.
We have a scenario where the Cisco ASA 5505 will be one end of a site-to-site VPN. The same ASA 5505 also allows Client VPN connection. The question is around IP pooling. If I assign a pool of IP's (192.168.1.20 - 192.168.1.30) for Client VPN connections - do I need to be sure that those same IP's are not used on the other side of site-to-site VPN ?
There could be PC's/Servers running 192.168.1.0/24 on the other side of site-to-site VPN. Would this cause an address conflict ?
A user with Easy VPN client connects to a 876 ISR (router A). This router also has a site-to-site VPN to another 876 ISR (router B). What I want to achieve is that the user dials in to router A and can access the network on the remote end of the site-to-site tunnel (router B) In diagram:
user (192.168.18.x) - Easy VPN - Router A (192.168.16.x) - sitetosite - Router B (192.168.17.x)
I have added routes in router B to the 192.168.18.x network with router A as next hop, but I can't reach the other segment.
Have asa 5520 ver 8.0(4) I have vpn client access created and working I have l2l vpn created and working with another set of asa The issue at hand VPN client from internet connects and authenticates, this client can access Site A's networks with no problems. However vpn client on Site A ASA can not access Networks through l2l tunnel located at Site B.
View 2 Replies View RelatedI am considering to buy two RV180Ws and place them on two separate locations. But before buying I would like to make sure that the units meets my requirements. Lets call the locations A and B. I would like to connect location A with full network access to location B. But at the same time I would like to have that location B also gets full access to the network at location A.Besides this I would like to be able to connect to one of the networks from remote with my laptop.Preferably all connections should be made using IPSEC and not PPTP.I would like to know if it is possible to make such a configuration, and eventually if there is a smarter way to do e.g. only letting clients connect to location A or B and granting them access to all ressources at both location A and B from there.
View 1 Replies View Relatedi have a client who needs to establish a VPN tunnel from his satellite office (Site A) to his corporate office (Site Z). His satellite office will have a single PC sitting behind the ASA. In addition, he needs to be able to VPN from his home (Site H) to Site A to access his PC.The first question I have is about the ASA 5505 and the various licensing options. I want to ensure that an ASA5505-BUN-K9 will be able to establish the site-to-site tunnel as well as allow him to use either the IPsec or SSL VPN client to connect from Site H to Site A. Secondly, I would like to verify that no special routing or configuration would need to take place in order to allow traffic not destined for Site Z (i.e., general web browsing or other traffic to any resource that is not part of the Site Z network) to go out his outside interface without specifically traversing the VPN tunnel (split tunneling?)Finally, if the client were to establish a VPN session from Site H to Site A, would that allow for him to connect directly into resources at Site Z without any special firewall security rules? Since the VPN session would come in on the outside interface, and the tunnel back to Site Z goes out on the same interface, would this constitute a split horizon scenario that would call for a more complex config, or will the ASA handle that automatically without issue?
View 1 Replies View RelatedHow can I set up a Cisco 831 router (branch location) so that it will accept inbound VPN Client connections and initiate a site-to-site IPSec tunnel to our hub location that uses a VPN 3005 Concentrator? I could get the tunnel to work by configuring it in a dynamic crypto map but interesting traffic on the Cisco 831 side would not bring the tunnel up.
View 5 Replies View RelatedWe have a Cisco ASA 5505 at our CORP location, which I have configured the Site2Site VPN to our COLO with a Juniper SRX220h, the site to site works fine, but when users access the Cisco VPN client from home, they cant ping or SSH through the Site2Site. Contacted JTAC and they said its not on their end, so I tried to contact Cisco TAC, no support. So here I am today, after for the 3 days (including Friday last week) of searching the Internet for over 6hrs a day, and trying different examples of other users. The VPN client show the secured route to 10.1.0.0. [code]
View 19 Replies View Relatedi have an ASA 5520 Version 8.0(2), i configured the VPN site to site and works fine, in the other apliance i configured the VPN Client for remote users, and works fine, but i try to cofigure the 2 VPNs on ASA 5520 on the same outside interface and i have the line "crypto map outside_map interface outside (for VPN client)", but when I configure the "crypto map VPNL2L interface outside, it overwrites the command", and therefore I can only have one connection. [code]
View 36 Replies View RelatedInstalled 4 AP541N units in a client site and they've now come back with reports of issues with the setup. I went out there today to take a look and the issue is primarily that randomly during the day, clients will loose access to DHCP. The client authenticates fine (we see success logs in the Windows 2008 RADIUS event logs) but doesn't manage to get an ip address.To sum up the things with the current setup:
- Running version 2.0 Code on the AP541N's.
- Using Windows 2008 for NPS (RADIUS) and DHCP.
- Cisco Catalyst Switching in the back end.
Things tend to work fine in the morning. It's as the site hits midday that we start seeing issues.In looking at the issue I've come across a number of posts in regards to issues with DHCP and these units. One item that was suggested to switch off Mutlicast / Broadcast limiting on the Advanced Settings. What's weird with this is that if I do disable this option, RADIUS authentication stops working entirely. Switch limiting back on and RADIUS works again. I've confirmed this with Network Monitor running on the RADIUS Server.
Some deep technical questions regarding the AP541N access point? What I want to know is, if the AP has: - Watchdog per IP - ACK time adjusting - Site Survey.
View 1 Replies View RelatedI have an office c2811 and it has three Ethernet interfaces(two onboard and one expansion). Faste0/0 is on one isp and faste0/1 is on another. The third is private. I have multiple site ipsec vpn’s terminating on faste0/0. I had a client ipsec vpn on faste0/1. One of the site vpn’s on faste0/0 terminates at a collocation site. Both the site vpn and client vpn need access to the same collocation. When I connect via client vpn, I cannot ping/access collocation subnet. I suspect this is because I have a site vpn already terminating to the collocation. Can I have a site and client ipsec vpn on the same router terminating to same place and still work?
View 1 Replies View Related i have PIX515E firewall but i need to know through CLI how can i see the usernames for my VPN clients?
SH vpnclient? or sh ?
Need configuring Client to Site IP Sec VPN with Hairpin on Cisco ASA5510 - 8.2(1).
The following is the Layout:
There are two Leased Lines for Internet access - 1.1.1.1 & 2.2.2.2, the latter being the Standard Default route, the former one is for backup.
I have been able to configure Client to Site IP Sec VPN
1) With access from Outside to only the Internal Network (172.16.0.0/24) behind the asa
2) With Split tunnel with simultaneous assess to internal LAN and Outside Internet.
But I have not been able to make traditional Hairpin model work in this scenario.
Following is the Running-Cong with Normal Client to Site IP Sec VPN configured with No internal Access:
LIMITATION: Can't Boot into any other ios image for some unavoidable reason, must use 8.2(1)
running-conf --- Working normal Client to Site VPN without internet access/split tunnel:
ASA Version 8.2(1)
!
hostname ciscoasa
[ code ].......
Neither Adding dynamic NAT for 192.168.150.0/24 on outside interface works, nor does the sysopt connection permit-vpn works
What needs to be done here, to hairpin all the traffic to internet coming from VPN Clients. That is I need clients connected via VPN tunnel, when connected to internet, should have their IP's Nattered against the internet2-outside interface address 2.2.2.2, as it happens for the Campus Clients (172.16.0.0/16).
In my Cisco PIX-515E Version 6.3(5), I have a IPSec VPN tunnel and also to the same firewall home users connect through VPN client. I am unable to find a solution that allows my home users to connect to office network and again access the remote network through the IPSec tunnel.
View 1 Replies View RelatedI currently have a Cisco ACS 3415 appliance with 5.4. Coming from the ACS 4.2 world, I'm have a bit of a struggle creating the following and I was hoping if I could be shown clear steps I can duplicate the rest.
I want to creat a group ie: AIRTEMP with access time from 7:00am to 5:00pm and add 2 users to the group.
Users access our site using a vpn client connecting to a ASA5550. The ASA and the ACS already communicate with each other.
The ACS 5.4 user guide has me bouncing all over different page.
We have a 1200 Aironet just go down hard for no reason through out the day, we replaced the Power Injector with a C2960 POE Switch, we also replaced the cabiling. When it goes down hard all three lights are still green as if the AP is still up. We verified the IOS with other stores and everything is the same on the configurations, versions, and IOS.
View 35 Replies View RelatedI got my final assignment from school, and my teacher asked me to configure 2 Access Points (1200 series) directly on a Wireless Controler (Cisco 2106). I can't ask my teacher for any questions, cause he doesn't know how to configure it also, THAT's why he's asking me to do it.I've learned a lot of things about the default static interfaces (the "management" and "ap_manager" interface), but i can't seem to fully understand how to configure it.I want to use the Internal DHCP server of the WLC. How I can get those 2 Access Points working on the WLC. I only seem to get DHCP issues.
This is what i've done:
- Leave the configuration of the "management" and the "ap_manager" default (172.16.1.30 and 172.16.1.30). Bound to port 1
- Made a new interface "AP1" with IP-Address 10.0.0.10 (/24), default gateway 10.0.0.1. Primary DHCP server: 172.167.1.30
- Made a new interface "AP2" with IP-Address 192.168.1.10 (/24), default gateway 192.168.1.1. Primary DHCP server: 172.167.1.30
- Made 2 DHCP scopes within the 192.168.1.0 and 10.0.0.0 networks.
For some reason, when i boot up both AP's, the won't get any DHCP address.
I have two wireless networks configured in the AP1200, both SSIDs are configured with WPA.
SSID 01: configured whit WPA
SSID 02: configured whit WPA
I have configured the access-list number 700, and I would like to apply to a single network. Achieving the following:
SSID 01 : WPA + Mac Filter, using the ACL number 700.
SSID 02: WPA
How I can apply the list 700 to the first SSID only ??
I am looking at deploying a Cisco Virtual Wireless LAN Controller (vWLC 7.3).Do I need Prime Infrastructure to manage the environment, or can I manage my AP's (1200 series) using the vWLC alone?
View 6 Replies View RelatedI want to disable the MAC authentication that is configured in my Aironet 1200 Cisco Access Point, now set to "Local list only". I want that any wireless device can connect if the user knows the wep password.
I cannot find the option to disable the MAC authentication.
I am using 5 Cisco 1200 Series APs with both an A and G radio. Is there a benefit/problem to running both simultaneously? I would have one SSID and is setup for Fast Roaming as well.
View 1 Replies View RelatedI have 2 Cisco 1200 G AP's connecting 2 different locations. Location A ( La ) I have a RVO82 router connected to a 50Mbit cable connection. I have an AP setup there using a 1 Watt booster and a 24db wire grid directional antenna. Only one antenna here, the other disabled.
At Location B (Lb ), about 1.5 miles away, with good to excellent line of site, i have the other setup as a WGB with a 15db wire grid directional antenna with a 1 Watt booster. Also only one antenna here, the other disabled.
WGB feeds a simple 8 port switch and in that switch i have a simple belkin wireless router setup as an AP for Lb's wireless access,
The signal strenght between the two locations is -49 to -52 db, depending on what time of day I check it.
I have had this setup for a couple of years now. I recently switched from a 3Mbit DSL connection to the 50Mbit cable connection hoping to increase my bandwidth with no luck.
.
When I first set this up i had a 6Mbit cable connection and it maxxed out at 5 Mbit at Lb. I thought i would be able to add more boosters and antennas as time went on to go from half duplex to full duplex (the way i think of it is one antenna receiving and the other sending, at both locations) so that when our ISP had faster rates available, i could upgrade. I recently read somewhere on the net that it is not possible to run full duplex in the AP to WGB setup i have. Is that true?
My main concern is increasing bandwidth on the WGB side Lb. When i upgraded to 50Mbit, i still only max out at 5mbit at Lb. Before i thought it was due to not being full duplex or weaker signal strengths (I've always had the 1watt booster at Lb, then i added one later to La with no benefit noticed except signal strength is better and uploads seem faster from Lb....)
I have two different LAP 1300 and 1200 in my network and I need to add theme to the WLC,I successes to add one of theme by the option 60 in the DHCP pool at the Core SW,How to use multiple VCI strings for lap 1300 and 1200 (option 60) in one pool?
View 4 Replies View Related