How the full functionality of the Wireless Security and Spectrum Intelligence module is supported in autonomous mode for site survey use, or is a WSC required?
I'm wondering whether we need to invest in more survey/ spectrum analysis kit or could just use a 3602e with WSSI and the inbuilt Spectrum Expert?
Looking at the WSSI datasheet it mentions internal antenna- unlcealr if this is just with 3602i or 3602e as well.We plan to deploy 3602e in enclusures- hence the external antenna- so the WSSI would be shielded.
Does the WSSI only use it's own internal antenna or is there any option to use external?
I have a question about sitesurveying with ap3500's, I'm going to deploy a wireless network in a new building, i have a company that normaly does my site surveys.
I normally provide them with some AP's configured with a designated ssid and local power modes set to 50%, however this does not seem possible with the new 3500i's i'm willing to use, for there is no IOS image available for it. I dont have any network connectivity yet in this new building, so i cannot f.i place them in a separate ap-group and assign a dedicated wlan to them.
Is there any detailed documentation on the Site Survey Client mode on the AP 1200?When using this mode I cannot see any indication that it has associated withthe root AP. I would like to be able to pass traffic from the ethernet port to the root AP VIA the AP in client mode. The Ap in client mode shows the radio in blocking when in client mode, is this normal? Is there a way to manually change this to forwarding mode?
View 4 Replies View RelatedI am wanting to use a Cisco Aironet 1552EU to use on a site survey for a future deployment and I need to know if it is possible to configure the AP to broadcast an SSID so that my team can search for that SSID and view the signal strength throughout the site. Is a WLC required to set the SSID or is there an SSID that will be broadcast by default that we can try to connect to?
View 1 Replies View RelatedI know that the deployment guide for 2600/3600 access points states that if you have surveyed for a 3600 deployment, you don't need to survey again for a 2600 deployment. As the the 3600 is the higher specification model, is it safe to assume the reverse? I.e. a site survey carried out using 2600 access points is valid for a 3600 deployment, or is this too simplistic?
View 5 Replies View RelatedWe are in need to perform a site survey with the Aironet 1041N Access Point.
Upon reviewing the site survey software, it seems you need to use an Aironet adapter. However from what i can tell, all the Aironet adapters are PCMICA cards, which most modern laptops do not have, and the PCMICA cards that do exist don't have drivers for windows 7.
Are there USB adapters w/ Windows 7 drivers that can be used to perform a site survey?
Has any tried using a 3500 CleanAir AP as a site survey tool? Could you set it up in multiple locations temporarily and gather interference data and analize through WCS? This would use the 3500 AP like you would the Spectrum Expert product.
View 7 Replies View RelatedI've been trying to connect two DCS-942L to some netgear WNHD3004 (wireless access points a/n WPA2 personal) that I use as access point but I can't find them in the site survey (advanced settings then wireless setup in the camera page).I think I could set manually the network name, security mode and key but since I'm working remotly on these camera, I'm pretty sure it won't work and I'll loose connection (actually they are connected to other access points and work ok).An ipad and macbook pro is able to see and connect to these access points so I don't think they are the problem.I've updated the camera to the latest firmware (1.12 build 1608 agent version : 2.0.15-b11)
View 2 Replies View RelatedI'm trying to find a configure example detailing how AP sniffer mode and SE capability can be configured on a Cisco 3600 that is equpped with a WSSI. I came across the WSSI deployment guide which does not go into the detailed that I would like to know.I'm particularly after the flow details.WLC config guide 7.4 only discusses the legacy AP sniffer and SE configuration.
View 1 Replies View RelatedWe setup some new CAPWAP AP 3602E in the network and configure the DHCP server option 43 , but the WLCs still cannot detect the APs , Do you know if there any new way to troubleshooting?
WLC: 5508 version: 7.2.103.0
SW:3750E
AP: AIR-CAP3602E-C-K9
I have a 3602e access point which I need to configure. It has been loaded with an autonomous image (for survey work) and my only access currently is via a browser. Is it possible to http into this access point if its only been imaged and not configured.
View 5 Replies View RelatedMy QA team needs to test number of special connectivity scenarios where their wireless connection has a limited bandwidth.Ideally, I would like to provide them number of SSIDs each of which has different bandwidth limitation.But so far I did not find a way to apply any bandwidth limitations to my 2504 Wireless controller and the 3602E AP.QoS has only 4 pre-defined modes which can't be set to a specific limit.
View 10 Replies View RelatedI have a problem with a WLC 2500 and 3602E the problem is the link speed between the AP and the client is weak and the client is close to the AP the version fo the WLC es 7.4 and don´t know if it is a bug with the version because if I use a autonomous AP the speed is good
View 6 Replies View Relatedi have cisco CAP 3602e series access point to work with 5500 series controller with code 7.0i did not find VCI option 60 for this type of APs to configure DHCP. How I can let these APs will join the controller, i mean through which process DNS discovery methode and what about if i need to configure option 60 and 43 in dhcp for ap joining process to controllers.
View 4 Replies View RelatedSome deep technical questions regarding the AP541N access point? What I want to know is, if the AP has: - Watchdog per IP - ACK time adjusting - Site Survey.
View 1 Replies View RelatedI have a requirement to create a site to site vpn tunnel on ASA 5510 from a remote site to my HO, ihave already other site-to-site tunnels are up and running on the ASA.The issue is my remote site has got the network address which falls in one of the subnet used in HO(192.168.10.0/24).My requirement is only My remote site need to accees couple of my servers in HO which is in 192.168.200.0/24 subnet.
View 2 Replies View RelatedWe have ordered a pair of Cisco ASA5520 (ASA5520-BUN-K9).Now there is a requirement to terminate site-to-site VPN from remote site. Do we need VPN plus licence for this and how much it cost?
View 1 Replies View RelatedThe scenario where a Site to Site VPN tunnel has been established between Site A and Site B. Lan on Site A can ping Lan on Site B. My problem is a Printer behind Site B needs to be accessed by using the WAN IP address of Site A. Also i could not ping the remote lan or printer from the router.
Below are my configure on the Cisco 877 in site A.
Building configuration...
Current configuration : 5425 bytes
!
! Last configuration change at 15:09:21 PCTime Fri Jun 15 2012 by admin01
!
version 12.4
no service pad
[code]....
cisco products and am struggling getting a VPN going between an ASA 5505 and 5510. I have a VPN created (using the VPN wizward on both) and it shows the VPN is up, but I can't ping the remote site (from either side).
View 11 Replies View RelatedAt the main site, I have 3 5508 WLCs each part of a mobility group (wlcMain-MG). In NCS, under "System/Mobility Groups" for each controller, I see each controller listed as "local" with the other Controllers listed with the group name "wlcMain-MG". None of the SSIDs are "anchored".
I have a new site with a 2500 series WLC that I would like to push out 2 SSIDs. This site contains two customers. One customer is the Main customer with the second customer leasing space.
I have the Cust2 WLAN at the remote site set to have traffic egress out of a local interface on the 2500 WLC (this traffic is then tunnelled back to their Main location via an ASA which houses the DHCP scope for that vlan). I can connect to this SSID, obtain an IP Address off the ASA and am tunnelling without issue.
For the Cust1 WLAN at the remote site, I would like to broadcast an SSID from the Main location on those same APs which are registered to the 2500. It is my understanding, that I anchor the SSID at the Main site and identically configure the SSID at the remote site. This will allow the end user to authenticate to the RADIUS server at the Main site and be placed upon the correct vlan (we are using DOT1x and dynamic vlans).
For my test, I am starting simple. I have created a test WLAN with no authentication. At the main site, on 5508 WLC3, I have created the test WLAN, and placed the interface into a low security vlan (call it VLAN-low). I have anchored this test WLAN to that controller. At the remote site, I have created the same WLAN (but placed it into the management interface for now - the VLAN-low does not exist at the remote site) and configured that WLAN to anchor back to the WLC3 at the main site. I am unable to obtain an IP address from the remote site. I have placed the remote site WLC in the wlcMain-MG as well. How close does the code need to be on the controllers - the 5508s are at 7.0.116.0 and the 2500 is at 7.0.220.0? What could I be missing?
I have ASA 5505, i configured site to site vpn between central site and remote site and is working. Now the problem is we use remote site for troubleshooting purpose, so we need to create a tunnel from remote site to central site. I need to configure such a way that remote site can craete a tunnel to central site, but central site not able to create a tunnel, it just respond to remote site.
View 3 Replies View Relatedi have 2 router asa 5505 with base license i wanna make site to site vpn connection and remote site using vpn client to connect first i have hdsl router with 5 public ip i wanna try it by giving 1 public ip to each router and try the vpn but nothing work?
View 1 Replies View RelatedOn one of our branch locations ASA, I have a L2L VPN setup we are adding wireless to this remote location, and the AP's will talk back to the controller at HQ. The AP's are on the downstream L3 switch, and they have been placed on the mgmt network. It's definitely not ideal to have these AP's on the mgmt network, but for now that is how it is setup.
From HQ (163.122.x.x) I can ping and reach the ASA (10.200.2.1, and the downstream L3 switch 10.200.2.100, but when I ping one of the AP's, I get timeouts and and the following error on the ASA:%ASA-3-305005: No translation group found for icmp src outside:10.205.216.73 dst mgmt:10.200.2.152 (type 8, code 0)
It appears it's a NAT issue on the ASA, but I'm confused on what I need to change. Why can I ping the ASA and the switch from HQ, but not the AP's which reside on the same mgmt network? I don't really need it to NAT, just to pass the connections. I currently only have the following two NAT statements in the configure
[code]...
I have a new WRVS4400N configured with a site to site VPN to connect to my office. At the office, we're running a Cisco PIX 515E. I have successfully established an IKE preshared key and the tunnel is listed as Up. I can successfully connect through the VPN tunnel into the office network through the tunnel and all seems good. After some period of time, the tunnel apparently goes into a bad state. Access to the office network is no longer available. When looking at the VPN status screen, the Linksys indicates that the tunnel is up. However, I cannot ping any resources on the office lan. If I disconnect and connect the site to site VPN tunnel, it connects and comes back up successfully. It seems like there is some sort of timeout taking place here. I am running the 1.1.03 firmware.
View 7 Replies View Relatedi want configure VPN between backoffice which have ASA5510 firewall with static IP and site which have cisco router 1861 with dynamic IP.
how i can configure the site to site between them?
I am trying to set up a site to site ipsec connection. AT site A, I have Vlan's 652-10.55.216.0/24, Vlan653 -10.55.217.0/24, Vlan 654-10.55.217.0/24 and Vlan655-10.55.219.0/24 and at site B, Vlan650-10.55.214.0/24 and Vlan651-10.55.215.0/24.The problem is that I am unable to get any associations when i do a "sh crypto isakmp sa"/"sh crypto ipsec sa" on either router at each site.I am also unable to ping by pluging in a laptop into the site at each site. Laptop at site A is set to access vlan 655 and laptop at site B is set to acess vlan 651. I can ping all the devices from one end to the other.I have turned on debug crypto isakmp, debug crypto ipsec, debug crypto ipsec errors but dont get anything at all as output.I have attached the sh run for each router Cisco (1941/K9) and switch (Catalyst 3750) at each site.
View 4 Replies View RelatedI have an ASA 5525 and need to configure site to site ipsec vpn to 3 peers. I currently have an existing /28 public address from my ISP that is used by other services.Is there a way to use this existing ip range to configure IPSEC tunnels to 3 peers ?
View 10 Replies View RelatedI configurated Ipsec vpn at asa 5510. my inside ip 192.168.10.156my public ip: 85.x.x.xmy peer ip : 62.x.x.x
the project is that:
the remote site want the interesting traffic like that:
source ip 172.16.1.104 can access destination ip 10.0.154.27
My inside ip is 192.168.10.0/0 and i can not to change it 172.16.1.0/24 and i can not to add this ip at my network.
I would like to know both Cisco 2901 or 2921 router and Cisco 5505 ASA can build site to site VPN.
1) what is the different to build site to site VPN between router and firewall ?
2) which is the best choice if using in site to site VPN connection ?
Our Headquarter (asa 5510) is running a site to site vpn connection with a Branch office (router 2811). All remote users are accesing the internet through the VPN and also accesing headquarter file servers.I want to know if there is a way for some remote users to be able to use the vpn for accesing the file servers but to access the internet through the branch office. The rest of the remote users will be still accessing the internet through VPN.
View 2 Replies View RelatedWe've just deployed a site-to-site VPN using a 5505 ASA on the client's site and a checkpoint Nokia FW on our site. Everything seems to be fine except that the user's connections to their file shares seem to be intermittently dropping. One minute the connection to the shares is there, next thing it's lost. There is no logic to it because no two users are experiencing issues at the same time, as a matter of fact even on the same PC where a user has access to 3 shares on 3 different servers, one could be showing as connected whereas the other two be dropping. [code]
As you can see the Duplex and Speed are set to auto, I've rectified this since then and I'm keeping a close eye on the output errors, and collisions. However, I'm afraid that this did not rectify the issue and the users are still experiencing intermittent connection dropping to their file shares over the VPN!
I have a request to establish a site to site VPN with a customer. While collecting the information I give them our local network subnet which is a private subnet (192.168.5.0). They asked me if I could give them a public address instead. They can not work with the 192.168.5 subnet. Is this possible?
My side of the VPN is an ASA 5505 running 8.2(2). The other side i believe is a Checkpoint.