Cisco Wireless :: WAP2000 Connection To Remote Office?
Mar 14, 2011
We have a WAP2000 that supports a few wireless users in a shop environment. Users authenticate using RADIUS. Users connect without issue and can browse the Internet.
The main local network uses a Cisco 800 router to connect to the Internet via DSL and there is an IPsec VPN tunnel to our main office.
When a user is connected to the network via a wired connection, all systems work as expected. If they are on wireless, they cannot connect to services at the main office. They must make a PPTP VPN connection for applications to function.
The WAP2000 has the latest firmware 2.0.4.0. It has a static IP on the local subnet.
I have 3 AIR-CAP3502I-E-K9 AP’s on my network now. Its connected directly to a cisco L3 switch now. and through a WAN link it communicates to a cisco 5505 WLC at remote head office (flexconnect).I want to install a low end WLC on my office, so that incase of the WLC fails at head office, still the clients on my end able to connect to the AP .So which of the following models are support for the AIR-CAP3502I-E-K9 APs ? and can that’s WLC talk with the other one at head office(WLC 5505) ?
I have been tasked with setting up a guest wireless network for a remote office. They would prefer that the guest network be on a different VLAN than the trusted network, and they want to use a different outside IP address for the guest network.
I am trying to figure out how to configure the ASA so that it supports two different LANS, each with it's own outside IP address. Is this possible?
I want to separate my house in three zones plus guest W LAN. One for my mother in law living upstairs, One Gega-net for my family and one for my own little company office. Additionally I want W LAN on three of the V LAN's in addition to one guest W LAN.
And I want remote access to my music on the family LAN and my documents on the office LAN.
Can I accomplish this with one (W LAN)router or do I need more equipment?
I am attempting to get a solid setup for a remote office we have going up and I am running into little issues that I cant seem to get around.
Basically, we have a remote office that will have dual ISPs, one hard wired circuit from a local carrier and the other will be a Verizon 4G router that plugs in via Ethernet and hands out DHCP to my Cisco router.The Cisco router is a 2911 with IP SLA configured. I have it setup to ping my DC out one interface and if that fails, it removes the default route and injects a new default route from the other ISP,
The problem I am having is with the VPN. I figured using EZVPN would be the only solution because the Verizon 4G only supports DHCP so I have to be able to connect from a dynamic remote host. The other caveat is that failover needs to be seamless as we have no person onsite that can troubleshoot. Its fine if it takes a few minutes, but the VPN just needs to come back up on its own without any intervention.
I attempted to setup two different EZVPN crypto maps on the router but realized you can only have one inside cryptomap per interface, which would cause a problem with the internal network. I thought I could just create subinterfaces off the router to have two inside interfaces to work with but that wouldnt have supported because they would now be on different subnets.
I decided that adding an ASA5505 behind the router may be the simplest solution. Use the router only for the purpose of handling routing between the two ISPs and performing NAT out the interfaces. Then use the ASA to do EZVPN from. This works well but there are some issues I am trying to work through.
First, when the ISP fails over to the backup, the NAT translations have to timeout before things start working again. For a constant ping, this is fine, I have the timers set down to 15 seconds for NAT timeouts and after 15 seconds the ping picks right back up again. However, this breaks the EZVPN. The ASA keeps trying to bring up the ISAKMP nearly every second, which keeps resetting the countdown on the NAT timeout for the remote EZVPN server. Because of this, the VPN will never come up until I manually clear the NAT translations on the router. So my first question is this; is there a way to adjust the timer that the VPN uses to try to bring the tunnel up? I tried the crypto isakmp keepalive command but that didnt work, it looks like it doesnt work with EZVPN.
The second issue is really with the IP SLA and is only an issue because of the first issue I mentioned. When the router first comes up after a reboot, both the primary and secondary interfaces come up. However, since the primary default route is only injected into the routing table once IP SLA is up and can reach its destination, the secondary route gets injected initially and the VPN comes up over the secondary ISP. In a few seconds, the primary default route is injected, changes the path and because of the NAT translation, breaks the tunnel and never comes up again because of the first issue with the VPN tunnel renewing the NAT translation continuously.
I could easily go out and purchase a $100 Linksys router that will do the failover and clear its NATs and everything, but I need better reliability out of the hardware than that. There has got to be a way to do this on a Cisco device since consumer level equipment can.
I have an existing VPN tunnel from my branch office to corporate.I want to allow my employees to establish a VPN connection to our local branch office where we have a local server, and not go through the corporate office.Can I set up a direct VPN connection to my router/ firewall at the branch office, even when there is a VPN tunnel already connected between my office and corporate?
I bought 2 RV180 to setup a VPN tunnel between a remote site and central office.The VPN tunnel is established, I can ping from central office to remote site but browsing on that server fails. [code]
Seems the routing is not really working through the VPN Tunnel.
We have an aironet 1130ag in a remote office connected to the data centre over MPLS. The Radius server is based on server 2003.We have hundreds of these points set up exactly the same but this is the only one giving me issues, I even stripped the config and rebuilt it and then swapped with a new access point
The issue is that clients can't authenticate when connecting to the access point but provides nothing in event viewer. Checking the RADIUs server provides nothing either.The access point error logs just state station: authentication failed
On looking deeper into the problem I enabled RADIUS debugging on the access point and got some interesting results, in particular is the line: no sg in radius-timers: ctx 0x12EF0A4 sg 0x0000.I can't find out what no SG in Radius-timers actually means, but after that line appears I just see more retransmits and no sg fails.
I inspected the packets on the RADIUs server and found lots access requests coming from my access point and lots of access-challenges returning back from my RADIUS server - I'm not sure how often that's supposed to happen or if it's a one time occurance. I did however see directly after the first access-request that the RADIUS server returns with UDP and is fragmented, length is 1514...... could this be the problem? If so why cannot it hanlde fragmented packets?
We have a Cisco secure VPN site to site tunnel between the 2 locations.Which ports are need to open on tunnel so that users can successfully use OCS over the site to site VPN tunnel.All the users are havning the main brach AD account.Using Wireshark captured the packets, found only port TCP 5060, after allowing this port over tunnel I can see the authentication window.The user authentication fails. Already port 3389, 80, 443 are allowed.The main requirement is to only have the Chat, Group Chat and file transfer. Not require AV traffic.OCS is using TCP. no TLS is configured.
On wireless (lenovo tabletx61) I cannot connect through the intranet - no problem connecting through internet. When I manage to connect through intranet connection is dropped quite often.No problem connecting via Ethernet cables.
I'm not being able to wireless distribute the office LAN int-con via recently purchased Tp-link tl-wr740n wireless n router'. Actually, I had no problems with my USR 8054 wireless router before I decided to replace the router with an 'N' one as I experienced some connection loss on my mac book pro(mac osx 10.8) thru USR 8054. The internet connection I have is from a wall socket in my office. I know the hub/router/switch or whatever behind has no DCHP activated because the device connected to that socket cannot get an IP, you must enter it manually together with gateway, DNS etc.. and the values are as ip 10.50.31.108 subnet 255.0.0.0 gateway 10.50.31.254 Whenever I enter these on my USR's 'static IP configuration' via quick setup and plug the Ethernet cable from the wall socket to the WAN, it works and the router immediately starts to let me surf on the net wireless. However, the same procedure has never succeeded on my Tp-link with its latest original firmware or dd-wrt. It even says no cable connected although it is connect from the wall socket to its WAN.I also tried to connect my computer directly to the wall socket with a regular Ethernet cable and entered the ip, gateway etc manually. It didn't work at first, then I changed IPv6 setting from ''auto'' to ''local connection only'' and I was able connect to the internet with no trouble.
Region : Spain Model : TL-WR842ND Hardware Version : V1 Firmware Version : 3.12.22 ISP :
I am trying to set up a VPN access to the office Windows network by setting the pptp options in the WAN area of the networks settings.
I have entered the public IP address of the office network and also the username and password required by the system. When clicking on the connect button the router attempts to connect but then returns a "disconnected" message.
I have a linksys WRT120N connected to the internet, and I want to set up my WAP2000 as a repeater. I followed all instructions, same SSID, Security, Channel, etc (y left the IP by default, though) but devices connected to the WAP2000 don´t get an IP and can´t connect to the internet. I wanted to kno if the WRT120n´s signal can be repeated, and if so if I need to change any configuration parameter.
I have a working WAP2000 that won't accept the 2.0.3.4 upgrade file. After selecting the file and pressing the UPDATE button, I receive the following error:
This webpage is not available.The webpage at URL might be temporarily down or it may have moved permanently to a new web address.
We forgot the IP address of this WAP, and resetting the router doesn't take it to the default IP, no matter how I try to reset it. The SSID (and WEP key) stays the same too, which makes me wonder if the reset button is even working. We can still connect computers wirelessly through it and have them access the internet. Our issue is we need to change the SSID. Right now it just connects people invisibly - it gives them IPs from the subnet it's attached to, and yet the various DHCP servers I've connected to never show it as having its own DHCP address.
we have two ASA 5510s one in 8.4(4) and one in 8.2(5) in a site-to-site VPN setup. All internal traffic is working smoothly.Site/Subnet A: 192.160.0.0 - local (8.4(4)) Site/Subnet B: 192.260.0.0 - remote (8.2(5)) VPN Users: 192.160.40.0 - assigned by ASA When you VPN into the network, all traffic hits Site A, and everything on subnet A is accessible.
Site B however, is completely inaccessible for VPN users. All machines on subnet B, the firewall itself, etc... is not reachable by ping or otherwise.There are also some weird NAT rules that I am not happy with that were created after I upgraded Site A ASA to 8.4
Site A internal: 192.160.x.x External: 55.55.555.201(main)/202(mail) Site B (over site-to-site) is 192.260.x.x External: 66.66.666.54(all)
I pretty much just have the basic NAT rules for VPN, Email, Internet and the site-to-site.What do I need to add for the VPN to be able to access the site-to-site network?
I am doing support for a library that has 2 WAP2000 devices that have no security. These are for the patrons to connect to the internet at the library. They want to track how many people are connecting to the internet. Can I log how many computers connect to these access points or get another WAP that will track how many computers connect to the internet?
Cisco has recently released firmware 2.0.4.0 for the WAP2000 wireless access point. This firmware has two annoying bugs in new JavaScript code which validates SSID names on the "Basic Wireless Settings" page.
First of all, this firmware does not allow SSID names to contain spaces, even though a space is a legal character in a SSID name! Secondly, this firmware only allow the first SSID name to be 31 characters longs, even though the maximum allowed SSID name length is 32 (and the input field even allows 32 characters to be entered in the first place!)
If either case you will get an "Illegal SSID Name!" alert message (the developer could apparently not be bothered to make the message more specific and tell the user WHY the SSID name is supposedly illegal), and you will not be able to add additional SSIDs, or configure these existing SSID's on new access points that have this firmware.
The workaround is to revert back to firmware 2.0.0.5. You can upgrade to 2.0.4.0 after adding the "illegal" SSID names, they will remain after upgrading.
The new firmware does have an interesting new feature: it can download its configuration from a TFTP server (either through DHCP or by specifying the server), but I have not been able to find the documentation on how to get this working.
I'm having an issue with our WAP2000 access point. I had to reset the access point and now I can't access the admin console. I've set a static IP address just as I did when I first set it up. Now when I browse to the 192.168.1.245 in my browser it just displays an Authentication error.
Not long ago i was bought Cisco wap2000 access point for small business, and now the problem is to find power injector for this device. I am already tried to use AIR-PWRINJ3, but access point did't turn on.
Our customer setup requires an outdoor WAP (the main WAP) and two wireless signal repeters (that will be WAP2000). The repeaters will be powered over the Ethernet only and will be connected to the same switch as the main WAP (unknown vendor). My question is:
Will a WAP2000 work smoothly as a repeater when it's powered over Ethernet only and connected to the same switch as the main WAP is?
I noticed that WAP2000 connected this way was sort of 'lost' in deciding to repeat a signal or work as an independent wireless access point. The problem was immediately removed once the repeater was disconnected from the switch and powered from an outlet. I am not sure whether it was wrong addressing setup or something else that was needed to check/uncheck.
I have a few questions about the Cisco WAP2000 we setup for our customers that I have experienced as of late.
1. The AP is prone to reset automatically; what causes the access point to do this and how can this be prevented? 2. The AP has the SSID and the encryption reset back to factory defaults, however the IP address does not get reset. What would cause this? 3. Is it possible to use 2 of the Cisco WAP2000 as a repeater to increase signal strength of another Cisco WAP2000 that has interference from another stronger signal?
We have two WAP2000's in our offices which we roam between depending on which office we are in. Lets call them Access point A and Access point B.Both are firmware 2.0.4.0 and have seperate IP addresses. Both are set up with two SSID's and VLAN tagging. Both handle connections just fine and can route traffic. Both are PoE and the catalyst switch reports PoE util at 25% over all of its ports.After 10 minutes of uptime, Access point B will close all of its TCP ports - SNMP, Web admin etc but does still handle wireless connections and traffic correctly. Access point A does not close any ports.I have confirmed that when the problem happens, Access point B still handles traffic just fine by checking the MAC address the clients is associated with, as well as powering down Access point A and confirming traffic is flowing. Access point B will also respond to ICMP ping after it has closed all of its management ports. I have confirmed there is no other device on the network attempting to use the same IP address as Access point B.
I have also confirmed that I am attempting to access the management ports from the management Vlan (1) - else I would not be able to reach Access Point A's management ports either. I have turned wireless management access on for Access point B and the ports close after 10 minutes of uptime from the wireless side too, so highly unlikely this is a vlan issue.I have confirmed all of the settings (bar the IP address config) exactly match on both Access point A and Access point B. The firmware revisions are the same.
I have several WAP2000 (Firmware 2.0.0.5), and while they work fine for PC's, iPhones, iPod touches cannot connect to them.Well, they connect briefly, get an IP address from the router, and immediately drop the connection to re-connect again.I have tried changing channels, eliminating all but one of the AP's, and so forth. Any issues with this firmware? I see posts where people are saying their iPhones connect up fine. This happens on versions 3.x and 4.x of the iphone O.S. It's not limited to one iphone or ipod touch; we've tried several.
i just managed to config the Cisco 877 and send it to my client,when the client connect the router from his location the router can't make VPN connection to my HQ office,i can connect to the router using the external IP adress,i tried to reset the VPN tunnel but no avail,
I have a very high speed connection in my dad's office, and it is over 10 mbps. and the connection in my house is worse ( 256 kbps ). So can I use the office connection in home without any problems from the ISP. just like sharing the connection from the office to home.
We have a ASA 5505 setup with VPN and using Cisco client 5.0. The VPN works without a problem if we use normal internet access (from home, motel, etc). However if we use a cellular wi-fi hotspot or tether a phone it will connect to the vpn but will not allow us to get on the office network
I have 2 older xp pro tough books that connect to my domain via a pair of versa vx 400 access points. automobile technicians use these computers to communicate with cars via a separate wireless card and WiFi device (SPX MVXI) that broadcasts a wireless signal.they always connect just fine to the network but sometimes they drop there connection and don't rejoin which screws up my scheduled tasks (nightly upload). They will reacquire the connection every time if i select it again manually in the windows wireless config.here is what I have done so far
1. set up exclusion range in DHCP distribution on my DC
2. set the laptops up with static IP's within the exclusion range.
3. configured the laptops to auto connect to the network even when its not broadcasting
4. set the access points on channel 7, and the devices on 1 and 11.
I have done a lot of research on this issue, a rep from versa told me that Intel proset wireless isn't very compatible with there product which i this is BS since it does the same with with the netgear WiFi PC cards.
No Network connection after Office 2010 install, I have limmited or no connectivity. I've removed and reloaded drivers, reset router, performed a netsh flush, tried to manually connect, kicked it, threw something at the wall and still no luck.
I am puzzled about some problems that occured at my work place. Unmanaged switch like D-link & Linksys was used and it worked pretty fine only for certain areas of the factory. Then office with more workers will be using managed switch to ensure the workers have decent connection to the local server.
Question is, why are some small offices' connection so ridiculously slow?
*Info*
The switches manage 4PCs
Tested - The main connection cable cannot go through the switch to distribute the connection. Even if there is only 1 PC linked to the switch, it will still be slow. It will be at it's max if it didnt go through the switch, but directly to the PC instead.
True enough that unmanaged switch aren't smart enough to allocate the speed, but why is it possible for some other part of the small office to have fast connection even by using the normal unmanaged switch?
I lost my network connection after installing Microsoft office 2010.. what can I do to get it back ? I know it is this as i have been fussing with my computer all day.. I created a system restore point just before I installed it.. had network connection.. installed office 2010 and now once I rebooted I dont.. I am running Win 7 enterprise.
