Cisco Wireless :: WAP4410N Does VLAN Tag Setting Need To Be On Tagged To Determine Private From Guest Traffic
Mar 6, 2012
We are trying to setup a WAP4410N with 2 SSID's. One SSID for our private network and the other for guest internet access. On the VLAN and QoS page there is a setting for priority. What would be the suggested values for this setting? We obviously want our private network to receive priority over our guest network.Also, does VLAN Tag setting need to be on Tagged to determine private from guest traffic?
View 2 Replies
ADVERTISEMENT
Feb 12, 2012
I have a sf300 with (2) vlans (1) ] vlan for data and vlan (100) is my voice vlan I have Vlan (100) tagged traffic, and my VoIP pbx as an access port only to vlan (100) all other ports are trunk ports with vlan (100) tagged and vlan (1) untagged traffic. I get no outbound audio on calls I can call out hear them fine they cant hear me. I am wondering if my tagged traffic leaving the phone is being striped and if so were. I have CDP turned off.
View 1 Replies
View Related
Nov 27, 2011
I am primarely enquiring whether the setup I have explained below is actually possible, and if so then how I can set this up. I know it isn't the easiest configuration and I need to set this up without purchasing any more equipment if at all possible.I have a Cisco SG 300-28 setup with three VLAN's. [code] Default Gateway is 192.168.10.1 (Netgear Router)I have a Wireless network setup (Netgear WMS and 2 WAP's) configured with the TWO VLAN's (1 and 3). These go into ports on the Cisco SG 300-28 which are tagged on both VLAN's. The Business wireless worked fine but the guest network didn't reout out to the internet.After some troubleshooting I realised the reason the guest wasn't working was because there was no route back from the internet to the router.
Â
The router I have isn't really ideal, it is a Netgear DGN2200, but I managed to create a static route to 192.168.30.1 with a metric of 2, with 192,168,10.254 being the hop. Success, the connection worked, the only problem is that now my guest network can see my business network because the business network is using the static route on my router to route back over to the guest network (due to the limitations of this device I can't do anything about that)Guest network can connect to Business VLAN via switch. I am assuming this is because the router is on the Business VLAN and the default gateway is the router. As they are on the same network the Guest network can inevetably see the business server and network.The Business network can get back to the Guest network via the router using my static route I created. The static route is really basic and I can't create a firewall rule on the router to prevent the Business network speaking to guest network because it only has a LAN - WAN firewall and this connection is LAN - LAN.
Â
What I need is...to somehow stop any traffic from the 192.168.30.0 network routing to anything on the 192.168.10.0 network, appart from the router on 192.168.10.1.Is this possible? I have this setup on a number of different site, the only difference is I have a CIsco Security Router on these with the VLAN's configured so I don't have this problem. Because I have a rather limited Netgear DGN2200 I am unable to setup the VLAN's correctly and as such I need to see if I can do this on the switch in any way.
View 2 Replies
View Related
Dec 14, 2011
We have a Cisco Aironet 1130AG Wireless AP (firmware 12.4) and have a guest wireless network (internet only) and corporate wireless network configured on it. They are kept separate by having different VLANs assigned to them. When a laptop connects to the guest network I see the DHCP request go out and it is tagged with the correct VLAN. The problem is when a laptop connects to the corporate network I see the DHCP request go out but there is no VLAN tagged on the packets. This causes a problem because both of our DHCP servers (on VLAN 1 and 3, remote DHCP servers no DHCP running on the Aironet [Doesn't seem like this version has a DHCP server]) are sending responses and sometimes the corporate user will get an IP address on the Guest subnet.
Â
Our corporate network is setup on VLAN 1 which is configured as the Native VLAN on the Aironet. Will this cause the Aironet not to tag these packets with any VLAN information? Any other thoughts as to why it isn’t tagging these packets to a VLAN?
View 3 Replies
View Related
Dec 7, 2010
I am trying to roll out a new internet router. The problem I am faced with is the LEC only supports VLAN 1227 and greater, specifically they are assigning me VLAN 2528. I am able to create the sub-interface and setup dot1q encapsulation for VLAN 2528, but the vlan database does not have the ability to add VLAN 2528 to it so I am unable to get layer 2 up and going, thus preventing me from getting the implementation done.
View 11 Replies
View Related
Dec 7, 2011
i have a Catalyst 2960S since 2 days. I am a new user, i like to configure the switch! my first problem is: i have 2 v LAN vlan1/24 and vlan200/24. I'd like to config port1 to be tagged on the 2 v LAN i know from hp port must be tagged. how can i config port 1 to be tagged on vlan1 and vlan200? and port 2 to be untagged in vlan1 and untagged in vlan200?
View 12 Replies
View Related
Aug 30, 2011
I have a site with a 1700 router connected to a 2960 switch. For some of the computers on site I want to determine how much traffic is local to the LAN and how much is going across the WAN.
One strategy I've come up with is to reset the interface counters on the switch ports to the machines in question and after some time compare the total bytes in and out of the interface with netflow data from the router. My only concern is that netflow is not completely accurate about the amount of data that has passed through an interface.
Is there a better or more accurate way to accomplish my goal?
View 7 Replies
View Related
Sep 13, 2011
Does the Linksys AP (WAP4410N) support Wireless Guest access solution?
View 2 Replies
View Related
Apr 19, 2011
I have two Cisco WAP4410N access points. Both has Regular and Guest SSIDs, with same configurations, except "Wireless Isolation" on Guest SSID is enabled. Problem is Guest SSIDs are not visible on devices
Â
Access points are working on different chanles, firmware Version: 2.0.1.0.
View 5 Replies
View Related
Sep 12, 2011
i have two WAP4410N wireless router. with software version (2.0.1.0) , here i have a problem on SSID broadcast and access.i have created Two ssid's WC72 and SREE with same security configuration WPA2-personalmixed . i cant see the broadcasted SSID of name SREE where i only view WC72 and get connected to it..
Â
where i initially want is separate SSID and internal network access for internal employees and Guests (shouldn't connect to internal network).
View 9 Replies
View Related
Jun 13, 2013
We are trying to replace the CSS between our firewall and DMZ with a BigIP. Among it's other functions, it will act as the router between the firewall and the DMZ. To make this work, I need to assign vlan tags values for the vlans I create on the BigIP box and these must match the tags on the cisco switches (3550's) How do I find this information on the switch?
View 2 Replies
View Related
Apr 20, 2011
Currently I have a WAP4410N setup and would like to add a second WAP4410N but as wireless repeater. I want my users to have wireless access without the need to keep changing the wireless connection based on their location within the factory.
The AP Mode on teh WAP4410N gives me the options below, but I am not sure which one is the correct one:
Option 1 - Wireless WDS Repeater
Option 2 - Wireless Client/Repeater
Below is the link from cisco with explanation. [URL]
Also, if have WAP54G, can I setup this unit to be a wireless repeater with the WAP4410N devices? or all repeaters must be of the same model? Existing WAP4410 is setup to operate at Wireless B/G Mixed mode.
View 9 Replies
View Related
Apr 20, 2011
I need setting up a WAP4410n v 2.0.1.0 as a repeater. Warning, this is the first time I have worked with a repeater. I have tested with a netgear router and a Linksys 160n router. Unfortunately I only have the netgear to continue testing with since the Linksys is at my customer’s site. I can get my hands on a Linksys E3200 if I have to. I have tried a number of setting combinations and I still cannot get the signal to be repeated. So this is what I think the setup should be:I setup the router and the WAP4410n repeater to have the same ssid and channel. For security I first tried to have both the router and the repeater to use WPA2 personal using TKIP then I read that there is a problem using WPA2 with version 2 of the firmware so I then tried using WEP having both the router and repeater using the same key. I selected Wireless WDS repeater mode. I did a site survey and selected my router. Now from what I understand, which is very little, this is all I should really need to do. I have left all of the other settings to the default values. So what am I missing?
View 1 Replies
View Related
Apr 30, 2011
Setting up a WAP4410n v 2.0.1.0 as a repeater. Warning, this is the first time I have worked with a repeater. I have tested with a netgear router and a Linksys 160n router. Unfortunately I only have the netgear to continue testing with since the Linksys is at my customer's site. I can get my hands on a Linksys E3200 if I have to. I have tried a number of setting combinations and I still cannot get the signal to be repeated. So this is what I think the setup should be: I setup the router and the WAP4410n repeater to have the same ssid and channel. For security I first tried to have both the router and the repeater to use WPA2 personal using TKIP then I read that there is a problem using WPA2 with version 2 of the firmware so I then tried using WEP having both the router and repeater using the same key. I selected Wireless WDS repeater mode. I did a site survey and selected my router. Now from what I understand, which is very little, this is all I should really need to do. I have left all of the other settings to the default values.
View 2 Replies
View Related
Nov 24, 2010
Is there a recommended configuration for setting up a wap4410n as an ap?
Â
The reason I ask is that I have an rvs4000 with a wap4410n as ap and a second wap4410n as wds repeater and it seem I have to reboot one or more of them every couple of days due to various users being unable to connect wirelessly or being able to connect wirelessly, but with no Internet access.
Â
Starting with a reboot to facory default, the rvs4000 gave the wap4410n ap an address of 192.168.1.101 so I just left things like that. Similarly, the wap4410n wds repeater was given an address of 192.168.1.103, which I did not change.
Â
Given there seems to be some kind of intermittent problem, would it be better to have the rvs4000 reserve an ip address for the two wap4410n? Note that I did try this, but after adding the two reserved ip addresses (192.168.1.101/103) and clicking on "save", the rvs4000 rebooted and came back up without the two reserved addresses...
View 9 Replies
View Related
Jul 3, 2011
i set up the WAP4410N and it can be connected with our router. But it's not protected by our password, but once i have set the password of WAP4410N by changing the security mode to WEP, now i will prompted to password when I connect the AP, but it shows limited connectivity, I can't even access my local LAN resources at all.
View 2 Replies
View Related
Oct 27, 2009
I have a WAP4410N and would like to turn down the power output below 100%.
Â
It has a very strong signal, and is covering our small office and half the parking lot.
Â
In the Administration Guide, under FAQs, it mentions a setting for output power but I cannot find this setting.
Â
The SW version is 2.0.0.5, and that seems to be the latest version - the file I downloaded is WAP4410N-fw-2.0.0.5-K9.img but I haven't installed it yet.
View 8 Replies
View Related
Sep 22, 2011
I need to configure WAP4410N wireless access point for our company guest and visitors.i need them to only surf internet and not to go to LAN (servers).I think i need to create VLAN for this ? can any one tell me setting for configure only to surf internet thru WAP4410N ?
View 1 Replies
View Related
Jan 6, 2013
I wish to establish a private and guest network for a local business. They have Verizon service with its wireless router plus their own personal wireless router.The Actiontec mi424wr (rev i) wireless router is connected via Coax and will remain the first in line so as not to disrupt the set top boxes (STB) channel guide and other features managed by the Actiontec. The radio is active with an SSID of "ABC-Private" and its network is 192.168.1.xx. The thought is that only business personnel will connect to this router for internet.I have connected their Linksys WRT54GS to the LAN port of the Actiontec, using a static IP which I have allocated in the Actiontec's DHCP pool for this purpose. This radio is active with an SSID of "ABC-Guests" and its network is 192.168.2.xx. The thought is that only patrons will connect to this router for internet.
My overall goal is that business personnel will have unrestricted access to the internet AND to each other¦ while patrons will only have HTTP and HTTPS access to the internet¦ and no communications will be permitted between the two network subnets. I realize there are hardware firewalls designed for accomplishing such a goal, but the business hopes to avoid the additional expense, if the aforementioned model can provide this capability.In order to accomplish this goal, my remaining tasks as are follows:
1. On the Linksys, permit only http and https traffic (and whatever else the patrons would need/want).
2. On the Actiontec, deny Linksys IP address access to everything except for the Actiontec gateway.
View 1 Replies
View Related
Oct 17, 2012
I have one L3 Switch which is connected to three L2 switches and then three WAP4410N devices are connected to L2 switch. I configured three diffrent VLANs for my users. i want to configure like this:- one VLAN for wired user, one VLAN for Wireless and one another wireless VLAN for the Guest user. guest user must have limited access. how can i configured wi-fi VLANs to my Wi-Fi device.
View 2 Replies
View Related
Nov 27, 2012
Does the WAP4410N support Dynamic VLAN assignment by means of 802.1x authentication?
Â
The reason why I ask this; I am able to configure a SSID on a WAP4410N with WPA2-Enterprise, in combination with 802.1x PEAP network authentication. I can succesfully connect Windows, Windows RT, Windows Phone, iOS and Android devices. But.. I am unable to designate them to another VLAN based on access/connection policies. For example; I want mobile devices such as iPhone and Windows Phone to be assigned to a specific VLAN. The Wireless Access Point (authenticator) must be able to support that.
Â
This is my setup:
Â
Spplicants: Windows 8 / iPad / ...
Authenticator: WAP4410N
Authentication Server: Microsoft NPS (Network Policy Server)
Â
I used 802.1x PEAP (Protected EAP) with password (domain user) authentication. In fact, the suplicants communicate with 802.1x to the authenticator. The authenticator communicates with RADIUS to the authentication server. NAP is not in between. It's just plain 802.1x authentication.
Â
wether dynamic VLAN assignment is supported?
View 5 Replies
View Related
Oct 12, 2011
I'm wanting to setup a Virtual Office scenario. Everything is working fine except for 802.1x...I can get the 881 to authenticate things connected to it, but I don't have the options of guest-vlan or auth-fail vlan.Idea is if the users takes the router home and someone, either accidentally or on pupose, connects an unauthorized Laptop, they stay off the Corp network but can get to the internet still.I found this link on Cisco's site: [URL]That link shows them configuring a guest vlan right on the fa0-3 ports of an 881W. I dont have that option on mine. I can only configure 802.1x on the vlan interface. I have 802.1x working, for things that connect to vlan1, but I would like to have a "fallback" setup.
Â
EZVPN_Remote(config-if)#int fa1
EZVPN_Remote(config-if)#dot
EZVPN_Remote(config-if)#dot1?
dot1qÂ
EZVPN_Remote(config-if)#dot1
[code]....
View 1 Replies
View Related
Jan 28, 2011
I have both working in a cluster and traffic is flowing but now I desire to seperate my intranet from internet guest traffic only. Having an issue with understanding how to accomplish this task. I have one 2003 server in the intranet that supports DHCP and using a private network address.
View 4 Replies
View Related
May 22, 2012
I was looking to setup a y configuration of routers with a modem going to master router, then from the mater router LAN ports to two other routers wan ports to give a guest and private network. I understand that this will all work fine for normal web surfing but can be very long winded when setting up port forwarding which i would need on the private network so I was wondering if I could get around this by setting up a DMZ on the master router for the private network router allowing all the port forwarding to be taken care of by just the one router. Would this work and would the two networks still be secure from one another.
View 8 Replies
View Related
Aug 1, 2012
I've been asked to create 2 wireless networks for guest access. They are to be used by clients of 2 different companies and they have asked for the website of each company to automatically open as a landing page. e.g.
-WLAN1 - password is companyname1 - landing page = www.companyname1.com
-WLAN2 - password is companyname2 - landing page = www.companyname2.com
Is this possible with our 5508 WLC? I have googled it and can see that you can set a web auth page but I need different landing pages depending on which WLAN is connected to.
View 11 Replies
View Related
Feb 18, 2013
I just installed and started using my E3000. Love it so far but I have a question about the guest network. I did set one up with a network name and password. It does show up under available networks but as an unsecured one. How do I go about securing it?
View 2 Replies
View Related
Mar 25, 2013
How to setup 3 SG300-52 (in L2 mode) as per this diagram:Port 1 on all switches should be able to talk to each other and access the blob at the right.The ports 25 on the other hand should only be able to talk among themselves in their own private vlan. They are to carry sensitive traffic. So I created 3 vlans, vlan 78 for ports gi1, gi51 and vlan 10 for port25,49,50 and a dummy vlan: 666 with the intent of segratating vlan 10 from vlan 78. My attempts so far have failed. ports gi49-50 are configured as trunk ports and gi1,gi51 as access ports as the following cli output (excerpts of the startup config):
Â
vlan database
vlan 10,78,666
exit
interface vlan 1
ip address 172.16.10.11 255.255.255.0
[code]....
Ports gi1 can talk to each other and access the blob but ports 25 refuse to talk to each other. But as soon as I remove the access links to the blob they can! Obviously, at that point port gi1 lose access.Is such a topology feasable or even advisable?
View 7 Replies
View Related
Jan 23, 2013
I live in a two family residential house and we share a common fibre connection to the internet. In the basement we have a modem/router(zyxel) which is in "bridge mode". Therefore not acting as DHCP. Behind this zyxel we have a Cisco RVS4000 router. Ports 1 and 2 go to family A, and Ports 3 and 4 go to family B. Family A and B have separate routers which are both set to "access point mode". Family A has an ASUS RT-N66U router while family B has a dlink DIR-615. The asus has an "access point mode" while the dlink needs to be set up manually to achieve this. The dlink must also have a static IP adress. The asus can receive ip adress.
Â
What I have unsuccessfully tried to achieve and am currently trying to separate the networks so that both families can access internett, but at the same time it must be impossible to access VLAN1(Family A) from VLAN2(Family B) vice versa. Meaning no communication between the two families through the local network.
Â
I have tried different options but I am not sure how to deal with trunk, tagged, untagged etc. etc. etc. It seems every time I manage to create two different networks there is still accessability/communication between the two VLANs and everytime I manage to give out different IP adresses to different ports i.e. 192.168.10.xx and 192.168.2.xx it is still possible to communicate. What also usually happens is that the internetconnection is severed at the same time.
View 15 Replies
View Related
Sep 6, 2012
My company has an RV180W Router, a SGE-2000 Managed Switch, and a WAP321 Wireless Access Point. I have about 12 users on a Windows 2003 Server Standard, completely updated. My Win box is my DHCP Server. Now I am running two VLANS, Vlan 1 (default) the main vlan is where the Win box is on. Vlan 5 (guest Vlan) uses the RV180W as the DHCP server.
Â
-Vlan1 is 192.168.1.1-254 - Issued by Win box
-Vlan5 is 192.168.2.100-254 - Issued by RV180W
View 3 Replies
View Related
Dec 30, 2012
We have Cisco WLC 5508 in our network and right now ,this WLC is connected to two ports of each core switches.Both CORP and GUEST SSID are configured on this WLC. Now we want to segregate the traffic log GUEST to on core switches from WLC. SO my question is ,how can we achieve this without using guest anchor controller ? Can i use one interface Cisco WLC 5508 and connect it to the firewall or any device ?
View 17 Replies
View Related
Jan 15, 2013
Why I got below error message when config Private VLAN?
Â
Error: while enabling/disabling service: private-vlan, err: Private-vlan is not allowed in F2 VDC (0x40e4005d)
View 2 Replies
View Related
Feb 10, 2012
I am running a /24 network in Active Directory with my ASA acting as gateway and firewall. Standard interfaces (Ethernet 0/0 as outside, Ethernet 0/1 as inside)
Â
As of now I have no VLans set up, but I need to setup wireless Internet access for guests... I need directions on how to setup a Vlan with its on DHCP for these aguests... I can then make sure that my APs can be pointed to the same VLAN... I am not familiar with CLI, have generally used ASDM. I am currently running ASDM 6.3(1) on an ASA with version 8.3(1).
Â
This is something I need to do quickly as we are expecting 20-40 "guests" shortly, and I don't want them to use our internal DHCP server addresses.
View 3 Replies
View Related
Jan 27, 2011
I have a AP541N connected to a UC560. We are currently configured for Wireless Voice and Data. We have added a Guest VLAN, but don't see where in CCA to secure the VLAN from accessing the other other two default VLANs.Â
Â
Additional Info: AP541N-K9-1.7(2)UC560Â 15.0(1)XA2, RELEASE SOFTWARE (fc2)CCA 3.0
View 1 Replies
View Related
