I have a scenario where we have
Cisco 1300 Outdoor APs
Cisco 3600 Indoor APs
WLC 2500
Now i need to integrate the WLC with Windows 2008 AD for authentication.The idea is to let the users authenticate via AD for accesing the wireless network.
Will the integration work with NPS?
I recently bought a Cisco WLC 2500. I want to configure a WLAN with Active directory authentication.How I can do this?
View 4 Replies View RelatedWhat are the configuration required on ISE to integrate with Prime 1.3.0.20?,On PI side, I have added ISE in the below path.Design-> External Management Servers -> ISE Servers.
Apart from this anything else to be done on ??
We have implemented VSS on Cisco 6504-E switches using the 10GE links on the Sup-720-10GE. Two Cisco WLC 5508 controllers are planned to be connected in a LAG configuration, (consisting of eight links per LAG bundle) to each of the 6504-E chassis( Total of four WLC, two for primary and two for secondary). WLC HA feature may be implemented on the primary and secondary WLC controllers using the 7.3 latest code release.
View 9 Replies View RelatedI have a WLC 4404 with LWAPs, the customer has a microsoft LDAP and all users are joined to the domain and he wants the users to be authenticated against their domain accounts and this should be done automatically so that when users login to windows they are also authenticated and joined the WLAN.so how we can do that with the simplest way, without Radius server using only the LDAP and wwithout envolving any certificates.also i need to know when i add LDAP server to the WLC, how can i know that this LDAP is properly inegrated with the WLC?
View 8 Replies View RelatedI am having trouble adding a new controller(2500) to the WCS.
-My WCS version 6.0.196.0
-My WLC version 7.0.116.0
If i upgrade my WCS i may add the new contoller? Even if in cisco DATA-SHEET there isnt any mention regarding this WLC(basicly it says that the WCS does not support this WLC)
Monitoring and migration of selected Cisco Aironet standalone (autonomous) access points. Monitoring of the standalone access points of Cisco 800, 1800, 2800, and 3800 Series Integrated Services Routers.
I'm configuring a 2500 series WLC to test some wireless configuration changes we'd like to make on our 5500's that are currently in prodcution.
The 2500 and the 5800's interfaces are configured as a LAG.
One of the primary goals of these configuration changes is to move the LAPs from their current VLAN (the same subnet as our primary WLAN) to two separate VLANs. Were choosing to move the LAPs to 2 APs based on the WLC best practices document's suggestion to limit the number of LAPs per vlan to 60-100. We've had several issues in the past with LAPs failing to join with their static IPs, releasing them and then joining with DHCP addresses.
LAP's will be on separate vlans using subnets 10.10.10.0/25 and 10.10.10.128/25. WLC management interface is in the 10.10.1.0/25 subnet.
Should we continue using static IPs for the LAPs or DHCP?
What subnet should the AP management interface be on?
Is it possible to have mutiple AP management interfaces with LAG?
By any way can I achieve HA in 2500 controller? I dont mind even I didnt get Stateful switchover.
View 5 Replies View RelatedWe are looking at MAC address filter on the WCS (Limted to 2500?) for the machine then a rule on the ACS pointing to an AD group.
View 1 Replies View Relatedi am having wirless controller cisco 2500 series. i want to know how many web authentication users i can create in the 2500 series controller with time out option for each users.
i know it will support the web authentication for internet access for the users but i need to know how many it will accept at a time with hours specification.
know if Cisco LMS will ever support the 2500 wireless controller ? I have just checked the supported devices for LMS 4.1 and the controller is not there.
View 1 Replies View RelatedI have some concern regarding the compatibility of AP with the WLC. we are using AIR-CT2504(7.0.116.0) series WLC with AP AIR-LAP1242AG(7.0.116.0) but now i checked on Cisco website they are End-of-Sale/End-of-Life for the Power Supply for Cisco Aironet 1130, 1140, 1240 and 1300 Series Access Point.
Now My question is:
1: Which is the latest AP series we should use for WLC 2500 series?
Im making a design for a customer that will have around 200 wireless users.
We were thinking in the WLC 2500, because the number of APs will be around 30.
But the problem is that from time to time, the client organizes events, and in these events the number of wireless clients will be around 600.
In the WLC2500 specs te maximun numbers of users is 500, but i want to know if this is just a recomendation, of if the WLC will drop the connection attemp # 501.
I need the MIBs for Cisco 2500 WLC. I have it for 5508 WLC. Does it works same for 2500 WLC too ?
View 1 Replies View RelatedThe 5500 WLC would be the primary and 2500 WLC would be the secondary. The only need for the secondary would be in the event of failure of the primary, and support needs when doing maintenance such as code upgrades.
We would use the same version of code on each controller and apply the necessary amount of AP licenses on each. The controllers would have identical configurations and host multiple SSID's, including offering guest services. Does the 2500 support guest network services?
Cannot set up 2500 router
View 8 Replies View RelatedI have the problem with machine authentication, our customer using Wireless Controller 2500 Series and need implement machine authentication on IAS server. So, as my understand is our controller may not change anything with configuration but we may configure IAS for support machine authentication, correct? but my question is how to? and is it work ?
View 24 Replies View Relatedwith FW 7.4.100.0 a 2500 controller works as anchor controller, now.I have 3 questions.
1) What are the limitations? 15 EoIP tunnel, Clients? something else?
2) Have Cisco a compatibility matrix about Anchor - Foreign Firmware? (Example works 7.4.100.0 anchor with 7.0.x.x foreign?)
3) A controller works only as anchor. A controller version with lowest AP licence is needed. Right?
I am developing CAP1602I & 2500 Controller.The CAP1602I-E-K9 can't register with the 2500 controller. [code] logging appears: capwap can't process uncryped data..I even didn't configure capwap on CAP1602.May I know if CAP1602 doesn't support LWAPP? Why LWAPP doesn't work?According to the logging, I also tried to configure the "Data Encryption" on 2500 controller ( according to 7.0.116.0 guide)
"Cisco 2500, WiSM2, WLC2—By default, these platforms do not contain DTLS. To turn on data DTLS, you must install a license. These platforms have a single image with data DTLS turned off. To use data DTLS you will need to have a license."Note If your controller does not have a data DTLS license and if the access point associated with the controller has DTLS enabled, the data path will be unencrypted. I should purchase a license? or, if I can configure the CAP1602I to don't encrypt data?
My client wants to test their new product with wireless authentication 802.1x EAP TTLS. They have CISCO WLC 2504. Does CISCO WLC 2500 support EAP TTLS, if yes then how to configure. So far I have added Radius TTLS server into my WLC. Under Radius on WLC added radius server IP and key and created new SSID 802.1x WPA+WPA2 ( WPA policy2 and WPA encryption AES) after that under SSID AAAservers selected drop down same server IP. But user tried and didn’t work also we didn’t see any hit on radius server. Yea policy has added on radius. My client wants to use TTLS instead of TLS because in TLS you have to use client certificate on client side but on TTLS you can use certificate on client side but it is optional. So they want to stick with TTLS. But I am not seeing any documentation on TTLS with cisco WLC
View 8 Replies View RelatedI see the 2500 porst are 1 Gigabit ports. Are they 10/100/1000 ports though?Have an older switch that only has 10/100 ports.
View 2 Replies View RelatedThe users belong to Multiple AD domains. If we purchase WLC 2500 controller. Can I have one more WLANs authenticate to multiple radius or ad domains? I thought one WLAN/ ssid authenticate to single radius server.
View 4 Replies View RelatedI have a Cisco 2500 Wireless Controller connected and controlling 5 Cisco AP's. Everything works fine except one device.
This device is used to connect to our AP wirelessly and then any of the wireless laptops can use programming software to connect to the device and program through it. I can successfully set up our device on the network and all PCs can ping it, but the programming software refuses to connect to it. I spent an hour and a half on the phone with the device people who assure me its the network. So, I bought in a cheap Linksys router, hooked one laptop up to it and configured the device wirelessly. With that, the programming software works.
what should I be looking for in the Wireless Controller that may be blocking direct connection to the device even though I can ping it?
I have 2500 series wlc which is crashing again and again. I attach the log of crash as well.Also in License location the base-ap-count license " is not in use ".
View 3 Replies View RelatedWe have a couple of Access Points which are not registering with WLC 2500. I followed-up on the two LAPs in the dorm. They were cycling through red, amber, green, indicating they were trying to join the controller but could not.
Recently, we have changed our IP Schema for the Wireless Devices and I believe there is an IP Conflict between APs and WLC. Earlier APs were cofigured with Static IP Address assignment, thus they can't change their IP Address.
how to reset the Access Point? I know we can hard reset them by pressing the Mode button manually.
Is there another way via which this can be done witout removing the Access Points from their enclosures?
My client wants to test their new product with wireless authentication 802.1x EAP TTLS. They have CISCO WLC 2504. Will CISCO WLC 2500 support EAP TTLS, if yes then how to configure.
So far I have added Radius TTLS server into my WLC. Under Radius on WLC added radius server IP and key and created new SSID 802.1x WPA+WPA2 ( WPA policy2 and WPA encryption AES) after that under SSID AAAservers selected drop down same server IP.But user tried and didn’t work also we didn’t see any hit on radius server. Yea policy has added on radius.
My client wants to use TTLS instead of TLS because in TLS you have to use client certificate on client side but on TTLS you can use certificate on client side but it is optional. So they want to stick with TTLS. But I am not seeing any documentation on TTLS with cisco WLC?My android phone galaxy II has TTLS option under EAP 802.1x, so android devices support TTLS.
If I set a primary DHCP server in the interface configuration, or if I override DHCP in the WLAN Configuration.Which interface does the WLC use to try and connect to the DHCP on behalf of the wireless clients?IFA) The dhcp server is not on any of the configured subnets.B) The DHCP server is on a different interface's subnet.
View 4 Replies View RelatedI purchased a new E-2500 router and got it operating my computer, but my iphone will not log on, I set up guests and now it appears to log on, but doesn't.
View 1 Replies View RelatedWe have recently been given this unusual task. The setup is a series of CAP3502P access points, and a wireless controller (either 2500 Series or 5500 Series), as well as other standard network infrastructure.
In this network, the client (mobile/wireless) devices must be able to detect when they change what access point they are communicating through, while also requiring a seamless transition. Ie, if the client device is communicating via access point A, and displaying the application menus for A, when the user walks to the area services by access point B, it must detect that sot he application can display menus for B, without the user having to select "B".
Is there a way for the client device to detect which access point it is using and provide that to an application? Or alternatively a way for a host service residing on a server to get that information from the wireless controller?
We are currently using a Cisco 2500 (licensed for 50 AP's) WLAN Controller. There has been a lot of issues setting up the VOCERA wireless badges, thats on going. The question I have is all the AP's are showing as being on Channel 6, it was thought that the controller would learn the enviroment and move these to none overlapping channels, but has not. Is this right should they all be on the same channel and not 1, 6, 11 accordingly? it is also worth mentioning that the controller can see 61 rogue AP's, yes that is 61 other wireless networks!
View 2 Replies View Relatedgive me the run down on the features removed from the 4400 series in the 2500 series? Obviously 4400 is now EOL, and so i cannot purchase new. Therefore I was looking at the 2500 for my implementation to save costs also.I would like to have two SSID's, running seperate VLAN's, one voice, one guest, trunk the link to the AP's, which will be 1131AG or newer, N possibly. Voice needs to be encrypted with WPA or WPA2, guest needs to be open using the guest access feature. Here's a sample but with EAP:
[URL]
Is this supported to have WPA on one SSID and Guest access on the other? i did spot a paragraph in the 4400 manual stating that certain restrictions apply regarding one SSID having encryption and the other being guest mode?I notice also in the WCS documentation, it doesn't explicitly state it supports the 2500 series under the managed devices section?
We have recently installed Cisco for our wireless solution. We are an education and are looking to let staff and pupils bring their own devices. The route that we are planning to take to let them join the school's WiFi is to implement a RADIUS server so that they can authenticate with their Active Directory username and password. I have tried to test the solution but so far without any success. I am using a Windows Server 2008 R2 as my NPS server, I have setup the Cisco controller as per below:
Security Tab | RADIUS | Authentication - I added my windows server there and the preshared key, the Network User and Management is ticket and the server responds to a ping command,In the WLANs Tab, I selected my test WLAN and under Security | AAA Servers I selected the RADIUS server that I configured in the Security TabI then try to logon to my test WLAN and on the Cisco WLAN controller I get the following error: AAA Authentication Failure for UserName:test User Type: WLAN USER
Before trying to tinker with policies on the Windows Server I was wondering if the RADIUS is correctly setup on the Controller or have I missed something obvious?
Can I connect various Aironet 1242 to Wireless controller 2500?
View 4 Replies View Related