We are starting to roll out a few Win7 devices. Even on our Guest WLAN, they are taking longer to authenticate on the AP1231 than WinXP. The APs are controlled by a WLC, which connects to NAC?
View 3 RepliesI'm trying to setup 2 VLAN's 1 for Native Traffic on my Corp network and another VLAN for Guest Wireless traffic. I have attached the Config from my Cisco AP1231 and my Cisco 3750. I have the AP plugged into port 24 on my switch. I seem to have the VLAN's working fine. I can get the AP1231 to broadcast both SSID's and the very first time i can connect everything seems to work fine. after i power down my switch and AP i cannot connect to either SSID. I get the message Not Connected.
View 2 Replies View RelatedMy customer has this OOOLD deployment where some AP1231 are still working they are upgrading part of the WLAN to LWAPP but may need to leave some AP in stan alone for a while.I need to configure a new SSID that needs WPA2 enterprise AES but it seems that this version does not support WPA2. If it doesn't, from what version on is supported?
View 9 Replies View RelatedWe have cisco 5508 office extend in dmz running code 7.3.112. 1132 AP seems to register and authenticate fine but OEAP 600 series dont seem to authenticate. they seem to join the controller and download the SSID but just wont authenticate ? not even registering on the AAA server
View 9 Replies View Relatedhow to Configure ACS 5.x so LMS 4 users can authenticate via TACACS+? I have ACS 5.x setup and authenticating to Active Directory. Have changed the LMS 4.x Authentication Module to TACACS+. Have gotten past the user / password problem by configuring a local user in LMS 4.x. Now, am hitting the Default rule in ACS and Shell Profile is deny access..
View 1 Replies View RelatedDell inspiron 1525 / Windows XP
Linksys/Cisco Router.
When trying to connect (wireless or wired), I can't get past the authenticating status. Have used this computer with same router for 3 years. If there was ever a problem, I would unplug/replug the router.I am currently connected through my neighbor's unsecured network.
So if I do a static ip address it works fine, but if I turn off static, the machine authenticates fine, but is not assigned to the access vlan, and it does not get an ip address.now when I use static I notice in the ISE live authentication logs, 11213 No response received from Network Access Device, for the switch even though its configured correctly.
View 5 Replies View RelatedA customer has RADIUS running on a Win Server 2008 R2 machine, has Autonomous 1140 APs and a mix of Windows 7 and XP Pro clients. Using PEAP as the authentication method the Win 7 clients can access the WLAN, but the Win XP clients cannot. The Win XP clients are at least SP2. I am doing some research before going to site on Friday and wanted to poll the community. I found an older post speaking to a MS Hotfix under KB#885453, but it referes to "third-party RADIUS servers," not MS servers URL.
View 14 Replies View RelatedI have a WAP4410n which I'd like to authenticate users against our corporate active directory. I would like to know how to achieve this - whether we require a dedicated RADIUS server, whether AD has a RADIUS engine which can be used, etc. Also, what would the pros / cons be of this setup versus using a WPA2 password?
View 2 Replies View RelatedI have deployed a Cisco wireless environment at one of our sites. The problem is that we are rolling out new motorola handhelds (MC75) are not authenticating with the ACS. I have copied the same config as it was with the exsisting wireless that was installed. Funny thing is we have another set of motorola handhelds (MC70) all use the same certificates and can authenticate without any issues.When i look at the ACS for logs I get the following error; EAP-TLS or PEAP authentication failed during SSL handshake.
View 6 Replies View RelatedMy computers inability to connect to the internet. It is a 2006 Dell Inspiron 6000 with a 1370 WLAN card. I just moved into a new house and was able to connect to my roommates wireless connection with no problem. Then a couple weeks ago we both lost our ability to connect. When we disconnected the router and modum and then reconnected she was able to get on the internet again. I was unable to. A computer savvy friend came over and through some finagling was able to get my connection going again. I might try cleaning my computer up and putting stuff onto an external hard drive. Since then I have tried some different stuff I have seen on the internet, such as ipconfig to no avail, tried repairing the connections doesn't do anything.
View 11 Replies View RelatedI've got a problem with Cisco ACS 4.2 authenticating Cisco 4710 ACE appliance.
ACS4.2 has been configured to use both internal and external database. It's been working fine for a couple or years.
Recently we bought a Cisco 4710 ACE appliance. When I use ACS4.2 internal username and password to login the Cisco 4710 ACE appliance, I have no problem. I can also see the passed authentication log on ACS4.2. However, if I use AD username and password, I couldn't login in. The message is "Login incorrect". I checked the failed attempts log on the ACS4.2, there was no log regarding the failed attempt. My AD username and password works fine on all other cisco routers and switches.
I've posted my AAA configuration of the 4710 ACE below. ACE is running on the latest version A4(1.1).
tacacs-server key 7 "xxxxxxxxxxxxx"aaa group server tacacs+ tac_admin server xx.xx.xx.xx
aaa authentication login default group tac_admin local aaa authentication login console group tac_admin local aaa accounting default group tac_admin
I am having problems authenticating client computers onto the wireless network using a Cisco AP1252 via radius
Setup:
I have a Cisco AP1252 wireless Access Point connected to a Cisco ASA5510 on subnet X.X.5.Z The access point ip address is X.X.5.101
The ASA on another port is also connected to the wired network on a different subnet X.X.0.Z
On the wired network are two radius servers - Ubuntus servers running freeradius which are running fine and reliably authenticate wired users for ssh connections to the ASA and importantly to the AP1252 as well (The radius servers ip addresses are X.X.0.191 and X.X.0.192)
Problem:
When a wireless user tries to connect to the wireless network via the AP1252 after being disconnected form it for a while (or after waking from a long sleep) they are never authenticated. They just try over and over and never obtain an IP
Interestingly in such a case neither Ubuntu server shows any sign of receiving an authentication request from the AP - Both ubuntu servers are running in debug mode so they show any activity - there is none
Oddly:
If i try to authenticate a user wirelessly to the AP and leave it in the usual state of trying over and over (with no visible activity on the ubuntu servers) BUT then go to a wired machine and attempt to authenticate an ssh connection to the AP1252 using a terminal command ssh user1@X.X.5.101 THEN as soon as I hit enter on that request (and before I enter a password for the ssh connection) THE WAITING WIRELESS USER IS IMMEDIATELY AUTHENTICATED (and the ubuntu server shows the authentication activity for the wireless user
I really do not understand this and cannot use this method to facilitate wireless user authentication 
What might be causing this behavior - it seems like the AP sleeping and the wired ssh request wakes it up so that it sees the pending wireless user waiting and then acts on that completing the wireless user authentication request.
Web clients are receiving login failed messages and VPN clients are getting disconnected by host messages. I am able to ping the server from the ASA5510. Users authenticate in AD. I am not sure if the problem is on the server or the ASA.
View 1 Replies View RelatedI will set up a Dhcp server on the inside interface of my pix. I would like to have the DHCP Server authenticate to the Active Directory Server that is located on the DMZ.
Inside --pix--dmz
Inside interface
Win 2008 DHCP
DMZ interface
Active Directory Server
What would be the issues that I could run in to when I try to authenticate this server from the inside interface to the dmz? I see that Dhcprelay option is available on the PIX 6.3 I'm guessing this is the only command that I need to use: dhcprelay enable dmz
I put a password on my WRT54GC ver 2.0. After that i couldn't access internet. It keeps authenticating and never connects.
View 2 Replies View RelatedHere at HQ we have a 4402 WLC. At our remote sites we have 1231G APs running in autonomous mode. I upgraded one of the APs -- IOS 12.4(3g)JA -- to run LWAPP. Per release notes I've read upgraded 1231's do not support REAP/HREAP mode, consequently, it's running in LOCAL mode.
The AP is managed by the WLC. I created a WLAN for the remote site and assigned it to the MGMT interface; the remote site subnet doesn't exist in HQ. The DHCP server for the remote site is presently at that site; AP and DHCP server reside at the same place.
Clients authenticate successfully to the remote site AP, however, they are not getting DHCP addresses assigned. Does the DHCP server for the remote site have to reside in HQ since the AP is running in local mode? If so, where is that specified, on the MGMT interface config?
I am using ACS 5.3 What I am about is setting user authentication against existence of the user in specific AD group, not just being a member in any AD. What is happening now, users get authenticated as long as they exists in the AD, luckily they fail on authorization, as it is bound to specific AD group.
how can I bind the authentication aginst specific group in AD, not just using AD1 as the identity source.
i have 2 1260 Access points one is in root mode , one is wgb mode. Authentication is EAPFAST. There are 5 devices connected via WGB bridge to the rest of the network.
- If clients are sending some data , then WGB AP announces this client mac via IAPP to root AP and rest of the network sees them correctly
- If clients are "passive" , then after WBG AP announces them to root AP , they timeout after 6 minutes on root AP and obviously they are not pingable from the rest of the network. The only way to restore connectivity is to ping that device from WGB AP, then WGB AP announces via IAPP to root AP , then and only then they become visible from the rest of the network.
My question is related to this 6 minute timeout on root AP . Is it normal behaviour ?
I have an RV042 setup for quick vpn access.The remote computer in question is a win 7 64bit. The PC uses McAfee SAAS firewall. This disables the windows firewall.
1. I can connect to the vpn with SAAS disabled and windows firewall enabled.
2. I cannot connect to the vpn with both windows firewall and SAAS disabled.
3. I cannot run SAAS and windows firewall together to check if this would work.
I need to figure out what windows firewall is doing to allow the vpn to connect, and so how do this with windows firewall disabled. I can then leave the windows firewall disabled and enable McAfee SAAS.The message quickvpn provides when it fails to connect is that the remote gateway is not responding. The client logs show that the tunnel had been opened but it was unable to ping.
My new Windows 8 computer is not wi-fi capable, I bought the adapter but it only works with Windows 7, they have a link to upgrade to Windows 8 but I don't know where to go from there.
[URL]
We have a working configuration for L2TP-IPSec connection from a native Windows XP client to the ASA 5510. When trying to set up a connection from a Windows 7 client, the connection fails with the message that all SA proposals are unacceptable? Is this coexistence possible, and what parameters would I have to change to get this working. I have understood that the Windows 7 client requires som higher security proposals, but have not found what these are. And at the sam time we are concerned about not destroying the VPN connection for our existing XP clients.
View 8 Replies View RelatedMy win xp pro 32bit cannot add network printer kxp1121 from win 7 64 bit which is using epson lx series 1 (80). Request driver ' unknown Inf'
View 1 Replies View RelatedI wan to access a folder shared on windows 2003 server 32bit from a Windows 7 64bit ultimate WS. but after asking password, beside giving correct password, it asks again and agian and do not show folder
View 1 Replies View RelatedWe have a network of approximately 20 computers, network printers, and one Windows 2003 Server (used simply as a file server). I have an issue with two specific Windows 7 Pro workstations that just will not logon. The username and password details we're using are correct, but the server rejects them. I can logon using the same account from any other Windows 7 Pro workstation, or Windows XP station, so I know the issue is specific to the two workstations communicating with the server.
Both afftected stations show Logon attempted by: MICROSOFT_AUTHENTICATION_PACKAGE_1_0 error 0xC000006A which all searches on Google point towards incorrect login credentials, however I've tried plenty of perfectly valid login credentials and they don't work either.I've tried checking that the 128bit option on the Windows 7 machines is disabled in file sharing etc.
using same network but don't see each other. Why?
View 2 Replies View RelatedI have a win xp laptop which connects via wireless to a cheap belkin router I have a Win 7 pro laptop which is hardwired to the router. The Win 7 machine is NOT set up for home groups. We are all on the same workgroup.
I have added the user name from the XP machine to the Win 7 pro machine with admin rights. I shared a folder on Win 7 and added the user name and gave read/write rights. I have no software firewall.
When I try to connect via win explorer via the workgroup I see the Win 7 machine (after 10 seconds). I see 'User' folder which I can browse and I see the folder that I shared but I can't access it. Access denied...
Trying to share printer from old 98 with new 7 machine
View 1 Replies View RelatedMy Win7 laptop was unable to ping another WinXP within the same network. When I first got this Win7 laptop, I experienced this problem. The WinXP laptop has no problem pinging the Win7 system. A visiting friend changed the setting on the Win7 laptop and suddenly the two laptops were able to talk to each other. I wiped the WinXP laptop a few weeks ago. Since then, the Win7 laptop is again unable to ping the WinXP. I have googled for many hours now. I tried just about all the methods that make sense to me but still cannot ping from Win7 to WinXP. How I can reestablish communication between these 2 systems on the same network?
View 5 Replies View RelatedI have this test windows 2008 r2 server. I can connect to the internet on this server.However my client xp machine, cannot see the server via windows explorer. I can however ping the windows 2008 r2 server. Using the servers ip of 192.168.1.230 Another thing is I cannot also remote to the server on the internal LAN. Using RDP.I ve even tried with firewalls turned off on the server for some mins.
View 1 Replies View RelatedI planned for my customer to replace his old LMS 4.0.1 server under Windows 2003 by a new server under Windows 2008 R2.Customer wants also to set a new LMS name and IP address for the new server under Windows 2008 R2 and keep both servers on the network.I'm wondering what could be the best procedure to do that migration.Can I used backup / restore procedure in that case ?If yes, what file must I modify to adapt the new LMS configuration to new hostname and IP Address ?
View 2 Replies View RelatedI am using the following:
CISCO 2811 router.
Windows 7 64bit
CISCO Client 5.0.07.0440 64bit
HP Probook 4530s - 4 GB ram; Core i5
The issue is we recently purcahsed new laptops for our inspectors. They where running Windows XP 32 bit with CISCO Client 5.0.01 and every thing worked fine. When I upgraded them to the new laptops I am having issues with the VPN. The symptom is that the VPN connects ok and you can download files from the servers ok but when you try to up load a file that is larger than 80 KB it hangs on "Discovering Items..." then times out. What I have tried is:I hooked one of the laptops into the LAN and connect the VPN and the uploads work fine.I setup a SoHo router in our DMZ and hook the laptop to it and I have the problem my users are having at home as described above.Tryed truning off all Windows Fire Walls. -> Fails on upload.Tryed stopping the "Indexing Service". -> Fails on upload.Updated the CISCO client to the latest version. -> Fails on upload.Removed Anti-Virus. -> Fails on upload.Used IP addresses in place of FQDN. -> Fails on upload.We have other Windows VIST 32bit computers and they do not have these problems with their VPN. These are our first 64bit computers. I really do not want to down grade to Windows 7 32bit.I can make the running config available upon request but I doubt that is the issue being that our other computers are working fine but if there is something I need to do with the tunnel to get around this issue, I am game.
Im trying to setup 802.1x with ACS 5.2 but am struggling as its very differnet to ACS 4.2.I have setup the ACS to be the domain and think i have setup up the External Idnetity Store, however when i try to authenticate a pc using authentication Medthod 'PEAP (EAP-MSCHAPv2), i get a failure reason '22056 Subject not found in the applicable identity store'
View 2 Replies View Related