Cisco :: Enable Guest Network Authentication In Network With WLC 4404 Controllers And No WCS?

Feb 18, 2013

What's the least expensive way to enable Guest Network authentication in a network with WLC 4404 controllers and no WCS? Management would like guests to register with a valid email address and enter a 'password du jour' to keep unauthenticated users from chewing up bandwith with automatic connections. 

View 4 Replies


ADVERTISEMENT

Cisco Wireless :: WLC 4404 Authentication Of Devices To Wi-Fi Network

Aug 2, 2012

I'm facing a problem related to devices authenticating to our wireless network. Below are how it is setup:WLC 4404 pass authentication to ACS 5.3 (PEAP + MsChapV2) then to AD server.Client can get stock in this status and it keeps repeating from 1 to 20.

View 4 Replies View Related

Cisco Wireless :: Configure A Wired Guest Network With A Combination Of 5508 And 2504 Wireless Controllers?

Apr 7, 2013

Is there any way to configure a wired guest network with a combination of 5508 and 2504 wireless controllers? I am aware that the 2504 does not have wired guest functionality, however is it possible to set up a wired guest on the 5508 and using mobility anchors, transmit the l2 information through eoip to communicate with the remote vlan?Home built NAC solution, using 802.1x authentication on switchports for public areas. If user is an employee, communicates with the supplicant on their machine, and places them on an internal vlan.If user is a guest, user fails 802.1x check and is placed on a "guest" vlan with an ACL and external DNS.If placed on the guest vlan, the user has to accept a terms of use form.This is working currently with our 5508s without any issue, however we have some remote offices we'd like to roll this out to that are using 2504 controllers. I'm hoping there's a way that I can use the 5508 as an anchor or vice versa to make this work.

View 1 Replies View Related

Cisco Wireless :: WLC2504 - Can Internal Web Authentication Be Used For Guest Network

Mar 18, 2012

Can we change the internal web authentication for guest network to use http instead of https?

View 3 Replies View Related

Cisco :: 4404 LAN Controllers - Effect Of Renaming WLC

Jul 22, 2012

We need to rename our 4404 Wireless LAN Controllers.  Would like to know if renaming via the GUI (change name in the Controller / General tab and then Apply) will cause the WLC to reload.  Also wondering about the best way to push the name change to the APs (High Availability) - we are not using WCS.

View 5 Replies View Related

Linksys Wireless Router :: EA4500 Guest Network Re-authentication Doesn't Work

Sep 15, 2012

I have successfully set up a guest network on my EA4500. Guest laptop associates with guest SSID just fine. Then via IE, it gets prompted for the guest password, which is entered and accepted just fine. At this point guest laptop is on the network.
 
BUT... at some point the guest laptop will need to reauthenticate (I don't know what the timeout is, but maybe one or two days?). Anyway, it's at this point that IE presents the guest network login page. But now after typing in the password, "enter" or clicking on the button does nothing. It looks like the guest web page doesn't get loaded properly or completely, so the reauthentication can't complete, therefore can't get to the internet. So, while in this state, I've also tried Firefox and Chrome, and same thing, no action when trying to submit the guest password. Tried rebooting guest laptop, and still same problem. Only thing I've found so far that works is to reboot the router. So I'm guessing there's a problem with the guest/web server on the router?? It's a real pain to have to reboot the router every day or two, when I've had other Linksys routers run for months without having to touch them.
 
I was running CCC 2.1.38 when I first noticed the problem. Since then I've downgraded to Classic 2.0.37, but it seems I still have the same problem. Again, I can connect & authenticate just fine initially, but when reprompted after some period of time, it doesn't work.
 
I've tried contacting Cisco support, but it looks like I'm at 91 days since purchase and thus outside of my 90-day complimentary support, so they happily provided me with the premium support options just to have the honor of talking with them. Guess I shouldn't have spent so much time trying to figure this out myself.

View 9 Replies View Related

Cisco :: Prevent Guest From Doing Peer-peer Communication On Guest 5508 Controllers

Jan 24, 2013

I want to prevent guest from doing peer - peer communication on my Guest (5508) controllers.  Is this a feature on the WLC or only by applying an ACL on the router interface?

View 2 Replies View Related

Cisco :: 4400 / 5508 Controllers - 802.1x Re-Authentication

Mar 28, 2012

Currently in the process of migrating from psk to 802.1x radius environment using a mix of 4400 and 5508 controllers with WCS using Microsoft ias.  The problem I have is there is a lot of shared iPads and tablets in the environment.  Is there a way to force these user to relogin to radius after a certain time period so they are not  sharing unames and passwords?

View 1 Replies View Related

Cisco :: 4404 - Guest Web-Passthrough Is Not Displayed

Feb 26, 2012

I'm having some issues with Web-Passthrough, I'm using two 4404-50 controllers. Clients get IP addresses well. I'm using the controllers internal DHCP Servers. Controllers can reach DNS public IP Addresses (from management and guest vlan), the issue is that only very few clients are able to get displayed the Web-Passthrough page, the rest of the clients never get the page.
 
Version 7.0.98.0
 
The controllers also work as anchor controllers for two more foreign controllers.

View 10 Replies View Related

Cisco Wireless :: 5508 WLC / Lobby Admin Guest Account With Two Controllers?

Feb 14, 2013

I have two 5508 WLCs.  Both have APs attached to them.  If I create a guest account with the lobby administrator on one, will that user account be able to log in to the network if the client is attached to the ohter WLC?  So far, I have found that I need to create the same user on both WLC's, in order to have the user login.

View 2 Replies View Related

Cisco Wireless :: 4404 / Restricting Use Of Guest Accounts?

Aug 15, 2011

I am currently running a guest wireless network using 4404 controllers on the wireless side and a 4402 as an anchor controller, all running 7.0.98.0 and all is working fine. Accounts being created via the WCS lobby admin and applied to the 4402.The question I have is, is there any way of restricting the use of an account to 1 device at a time. I am currently seeing evidence of password sharing and my boss would like to make sure that everyone who use the system has their own credentials.

View 1 Replies View Related

Cisco :: 5508 - DHCP Load Sharing With Redundant Guest Anchor Controllers

Jan 28, 2012

I have 2 x Redundant Guest Anchor Controllers (5508) located in 2 separate Data Centers with all the management and guest user VLAN spanned between two. Everything is working fine with the Guest WiFi access except the DHCP functionality as the Controllers are acting themselves as the internal DHCP Servers.
 
This is how I tried to distribute : 
network. 10.1.0.0/23
gateway: 10.1.1.254 
Controller 1, DHCP Server pool: 10.1.0.2 - 10.1.0.254 Gw: 10.1.1.254
Controller 2, DHCP Server pool: 10.1.1.2 - 10.1.1.254 Gw: 10.1.1.254
 
As the user load balancing between the Anchor Controllers cannot be controlled (i.e. they are active/active), the same client sometime getting 2 different IP addresses from both the Controllers (as they do not talk to each other in terms of DHCP) hence depleting the pool addresses.
 
I guess one way of solving this is to just run 1 DHCP server in one of the controllers but that defeats the purpose of having N+1 Controllers. Is there a better way of doing the DHCP load balancing and having full redundancy at the same time?

View 3 Replies View Related

Linksys Wireless Router :: EA4500 Guest Network - Losing Guest Clients After About 24 Hours

Oct 17, 2012

Any problems with the guest network on the ea4500 with the cloud firmware?   I am losing guest clients after about 24 hours and the re-authentication fails. you enter the guest  password and nothing happens until you reboot the router. 

View 2 Replies View Related

Cisco :: Wlc 4404 Showing Authentication Error

Sep 17, 2008

I got a WLC4404 running software version 5.1.151.0 with 40 LWAPPs (mostly 1242AG). We got new Dell Latitude E6500 Laptops with Intel 5100 NICs. After upgrading the bios to the latest version and installing the latest wlan driver, wireless is working the most time.After about 4 reboots I see the following message in the WLCs logfile: "Thu Sep 18 13:53:10 2008 AAA Authentication Failure for UserName:host/hostname.domain.name User Type: WLAN USER".After I disable the wlan-card, it's working again.

View 7 Replies View Related

Cisco Wireless :: Coexisting Controllers - Running Two 5508s On Same Network?

Apr 3, 2013

Having performance issues running two 5508 controllers on the same network? One is running 7.3.101.0, the other is running 7.0.98.0. The legacy APs are connected to the WLC on the older code to support older hardware. The new WLC is accepting all the new 3600 APs. Once all legacy APs are replaced, the 5508 on old code will be disabled.

View 3 Replies View Related

Home Network :: Cisco Linksys E1500 - Wireless Security Protocol For Guest Network?

Oct 29, 2012

Having an issue with a Cisco Linksys E1500 on a home network. The device has a feature to provide a guest wireless network but the guest network can't get to the internet. A wired connection is fine, as is the normal wireless network but not the guest. The cheesy thing is, that it doesn't list an option for what type of wireless security protocol you want on the guest network. I'm assuming that it uses the same security protocol that the normal wireless network uses, but who knowsEspecially weird is that it asks you what password you want on the guest network but then the guest network show to be insecure when you try to connectthought maybe it was something funky with some of my configurations so I went ahead and factory defaulted it and just set it up with an insecure network for both the normal and guest networks. This didn't solve it. The guest network still couldn't get to the internet. In fact, the guest network can't even ping the router.

View 1 Replies View Related

Cisco :: WLC 4404 / 5508 Web Authentication By AD Security Groups

May 3, 2012

web authenticate users within a specific Active Directory Security Group. I tried to authenticate over Radius with Cisco Secure ACS and Network Access Restrictions. But NAR only works with Layer 2 authentication. And Web Authentication over LDAP can only be used with User Objects.

View 5 Replies View Related

Cisco :: Acs 4.2 PEAP Machine Authentication Wireless 4404

Sep 26, 2012

we have acs 4.2 as our radius server, and 2 wlc 4404 with a wism2 for our wireless network. we have 2 SSID network, lets call them SSID A and B. A have a more restricted access to server than B.PEAP machine authentification is authorize on both network, to let our users laptop connect before the user login, this enable us to have our computer gpo deploy before the user logon, or have network access to authenticate a user to our directory if he had not logon previously on the laptop.
 
Users from group A can't logon to SSID B, they can only logon to SSID A, but we have some clever users from group A who have change they wireless setting to only send machine authentification (this can be done in the advance setting of a wireless network in windows 7) to connect to SSID B
 
We can't force the wireless config by GPO because we don't have an ad 2008 domain, we are still in 2003 soo we can't change the gpo for windows 7 wireless setting . I can't force user to require machine authentification and user authentification because we have a lot of ipad and iphone, and other mobile device that connect using only their user credentials.Is there a way I could configure this without having to disable machine authentification for SSID B?

View 7 Replies View Related

Cisco Wireless :: 4404 Guest Anchor Controller With 5508 Foreign Controller?

Aug 12, 2012

I know that the 3600 series APs are not supported on the 4404 WLC.  However, would the following scenario be supported? I would like to use the 4404 (software rel. 7.0) as a guest anchor with a 5508 (software release 7.2) as the foreign controller supporting series 3600 APs.  I ask because the APs do not need to join the guest anchor.

View 7 Replies View Related

Cisco Wireless :: 4404 Wireless AD Authentication Setup

May 7, 2012

I work for a school system and we are currently entertaining the idea of BYOD. We have a Cisco 4404 controller and what I would like to do in order to prepare for BYOD is to create a wireless network that can be connected to with AD credentials. So basically, on any device, when users try and connect to this specific WLAN they will be prompted to put in their AD username and password to get access, that’s it, no other passwords. I will be using the Network Policy Server role in Server 2008 R2 as my radius server. how to actually set up the policy within NPS for this type of authentication. Also, on the controller side, am I basically just setting up the WLAN and then setting up the authentication server on the AAA Servers tab for security? Leave Layer 2 and Layer 3 tabs blank if I only want to use AD credentials?

View 3 Replies View Related

Cisco WAN :: Enable IS-IS HMAC-MD5 Authentication?

Feb 24, 2013

We would like to enable IS-IS HMAC-MD5 authentication on an production network for LSP authentication including LSP, CSNP and PSNP. The problem is that when we are applying the command  "authentication mode md5" under the isis process there is authentications failure and the router loses all routes from routing table. Is there any way to enable authentication without the router losing the routing or to "delay" the authentication until all routers are configured. 

key chain IS-IS
key 1
key-string xxx

[Code]....

View 3 Replies View Related

Cisco :: Guest Authentication Using AP1200s

Aug 31, 2011

I am looking for a way, even something that might be EOS, that will allow autonomous AP1200s to force a user to enter a user name and password (or even just password) before allowing a user network access.  This is a hotel environment so even though the first client authenticates the process needs to be initiated again whenever a different laptop comes onto the network. 

View 14 Replies View Related

Cisco AAA/Identity/Nac :: Enable Authentication Mode On ACS 4.2

Feb 8, 2012

how to Config the ACS 4.2 server runs in TACACS + mode (users accounts configured the ACS) mode  to authenticate enable mode  password on the asa using the same AD account?

View 10 Replies View Related

Linksys Wireless Router :: Enable Guest Access On E2000?

Feb 12, 2013

How do I reenable guest access on my e2000 without having cisco connect installed?

View 1 Replies View Related

Linksys Wireless Router :: Enable Guest Access On E1000

Sep 22, 2011

I have a Linksys E1000 router. The firmware is 2.1.00 Build 7 August 30, 2010. I would like to turn on or enable the guest access function. I have gone to 192.168.1.1, and do not find anything there about guest access. At the Wireless tab, the choices are Basic Wireless Setting, Wireless Security, Wireless MAC filter, and Advamced Wireless Setting. Tfhan

View 9 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.1 Authentication MAB And Set Guest VLAN

Jul 13, 2011

is it possible to set the dot1x guest-vlan on a Catalyst Switch via ACS 5.2 dynamicly. I want to make MAB with known Devices (FAT-Clients, Notebooks,  Desktops, Printers) and unknown Devices.I will set the VLAN dynamicly with dot1x per ACS. For known FAT-Clients, Notebooks etc. it's running well.But for Printers it's more difficult because I have about 500 Printers in several IP-Segments on several Switches and I will not make to much Rules in ACS for Grouping, Mapping and Authority-Rules.My Idea is to set the Guest-VLAN on every Switch, read them with ACS and use this for my Printers.The Problem is that Guest-VLAN is set on more than 100 Switch and this guest-vlan is different on any Switch.Can I read the Geust-VLAN Value so that I can set this via ACS ?

View 4 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 - Guest NAC Radius Authentication

Oct 31, 2010

For some reason, i can't get the lobby "sponsors" to authentication to the Guest NAC server (2.0.2) using ACS 5.2 via Radius.I was able to figure out how to get the Guest NAC Radius Authentication for "Administrator" to work by adding custom Radius value IEFT-6 under...
 
Policy ElementsAuthorization & permissionsNetwork AccessAuthorization Profiles 
I added a policy & under the Radius Attributes Tab... I manually entered an Attribute that looks like the following:
Dictionary Type: = RADIUS-IETFRadius Attribute: = Service-TypeAttribute Type: = EnumerationAttribute Value: = StaticValue = "Administrative"   
I then created an Access Policy... I looked for a specific AD group - Result = "Name of Custom Policy Above"...
 
All of that is working just fine.... the NAC Guest Docs tell you the Radius server must return a value of IETF-6...
 
When it gets into the Sponsor section, it doesn't tell you the value your Radius server should return... so just for grins, instead of "Name of Custom Policy Above", I tried "Permit Access"... i tried the "Name of Custom Policy above"...  Not sure what else to try to get this to work...
 
here is a like to the document i'm following: URL
 
Page 68 refers to the "Configuring Sponsor Authentication" for Radius.. it just tell you to add the Radius Server & change the authentication order.

View 9 Replies View Related

Wireless :: Cannot Get Onto Guest Network?

May 6, 2012

My landlord downstairs has set up a guest network for me from his Netgear WGR614v10 so I can ditch my dsl and just pay him. First I tried using my Netgear WNR2000 router to act as a receiver (bridge?) but messed it up and couldn't even access the router config anymore, had reset to factory settings.I bought a Netgear WN311B PCI adapter, but I can not connect. My laptop works fine, and after a bit I got my nook to work. We've gone through having an open network with no encryption to currently trying with WPA2-PSK. If I try to connect with Win 7 it just says "Windows is unable to connect to network." Troubleshooting just says to restart the router. If I try NetGear's Smart Wizard it will detect the network fine in setup, and say the signal is at 79-80%.

But at the "Settings" tab, it just says "scanning" in the status bar, it always says channel 6, and shows signal at 1 dot. Window's network connections list it at "Good." I did very briefly get it to work when I first tried the new adapter. Windows even asked me what type of network this was (Home/Work/Public) but when I tried to open a web browser it was not working anymore.I don't think it's range as my laptop and nook work. I can get it to connect to my WNR2000 router, so I don't think it's necessarily the adapter

View 1 Replies View Related

Cisco AAA/Identity/Nac :: 8.4 (2) / ASA System Context Authentication Enable?

Jan 12, 2012

We have ASA configured in multi context mode, with software 8.4(2) configured for AAA Configuration is admin context as follows:

aaa-server TAC protocol tacacs+
aaa-server TAC (management) host 10.162.2.201
key *****
aaa authentication enable console TAC LOCAL
aaa authentication http console TAC LOCAL
aaa authentication serial console TAC LOCAL
aaa authentication ssh console TAC LOCAL
 
Because of multiple context, after logging in we enter System context. Console port authentication is working fine except access to privileged mode while connecting over console port. After issuing "enable" command ASA accepts only configured enable secret in system context and changes user ID to enable_15, so we are unable to do user-level command authorization and accounting.It seems that ASA in system context is not aware of any AAA configuration, and there isn't any command to configure AAA in system context.Is there any way to configure enable authentication over AAA in system context?

View 3 Replies View Related

Cisco AAA/Identity/Nac :: Enable Unconditional Machine Authentication In ACS 5.3?

Jul 4, 2012

It´s possible to enable unconditional machine authentication in ACS 5.3.

View 1 Replies View Related

Linksys Wireless Router :: How To Enable Guest Access Feature Of E3000

Dec 30, 2012

I switched from comcast to att uverse.  I was happy about the guest-access feature of E3000 when using the comcast, where I can directly connect my e3000 to the modem (basically you can see two network, one is XXX, the other is XXX-guest). However, the ATT uverse has a gateway that combines the modem and router together, in order to use my e3000 instead of the built-in router of the gateway, I have done a LAN-to-LAN connection and I can access internet without any problem. But in this case, I can not enable my guest-access feature. When I use Cisco Connect to set up e3000, it says "cannot connect to your router". how to set up the guess-access feature of e3000 when using ATT uverse.

View 3 Replies View Related

Cisco Wireless :: AP541N-A-K9 Guest Access Authentication

Nov 12, 2012

I currently have two AP541N access points.  Both are configured for internal access and one unit is configured with a Guest VAP.  I want to configure the Guest VAP to redirect to an authentication page so that the user connecting has to log in to get internet access.  I'm fairly certain the AP541N doesn't offer this out of the box.  I know I can redirect, but what is needed to force a user to authenticate to gain internet access.  I want to find out what additional hardware/software I will need in order to create Guest Services of this VAP. 

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Can Use ACS 5.2 As Guest User Authentication Server?

Jun 5, 2012

Can use ACS 5.2 as Guest user authentication server?

View 3 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved