Cisco :: Wireless 4400 - Customized Web Authentication
Aug 4, 2011
I posted a few days ago but don't have a good response. I've dig high and low and haven't come across a solution yet. I've been trying to get a customized web Authentication typed. I didn't need a user name or password to get through. All I need is a web pass through and an accept button at the end of the HTML agreement policy or splash page.
I was able to create a log in.HTML and download to the wireless controller, but my problem is how would I get an agree button and when a user click on it and it would redirect to a website. I've followed the following link but no luck. {URL}. the link doesn't tell me weather I should create an accept button manually or is there a setting on the controller that need to check? the link also provide some info. about: Configure Client Machine for Web Pass through, but where should I download the Cisco Aironet Desktop Utility? I've download ACUv502005.exe file for my windows 7 but after the installation it didn't work for me. if you know how to configure the web-pass through. I been working for this for a week now and didn't find the info. that I was looking for.
View 1 Replies
ADVERTISEMENT
Jan 3, 2013
I am configuring an old WLC4400 with V4.2.130.0. I added a new sub-interface for VLAN 50 with proper IP for the subnet and then add the Radius server(Windows server 2008 with NPS) onto WLC4400. I then created new WLAN with WPA+WPA2 Encryption and 802.1x key management and selected the Radius server under AAA for authentication.
Configured the test XP with WPA-Enterprise and PEAP as EAP method. I purposely configured computer to prompt for username and password.
When I try to connect, I did get prompt for username and password. However after that nothing happens. It seems like laptop just keep trying to authenticate.
I checked windows event log and do not see anything under NPS. I know this windows server NPS setup works as it is also the authentication server for our remotevpn.
is there any special option I need to turn on for WLC in order for Radius authentication work? Or is there any known bug with V4.2.130.
View 13 Replies
View Related
Mar 14, 2011
I have some problems integrating WLC 4400 with AD using ldap. The the WLC LDAP Server and W LAN for Web Authentication are configured according to [URL].
when I connect to SSID the laptop is given the ip address, then I can see the web-page with lo gin and password - it seems to be OK, but when I enter lo gin and pass it tells me, that it's incorrect.
The attributes of the LDAP server:
Server Address *.*.*.*
Port Number 389
User Base DN ou=ORG,dc=domain,dc=local
User Attribute userPrincipalName
User Object Type Person
the test user is located in AD folder ORG, but this folder also contains a lot of sub trees
There are some questions:
1) Is it obligatory to use value "Authenticated" in the Simple Bind option or it can be Anonymous?
2) Is the Controller capable for searching the users located in User Base DN sub trees?
Here is some debug from the controller:
667: LDAP_CLIENT: UID Search (base=.....
669: LDAP_CLIENT: ldap_search_ext_s returns 0 85
669: LDAP_CLIENT: Returned 1 msgs including 0 references
[Code]....
View 6 Replies
View Related
Mar 28, 2012
Currently in the process of migrating from psk to 802.1x radius environment using a mix of 4400 and 5508 controllers with WCS using Microsoft ias. The problem I have is there is a lot of shared iPads and tablets in the environment. Is there a way to force these user to relogin to radius after a certain time period so they are not sharing unames and passwords?
View 1 Replies
View Related
May 30, 2012
I am trying to upload a customized web-auth bundle to a WLC 5508 and having some issues.I have downloaded the web-auth bundle from Cisco and used this as a template to create the web pages.I seem to recall that there is only a couple of Windows tools that you can use to TAR the file such as TUGZIP and IZARC. Anyway I have tried both and I still cannot get the file to extract. I have tried to strip the file out so that I only send up the login.html page and even this does not work.I am using a software release 7.0.220.0.
View 6 Replies
View Related
May 21, 2013
I have the following systems in place:
5508 WLC - 7.4.100.00
NAC Guest Server - 2.1.0
I have setup an SSID with external Webauth, which is pointing to the login page on the NAC.All works fine but I cannot use the logout page which is customized on the NAC. I always get the internal default logout.html of the WLC and I cannot customize that.Every customization which I have done to the logout.html (then uploaded it on the WLC) will not be recognized.Is there a way to customize that logout.html?
View 1 Replies
View Related
Feb 10, 2013
How can i create customized user in Cisco ASA 5505 having the following Privileges? note i dont have AAA server.User can only perform show running, ping, traceroute, show xlate. I have review one of the firewall configuration and found two type of password defined, what is the difference b/w enable and password?
View 2 Replies
View Related
Sep 24, 2012
We have a new SSID that needs to be added to an AP through a 4400 Controller with software version
7.0.116.0
All AP's are configured as Lightweight.
View 4 Replies
View Related
Jan 24, 2011
I have a 4400 WLC for 100APs running the 7.0.98.0software version. Now, only 48 APs are joined, and the WLC dont accept new joins. The log below are from my WLC but appear for all others APs:
%LOG-6-Q_IND: spam_lrad.c:1440 Discarding discovery request in LWAPP from AP 00:3a:98:ae:e3:f0 supporting CAPWAP%LWAPP-6-CAPWAP_SUPP_VER: spam_lrad.c:1440 Discarding discovery request in LWAPP from AP 00:3a:98:ae:e3:f0 supporting CAPWAP%CAPWAP-3-TX_ERR: capwap_ac_sm.c:1966 Failed to transmit discovery response to AP 00:3a:98:ae:e3:f0%CAPWAP-3-ENCODE_ERR: capwap_ac_sm.c:2269 Failed to encode Discovery (code)
View 2 Replies
View Related
Jun 1, 2012
i have a existing wireless network setup in my office existing wlc in 4402 and LAPs are 1130 & 1242 all are working fine but we are now planning to use new 5500 series controllers for the same access points,i want to ask that how i can done this job with very minore downtime and users disconnectivity + zero error results??
View 2 Replies
View Related
Jan 1, 2013
We have a WLC4400 controller with about 30 LAP. We moving to a new IP scope and was wondering what is the best way to change the IP address of the controller. We have tried doing this via GUI however we have to power cycle the controller to get it back online using the old ip address.
View 3 Replies
View Related
Apr 2, 2012
I want to upgrade all my controllers (a mix of 4400 and 5508) to 7.2.103.0 from 7.0.116.0. Can I make that jump or should I do incremental?
View 7 Replies
View Related
Feb 14, 2013
Like the way you do with the Cisco IOS.
ie show start | i router
View 1 Replies
View Related
Apr 7, 2013
Does CSCua29504 affect 4400 series WLCs as well? Bug toolkit mentions just 5500, so want to get a confirmation.
View 2 Replies
View Related
Aug 2, 2012
I was wondering if there was a way to import a large number of mac addresses into the MAC filtering of a Cisco WLC 4400. We recently purchased 150 new Mac laptops and I need to add them to the Mac filtering. I have 5 WLC's to do this to.I already have the MAC addresses and names in a spreadsheet.
View 3 Replies
View Related
Aug 18, 2009
According to product bulletin no 3209 for the Cisco 4400 series, the Access Point supports 802.11e WMM.
My question goes to DSCP mapping, according to IEEE and your bulletin the DSCP field in the IP header should be set to 46 (10110 00) for mapping to a 802.11 QoS voice priority 6/7.But my Wireshark trace revealed 4400N is mapping toward with 802.11 QoS is set to Priority 5 Video.
If I google DSCP mapping toward 802.11 QoS all IEEE documention I found says EF /Voice should have 46 or 101xxx in the DSCP IP field but running through Cisco and HP docs gives 46 or 48 as value, that is the correct value. [code]
View 5 Replies
View Related
Aug 26, 2012
We have 4 x 4xxx WLCs setup in our Core. I just created an AP group in one of WLC and in theory I should see that AP group in the other 3 x WLCs
For some reason, I do not see that AP group appear in other 3 x WLCs. Very much appreciated if someone could point me to the right information or trouble shooting steps.
View 5 Replies
View Related
May 21, 2013
I have a wireless sytem with a WLC 4400 and several 1522 Access Points. They don't actually function as Access Points because I'm using radio communication only for backhaul. There are no clients connected to the Access Points. All traffic on the network comes from the devices connected on the LANs that are bridged through the APs ethernet port.
I would like to create filters to allow only certain devices to be able to transmit over the radio link. I've used this in the past on 1310 units and it was very easy to do via GUI. This filter could be either by IP or MAC Addresses. IP would be better for me.
View 1 Replies
View Related
Jul 23, 2012
I have a Cisco Series 4400 WLAN controller and I'm trying to connect a lightweight AP to the controller. I have already assigned the switch port to use my wi-fi VLAN, and have connected the AP to the switch. After a few minutes, the light on the AP goes from green to light blue (indicating it's serving clients). When I log into he wi-fi controller to look for the Ethernet mac address of the new AP, I do not see its Mac Address. I want to be able to rename the AP to reflect where it will be used, but need to select the AP via its Ethernet mac address before I can make any edits like changing its name etc. I've gone through the "monitoring" menu, selected "All" and still do not see it in their via its MAC address. I also will select the "wireless menu" which lists all the AP's on my network, listing in order from on the longest running, to just powered on.Is there something I'm missing like a "re-scan" that scan's all devices?
View 5 Replies
View Related
Feb 11, 2013
I have a WLC 4400 with multiple LAP.I have a small area with 30 wireless devices. I want to install 2 APs, to make sure that all wireless devices have a connection to the wireless network and have proper bandwidth. The issue is that the APs will be near each other. Will the APs interfere with each other and will each AP receive an equal amount of connections?
View 3 Replies
View Related
Jan 8, 2013
We use Cisco 4400 Series Controller and Cisco Aironet 1142 Wireless-N Access points andwe use windows 2008 Active Directory and also as our Radius server. We have XP as a client. The Laptops were connecting automatically into the wireless network once they are joined to the domain and adding the laptop to the wireless security group in the AD. All of sudden all the 20 laptops got disconnected from our wireless network.The Laptops can detect our wireless network. But on the system tray the pop says: Windows was unable to log you on to the network MATS. (MATS is our SSID)
View 1 Replies
View Related
Jan 21, 2013
I am planning to buy new AP for my existing setup. we are using 1131AG series AP, we need to go for new one with n supported with external antenna.
Current software version on controller is : 7.0.235.3
View 8 Replies
View Related
Jul 22, 2006
If already saved the configuration file of a WLC 4400 to a server using TFTP? What is the name of the configuration file?
View 2 Replies
View Related
May 19, 2013
I'm looking for a document that states the best practices for WLC configurations (Management/Security/AP's..etc). I can currently only find the following document:URL
But this document has last been updated in 2008, in a few days that's almost 5 years ago, and we all know how quickly technology is evolving. 10Gb wireless is around the corner, with 1GB starting to go production now. This document also mentions the 4400 (which is end of life).
View 1 Replies
View Related
Oct 11, 2012
Actually we have a 4402 controller with 1120 APs both of which are marked as EoL products, we want to jump over the new 2600 APs and 5508 Controller for increase signal coverage but we have the following deals:Last firmware for 4402 controller is 7.0.Firmware needed for 5508 to support 2600 APs is 7.3.Is it possible to configure mobility between 4402 and 5508 even with different firmware branch?
View 3 Replies
View Related
Nov 7, 2012
i'm having some trouble pushing CLI templates to controllers in my lab. i get an invalid credentials error but it is random. sometimes i can push the template fine but 30 seconds later if i push the same template it will fail with error. several minutes later try it again and it fails. i have verified the credentials by reconfiguring them consistantly accrosss the devices but if the credentials were actually wrong it should fail every time, not intermittently. there are also 2 controllers i am testing this against and it is also random which controller fails. on the instances where i don't get the credential error my CLI template fully executes without error.
i am using WCS 7.0.230.0 on WIN2K and two 4400 controllers running 7.0.230.0.both controllers are configured with SNMPv3 and SSH. telnet and lower versions of SNMP are disabled.
View 1 Replies
View Related
May 4, 2013
I want to upgrade software of the {WISM(Forign controllers 6.0.196) 4400(Anchore controllers 6.0.196) and WCS 5.2.0} to 7.0 code for all,
View 1 Replies
View Related
Aug 12, 2012
We are using Cisco Wireless solution in our network. Using 4400/5500 WLCs and 3500/1130 series APs.
A new requirement has come up and we need to provide connectivity between two buildings (which are within 1 km) using wireless. This link should be able to give >=100Mbps.
As we already have 3500/1130 APs, can a wireless bridge be established using them which can also give >=100Mbps? Can this be done using a WLC based solution? What I mean is: Do I need to have a standalone AP solution or can it be done while both the APs register to WLC? What are the AP models/antennas that can meet my requirement?
View 6 Replies
View Related
Dec 31, 2012
on WLC 4400 Guest vlan is configured with local authentication, the users get disconnected after 10mins were should i disable the option of 10mins restriction
View 3 Replies
View Related
Mar 4, 2012
i have a controller that has mutliple dhcp scopes and should in theory give out close to a thousand plus addresses. But i have seen wireless users not getting addresses once the controller has leased about 490 ip adds. My controller is on 7.XX version.
View 3 Replies
View Related
Aug 2, 2011
I've download a login.html into the controller successfully, but when I preview the page there isn't an accept button. Do I need to create the accept button with the html file or is there some place I need to enable on the controller itself. After download the .tar file I reboot the controller but no luck. I also create a java script button redirect but it didn't redirect to where I needed to go. It just stuck on the splash page.
View 3 Replies
View Related
Dec 22, 2011
We have a several cisco 4400 wireless controllers and a cisco WLC. All clients autheticate to an AAA server. Acces points are cisco LWAP 1242. Security is PEAP TKIP ms-chap. Machine and user authetication. Settings are pushed out through grou policy. A new user can log on to a laptop (without cached credetials) and get all their network settings....most of the time. Randomly we have laptops that after being restarted, recieve "yourdomain.com is not availalbe" error message. The laptops will work fine for weeks and then random laptops start to get this error. If we wire them into the network, run a gpupdate, they logon fine. Shutdown, unplug, and the wireless works fine again.. I am not sure if this is an ms group policy issue or a wireless issue. Any setting change or a gp setting that I may have missed??
Clients are mostly windows 7 some XP Domain Windows 2008r2
ACS 4.2
Group policy settings - wifi config settings enabled and configured correctly Always wait for network enabled.allow fast reconnect disabled (was recommended by a cisco tech) Disabled computer passwords for domain about 2 months ago to see if the computers reseting their passwords were an issue.
View 8 Replies
View Related
Jul 27, 2011
give me the run down on the features removed from the 4400 series in the 2500 series? Obviously 4400 is now EOL, and so i cannot purchase new. Therefore I was looking at the 2500 for my implementation to save costs also.I would like to have two SSID's, running seperate VLAN's, one voice, one guest, trunk the link to the AP's, which will be 1131AG or newer, N possibly. Voice needs to be encrypted with WPA or WPA2, guest needs to be open using the guest access feature. Here's a sample but with EAP:
[URL]
Is this supported to have WPA on one SSID and Guest access on the other? i did spot a paragraph in the 4400 manual stating that certain restrictions apply regarding one SSID having encryption and the other being guest mode?I notice also in the WCS documentation, it doesn't explicitly state it supports the 2500 series under the managed devices section?
View 1 Replies
View Related
