topic Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers in Wireless

Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

ciscomoderator — Mon, 05 Jul 2021 19:03:04 GMT

This topic is a great opportunity to learn more about the network connectivity solutions that Cisco offers during this unprecedented COVID-19 situation in order to enable network connectivity to remote workers. The session describes the available solutions and offers in any market segment or industry that wishes to enable employees to work remotely from home or micro office environments.

The event focuses on Cisco Enterprise solutions and offers that are related to secure remote work and micro office network connectivity. These solutions include Cisco Aironet, Catalyst, and OfficeExtend access points, any virtual or physical controller, and Cisco Wireless LAN Controllers (WLC), among others.
The event also covers Cisco Meraki solutions, such as Meraki MX series SD-WAN and security appliances, Meraki Z series teleworker appliances, Meraki MR series access points, Meraki Insight (MI), and Meraki Systems Manager, among others.

This forum event works well as an introduction for those who are not familiar with the tool and have recently started to use it.

To participate in this event, please use the button below to ask your questions

Ask questions from Wednesday, May 13 to Friday, May 29, 2020

Featured Experts

Karla Cisneros is a Support Product Specialist focused on MR wireless products in Cisco Meraki. She has worked with wireless technology for nearly eight years, five of them as part of the Wireless Technical Assistance Center [TAC] team. She holds a CWNE (#270) and a CCIE Enterprise Wireless (#59822) certification.

Rafael Enriquez is a Technical Consulting Engineer of the Wireless team at the Cisco EMEAR Technical Assistance Center (TAC). He has nine years of experience in IT, six of them with Cisco wireless technologies. He has participated as a speaker in Cisco Live technical solutions clinics (TSC) and other partner sessions. Rafael holds a CCIE Enterprise Wireless certification (#60908).

Jhosbell Verdesca works as a Customer Success Specialist focused on Enterprise Networks, Cisco DNA Center, and SD-Access. Before that, he worked as a Cisco Support Engineer for the Wireless Team at the Cisco Technical Assistance Center (TAC). Before Jhosbell joined Cisco, he worked for three years with a Cisco Gold Partner in Venezuela to implement and support network and security solutions. Jhosbell holds two CCIE certifications, one in Enterprise Infrastructure and one in Enterprise Wireless (#58023).

Due to the anticipated volume for this high in-demand event, Karla, Rafael & Jhosbell might not be able to answer each question. Thus, remember that you can continue the conversation directly in the Other Wireless - Mobility Subjects community.

By posting a question on this event you're giving permission to be translated in all languages we have in the community.

Find further events on https://community.cisco.com/t5/custom/page/page-id/Events?categoryId=technology-support

**Helpful votes Encourage Participation! **
Please be sure to rate the Answers to Questions

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Yanli Sun — Mon, 18 May 2020 07:40:17 GMT

hi, team,

thanks for this session.

This is a question from Chinese community member liu.zhimin, he would like to know, how to get the unified management of AP by enterprise's national branch Cisco WLC.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Jhosbell Verdesca De Aguiar — Mon, 18 May 2020 08:13:18 GMT

Hi Yanli Sun.

We're happy to help.

If I understand correctly, he wants to know how to get APs managed by a centralized Cisco WLC.

If that is correct, below are some guidelines, otherwise please add more details to the question and we'll help you.

First the APs need to discover the WLC, there are multiple methods you can use but these are the two common ones:

Point the Option 43 of the APs DHCP Pool to the WLC management IP Address. (See How to configure DHCP Option 43 )
Configure the DNS Server to map the string cisco-capwap-controller to the WLC management IP Address.

Keep in mind, if you have local internet connections in the branches you may want to use FlexConnect Local Switching, as it avoids overloading the WAN links. The maximum tolerated latency for FlexConnect is 300 ms.

If this was not your question, just let us know and provide more details. Thanks!

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 02:16:22 GMT

Hi everyone, I’ve an Aironet 3502E and an Aironet 1662E, both are directly connected to my internet provider modem, nevertheless; in none of the Aironet I have bene able to have a bandwidth greater than 20 Mbps connected via WIFI.
I have carried out tests with only one of the APs turned on and the result remains the same. The cable connection gives me a bandwidth of 100 Mbps, the connection through the modem’s WIFI gives me a bandwidth between 70 and 90 Mbps

Any idea or example of the required configuration?

Note: This question is a translation of a post originally created in Spanish by jharvao. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Rafael E — Thu, 21 May 2020 19:41:46 GMT

Hello jharvao,

Saw your post also on the Spanish community. Also, reply to that one.

what do you mean with 20 Mbps bandwidth? are you talking about throughput?

If yes, then we need to understand how the test is being done to help you with a better answer, as of now there isn't any good information we can use to tell you whether what you are seeing is a problem or is something expected

Can you help with the following?

how are you performing the throughput test?

what client are you connecting the SSID?

what NIC card? what are the NIC card capabilities? (PHY, spatial streams, band support)

what band are you using to test 2.4Ghz or 5Ghz?

what is the channel utilization that you are using?

what data rate does the client negotiate with the AP?

what is the link quality while performing the test RSSI / SNR?

what AP?

what is the SSID configuration?

On your post, you are talking about 20,70,90 Mbps which one is it if all 3 what is different?

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Modérateur Cisco — Mon, 25 May 2020 21:41:22 GMT

Hello,

I am new to the community, so I hope to be in the right place and not make an odd mistake.

My question is about the recently purchased WAP571-E-K9 v02.
The radio scheduler configuration does not work.

When I create a profile, it is saved correctly. The verification in the exported config.xml file does not show anything abnormal: the profile, called "Active" is well saved. However, when I choose this profile in the configuration of a VAP, it is saved in the form, but when I validate my choices, the field takes the value "None" by default.

I am a little clueless because I do not see anything incorrect in my configuration.

Note: this behavior was already present in version 1.0.1.12 of the Firmware; I updated to the latest version 1.1.0.5 this morning but nothing has changed.

Thank you in advance for your help.

Regards,
Christophe HARO

* Note: This question is a translation of a post originally created in French by ChristopheHARO48083. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 02:16:49 GMT

Hi Good day

Certainty we’re experiencing complicated times due to COVID-19 but I wish all of the community members are doing good.

I would like to ask for your assistance, I would like to connect my new AP 3802 “capwap” (form now renamed as NUEVO) to my current AP 2802 with “ME 8.5.151.0” (from now called VIEJO).

When I connect through my controller the “NUEVO” AP, it discovers the “VIEJO” AP and it tries to JOIN (Join Request sent), however, at some point it shows the following message "The WLC has rejected the join request".

From the MobilityExpress GUI of the “VIJO” AP I can see the “VIEJO” AP but I states "AP having MAC Address ["78:0c:f0:fb:d9:d2"] currently Not Joined with this Controller!!!"

I was reviewing this guide to configure the WLC that allows the JOIN on the “VIEJO” AP, Nevertheless; I not able to find how I can connect to the WLC GUI of my “VIEJO” AP, and I don’t even know what IP does it has.

Do you have a procedure guide/steps that I can follow up to achieve this, or could you please provide me a suggestion?

Thank you very much for your support

Note: This question is a translation of a post originally created in Spanish by Marcelo306. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 02:17:14 GMT

Hi everyone
Thank you so much for this opportunity to share our enquiries with you, we know you’re the best and it’s a privilege to have the opportunity to contact you.

I have a question; I don’t know if you can help me. This topic is not totally related to remote connectivity however; it is related to wireless networks.

I need to implement a 5508 device, it will authenticate against an AD, however; in the conversation I have had with the customer on different occasions I’ve indicated that he needs a RADIUS server so he can interact between the WLC and AD. He insists that another branch has the same wireless solution without such a server.

The AD is in a Windows Server 2012, my suspicious is that the NPS service enabled and at the same time the Controller of the site has been registered and that is why the solution works. I’ve noticed that the customer seems afraid to move some configuration of his own Windows Server.

Previously Rafael has explained me the schema that is needed for such integration; however, given the circumstances, I was wondering if there a type of work around to prevent the customer from moving or adding configuration(s) to his Windows Server and last but not least, I cannot add any kind of RADIUS server since it is not considered in the budget.

From my point of view, this sounds complex, but I don’t know if you have any addition advice.

Note: This question is a translation of a post originally created in Spanish by Daniel Ordóñez Flores. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Jhosbell Verdesca De Aguiar — Thu, 28 May 2020 01:59:25 GMT

Hi Daniel
You can connect the WLC directly with the Active Director (AD) using LDAP.
It’s not as safe, flexible or efficient as RADIUS, but it may probably be the solution that they’re using on the other site.
Have a look to this article, there you can find a detailed integration: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/211277-WLC-with-LDAP-Authentication-Configurati.html
** Please rate helpful posts *

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 02:17:40 GMT

Many thanks! I read the document and the configuration looks quite direct, as you well explain, the issues here could be the credentials and data that the customer provides e to consult the AD.

I’m very grateful, thank you

Greetings

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 02:34:59 GMT

We have a Meraki MR33 that has no longer a valid license, it has not been used for a while.
I’ve seen enterprise licenses, are they compatible with LIC-ENT? That’s the AP that was sold to the customer, but he wants to use it only as a simple AP.
Thus, what kind of license we need to reactivate it? And which one would you rather recommend? What cost would they have? And where can you buy them?

Note: This question is a translation of a post originally created in Spanish by dulfranc1. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

karlcisn — Thu, 28 May 2020 16:51:55 GMT

Hi dulfranc1,

Meraki APs can only operate when associated to a Meraki dashboard and to do so they need to be linked to an enterprise license. All Meraki AP models use the same kind of license, LIC-ENT. The difference is their valid period, which varies from 1 to 10 years:

LIC-ENT-1YR

LIC-ENT-3YR

LIC-ENT-5YR

LIC-ENT-7YR

LIC-ENT-10YR

So you would need to buy one of these. The prices usually go between 100 USD to 1000 USD, depending of the valid period of the license. They all enable the same capabilities on the AP.

You would need to log in back to the network where the AP was originally associated to (assuming it still registered on it) and add the license there.

Regarding where to buy it, you can buy them online. The easiest way would be to use google and type “LIC-ENT buy online” and you will get a lot of different options to buy the license from.

If you have any other question or something is not clear please let me know.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Cisco Moderador — Thu, 28 May 2020 17:42:40 GMT

Hi
I subscribed to a Cisco course because I would like to improve my performance at work. I bought an L3 switch which I’ve configured and handled, nevertheless; I’ve not been able to do “anything” to one Access Point (AP).
We’re talking about a Cisco Aironet 172i, that is an Air-cap1702i-e-k9,

I’ve seen the following:
AP#show flash
Directory of flash:/
2 -rwx 287 Jan 1 1970 00:10:37 +00:00 info
3 -rwx 155 Mar 1 1993 01:02:57 +00:00 env_vars
5 -rwx 1048 Mar 1 1993 00:48:49 +00:00 private-multiple-fs
38 drwx 576 Jan 1 1970 00:10:35 +00:00 rd ap3g2-rcvk9w8-mx
48 drwx 2112 Jan 1 1970 00:16:17 +00:00 ap3g2-k9w7-mx.153-3.JAB
6 -rwx 5 Mar 1 1993 00:48:49 +00:00 config.txt
40900608 bytes total (20682240 bytes free)

I understand that it has both IOS, k9w8 and k9w7, however it always wants to start with the k9w8 and I’ve not been able to delete it or force it to start with the other one
How can I change this AP to Autonomous so that I can learn to configure it without the need of a WLC?

Note: This question is a translation of a post originally created in Spanish by AntJ.Cobos. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Rafael E — Thu, 28 May 2020 18:05:12 GMT

Hello,

We are not really Small business APs experts. I will contact someone from this team so we can guide you further on the question.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Rafael E — Thu, 28 May 2020 18:12:33 GMT

Hello,

For you to change to autonomous code k9w7, you only need to change the boot variable

You can do that following the next commands:

show boot ==> to check current value

debug capwap console cli

config t

boot system flash:/ap3g2-k9w7-mx.153-3.JAB/ap3g2-k9w7-mx.153-3.JAB

end

show boot ==> make sure the value was updated

reload the AP.

That should load the new image. If any problem after the above commands feel free to attach the console output from AP for us to review.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

rajesh.netratrk — Thu, 28 May 2020 18:17:09 GMT

Have two questions:

ISR 1K

We do not have SD-WAN in the environment, can router still be able to perform firewall stack functionality with autonomous configuration using split tunnel to pass over local internet and VPN intranet to DC?

SD WAN

Is there a use case/presentation on converting site by site to SD WAN while running legacy environment in simultaneously in a cost effective manner. Any videos/documentation would be of great help

Thank you-

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Rafael E — Thu, 28 May 2020 18:23:09 GMT

Hello,

So ME is the 2800 AP running 8.5MR5

You are trying to join a 3800 to this ME. what code is this 3800 AP running?

ME does not stores AP images for new joined AP to download, as per memory restrictions, so you need to specify from what TFTP server new AP would retrieve their image.

You can do that on the Upgrade section from the ME.

On the tftp server use the .zip to your tftp root folder and unzip it there. file available in cisco.com

If both APs 2800/3800 are running the same image then can you provide show log from 3800 and show msglog from ME for us to understand further.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

Jhosbell Verdesca De Aguiar — Mon, 01 Jun 2020 10:04:54 GMT

Hi Rajesh.

This event is covering mostly wireless solution. Please post your question in the Routing and SD-WAN communities where experts on that solution will be able to help.

https://community.cisco.com/t5/routing/bd-p/5991-discussions-wan-routing-switching

https://community.cisco.com/t5/sd-wan-and-cloud-networking/bd-p/discussions-sd-wan

Regards.

Re: Community Ask Me Anything – How to Enable Network Connectivity to Remote Workers

jamesboshears73107 — Sat, 27 Jun 2020 20:43:33 GMT

i like know how stop provent microsoft remote desk top, microsoft termal server remote cmd remote power shell from sending comands throw the network. in short disable or give a fake respons, the file attach was used to try to decript the drives, dates on the commands was change, now here odd part only one busenss new about my domains, but they was taken off line befor this os was installed so this os has no information of t hese domains, but they did have a target and was clear what they was after, note information in txt is well u say outdated, heres the prob internet and domains live in two diffrent ip segments, like internet would be on 10,0.,1.2 and domain be on 10.0.2.2 so thtey have bridge two to get to domain, quistion is how stop remote commandes from groing throw the system , u did say ask about anything now i give u a probem that all most impossable to get around, wish u best of luck lol