I have several 3802E and 3802P access points with the extra antenna adapter so I can run dual A band.  My goal of this is purely for density of users so the antennas point at the same coverage area.  My challenge is they don't do a good job of load balancing. I can have one antenna with 150 clients running at 70% channel utilization and the other with 3 clients at 10% utilization...   I try to avoid using aggressive load balancing because I am not convinced it doesn't create more problems then it solves.  I have manually set power levels so the two antennas match for their power (the channel will differ for power level).   Is there any best practice that people are following to get a better load balance for this situation?  my goal is to have the channel utilization stay within a good level and typically that is directly proportional to the number of clients it is serving.     Thank you, Alex.  ... View more

All of our phones are Cisco with the exception of one team that have polycom vvx-310 phones setup as 3rd party Advanced SIP phones in our CUCM.   They have shared lines and the problem is when one person puts a call on hold, other's cannot pick up the call   What I have noticed is when one person answers a line, the other phones do not show that line as busy.  I think that because the sets are not aware of the other sets they cannot pick up a call on hold...   Can anyone provide me some guidance?   Thank you, Alex.     ... View more

Hi everyone,   On a multi-line phone, is there a way to have the line only answer line one when the handset is lifted?    As an example, if line 2 is ringing, and the handset is lifted, I want line 2 to keep ringing.  The only way that set can answer line 2 is by pressing the line 2 button.   I am working with CUCM version 12 and have cisco 7841 IP phones.   Thank you, Alex.     ... View more

Hi There,   On one of my WLANs on my 5520 WLC's that is meant for public access I get some clients that are getting excluded due to 802.1x authentication failure.   The WLAN is configured using a WPA2 PSK and not 802.1x.   I have client exclusion enabled after 3 failed attempts with a 60 second timeout.  I keep this enabled for security (DOS attack)     We are a public facility and some people who come that have corporate devices seem to always be getting excluded due to 802.1x auth failures.   What is the best work around for this?     Thank you, Alex. ... View more

I'm trying to set one vlan as isolated ports on my edge switches for peer to peer security and where I have trouble is setting up the mapping for the uplink. On the network side, I have vlan 200 with a dhcp server, firewall etc.  I will use 1200 as the isolated vlan,   On the uplink I need vlans 10,20,30 so I need to keep the uplink in trunk mode and not private-vlan promiscuous.    I am a bit lost as how I do the mapping with keeping my uplink as a standard trunk port...  I have tried on the vlan interface but that did not work.         Here is a short version of what I am programming.   Primary Vlan = 200 Isolated Vlan = 1200   vlan 200 private-vlan primary private-vlan association 1200   vlan 1200 private-vlan isolated   interface GigabitEthernet1/0/7 switchport private-vlan host-association 200 1200 switchport mode private-vlan host spanning-tree portfast  spanning-tree bpduguard enable   interface GigabitEthernet1/0/24 switchport trunk allowed vlan 10,20,30,200 switchport mode trunk switchport nonegotiate ip arp inspection trust load-interval 30 ip dhcp snooping trust   interface Vlan200 no ip address private-vlan mapping 1200         Any help would be wonderful   Thank you, Alex.   ... View more

Hi There,   I would like to implement some private vlans as isolated ports at some areas in my network with 2960X switches.   According to the 2960-x datasheet, the switches support private-vlans as one of their features https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-2960-x-series-switches/datasheet_c78-728232.html   ●    Private VLANs  that restrict traffic between hosts in a common segment by segregating traffic at Layer 2, turning a broadcast segment into a nonbroadcast multiaccess-like segment. This feature is supported on both 2960-X and 2960-XR Series and is available in both LAN Base and IP Lite feature sets.     According to the Configuration guide for version 15.2.2 it is not supported https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_2_e/consolidated_guide/configuration_guide/b_1522e_consolidated_2960x_cg/b_consolidated_152ex_2960-X_cg_chapter_0111011.html Private VLANs are not supported on the  switch .     Can anyone give some insight as to if this will change or not or what you would recommend as a similar setup???   Thank you, Alex. ... View more

Does anyone know of a tool to test multiple AP's from one location? I am trying to do proactive trouble detection. There are hundreds of AP's in the facility I am running that are mostly in big auditoriums so testing one AP at a time is very labor intensive. I'm wanting to do iPerf tests where I can place a laptop or device at one location, and it will sense all the AP's within range, then start testing one by one and spit out a report after so I can tell if one or more of the AP's is not working correctly. The tools I have seen don't seem to automatically crawl from AP to AP. Thanks Alex. . ... View more

Hi there, I seem to have several outdoor AP's (AIR-CAP1552E-A-K9) that report in Prime Infrastructure to have a lot of clients yet when I check on the AP's directly they is very few.  It appears as though Prime is not releasing the data.  In one case it shows 150 5gig clients yet the AP only has 2 currently attached...  I have rebooted the AP and you see the stats in prime show an overall drop of 150 clients then it jumps right back up.   Is this a bug?  I have been running the same code for a while and haven't seen this so I am wondering if it is just the database that is getting corrupt... Has anyone else seen this before? Thanks Alex. ... View more

Hello, I run large auditoriums and I am trying to clear the 2.4ghz spectrum for audience response systems that run on Bluetooth. For the WIFI, we run everything at 5ghz and only a few AP's with 2.4ghz since most clients nowadays support 5 gig.  The area that I am working with as over 75 3502p acess points with panel antennas.  I have shut down most of the 2.4gig radios by doing an admin disable however I can still see all of the access points as neighbors and the rx level when looking that the AP monitor or in Prime Infrastructure.  This leads me to believe that the 2.4ghz radio is still on and radiating however it is not broadcasting any SSID's My question is the following Does doing an "Admin Disable" on the 2,4gig radio actually shut down the radio (If so why can I still see them all after) Does the Admin Disable actually clear up spectrum and if so how much  Is there any better ways to clear up the 2.4 gig spectrum Thank you in advance, Alex. ... View more