Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About kuldeep.kaur
05-22-2019
Stats
Member since
05-15-2007
140
Posts
0
Helpful
0
Solutions
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-01-2016
07:15 PM
11-01-2016
07:15 PM
Hi there,
Currently the accounts created using Lobby Admin account has a liftime of 30 days. Is there a way to increase the account lifetime ? Of is there a method to give to the reception an access to create guest accounts without giving full access to the WLC.
Thanks
... View more
05-16-2016
11:27 PM
Hi Guys,
FYI last month I was activating licenses on Unity and ran in problems. When I was entering the PAK information the website was asking for Device UDI and Device serial number. I done a show license UDI and got the following information from the router:
Devices UDI: Cisco2921/FGL1234567
Serial No. FGL1234567
I entered the above info in the website and got the license. But when I try to install it on the device it say something wrong with the file. I assume in Device UDI field I just need to input the serial number FGL1234567 and not the full string Cisco2921/FGL1234567. Opened a case with cisco and they generated a new file with me.
Now my problem is I need to install a security feature license on 1921 router. This router does not have any smartnet on it so don't want to make any mistakes. When I log on to the licenses page on cisco, entered my PAK key and then in Device UDI and Serial No. field, I am putting in serial number of the device and it is giving me an error. Can't remember the error but looks like it does not like the serial number in Device UDI field.
Could you guys please let me know what should I enter in Device UDI field i.e. serial number FGL 1234567 or the full string for example Cisco1921/FGL1234567
Thanks Guys
... View more
Labels:
04-27-2016
01:12 AM
Hi Terry,
Thanks for the reply. Yes it is not a new installation. We have around 120 phones and only 5 or 6 phones are having issues with MWI light being on.
Tried mwi refresh all on CUE but the issue still remians.
Any other suggestions which I can try.
Thanks
... View more
04-26-2016
09:09 PM
Hi Guys,
We have CUE running 7.0. Some of the phones have MWI on on their phones but there are no messages in their mailbox. I have checked via cli on CUE and can confirm there was no new messages for the phones which have MWI on.
I have dialed the mwi off number on the phone but that did not resolved the issue. We have also tried to delete and create mailboxes but still no success.
could someone please let me know what else can I do to troubleshoot this issue.
Thanks Guys
... View more
Labels:
02-22-2016
05:34 PM
Hi Guys,
Below are the logs from the ASA. Thanks
Feb 17 21:28:21.582: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:28:21.582: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1 *Feb 17 21:28:21.582: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Feb 17 21:28:21.582: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:28:21.582: ISAKMP:(0):Sending an IKE IPv4 Packet.10. *Feb 17 21:28:30.770: ISAKMP:(0):purging node 1225394322 *Feb 17 21:28:30.770: ISAKMP:(0):purging node -364328210 *Feb 17 21:28:31.582: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:28:31.582: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1 *Feb 17 21:28:31.582: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Feb 17 21:28:31.582: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:28:31.582: ISAKMP:(0):Sending an IKE IPv4 Packet. *Feb 17 21:28:40.770: ISAKMP:(0):purging SA., sa=2A9522A8, delme=2A9522A8 *Feb 17 21:28:41.582: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:28:41.582: ISAKMP:(0):peer does not do paranoid keepalives.
*Feb 17 21:28:41.582: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 68.208.240.80) *Feb 17 21:28:41.582: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 68.208.240.80) *Feb 17 21:28:41.582: ISAKMP: Unlocking peer struct 0x2B7E7A20 for isadb_mark_sa_deleted(), count 0 *Feb 17 21:28:41.582: ISAKMP: Deleting peer node by peer_reap for 68.208.240.80: 2B7E7A20 *Feb 17 21:28:41.582: ISAKMP:(0):deleting node -2073049274 error FALSE reason "IKE deleted" *Feb 17 21:28:41.582: ISAKMP:(0):deleting node -2096190670 error FALSE reason "IKE deleted" *Feb 17 21:28:41.582: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL *Feb 17 21:28:41.582: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA *Feb 17 21:28:41.810: ISAKMP:(0): SA request profile is (NULL) *Feb 17 21:28:41.810: ISAKMP: Created a peer struct for 68.208.240.80, peer port 500 *Feb 17 21:28:41.810: ISAKMP: New peer created peer = 0x2B7E7A20 peer_handle = 0x80002183 *Feb 17 21:28:41.810: ISAKMP: Locking peer struct 0x2B7E7A20, refcount 1 for isakmp_initiator *Feb 17 21:28:41.810: ISAKMP: local port 500, remote port 500 *Feb 17 21:28:41.810: ISAKMP: set new node 0 to QM_IDLE *Feb 17 21:28:41.810: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 2A9522A8 *Feb 17 21:28:41.810: ISAKMP:(0):Can not start Aggressive mode, trying Main mode. *Feb 17 21:28:41.810: ISAKMP:(0):found peer pre-shared key matching 68.208.240.80 *Feb 17 21:28:41.810: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID *Feb 17 21:28:41.810: ISAKMP:(0): constructed NAT-T vendor-07 ID *Feb 17 21:28:41.810: ISAKMP:(0): constructed NAT-T vendor-03 ID *Feb 17 21:28:41.810: ISAKMP:(0): constructed NAT-T vendor-02 ID *Feb 17 21:28:41.810: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM *Feb 17 21:28:41.810: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
*Feb 17 21:28:41.810: ISAKMP:(0): beginning Main Mode exchange *Feb 17 21:28:41.810: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:28:41.810: ISAKMP:(0):Sending an IKE IPv4 Packet. *Feb 17 21:28:51.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:28:51.810: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1 *Feb 17 21:28:51.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Feb 17 21:28:51.810: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:28:51.810: ISAKMP:(0):Sending an IKE IPv4 Packet. *Feb 17 21:29:01.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:29:01.810: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1 *Feb 17 21:29:01.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Feb 17 21:29:01.810: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:29:01.810: ISAKMP:(0):Sending an IKE IPv4 Packet. *Feb 17 21:29:11.810: ISAKMP: set new node 0 to QM_IDLE *Feb 17 21:29:11.810: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 10.2.78.2, remote 68.208.240.80) *Feb 17 21:29:11.810: ISAKMP: Error while processing SA request: Failed to initialize SA *Feb 17 21:29:11.810: ISAKMP: Error while processing KMI message 0, error 2. *Feb 17 21:29:11.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Feb 17 21:29:11.810: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1 *Feb 17 21:29:11.810: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Feb 17 21:29:11.810: ISAKMP:(0): sending packet to 68.208.240.80 my_port 500 peer_port 500 (I) MM_NO_STATE *Feb 17 21:29:11.810: ISAKMP:(0):Sending an IKE IPv4 Packet. % Unrecognized host or address, or protocol not running.
... View more
02-22-2016
05:33 PM
Hi Guys,
I have a VPN setup as below. The VPN tunnel starts from the site router goes through the ASA and terminates at Palo Alto at Singapore.
Site Router NZ (VPN )---------------------------DC ASA----------------------------Internet --------------------Singapore Palo Alto (VPN)
On the asa I am doing nat two times. First one from internal address to transit DMZ and then from transit DMZ to the outside interface. I have allowed all the ports going to the ip address of Palo Alto and vice versa.
The tunnel came up fine without any issue. Worked for two weeks and then the site router got rebooted. After that I am not able to get the tunnel up. On Palo Alto we can see the connection request from the site Router but it stops at phase 1. Enclosed are the logs from the router:
Could anyone please let me know why tunnel is not coming up. Is it because of nat being done two times. If nat is the issue how can i fixed this. No other changes has been been on both vpn devices / network.
I know you guys will say why not build the tunnel from asa to singapore, I can't as there are design issues.
Thanks Guys
... View more
Labels:
06-30-2015
10:57 PM
Hi Guys, I have configured anyconnect on my ASA. The client pc is able to connect to the network with anyconnect client gets ip address but cannot ping or access anything. Here is the config: DMZ1664 is outside interface DMZ1070 is inside interface interface GigabitEthernet0/0 nameif DMZ1664 security-level 0 ip address 202.X.X.X 255.255.255.0 ! interface GigabitEthernet0/1 nameif DMZ1070 security-level 80 ip address 10.1.50.8 255.255.255.0 ip local pool JDE_VPN_Users 10.1.30.10-10.1.30.254 mask 255.255.255.0 object network JDE_VPN_Pool subnet 10.1.30.0 255.255.255.0 object-group network JDE_subnets_main network-object 10.0.0.0 255.0.0.0 network-object 172.16.0.0 255.255.0.0 access-list DMZ1070_access_in extended permit ip 10.1.30.0 255.255.255.0 object-group JDE_subnets_main access-list DMZ1070_access_in extended permit ip object-group JDE_subnets_main 10.1.30.0 255.255.255.0 access-list JDE_VPN standard permit 10.0.0.0 255.0.0.0 access-list JDE_VPN standard permit 172.16.0.0 255.240.0.0 access-list Outside_access_in extended permit ip 10.1.30.0 255.255.255.0 any access-list Outside_access_in extended permit icmp any any inactive access-list Outside_nat0_outbound extended permit ip any any access-group Outside_access_in in interface DMZ1664 access-group DMZ1070_access_in in interface DMZ1070 nat (DMZ1070,any) source static JDE_VPN_Pool JDE_VPN_Pool destination static JDE_subnets_main JDE_subnets_main no-proxy-arp nat (any,DMZ1070) source static JDE_subnets_main JDE_subnets_main destination static JDE_VPN_Pool JDE_VPN_Pool no-proxy-arp route DMZ1664 0.0.0.0 0.0.0.0 202.129.X.X route DMZ1070 10.0.0.0 255.0.0.0 10.1.50.1 1 webvpn enable DMZ1664 anyconnect-essentials anyconnect image disk0:/anyconnect-win-3.1.08009-k9.pkg 1 anyconnect image disk0:/anyconnect-linux-3.1.08009-k9.pkg 2 anyconnect image disk0:/anyconnect-macosx-i386-3.1.08009-k9.pkg 3 anyconnect enable tunnel-group-list enable group-policy DfltGrpPolicy attributes vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-clientless group-policy GroupPolicy_JDE_VPN internal group-policy GroupPolicy_JDE_VPN attributes wins-server none dns-server value 10.1.8.1 10.1.8.2 vpn-tunnel-protocol ikev2 ssl-client split-tunnel-policy tunnelspecified ipv6-split-tunnel-policy excludespecified split-tunnel-network-list value JDE_VPN default-domain value jdeglobal.com split-dns value jdeglobal.com username admin password TOyVyM6G6TXcuQ5w encrypted tunnel-group VPNUsers type remote-access tunnel-group JDE_VPN type remote-access tunnel-group JDE_VPN general-attributes address-pool (DMZ1070) JDE_VPN_Users address-pool JDE_VPN_Users authentication-server-group JDE-Radius default-group-policy GroupPolicy_JDE_VPN tunnel-group JDE_VPN webvpn-attributes group-alias JDE_VPN enable # show run all sysopt no sysopt connection timewait sysopt connection tcpmss 1380 sysopt connection tcpmss minimum 0 sysopt connection permit-vpn sysopt connection reclassify-vpn no sysopt connection preserve-vpn-flows no sysopt radius ignore-secret no sysopt noproxyarp DMZ1664 no sysopt noproxyarp DMZ1070 no sysopt noproxyarp mgmt Could someone please check the above config and let me know what the mistake is ? Also do I need nat as I only want to access the internal network which is 10.0.0.0/8. Thanks guys
... View more
Labels:
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-01-2015
06:01 PM
06-01-2015
06:01 PM
Hi Guys, If I want my access points to discover wlc using dns, do I need to define the domain name on the wlc (I cannot find the option to define this however i have already specified this in the dhcp server option 15 FYI in our environment we have shared lan with other companies which also has their wlc on the lan. We dont want our access points to join other WLC. Thanks
... View more
Labels:
06-01-2015
05:53 PM
Hi Guys, If I have different models of access points says 1000 and 2000 series and if I want to use option 43, do i need to define them separately (I gone through the dhcp doc from cisco and looks like yes i have to as they have different values). Could someone please confirm ? Thanks
... View more
Labels:
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-28-2015
05:08 PM
05-28-2015
05:08 PM
Hi Guys, I have the same problem again which I thought was solved. My PC wireless adaptor not able to get ip address from the switch which is a dhcp server. My setup is like this: WLC5508 ---> 3750 (DHCP Server) ----> 3560 ---> Access Point My pc wireless adaptor is connect to the WLAN but not able to get ip address. When I also connect my pc with a ethernet cable to the 3750 swtich my pc is able to get the address. Can someone please help me out again. Enclosed is the config of the dynamic interface. I have tried configuring ip address of the switch on the WLC but still no success. Thanks
... View more
Labels:
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-27-2015
04:03 PM
05-27-2015
04:03 PM
Thanks Rasika for the reply. I will try it tomorrow and will post the results. One question the dummy native vlan does it needs to be on all the links going between the switches and upto the WLC ? Also on the switch where AP is connected, do I need to create a layer 3 interface for this native vlan or not ? Thanks very much for your help.
... View more
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-26-2015
11:29 PM
05-26-2015
11:29 PM
Hi Guys, Need you help to configure Flex connect. Not able to find any document which can describe this feature in full. Basically my setup is as below 5508 --> 3750 --> 3560 --> Access Point Few questions : I have vlan 400 as management vlan on my switches can I use this vlan as a native vlan between the trunk connections from WLC through to 3560 ? As soon as I change my access point port to trunk with native vlan configured the ap gets disconnected ? Why is that ? Even if I dont use native vlan and just use trunk the AP gets disconnected. I am running version 8 on wlc and there is no option to define native vlan under WLC Flexconnect tab. Do I need to enable anything else for this ? Could someone please help me out. Thanks
... View more
Labels:
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-26-2015
10:40 PM
05-26-2015
10:40 PM
Thank you very much Leo. Somone has put in a wrong DHCP server address on the WLC. Before it was blank. Thanks again
... View more
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-26-2015
09:42 PM
05-26-2015
09:42 PM
More info on this guys. I am using open authentication and I have assigned ip address statically to the wireless adaptor and it is working. I can even ping other subnet on the switches. Just not able to get DHCP via wireless. Any clue guys ? Thanks
... View more
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
05-26-2015
09:30 PM
05-26-2015
09:30 PM
Hi Guys, I just tired with open authentication under L2 and L3 on WLC, as well as on my network adaptor. It connects but not able to get ip address and says limited connection. Anything I need on the switches ?. I have tired wired connection to both switches and the pc is picking up the ip address but not on wireless. Thanks
... View more
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
11-01-2016
11-01-2016
Hi there, Currently the accounts created using Lobby Admin account has a
liftime of 30 days. Is ther...
05-16-2016
Hi Guys, FYI last month I was activating licenses on Unity and ran in
problems. When I was entering ...
04-27-2016
Hi Terry, Thanks for the reply. Yes it is not a new installation. We
have around 120 phones and only...
04-26-2016
Hi Guys, We have CUE running 7.0. Some of the phones have MWI on on
their phones but there are no me...
02-22-2016
Hi Guys, Below are the logs from the ASA. Thanks Feb 17 21:28:21.582:
ISAKMP:(0): retransmitting pha...
02-22-2016
Hi Guys, I have a VPN setup as below. The VPN tunnel starts from the
site router goes through the AS...
06-30-2015
Hi Guys, I have configured anyconnect on my ASA. The client pc is able
to connect to the network wit...
06-01-2015
Hi Guys, If I want my access points to discover wlc using dns, do I need
to define the domain name o...
06-01-2015
Hi Guys, If I have different models of access points says 1000 and 2000
series and if I want to use ...
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
05-28-2015
05-28-2015
Hi Guys, I have the same problem again which I thought was solved. My PC
wireless adaptor not able t...
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
05-27-2015
05-27-2015
Thanks Rasika for the reply. I will try it tomorrow and will post the
results. One question the dumm...
05-26-2015
Hi Guys, Need you help to configure Flex connect. Not able to find any
document which can describe t...
05-26-2015
Thank you very much Leo. Somone has put in a wrong DHCP server address
on the WLC. Before it was bla...
Created by
kuldeep.kaur
in Other Wireless - Mobility Subjects
05-26-2015
05-26-2015
More info on this guys. I am using open authentication and I have
assigned ip address statically to ...
Public Statistics
| Date Registered | 05-15-2007 03:04 PM |
| Date Last Visited | 05-22-2019 12:07 AM |
| Total Messages Posted | 140 |
.jpg "Hall of Fame Guru"){kind=icon}
