Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About pjiracek
Stats
Member since
11-03-2005
59
Posts
15
Helpful
0
Solutions
Created by
pjiracek
in Wireless Security and Network Management
in Wireless Security and Network Management
06-07-2016
01:41 AM
06-07-2016
01:41 AM
Hi there,
On ISE 2.0 I have wireless authentication policy which assigns devices in Blacklist identity group this authorization profile:
Access Type = ACCESS_ACCEPT cisco-av-pair = url-redirect-acl=BLACKHOLE cisco-av-pair = url-redirect=https://ip:port/blacklistportal/gateway?portal=9a9d1710-1400-11e5-bea4-005056bf01c9
There is BLACKHOLE ACL on the WLC allowing access to DNS and ISE only.
Now, the client in Blacklist group hits the rule (I can see it in Radius Livelog) but is not redirected and continues having access to the whole network.
If I troubleshoot the endpoint, I can see it resolves correctly the i p:port in the redirect URL (x.x.x.x:8444) and creates Airespace-ACL-Name = BLACKHOLE but somehow doesn't apply them. The URL https://x.x.x.x:8444/blacklistportal/gateway?portal=9a9d1710-1400-11e5-bea4-005056bf01c9 is set up on the ISE as Blacklist portal and is fine.
What is going on?
I have a similar redirect for Guest access and it works OK.
Many thanks
Pavel
... View more
03-03-2016
01:15 AM
Hi there,
I have a c7821 phone in CUCM 10.5.2, when registered internally it's working fine.
When I register it over the Internet via Expressway 8.5 and login in (like a Jabber client), I get this annoying issue: I can receive calls OK. But when I call out, I have to send the number as a whole to get through: press Cancel on the device and New Call, enter the number and press Call. If I dial normally, I get "the number you have called cannot be completed as dialled ..."
There is some timing issue somewhere, any help would be greatly appreciated.
Many thanks
... View more
Labels:
07-01-2015
01:56 AM
It looks like I've found the way to the embedded AP. I can reverse telnet to it using any router interface IP port 2002. telnet 10.150.1.1 2002 Trying 10.150.1.1, 2002 ... Open Authorized Access Only! User Access Verification Username: admin Password: xxx Login: admin Password: xxx ap# ap# ap#? configure Configuration method debug Debugging functions (see also 'undebug') no Disable debugging functions password New password (SPACE and TAB are not supported) ping Send echo messages show Show running system information terminal Set terminal line parameters undebug Disable debugging functions (see also 'debug') ap#
... View more
06-29-2015
07:03 AM
OK, I now have a stable IOS Version 15.4(3)M1 There are no crashes any more, but still no wlan-ap0 interface and no service-module command. I've attached start-up output.
... View more
06-24-2015
01:00 AM
Yes, the router crashes after every reboot but when the config is bypassed and then loaded all works OK. I'll try to install an M train IOS and see. Thanks for your help.
... View more
06-23-2015
08:03 AM
I'm not able to get an M train IOS now. Here is the flash content: dir Directory of flash:/ 2 -rwx 26217 May 14 2015 13:45:57 +00:00 ap860vae.conf 3 -rwx 248167 May 15 2015 10:04:46 +00:00 crashinfo_20150515-100446-UTC 4 -rwx 3111 Dec 10 2014 21:21:35 +00:00 cpconfig-86xW.cfg 5 -rwx 840 Jun 23 2015 11:49:01 +00:00 vlan.dat 6 drwx 576 May 14 2015 11:19:20 +00:00 ccpexp 247 -rwx 2885 May 14 2015 11:25:26 +00:00 home.shtml 248 -rwx 81309 Apr 2 2015 11:48:19 +00:00 vdsllog.bin 249 -rwx 45919384 May 12 2015 11:18:09 +00:00 c860vaew-advsecurityk9-mz.SPA.155-2.T.bin 250 -rwx 6184960 May 14 2015 11:18:53 +00:00 ccpexpressAdmin_3_1_en.tar 471 -rwx 14363 May 14 2015 14:16:14 +00:00 ccpExpress_ap_express-security_en.shtml.gz 472 -rwx 209159 May 15 2015 10:11:20 +00:00 crashinfo_20150515-101120-UTC 473 -rwx 214836 May 15 2015 10:17:52 +00:00 crashinfo_20150515-101752-UTC 474 -rwx 242342 Jun 9 2015 10:57:20 +00:00 crashinfo_20150609-105720-UTC 475 -rwx 216024 Jun 9 2015 11:03:51 +00:00 crashinfo_20150609-110351-UTC 476 -rwx 216505 Jun 10 2015 10:08:13 +00:00 crashinfo_20150610-100813-UTC 477 -rwx 7370 Jun 15 2015 08:57:09 +00:00 CCP_backup 478 -rwx 237968 Jun 22 2015 13:21:07 +00:00 crashinfo_20150622-132107-PCTime 479 -rwx 230517 Jun 22 2015 13:27:39 +00:00 crashinfo_20150622-132739-PCTime 480 -rwx 210296 Jun 22 2015 13:34:12 +00:00 crashinfo_20150622-133412-PCTime 481 -rwx 203548 Jun 22 2015 13:40:46 +00:00 crashinfo_20150622-134046-PCTime 482 -rwx 203211 Jun 22 2015 13:47:19 +00:00 crashinfo_20150622-134719-PCTime 483 -rwx 216558 Jun 22 2015 13:53:53 +00:00 crashinfo_20150622-135353-PCTime 484 -rwx 228504 Jun 22 2015 14:00:27 +00:00 crashinfo_20150622-140027-PCTime 485 -rwx 201787 Jun 22 2015 14:10:30 +00:00 crashinfo_20150622-141030-PCTime 486 -rwx 210490 Jun 22 2015 14:17:25 +00:00 crashinfo_20150622-141725-PCTime
... View more
06-23-2015
01:03 AM
I recalled why the conf register was set up to skip the config: It didn't boot with the configuration, I got "Bus error" and system crash: Interrupt exception, CPU signal 10, PC = 0x82E25AF0 -------------------------------------------------------------------- Possible software fault. Please collect crashinfo, "show tech" and contact Cisco Technical Support. -------------------------------------------------------------------- -Traceback= 0x82E257F0z 0x82E09880z 0x82E09AE4z 0x826489F0z 0x82650E90z 0x82654B5Cz 0x826550E8z 0x82D38688z 0x82D31834z 0x82D28C08z 0x82D36E4Cz 0x82D370A8z 0x82D37140z 0x825FBB5Cz 0x826141C4z 0x844B3470z $0 : 00000000 00000000, AT : 00000000 874D0000, v0 : 00000000 00000001, v1 : 00000000 00000000 a0 : 00000000 00000002, a1 : 00000000 865045E3, a2 : 00000000 00000000, a3 : 00000000 D0168C20 t0 : 00000000 D0168D10, t1 : 00000000 87722120, t2 : 00000000 00000000, t3 : 00000000 00000001 t4 : 00000000 00000000, t5 : 00000000 000004EC, t6 : 00000000 0000005C, t7 : 00000000 000007DF s0 : 00000000 01000001, s1 : 00000000 D0168D10, s2 : 00000000 D0168C20, s3 : 00000000 00000001 s4 : 00000000 D0168C60, s5 : 00000000 00000001, s6 : 00000000 D0168C58, s7 : 00000000 00000037 t8 : 00000000 00000054, t9 : 00000000 80A41734, k0 : 00000000 00000300, k1 : 00000000 AC0199D4 gp : 00000000 874D58A0, sp : 00000000 D0168C10, s8 : 00000000 874D0000, ra : 00000000 82E25ADC EPC : 82E25AF0, ErrorEPC : 80876594, SREG : 00000000 MDLO : 00088E5D, MDHI : 000009A3, BadVaddr : 01000009 TEXT_START : 0x80800C7C DATA_START : 0x8536C300 Cause 00000000 (Code 0x0): Interrupt exception When booted without the config, copy startup running restores the configuration OK.
... View more
06-23-2015
12:50 AM
I bypassed the startup-config when I rebooted the router. Here is sh vers: sh vers Cisco IOS Software, C860 Software (C860VAEW-ADVSECURITYK9-M), Version 15.5(2)T, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Wed 25-Mar-15 20:02 by prod_rel_team ROM: System Bootstrap, Version 15.3(3r)M1, RELEASE SOFTWARE (fc1) shop-867-01 uptime is 18 hours, 26 minutes System returned to ROM by bus error at PC 0x82E29270, address 0x1000009 at 14:17:25 PCTime Mon Jun 22 2015 System image file is "flash:c860vaew-advsecurityk9-mz.SPA.155-2.T.bin" Last reload type: Normal Reload Last reload reason: Reload Command This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco C867VAE-W-E-K9 (revision 1.0) with 385024K/32768K bytes of memory. Processor board ID GMK18160096 1 DSL controller 1 Ethernet interface 3 FastEthernet interfaces 4 Gigabit Ethernet interfaces 1 ATM interface 1 terminal line 1 Virtual Private Network (VPN) Module 255K bytes of non-volatile configuration memory. 131072K bytes system flash allocated Configuration register is 0x2142 (will be 0x2102 at next reload)
... View more
06-22-2015
06:52 AM
I managed to get the boot output: C860VAEW advanced k9 platform with 512 MB of main memory Readonly ROMMON initialized ... Building directory. Operation may take a while. Hitting Control+C during operation will require router reset. Booting flash:/c860vaew-advsecurityk9-mz.SPA.155-2.T.bin IOS Image Load Test ___________________ Digitally Signed Production Software boot: Launch entrypt: 0x80800000 Self decompressing the image : ######################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### [OK] Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco IOS Software, C860 Software (C860VAEW-ADVSECURITYK9-M), Version 15.5(2)T, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Wed 25-Mar-15 20:02 by prod_rel_team flashfs[6]: 468 files, 18 directories flashfs[6]: 0 orphaned files, 0 orphaned directories flashfs[6]: Total bytes: 129282048 flashfs[6]: Bytes used: 62201856 flashfs[6]: Bytes available: 67080192 flashfs[6]: flashfs fsck took 58 seconds. flashfs[6]: Initialization complete. This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Cisco C867VAE-W-E-K9 (revision 1.0) with 385024K/32768K bytes of memory. Processor board ID GMK18160096 1 DSL controller 1 Ethernet interface 3 FastEthernet interfaces 4 Gigabit Ethernet interfaces 1 ATM interface 1 terminal line 1 Virtual Private Network (VPN) Module 255K bytes of non-volatile configuration memory. 131072K bytes system flash allocated --- System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: no Press RETURN to get started! *Jun 22 14:24:41.207: PIM: BFD initialization failed *Jun 22 14:24:43.803: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized *Jun 22 14:24:43.807: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled *Jun 22 14:24:55.315: %LINK-3-UPDOWN: Interface Ethernet0, changed state to down *Jun 22 14:24:55.315: %LINK-3-UPDOWN: Interface ATM0, changed state to down *Jun 22 14:24:55.315: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up *Jun 22 14:24:55.315: %LINK-3-UPDOWN: Interface GigabitEthernet2, changed state to down *Jun 22 14:24:55.315: %LINEPROTO-5-UPDOWN: Line protocol on Interface Onboard VPN, changed state to up *Jun 22 14:24:55.775: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down *Jun 22 14:24:56.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0, changed state to down *Jun 22 14:24:56.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to down *Jun 22 14:24:56.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2, changed state to down *Jun 22 14:25:00.379: %SYS-6-STARTUP_CONFIG_IGNORED: System startup configuration is ignored based on the configuration register setting. *Jun 22 14:25:09.547: %LINK-5-CHANGED: Interface GigabitEthernet2, changed state to administratively down *Jun 22 14:25:10.543: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C860 Software (C860VAEW-ADVSECURITYK9-M), Version 15.5(2)T, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Wed 25-Mar-15 20:02 by prod_rel_team *Jun 22 14:25:10.579: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF *Jun 22 14:25:10.891: %LINK-5-CHANGED: Interface ATM0, changed state to administratively down *Jun 22 14:25:10.891: %LINK-5-CHANGED: Interface Ethernet0, changed state to administratively down *Jun 22 14:25:10.923: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to down *Jun 22 14:25:10.939: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to down *Jun 22 14:25:10.951: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to up *Jun 22 14:25:10.959: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down *Jun 22 14:25:10.967: %LINK-3-UPDOWN: Interface GigabitEthernet1, changed state to down *Jun 22 14:25:11.127: %SYS-6-BOOTTIME: Time taken to reboot after reload = 458 seconds *Jun 22 14:25:11.923: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down *Jun 22 14:25:11.939: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to up *Jun 22 14:25:11.951: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to up *Jun 22 14:25:11.959: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down *Jun 22 14:25:11.967: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to down *Jun 22 14:25:11.979: %LINEPROTO-5-UPDOWN: Line protocol on Interface Wlan-GigabitEthernet0, changed state to up *Jun 22 14:25:12.947: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to up *Jun 22 14:25:25.559: %Boot second firmware with embedded binary. *Jun 22 14:25:25.823: %Boot second core firmware *Jun 22 14:25:40.335: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up *Jun 22 14:25:42.407: %CONTROLLER-5-UPDOWN: Controller VDSL 0, changed state to administratively down Router>ena Router#sh ip int brief Interface IP-Address OK? Method Status Protocol ATM0 unassigned YES unset administratively down down Ethernet0 unassigned YES unset administratively down down FastEthernet0 unassigned YES unset down down FastEthernet1 unassigned YES unset up up FastEthernet2 unassigned YES unset up up GigabitEthernet0 unassigned YES unset down down GigabitEthernet1 unassigned YES unset down down GigabitEthernet2 unassigned YES unset administratively down down Vlan1 unassigned YES unset up up Wlan-GigabitEthernet0 unassigned YES unset up up
... View more
06-22-2015
03:21 AM
Hi Leo, Thanks for your help. I cannot reboot the router at the moment since it's in production and also at remote site. Are you thinking of a hardware issue?
... View more
06-22-2015
03:02 AM
sh invent NAME: "C867VAE-W-E-K9", DESCR: "C867VAE-W-E-K9 chassis, Hw Serial#: GMK18160096, Hw Revision: 1.0" PID: C867VAE-W-E-K9 , VID: V01 , SN: GMK18160096
... View more
Created by
pjiracek
in Wireless and Mobility
in Wireless and Mobility
06-22-2015
02:07 AM
06-22-2015
02:07 AM
Hi there, I have a router 867vae-w-e-k9 which is supposed to include the embedded AP but the interface wlan-ap0 is missing and in CLI service-module wlan-ap0 command is not recognised, so I cannot set up the wireless. The interface Wlan-GigabitEthernet0 is listed. Any ideas? Thanks
... View more
Labels:
Created by
pjiracek
in IP Telephony and Phones
in IP Telephony and Phones
11-28-2012
06:09 AM
11-28-2012
06:09 AM
Thanks. I've fixed the problem by checking the following 2 (seemingly contradictory) options on the SIP trunk between CUCM and the CUBE: 1. Disable Early Media on 180 2. Send PRACK if 1xx contains SDP No delay any more for outbound calls, but why these settings work I don't know.
... View more
Created by
pjiracek
in IP Telephony and Phones
in IP Telephony and Phones
11-27-2012
08:56 AM
11-27-2012
08:56 AM
Hi there, We have Cucm 8.5 over several sites using local gateways to PSTN calls. On a gateway connected to CUCM over a SIP trunk and then connected to provider through another SIP trunk, we get an initial delay of 0.5 - 2s on an outbound call (usually initial "Hello?" is missed or first few words of a recorded message). Then the call proceeds without any problems - no delay, no drop offs. At sites where we have a gateway connected to CUCM via H.323 and then ISDN link to PSTN, or QSIG to a legacy PBX, this delay doesn't happen. I've tried to check "Disable early media on 180" for the internal SIP trunk profile, which I think helped a bit, but there is still a short delay. Any thoughts? Thanks
... View more
Labels:
06-07-2016
Hi there, On ISE 2.0 I have wireless authentication policy which assigns
devices in Blacklist identi...
03-03-2016
Hi there, I have a c7821 phone in CUCM 10.5.2, when registered
internally it's working fine. When I ...
09-22-2015
Hi Jonathan,Thanks for the response.There is no Maximum Session Bit Rate
for Video Calls between reg...
09-21-2015
Hi,I don't seem to be able to make video calls with either Jabber for
Windows (v.11.0.1) or Jabber f...
07-01-2015
It looks like I've found the way to the embedded AP. I can reverse
telnet to it using any router int...
06-29-2015
OK, I now have a stable IOS Version 15.4(3)M1There are no crashes any
more, but still no wlan-ap0 in...
06-24-2015
Yes, the router crashes after every reboot but when the config is
bypassed and then loaded all works...
06-23-2015
I'm not able to get an M train IOS now. Here is the flash
content:dirDirectory of flash:/ 2 -rwx 262...
06-23-2015
I recalled why the conf register was set up to skip the config:It didn't
boot with the configuration...
06-23-2015
I bypassed the startup-config when I rebooted the router.Here is sh
vers:sh versCisco IOS Software, ...
06-22-2015
I managed to get the boot output:C860VAEW advanced k9 platform with 512
MB of main memory Readonly R...
06-22-2015
Hi Leo,Thanks for your help. I cannot reboot the router at the moment
since it's in production and a...
06-22-2015
sh inventNAME: "C867VAE-W-E-K9", DESCR: "C867VAE-W-E-K9 chassis, Hw
Serial#: GMK18160096, Hw Revisio...
Public Statistics
| Date Registered | 11-03-2005 12:41 PM |
| Date Last Visited | 05-15-2019 12:03 AM |
| Total Messages Posted | 59 |
| Total Helpful Votes Received | 15 |
Helpful Votes Given To
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Community Legend"){kind=icon}
Helpful Votes From
