Hey folks! I have the following setup: Laptop connects to wireless via WLC using Cisco Anyconnect client.  (WPA2 Enterprise AES,  with 802.1x configuration password/EAP-FAST) WLC authenticates user ID via ACS. ACS queries AD for user ID and passes or fails.   Occasionally, we have a user that cannot login, no matter what laptop he/she uses. ACS failed attempts log shows the following: EAP-FAST user was provisioned with new PAC The only fix we've found is to create a new instance of the same SSID and have them login using that. Once they trust the server cert, they can login to any laptop. I assume it's because they "accidentally" chose to not trust the server certificate.  They always tell me they didn't do it  :)~ My question is this.  Why does that "accident" follow them from laptop to laptop? Also, is there an easier fix than having them create an entirely new wireless connection in the AnyConnect client?   Thanks!   Ven ... View more

Hey folks! I've noticed a problem I'm assuming is related to ACS. I normally open up a continuous ping to a router when I reload it so I know when it's back up. Normally, once I can ping it, I can ssh into it. Now, when I can ping it, I have to wait a good five minutes before it'll accept my login credentials. Router is using ACS for TACACs authentication. I know the connectivity is good, because I can ssh to switches behind the router at the site.  It's just the router that won't accept my login/pass for a few minutes. I know it's ACS related, but I'm not sure what it is. Has anyone else seen this? Running ACS v4.2 Thanks in advance! Ven ... View more

We're experiencing wireless voice problems that are affecting our call quality. We have 7925G wireless phones that connect to 1200 series APs which are connected to WISMs, then Call Manager 8.6. When walking around, the phone will hang onto an AP longer than I think it should because we pass other APs, but the phone won't always roam.  That's one weird thing.  Here's the other issue.  When using the phone, our signal always stays below -60db, which is good, but voice will drop and you'll hear a half-second of "jittery static", then nothing, then the voice will come back.  If we were having coverage issues, I'd understand, but we have sufficient density and, as I said, the signal is usually in the low 50s.  Never in the 70s. Thoughts? Thanks! Ven ... View more

We have several DMVPN-connected sites that are connected to our 2821 ISR pair. They're all configured as eigrp stub connected summary.  Yesterday, a few of the sites went inaccessible, but the VPN tunnels were still up and running.  Upon further investigation, we noticed that the remote sites stopped receiving routing updates from our 2821's.  As a quick fix, we added static routes to bring the sites back up. Later that night, we removed the static routes and cleared the eigrp neighbors, hoping it would fix the problem.  When it didn't, we cleared them two more times. Suddenly, the router lost all downstream adjacencies.  While we were adding statics to at least bring the sites back up, all of the adjacencies came back. Does anyone have any idea why this would happen? I've attached a drawing in case anyone wants to see how it's laid out. Thanks! Ven ... View more