Thanks, Scott! From the CLI of the WLC: (wlc1.wifi) config>802.11b rate mandatory ? <rate> Enter a rate of either 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48 or 54
... View more
The Beacons from our APs are consuming all the bandwidth in a particular neighborhood's airspace. Removing APs is not an option. These 802.11b/g/n access points broadcast beacons at 1Mbps. We thought that if we turned off the 802.11b and used 802.11g (only) then the access points would broadcast their beacons at 6Mbps. This is not the case and if you read the 802.11 specifications you will see this is the intended manner for the APs to operate. The APs continue to beacon at 1Mbps I want to know where I can configure the Basic Rate Set on 802.11g access points so that the Beacons broadcast at 6Mbps? Please assume Cisco APs and Wireless Controllers. Thank you in advance! Paul
... View more
We have been using it for years with few complaints to mention. The ACS 5.x does have a polished GUI and the ability to install it on a VM. It was rebuilt entirely in version 5.x so you need not worry about buying an "old dusty product." The reporting functionality is also greatly improved in version 5.x compared with 3.x of 4.x. It's robust and easy to use. Take a look at Juniper if you want something to compare Cisco ACS with. Hope this helps.
... View more
Cisco ACS is a tried and true solution for centralized router and switch authentication. I would install one TACACS server as your primary and replicate it to a secondary. I would do this with virtual machines for ease of maintenance and support. As to whether or not you install a TACACS solution on each continent you support, you could justify this depending upon how many devices there are in each part of the world. Hope this helps you make an informed decision: "With the Base license, a Cisco Secure ACS 5.5 appliance or software virtual machine can support the deployment of up to 500 network devices. These are authentication, authorization, and accounting (AAA) clients. The number of network devices is based on how many unique IP addresses are configured. The 500-device limit is not a limit for each individual appliance or instance, but a deployment-wide limit that applies to a set of Cisco Secure ACS instances (primary and secondary) that are configured for replication." -Paul
... View more
Need a sanity check on our proposed upgrade of our ACS. There is a preupgrade entitled "Pointed-PreUpgrade-CSCum04132-5-4-0-46-0a.tar.gpg " which I'm not sure I need if I am running version 5.4.0.46.2. Here is the output from our CLI. Do I need the patch or can I install 5.5? Thanks, Paul Current: Version information of installed applications --------------------------------------------- Cisco ACS VERSION INFORMATION ----------------------------- Version : 5.4.0.46.2 Internal Build ID : B.221 Patches : 5-4-0-46-2 acs1/engine# show application version acs Cisco ACS VERSION INFORMATION ----------------------------- Version : 5.4.0.46.2 Internal Build ID : B.221 Patches : 5-4-0-46-2
... View more
Please give me sanity check on the new 1601 AP. I have a client associated and authenticated to a 1601. This I can tell from the Wireless Lan Controller 5508 running 7.5 software. The LED on the AP is solid green and the documentation states that this is normal. My question is: Why did Cisco change from Blue to Green? I expected the normal operating color to be solid blue, just like on the 1142 model. Thank you in advance!
... View more
ASA 5510 running 9.1.2 and ASDM 7.1.3 This has happened twice in the last month. The AnyConnect works fine and all of a sudden I received reports that the AnyConnect package on the secure gateway could not be located. The first time this happened I reloaded from the flash. The second time, a few weeks later, I had to download the files from Cisco.com and re-install. Anyone seen this before? Is this a hacker or a bug? We can't find anything in the logs. This image show what it looked like this morning. Thank you in advance. Paul
... View more
Rick, Many thanks once again. We removed the Tunnel Lock and now have what we want in terms of using Local Accounts with both AnyConnect and Cisco IPSec clients.
... View more
Thanks for the reply. We had an environemnt for years where group 1 users logged in via IPSec. We just recently added the memory, licenses, and operating system to allow for AnyConnect usage on a large scale. To fully test Anyconnect without impacting production, I created test users and a test group. All works fine. I even was able to use a group one login with AnyConnect but I had to move the user into the newly created test group. I am missing some bit of configuration in maybe the Connection Profile where an individual could be assigned allowed to use IPSec with the Native Client and AnyConnect. Do I need the IPSec Native client and can I just rely upon AnyConnect to achieve all the functionality I require? Thank you in advance.
... View more
Hi Rick, Thanks for the fast reply. Everyone authenticates locally. The policies are the same and have identical restrictions, namely, these individuals can go anywhere. Just can't seem to configure them to login without designating them for a single group. Thanks! Paul
... View more
We have an ASA 5510 running 9.1 and using ASDM 7.13 with 1 gig of memory and all the required licenses. I need a sanity check on whether this is possible and if I am losing some functionality. I have user1 with group policy a and connection profile a. This example uses the native IPSec client and works fine from Macs and PCs. I also have user2 with group policy b and connection profile b. This example uses AnyConnect 3.0 and works fine from Macs, I-Phones, and a Kindle Fire. I would like to know if user1 can login with the same credentials and group policy on both IPSec and AnyConnect. Thank you in advance for your real world examples and explanations. Cheers!
... View more
A bit of a Catch-22 here: I am trying to delete VPN Group Policies but receive the error message that the policy is in use by a particular Connection Profile. When I try to delete the Connection Profile I receive the message that it is in use by a VPN Group Policy.. What else is there to delete or do I have to use the CLI? Thank you in advance!
... View more
