Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Justin.Nichols
Stats
Member since
06-08-2012
17
Posts
10
Helpful
1
Solution
05-17-2015
10:41 AM
Fixed my issue. DHCP snooping was getting blocked at port on server. Trusted the port and everything started working.
... View more
05-15-2015
08:29 AM
add: VLAN assignment is working correctly. interface config: interface GigabitEthernet8/1 switchport access vlan 8 switchport mode access switchport voice vlan 3 authentication event fail action next-method authentication event server dead action authorize vlan 1 authentication host-mode multi-auth authentication order dot1x mab authentication priority dot1x mab authentication port-control auto authentication violation restrict mab snmp trap mac-notification change added snmp trap mac-notification change removed dot1x pae authenticator dot1x timeout tx-period 10 spanning-tree portfast spanning-tree bpduguard enable ip dhcp snooping trust end
... View more
05-15-2015
08:27 AM
I am having an issue with my permit all dACL for printers on a 4510 switch. Everything looks to be getting applied correctly from ISE, but I'm still getting blocked by my default ACL after the dACL has been successfully downloaded. This is working on 3560 with the same config. cat4500e-universalk9.SPA.03.04.06.SG.151-2.SG6.bin Interface: GigabitEthernet8/1 MAC Address: 0014.3889.3278 IP Address: Unknown User-Name: 00-14-38-89-32-78 Status: Authz Success Domain: DATA Security Policy: Should Secure Security Status: Unsecure Oper host mode: multi-auth Oper control dir: both Authorized By: Authentication Server Vlan Policy: 9 ACS ACL: xACSACLx-IP-PERMIT_ALL_TRAFFIC-5484c0cc Session timeout: N/A Idle timeout: N/A Common Session ID: 0A01D2FC000001DC08B4190C Acct Session ID: 0x000001E5 Handle: 0x230001DD May 15 03:02:29: %SEC-6-IPACCESSLOGP: list ACL_DEFAULT denied tcp 10.1.230.99(9100) -> 10.1.210.74(53091), 2 packets
... View more
Labels:
Created by
Justin.Nichols
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
04-08-2015
12:21 PM
04-08-2015
12:21 PM
Are you using an external DHCP server or the built in server on the controllers? DHCP is not a supported function on the controllers if they are in HA mode. What version of code are you running?
... View more
04-08-2015
12:12 PM
You can uncheck "Enable Session Timeout" on the Advanced screen for the WLAN. Should be set to 1800s by default.
... View more
Created by
Justin.Nichols
in Wireless and Mobility
in Wireless and Mobility
04-08-2015
12:09 PM
04-08-2015
12:09 PM
What type of clients? Laptops? iPads?
... View more
Created by
Justin.Nichols
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
04-08-2015
11:58 AM
04-08-2015
11:58 AM
I would split them into RF groups to see if that eliminated the issues. I would also suggest that you make sure that APs in one building are all on the same controller. This will help in roaming and RF. Never slit the APs in a similar area/building onto different controllers if at all possible. Physical grouping is important for building a consistent RF footprint.
... View more
04-08-2015
11:51 AM
Which Java versions have you tried? There is an issue with newer Java versions that block connections to "unsecured" devices with untrusted certs. You options: -roll back your Java version (way back) -add ASA IP to Exception Site List -update ASDM version on ASA
... View more
Created by
Justin.Nichols
in Other Network Architecture Subjects
in Other Network Architecture Subjects
04-08-2015
11:46 AM
04-08-2015
11:46 AM
This should temporarily fix the issue, but I would upgrade ASAP. Do you have a running config?
... View more
12-09-2014
04:47 PM
I know this is a 2 year old thread, but you just saved me from banging my head against a wall. GUI credentials of super-admin should be in bold somewhere in the documentation.
... View more
10-16-2014
07:54 AM
To add to my previous post. You need you internet only SSID to be centrally switched. Remove the config for flexconnect from the SSID. Flexconenct APs can use non Flexconnect SSIDs for central switching.
... View more
Created by
Justin.Nichols
in Wireless and Mobility
in Wireless and Mobility
10-16-2014
07:44 AM
10-16-2014
07:44 AM
Your guest internet SSID can still tunnel back to your controller, I have set this up several times. Just need to have the SSID configured to be centrally switched and to use your central Internet only VLAN that is attached to the controller.
... View more
Created by
Justin.Nichols
in Wireless and Mobility
in Wireless and Mobility
10-16-2014
07:28 AM
10-16-2014
07:28 AM
Just a couple of question to clarify. 1. Do you currently have a WLC? 2. If so are you using 802.1x RADIUS authentication on the WLC back to your AD/NPS server for wireless client authentication?
... View more
Created by
Justin.Nichols
in Network Management
in Network Management
04-01-2013
07:58 AM
04-01-2013
07:58 AM
I am having this same issue with Prime 1.3. I can't deploy software to my 2504 or 5508 controllers. I get the "Image not Applicable for this Device" message and it tells me there is "No Flash" when I try to deploy to individual devices. I can manually load the exact same file to those controllers via a TFTP server and they upgrade just fine. Help from cisco would be great on this.
... View more
Created by
Justin.Nichols
in Routing
in Routing
08-23-2012
06:46 AM
08-23-2012
06:46 AM
Router#show version Sent from Cisco Technical Support Android App
... View more
05-17-2015
Fixed my issue. DHCP snooping was getting blocked at port on server.
Trusted the port and everything...
05-15-2015
add: VLAN assignment is working correctly. interface config: interface
GigabitEthernet8/1 switchport...
05-15-2015
I am having an issue with my permit all dACL for printers on a 4510
switch.Everything looks to be ge...
Created by
Justin.Nichols
in Other Wireless - Mobility Subjects
04-08-2015
04-08-2015
Are you using an external DHCP server or the built in server on the
controllers? DHCP is not a suppo...
04-08-2015
You can uncheck "Enable Session Timeout" on the Advanced screen for the
WLAN. Should be set to 1800s...
Created by
Justin.Nichols
in Other Wireless - Mobility Subjects
04-08-2015
04-08-2015
I would split them into RF groups to see if that eliminated the issues.
I would also suggest that yo...
04-08-2015
Which Java versions have you tried? There is an issue with newer Java
versions that block connection...
Created by
Justin.Nichols
in Other Network Architecture Subjects
04-08-2015
04-08-2015
This should temporarily fix the issue, but I would upgrade ASAP. Do you
have a running config?
12-09-2014
I know this is a 2 year old thread, but you just saved me from banging
my head against a wall.GUI cr...
10-16-2014
To add to my previous post. You need you internet only SSID to be
centrally switched. Remove the con...
10-16-2014
Your guest internet SSID can still tunnel back to your controller, I
have set this up several times....
10-16-2014
Just a couple of question to clarify.1. Do you currently have a WLC?2.
If so are you using 802.1x RA...
04-01-2013
I am having this same issue with Prime 1.3. I can't deploy software to
my 2504 or 5508 controllers. ...
Public Statistics
| Date Registered | 06-08-2012 06:59 AM |
| Date Last Visited | 01-09-2019 12:05 AM |
| Total Messages Posted | 17 |
| Total Helpful Votes Received | 10 |
.jpg "VIP Advocate"){kind=icon}
