Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Syed Moazzam Ali
Stats
Member since
08-20-2011
19
Posts
9
Helpful
0
Solutions
06-01-2016
05:14 AM
Hello
Is there no one who is expert enough to solve this problem ?
... View more
Created by
Syed Moazzam Ali
in Policy and Access
in Policy and Access
05-30-2016
07:04 AM
05-30-2016
07:04 AM
Hello Experts
Hope so this is the right forum to get answer of my problem.
I am configuring Cisco ISE for client posture validation and following the documentation
But unfortunately I am not getting the result as expected. Following is the summary which am facing
- Redirection is not working despite of Documentation configurations on the switch - show authentication session doesn't show the URL redirect information.
- NAC Agent login field is disabled. - NAC agent doesn't show Network Full Access notification - After manually make the client as compliant in posture status, the re-authenticate command from ISE to the switch doesn't reach the switch.
I hope some expert will fix it and point out the problem.
Please find attached snapshot of the configuration. I am really stuck on this point and need some one help to resolve this issue
... View more
Labels:
Re: Network issues with WLC
in Wireless and Mobility
08-11-2013
09:06 AM
08-11-2013
09:06 AM
This is very awkward situation. do one thing. Reconfigure the switch port which is connected to wlc and this time just make it trunk and remove command switchport trunk allowed vlan 199,400,599,998,999. Let all vlans pass through the link and check the result.
... View more
08-11-2013
08:25 AM
Dear Adam Same problem i faced recently. you just plug console cable into AP and post output of show flash: Other thing you need to do is just assign static IP, default gateway and controller ip on the AP and then try to ping the controller.
... View more
Created by
Syed Moazzam Ali
in Wireless and Mobility
in Wireless and Mobility
08-11-2013
08:21 AM
08-11-2013
08:21 AM
Dear It is very easy. all the things you have to do is to play with VLAN. i am attaching one diagram which might help you in understanding vlan allocation.
... View more
Created by
Syed Moazzam Ali
in Wireless and Mobility
in Wireless and Mobility
08-11-2013
08:08 AM
08-11-2013
08:08 AM
Dear Joseph The model you have mentioned is lightweight access point and you can only configure it with Wireless Controller. If you want to run this AP in standalone mode, you have to convert its IOS from lightweight to standalone. then you can also access using GUI. Following are the steps for conversion. The image that is on the device is LWAPP one, not the autonomous.. if you want to use the AP in autonomous mode then the image should be W7.. that is.. c1232-k9w7-tar.124-21a.JY.tar not c1232-rcvk9w8-tar.124-23c.JA.tar I request you to do download any image from the below link and perform the conversion from LWAPP image to autonomous.. http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=IOS+Software&mdfid=282439881&treeName=Wireless&mdfLevel=Model&url=null&modelName=Cisco+Aironet+1140+Access+Point&isPlatform=N&treeMdfId=278875243&modifmdfid=null&imname=&hybrid=Y&imst=N the methos to convert is.. download TFTPd32 from google and install it on ur PC.. point the image that you have downloaded in the TFTP server.. connect a ethernet cable between ur laptop and AP.. both should be in the same subnet.. and connect a console cable and get the hyperterminal console access and issue the command.. make sure you are able to ping the PC and the AP and vice versa!! AP>en AP#debug lwapp console cli or debug capwap console cli AP#config t AP(confg)int fa 0 AP(confg-if)ip addr (same subnet as that of the laptop) AP(confg-if)end AP#archieve download-sw /force-reload /overwrite tftp:// / AP#archieve download-sw /force-reload /overwrite tftp://<10.0.0.5>/c1232-k9w7-tar.124-21a.JY.tar
... View more
Created by
Syed Moazzam Ali
in Wireless and Mobility
in Wireless and Mobility
08-07-2013
03:36 AM
08-07-2013
03:36 AM
1- upgrade WLC 5508 - software version to 7.2 or 7.3. 2- can WLC ping AP and AP ping WLC. If both can ping each other, then send the output of show flash: of the AP. might be this AP came with Mesh software and you have to add it in MAC filter list of WLC.
... View more
Created by
Syed Moazzam Ali
in Wireless and Mobility
in Wireless and Mobility
08-03-2013
03:41 AM
08-03-2013
03:41 AM
Dear All I am posting my current scenario of wireless. All clients are coming from APs and all DHCP polls are defined on WLC. I want to direct terminate Internet on the WLC . so all the client coming from AP,s get IP from WLC and then use WLC their default gateyway and can browse internet. I could not find such scenario. Please help me to solve this problem
... View more
Labels:
03-22-2013
04:06 AM
Hi give the command. hostname(config)# crypto key generate rsa modulus 1024 Hope so you would be able to access using ASDM
... View more
Created by
Syed Moazzam Ali
in Other Network Architecture Subjects
in Other Network Architecture Subjects
03-13-2013
10:54 PM
03-13-2013
10:54 PM
I have a network of more then 1000 users with static IPs. We cant change Static IP and can not go for DHCP to acheive our task. Different subnets exist and differnet user rules are defined. Now it happes that people change their IP and enjoy the services for higher rank people. I am looking for a solution in which every user should be authenticated based on IP address with MAC binding. We define IP and MAC bind to each other. Every one come and should authenticate using MAC and IP binding.
... View more
Labels:
Created by
Syed Moazzam Ali
in Routing
in Routing
12-23-2012
10:42 PM
12-23-2012
10:42 PM
Well in this scenario if you have security bundle of 2901 and 2811, i will recommend you to make some tunnel i.e ipsec tunnel so all the guset traffic just by pass the core network. In case if you apply ACL or some other security, it will make network complex.
... View more
Created by
Syed Moazzam Ali
in Other Network Architecture Subjects
in Other Network Architecture Subjects
12-23-2012
01:18 PM
12-23-2012
01:18 PM
Hello Mohammad If you go for a hierarchal design then you need core, distribution and access switch: If you consider cisco nexus 7K for one moment with its VDC and VPC feature. what you can do is divide nexus 7K in three or four vdc performing as access, distributon and access switch whereas VPC will give you redundancy and link consolidation. In this scenario you would have only two nexus 7K with support of 10G cards and physical servers which would be directly connected to nexus Server VDC. no need for extra switches. Do let me know if you need specification of nexus 7K who will fullfill your requirement.
... View more
12-23-2012
12:44 PM
Dear Frank You can apply ACL directly on the ports using Port base ACL. As you have designed DMZ so put all the servers in VLAN 10 and move that vlan behind to ASA so every one want to access the server should pass through ASA and there you can control the access to servers. As far as wireless clients are concerned, if your wireless clients are big in number, introduce a proxy server in DMZ and control access to internet via proxy server. If your management vlan is for management of networking componets then it would be better to apply acl on line vty or console. why are you using EIGRP 10 in the diagram?
... View more
12-21-2012
04:08 AM
Kindly share ip scheme so we can tell you the exact static routes
... View more
12-16-2012
10:35 AM
Is it possible for you to get same real IPs from both ISP and run BGP to prefer the best path.
... View more
05-30-2016
Hello Experts Hope so this is the right forum to get answer of my
problem. I am configuring Cisco IS...
08-11-2013
This is very awkward situation. do one thing.Reconfigure the switch port
which is connected to wlc a...
08-11-2013
Dear AdamSame problem i faced recently. you just plug console cable into
AP and post output of show ...
Created by
Syed Moazzam Ali
in Wireless and Mobility
08-11-2013
08-11-2013
Dear It is very easy. all the things you have to do is to play with
VLAN. i am attaching one diagram...
Created by
Syed Moazzam Ali
in Wireless and Mobility
08-11-2013
08-11-2013
Dear JosephThe model you have mentioned is lightweight access point and
you can only configure it wi...
Created by
Syed Moazzam Ali
in Wireless and Mobility
08-07-2013
08-07-2013
1- upgrade WLC 5508 - software version to 7.2 or 7.3. 2- can WLC ping AP
and AP ping WLC. If both ca...
Created by
Syed Moazzam Ali
in Wireless and Mobility
08-03-2013
08-03-2013
Dear AllI am posting my current scenario of wireless. All clients are
coming from APs and all DHCP p...
03-22-2013
Higive the command.hostname(config)# crypto key generate rsa modulus
1024Hope so you would be able t...
Created by
Syed Moazzam Ali
in Other Network Architecture Subjects
03-13-2013
03-13-2013
I have a network of more then 1000 users with static IPs. We cant change
Static IP and can not go fo...
Created by
Syed Moazzam Ali
in Routing
12-23-2012
12-23-2012
Well in this scenario if you have security bundle of 2901 and 2811, i
will recommend you to make som...
Created by
Syed Moazzam Ali
in Other Network Architecture Subjects
12-23-2012
12-23-2012
Hello MohammadIf you go for a hierarchal design then you need core,
distribution and access switch:I...
12-23-2012
Dear FrankYou can apply ACL directly on the ports using Port base ACL.As
you have designed DMZ so pu...
Public Statistics
| Date Registered | 08-20-2011 11:57 PM |
| Date Last Visited | 04-17-2019 03:46 AM |
| Total Messages Posted | 19 |
| Total Helpful Votes Received | 9 |
