Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dominikhug
Stats
Member since
12-03-2007
30
Posts
0
Helpful
0
Solutions
01-24-2012
10:11 PM
Hi Karel Could you maybe post a screenshot how you created the compound condition? I've already tried but I wasn't able to manage this Regards Dominik
... View more
01-18-2012
10:34 PM
Hi Maybe you see Bug CSCts14694, Accounting requests seen as authentication requests. But at the moment I don't know how to resolve this problem Regards Dominik
... View more
Created by
dominikhug
in Policy and Access
in Policy and Access
01-18-2012
10:29 PM
01-18-2012
10:29 PM
Hi Carlos I've got the same issue. With your workaround I was able to install the patch without any problems. Thanks! Regards Dominik
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-23-2011
02:00 AM
12-23-2011
02:00 AM
Hi I made some additional attempts to get it working but I failed. So i changed the security settings to WPA-PSK to check if using a WGB ist the right way. Now I'm testing. Thanks for your help and merry christmas. Dominik
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-20-2011
02:01 AM
12-20-2011
02:01 AM
I've attached the output of 'debug client 44d3.ca62.918e' from WLC. Maybe you can see something. Could it be also RADIUS-server related?
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-20-2011
01:22 AM
12-20-2011
01:22 AM
It's from the WBG D1 interface: ap#sh int d1 Dot11Radio1 is up, line protocol is up Hardware is 802.11N 5GHz Radio, address is 44d3.ca62.918e (bia 64ae.0c5c.5be0) MTU 1500 bytes, BW 54000 Kbit/sec, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/1677/3/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/30 (size/max) 5 minute input rate 1000 bits/sec, 1 packets/sec 5 minute output rate 2000 bits/sec, 3 packets/sec 2953 packets input, 540325 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 6319 packets output, 558439 bytes, 0 underruns 144 output errors, 0 collisions, 6 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out ap#
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-20-2011
01:16 AM
12-20-2011
01:16 AM
We're using Cisco WiSMv1. Passive mode is only available on 5500 and 2100 I think. I was able to tie the WGB to only one AP but it still doesn't work. I've found a new log-message on WLC: *dot1xMsgTask: Dec 20 10:16:02.230: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 44:d3:ca:62:91:8e
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-20-2011
12:58 AM
12-20-2011
12:58 AM
I've added guest-mode because this is the only difference between the sample config and my config but it still doesn't work. On console I can see this message: %DOT11-4-CANT_ASSOC: Interface Dot11Radio1, cannot associate: Too many retries And I think the WGB ist flapping between different reachable APs propagating the same SSID. Is it possible to change this behaviour?
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-20-2011
12:44 AM
12-20-2011
12:44 AM
Hi Scott I read different documents including the one you mentioned. I used this doc for configuring because is uses exactly the same methods I use: WGB Roaming: Internal details and Configuration https://supportforums.cisco.com/docs/DOC-14944
... View more
Created by
dominikhug
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
12-19-2011
11:59 PM
12-19-2011
11:59 PM
Hi I'm trying to connect a full-IOS Cisco 1142 access point as WGB to our WLAN infrastructure. I have these settings configured on our WLC: There is a Win2k8 R2 NPS (Network Policy Server) RADIUS server in the background for handling the authentications against the active directory. I can see passed authentication in the event log. The WGB is configured like this: version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! logging rate-limit console 9 enable secret 5 $1$YnK.$37j/OyuZDBr4DSnAEHWFT1 ! no aaa new-model ! ! dot11 syslog ! dot11 ssid InternalSSID authentication open eap eap_methods authentication network-eap eap_methods authentication key-management cckm dot1x credentials ADCred dot1x eap profile EAPProfile infrastructure-ssid ! eap profile EAPProfile method mschapv2 ! ! ! dot1x credentials ADCred username ADUsername password ADPassword ! username Cisco password 7 01300F175804 ! ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache shutdown antenna gain 0 station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio1 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! ssid InternalSSID ! antenna gain 0 station-role workgroup-bridge bridge-group 1 bridge-group 1 spanning-disabled ! interface GigabitEthernet0 no ip address no ip route-cache duplex auto speed auto no keepalive bridge-group 1 bridge-group 1 spanning-disabled ! interface BVI1 ip address dhcp client-id GigabitEthernet0 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag bridge 1 route ip ! ! ! line con 0 line vty 0 4 login local ! end I'm able to get a association to an AP but I'm not able to authenticate. ap#sh dot11 associations all-client Address : 0026.994f.xxxx Name : APName IP Address : xx.xx.xx.xx. Interface : Dot11Radio 1 Device : LWAPP-Parent Software Version : NONE CCX Version : 5 Client MFP : On State : EAP-Assoc Parent : - SSID : InternalSSID VLAN : 0 Hops to Infra : 0 Association Id : 1 Tunnel Address : 0.0.0.0 Key Mgmt type : CCKM Encryption : AES-CCMP Current Rate : m15. Capability : WMM Supported Rates : 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15. Voice Rates : disabled Bandwidth : 40 MHz Signal Strength : -54 dBm Connected for : 0 seconds Signal to Noise : 45 dB Activity Timeout : 15 seconds Power-save : Off Last Activity : 0 seconds ago Apsd DE AC(s) : NONE Packets Input : 2287 Packets Output : 225 Bytes Input : 553482 Bytes Output : 26055 Duplicates Rcvd : 45 Data Retries : 0 Decrypt Failed : 0 RTS Retries : 0 MIC Failed : 0 MIC Missing : 0 Packets Redirected: 0 Redirect Filtered: 0 Protocol Status Auth Port WGB Can somebody help me? Do I have to post more information? Thank you!
... View more
11-11-2011
04:20 AM
Hi Martin Thanks for your help. I'll check this with our account manager. Have a nice weekend!
... View more
11-11-2011
02:15 AM
See attached ani.log. I changed some names and IPs but I think it should be ok.
... View more
11-10-2011
11:34 PM
HI Martin Till yesterday I had following specs: Windows Server 2008 R2 64-bit VMWare ESX 4 CPUs @ 2.93 GHz 6 GB RAM Now I have only 2 CPU. I had to give two CPUs back because of this problem. But it doesn't matter, the problem occurs with two or four CPUs.
... View more
11-10-2011
07:21 AM
Hmm... I searched in this forum and I found some interesting discussions about DEP. Could this problem be triggered because I haven't disabled DEP for LMS?
... View more
11-10-2011
06:46 AM
Hi Martin I've got a better graph showing utilization over more than one week. Data collection is scheduled every eight hours, so every eight hours cpu uses resources. The last time I had to kill ANIServer data collection was running for about 6 hours or something like this.
... View more
Public Statistics
| Date Registered | 12-03-2007 09:40 AM |
| Date Last Visited | 08-18-2017 03:51 AM |
| Total Messages Posted | 30 |
