Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Richard Atkin
08-18-2017
Richard Atkin
Enthusiast
I've been working at BT iNet since 2004, first as a Project Manager and then as a Wireless LAN Engineer. In my early days of IOS Wireless we were deploying 3200 MARs across London and since the advent of WLCs we've never looked back, tackling projects covering MESH, Bridging, VoIP, Security, and so on. I work with a great team of like-minded LAN, WLAN, Security, UC, UCS and VMware engineers and between us there isn't much we can't achieve.
I've been working at BT iNet since 2004, first as a Project Manager and then as a Wireless LAN Engineer. In my early days of IOS Wireless we were deploying 3200 MARs across London and since the advent of WLCs we've never looked back, tackling projects covering MESH, Bridging, VoIP, Security, and so on. I work with a great team of like-minded LAN, WLAN, Security
Recent Badges
Stats
Member since
02-10-2005
485
Posts
293
Helpful
49
Solutions
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
01-26-2017
02:53 AM
01-26-2017
02:53 AM
What happens if you strip your WLAN config back down to basics to help understand further about where the problem is?
Do troublesome laptops still work on an Open network? Or one with WPA2-AES PSK? Does changing EAP type make any difference?
... View more
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
01-26-2017
02:46 AM
01-26-2017
02:46 AM
I don't know anything about iPerf, but it seems to me like you've already answered your own question... Wireless performance is seldom the same from one minute to the next in the real world and there's any number of reasons why it changes.
If you wanted to get more insight the first thing I'd do is to repeat the test (as closely as possible) via the Wired LAN and check you have consistent results that make sense there first. If you don't get consistent LAN results, you will never get consistent WLAN results.
... View more
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
06-05-2014
05:57 AM
06-05-2014
05:57 AM
Hi Rasika, Do you know if this works the other way as well? Can you anchor traffic from 5508 to a 3850? Cheers, Richard
... View more
Created by
Richard Atkin
in Wireless Security and Network Management
in Wireless Security and Network Management
11-01-2013
05:52 AM
11-01-2013
05:52 AM
Not sure about a specific OID for exactly what you want, but the WLCs will send Traps if you get too many Users per Radio - the alert thresholds are all configurable on the WLC, which should basically achieve the same thing.
... View more
11-01-2013
05:51 AM
To do it properly you need to enable "Machine only" machine authentication a part of a protocol like PEAP-MSCHAPv2. This means you need a RADIUS Server and some SSL Certificates as well. The cheap and cheerful way however, is to put a WPA2-AES PSK on your WLAN and pre-configure your machines with the key.
... View more
Created by
Richard Atkin
in Wireless and Mobility
in Wireless and Mobility
11-01-2013
12:25 AM
11-01-2013
12:25 AM
Correct... 2504 just does N+1 HA from 7.5, whereas the bigger platforms do AP SSO and Client SSO.
... View more
Created by
Richard Atkin
in Wireless Security and Network Management
in Wireless Security and Network Management
10-25-2013
07:07 AM
10-25-2013
07:07 AM
Hi Leo, ISE can't configure a hidden SSID today. As to why you're using a hidden SSID anyway, I'm not sure? It generally doesn't achieve much, and has been known to introduce security risks of its own. Why not just broadcast the SSID?
... View more
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-18-2013
12:44 AM
10-18-2013
12:44 AM
I don't see why not, just make sure you account for the extra losses of the N/RP-TNC adapter when configuring the antenna gain on the AP. Sent from Cisco Technical Support iPad App
... View more
Created by
Richard Atkin
in Wireless and Mobility
in Wireless and Mobility
10-18-2013
12:40 AM
10-18-2013
12:40 AM
Software version shouldn't affect it. Have you checked the necessary ports (1645,1646,1812,1813) and the Shared Secret? And have you checked the new RADIUS box has all of the correct rules,, EAP Types and Certs that you need? Sent from Cisco Technical Support iPad App
... View more
Created by
Richard Atkin
in Wireless and Mobility
in Wireless and Mobility
10-17-2013
02:22 AM
10-17-2013
02:22 AM
I'm not sure you can do what you want in IOS.... Can you buy a WLC?
... View more
Created by
Richard Atkin
in Wireless and Mobility
in Wireless and Mobility
10-17-2013
02:20 AM
10-17-2013
02:20 AM
1x L-LIC-CT2504-UPG Upgrade Options for 2504 WLAN Controller (e-Delivery) 1 x L-LIC-CT2504-5A 5 AP Adder Licenses for 2504 WLAN Controller (e-Delivery) L-LIC-CT2504-UPG is the top level part code, then you can specify adder licenses in multiples of 1, 5 or 25 APs. The above is a 5 AP example.
... View more
Re: Guest Cert problems ISE and Anchor ...
in Wireless Security and Network Management
10-17-2013
02:07 AM
10-17-2013
02:07 AM
I don't want to sound too rude here, but I think you're probably better off deleting all of your config, reading the SRND and ISE Config Guides, and starting again from scratch.
... View more
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-17-2013
01:56 AM
10-17-2013
01:56 AM
See here https://supportforums.cisco.com/docs/DOC-14636
... View more
Re: Guest Cert problems ISE and Anchor ...
in Wireless Security and Network Management
10-17-2013
01:30 AM
10-17-2013
01:30 AM
You need a pre-auth ACL to be defined on the Anchor WLC and it needs to allow TCP 8443 to the ISE. This ACL is then referenced by name in the ISE Authz Profile. When the User performs their initial MAB, the ISE returns the Redirect URL and the ACL Name to the WLC, both of which are then imposed upon the User in order to get them to see the ISE's login page. There's no need for any "Layer3 Security" configuration in the WLC whatsoever.
... View more
Re: Campus / Enterprise VLAN Security I...
in Wireless Security and Network Management
10-16-2013
10:50 PM
10-16-2013
10:50 PM
With anything short of physically separate infrastructure, there's always the risk of an accidental Config error causing you problems... It sounds to me like you probably already know about ACLs, VLANs, VRFs, SGT, Anchor Controllers, Private VLANs, DHCP Snooping, etc etc.... So what exactly are you looking for? All approaches (industry best practise, or otherwise) are all about mitigating risk and balancing effort, complexity and cost. Which of these factors is more important to you? Sent from Cisco Technical Support iPad App
... View more
01-26-2017
What happens if you strip your WLAN config back down to basics to help
understand further about wher...
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
01-26-2017
01-26-2017
I don't know anything about iPerf, but it seems to me like you've
already answered your own question...
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
06-05-2014
06-05-2014
Hi Rasika,Do you know if this works the other way as well? Can you
anchor traffic from 5508 to a 385...
Created by
Richard Atkin
in Wireless Security and Network Management
11-01-2013
11-01-2013
Not sure about a specific OID for exactly what you want, but the WLCs
will send Traps if you get too...
11-01-2013
To do it properly you need to enable "Machine only" machine
authentication a part of a protocol like...
Created by
Richard Atkin
in Wireless and Mobility
11-01-2013
11-01-2013
Correct... 2504 just does N+1 HA from 7.5, whereas the bigger platforms
do AP SSO and Client SSO.
Created by
Richard Atkin
in Wireless Security and Network Management
10-25-2013
10-25-2013
Hi Leo,ISE can't configure a hidden SSID today.As to why you're using a
hidden SSID anyway, I'm not ...
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
10-18-2013
10-18-2013
I don't see why not, just make sure you account for the extra losses of
the N/RP-TNC adapter when co...
Created by
Richard Atkin
in Wireless and Mobility
10-18-2013
10-18-2013
Software version shouldn't affect it. Have you checked the necessary
ports (1645,1646,1812,1813) and...
Created by
Richard Atkin
in Wireless and Mobility
10-17-2013
10-17-2013
I'm not sure you can do what you want in IOS.... Can you buy a WLC?
Created by
Richard Atkin
in Wireless and Mobility
10-17-2013
10-17-2013
1x L-LIC-CT2504-UPGUpgrade Options for 2504 WLAN Controller
(e-Delivery)1x L-LIC-CT2504-5A5 AP Adder...
Created by
Richard Atkin
in Wireless Security and Network Management
10-17-2013
10-17-2013
I don't want to sound too rude here, but I think you're probably better
off deleting all of your con...
Created by
Richard Atkin
in Other Wireless - Mobility Subjects
10-17-2013
10-17-2013
See here https://supportforums.cisco.com/docs/DOC-14636
Created by
Richard Atkin
in Wireless Security and Network Management
10-17-2013
10-17-2013
You need a pre-auth ACL to be defined on the Anchor WLC and it needs to
allow TCP 8443 to the ISE. T...
Created by
Richard Atkin
in Wireless Security and Network Management
10-16-2013
10-16-2013
With anything short of physically separate infrastructure, there's
always the risk of an accidental ...
Public Statistics
| Date Registered | 02-10-2005 08:27 AM |
| Date Last Visited | 08-18-2017 04:03 AM |
| Total Messages Posted | 485 |
| Total Helpful Votes Received | 293 |
Helpful Votes Given To
.jpg "Hall of Fame Master"){kind=icon}
Helpful Votes From
