Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dselfridge
Stats
Member since
01-31-2003
71
Posts
20
Helpful
0
Solutions
Created by
dselfridge
in Policy and Access
in Policy and Access
08-02-2018
03:09 AM
08-02-2018
03:09 AM
Thank you Dino,
Very Helpful.
My question around hostnames could have been a bit clearer.
What I meant was that the 2 authentication methods (Corporate EAP and Guest Web-Auth) are on different domains and each has certificates to match those. e.g. one is customer.com - for the public cert used for guest access and the other is customer.net - for the internal CA provided cert to authenticate corporate devices.
Can I retain those 2 domain suffixes? On the same, new, 4 node cluster?
... View more
Created by
dselfridge
in Policy and Access
in Policy and Access
02-22-2018
03:46 AM
02-22-2018
03:46 AM
I have a similar problem, although my 2 clusters are in the same sites.
One is providing guest portal functionality (2 nodes cluster) and the other is doing the EAP for the 'internal' clients (again 2 nodes)
I want to merge the 2 into one, 4 node cluster to simplify licensing, configuration and maintenance.
My thinking is to configure the EAP functionality onto the Guest cluster and try it out with a test SSID. I need to ensure AD integration works and certificates are correct.
Here's the kicker, the hostnames and the certificates. The guest users need a public CA signed Cert (using ise.customer.com) and the internal users need a corporate CA signed cert (using ise.customer.net).
So 2 different hostnames. is this possible?
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-16-2017
07:02 AM
03-16-2017
07:02 AM
Nope. 5508's are on 8.0.130.0 currently. Still only TFTP.
We are just benching up a complete WLAN Refresh based on 5520's, which has a better way of doing the licencing, (No reboots required, RTU, Cisco ONE model).
But we plan to recycle the 5508's as a secondary backup to the HA pair of 5520's. We won't be adding additional licences, so as the estate grows, we'll rely on Prioritisation should the worst happen and we lose the entire HA pair.
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
03-08-2016
05:33 AM
03-08-2016
05:33 AM
Thanks for the update Divya.
(Sorry for the late reply, must check in more often!!)
... View more
Created by
dselfridge
in Policy and Access
in Policy and Access
03-08-2016
05:31 AM
03-08-2016
05:31 AM
I re-imaged the box, after a hardware failure during an attempted upgrade. (3315 appliance)
Getting the error 'restore failed: Wrong encryption key or corrupted download from repository'
I've tried repo's based on FTP and local disk. all fail.
I've also generated fresh backups from a 'live' v1.2.1 ISE and tried to restore that to my new 1.4 box, but continues to fail.
The encryption key is definitely correct.
any ideas?
Thanks,
Dan
... View more
Labels:
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
07-15-2015
06:04 AM
07-15-2015
06:04 AM
Hi, My customer has banned TFTP from the network. Not a problem, I just use FTP. This works for most file operations on the controller (Software Upgrades, Config backups, etc.). However, to increase the AP count, which the customer does repeatedly when they roll out new branches, it seems TFTP is the only option. This results in an expensive site visit to the Data Center in order to upload the license through the service port. When I would prefer to do it remotely in 10 minutes. Please note that the customer doesn't currently have Prime/WCS. Is there some other way of installing a license? If not, are there plans on the horizon to add this functionality? Has anybody thought up some creative ways to get around this 'Feature'? I'd welcome your thoughts. Regards, Dan
... View more
Created by
dselfridge
in Network Management
in Network Management
11-15-2013
07:42 AM
11-15-2013
07:42 AM
Having the same issue here. Guess we'll just have to wait for 2.1 ;-) (I'm doing a new install so exporting from 1.3 is too painful TBH)
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
09-25-2013
08:49 AM
09-25-2013
08:49 AM
Hi, My customer is running 5508's with AP groups. So that new AP's don't transmit the SSID's before I'm ready, I've enabled the 'Out-of-box' feature, which places the AP's into a new group, which is system configured with the radios disabled. I just then need to move those AP's into the desired group when I'm ready for them. Question is, how do I get the radios to switch back on? I've moved them into the desired AP Group and they rebooted as expected, but both radios are currently down. I went into the radio configure page and 'enable' is already selected, but they refuse to come up??? I'm running 7.5.102.0 Thanks Dan
... View more
Re: Strange Duplicate IP messages in 25...
in Wireless and Mobility
05-27-2013
08:11 AM
05-27-2013
08:11 AM
That's the wierd part! The IP addresses mentioned are definately NOT on the network?? The customer uses 10.x.x.x across the whole enterprise. The AP's use DHCP on the same subnet as the controller, so in this case 10.13.103.x (higher than .20) where .10 is always the controller on each site. I've never seen IP addresses beginning with 4.x.x.x being used before. So if these strange IP addresses are being introduced on the network somewhere (e.g. from a guest device or misconfigured NIC), that wouldn't explain why they should conflict with the AP's which as I've mentioned have 10.13.103.whatever. As an afterthought I'm holding off upgrading to 7.4 until the next release of Prime which will allow their NCS 1.1.1.24 to be upgraded. (Just in case it's a software bug) BTW thanks for the quick reply Scott. :-)
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-25-2013
05:36 AM
02-25-2013
05:36 AM
Hi Guy's, Very interesting thread. Have you heard anything about re-instating the ability to 'reverse-anchor' the remote LAN in future code versions? I would like to extend out my customers Voice vlan to the Remote LAN port on the OEAP by anchoring the DMZ controller to one of the 'inside' controllers as it's much 'cleaner' than messing with firewall rules. I don't want to downgrade due to the Windows 8 bug in earlier releases (i'm on 7.3 right now). Cheers,
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-18-2013
04:11 AM
02-18-2013
04:11 AM
Thanks Scott, I already had most of that correct, but the DMZ side was anchored to the foreign controller and not itself, so that was the problem. Thanks for pointing that out. +5 mate! Sent from Cisco Technical Support iPad App
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
02-18-2013
03:34 AM
02-18-2013
03:34 AM
Hi, I currently have a typical Guest solution setup with an Anchor 5508 in the DMZ. The client IP Addresses are supplied from the DHCP server on board the Anchor WLC. SSID 'guest'. The foreign controllers are all 2504's. All controllers are running ver 7.3 code. This solution works. I'm trying to setup a new WLAN for the execs to use IPads etc. (SSID= 'mobile') and get straight out to the web. So I setup WPA2 PSK. Then anchored this WLAN to the DMZ controller also and assigned it the same dynamic interface as the working 'guest' WLAN. That way these users are on the same subnet as the guest users but don't get the guest login screen. The clients are appearing on the local controller in 'DHCP_RQD' state, but aren't appearing on the anchor at all. What am I Missing? The configs are identical on both controllers. Sent from Cisco Technical Support iPad App
... View more
Created by
dselfridge
in Policy and Access
in Policy and Access
01-18-2013
09:52 AM
01-18-2013
09:52 AM
Wesley, Thanks for this. I'm now re-attaching the hair I've pulled out after days trying to figure my customers migration out :-) 5 stars Cheers Dan
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-25-2012
06:35 AM
10-25-2012
06:35 AM
Also seeing... *spamApTask6: Oct 25 14:19:58.547: #LWAPP-3-VALIDATE_ERR: spam_lrad.c:10136 Validation of STAT_PAYLOAD failed - AP 00:3a:98:09:4e:d0 and *Dot1x_NW_MsgTask_0: Oct 25 14:17:01.149: #LOG-3-Q_IND: spam_lrad.c:10136 Validation of STAT_PAYLOAD failed - AP 00:3a:98:09:4e:d0 All refer to the same MAC above. Also I noticed in the traps that the RADIUS server is flipping to the backup every few minutes after the 'live' one doesn't respond in a timely manner.... Thu Oct 25 14:29:55 2012 RADIUS server 10.2.100.50:1646 activated on WLAN 2 33 Thu Oct 25 14:29:55 2012 RADIUS server 10.15.5.100:1646 deactivated on WLAN 2 34 Thu Oct 25 14:29:55 2012 RADIUS server 10.15.5.100:1646 failed to respond to request (ID 195) for client 00:21:6a:4c:6a:e0 / user 'KIE\NDaly' 35 Thu Oct 25 14:29:47 2012 RADIUS server 10.15.5.100:1646 activated on WLAN 2 36 Thu Oct 25 14:29:47 2012 RADIUS server 10.2.100.50:1646 deactivated on WLAN 2 37 Thu Oct 25 14:29:47 2012 RADIUS server 10.2.100.50:1646 failed to respond to request (ID 58) for client 00:21:6a:4c:6a:e0 / user 'KIE\NDaly' Checking for network issues between the WLC and ACS now....
... View more
Created by
dselfridge
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
10-25-2012
06:19 AM
10-25-2012
06:19 AM
Hi, Upon checking the logs, I'm seeing a lot of these messages; *emWeb: Oct 25 14:11:01.345: #LOG-3-Q_IND: spam_lrad.c:10136 Validation of STAT_PAYLOAD failed - AP 00:3a:98:09:4e:d0 Always the same MAC address, which I assume is a Cisco AP trying to join. Anyone know what this means? The output interpreter/message decoder isn't much help. 5508 Controller running ver 7.3.101.0. Cheers, Dan
... View more
Created by
dselfridge
in Identity Services Engine (ISE)
04-08-2019
04-08-2019
We're about to deploy Cisco ISE to a customer site and they have asked
the question..."Will ISE work...
Created by
dselfridge
in Policy and Access
08-02-2018
08-02-2018
Thank you Dino, Very Helpful. My question around hostnames could have
been a bit clearer. What I mea...
Created by
dselfridge
in Policy and Access
02-22-2018
02-22-2018
I have a similar problem, although my 2 clusters are in the same sites.
One is providing guest porta...
Created by
dselfridge
in Other Wireless - Mobility Subjects
03-16-2017
03-16-2017
Nope. 5508's are on 8.0.130.0 currently. Still only TFTP. We are just
benching up a complete WLAN Re...
Created by
dselfridge
in Policy and Access
03-08-2016
03-08-2016
I re-imaged the box, after a hardware failure during an attempted
upgrade. (3315 appliance) Getting ...
07-15-2015
Hi, My customer has banned TFTP from the network. Not a problem, I just
use FTP. This works for most...
Created by
dselfridge
in Network Management
11-15-2013
11-15-2013
Having the same issue here. Guess we'll just have to wait for 2.1
;-)(I'm doing a new install so exp...
09-25-2013
Hi,My customer is running 5508's with AP groups.So that new AP's don't
transmit the SSID's before I'...
05-27-2013
That's the wierd part! The IP addresses mentioned are definately NOT on
the network??The customer us...
Created by
dselfridge
in Other Wireless - Mobility Subjects
02-25-2013
02-25-2013
Hi Guy's,Very interesting thread.Have you heard anything about
re-instating the ability to 'reverse-...
Created by
dselfridge
in Other Wireless - Mobility Subjects
02-18-2013
02-18-2013
Thanks Scott,I already had most of that correct, but the DMZ side was
anchored to the foreign contro...
02-18-2013
Hi,I currently have a typical Guest solution setup with an Anchor 5508
in the DMZ. The client IP Add...
01-18-2013
Wesley, Thanks for this. I'm now re-attaching the hair I've pulled out
after days trying to figure m...
Created by
dselfridge
in Other Wireless - Mobility Subjects
10-25-2012
10-25-2012
Also seeing...*spamApTask6: Oct 25 14:19:58.547: #LWAPP-3-VALIDATE_ERR:
spam_lrad.c:10136 Validation...
Public Statistics
| Date Registered | 01-31-2003 08:50 AM |
| Date Last Visited | 10-09-2019 06:41 AM |
| Total Messages Posted | 71 |
| Total Helpful Votes Received | 20 |
Helpful Votes Given To
Helpful Votes From
.jpg "Hall of Fame Community Legend"){kind=icon}
