Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Stephen Rodriguez
Stephen Rodriguez
Member since
05-22-2006
Advisor
Over 15 years of telecom/datacom experience. I spent almost 5 years in Cisco TAC, with 3 of those years as a Lead for the Wireless Team. Extensive experience with all of the wireless solutions from IOS AP up to the CUWN Controllers. As well as experience working with ACS 3.3/4.x, and some 5.x, and IAS/NPS. Ability to help customers determine business needs and drivers and deliver a solution designed to meet the.requirements to keep the users successful.
Specialties: Networking both wired and wireless.
Biography from communities:
Over 20 years of telecom/datacom experience. I spent almost 5 years in Cisco TAC, with 3 of those years as a Lead for the Wireless Team.
Expertise:
Extensive experience with all of the wireless solutions from IOS AP up to the CUWN Controllers. As well as experience working with ACS 3.3/4.x, and some 5.x, and IAS/NPS.
Wireless, Autonomous, WLC 2006/21xx/25xx/SRE/440x/5508/WiSM/2. 802.1x with ACS, IAS/NPS
Over 15 years of telecom/datacom experience. I spent almost 5 years in Cisco TAC, with 3 of those years as a Lead for the Wireless Team. Extensive experience with all of the wireless solutions from IOS AP up to the CUWN Controllers. As well as experience working with ACS 3.3/4.x, and some 5.x, and IAS/NPS. Ability to help customers determine business needs and d
Personal Web Page : http://www.wifijanitor.com
4607
Posts
2097
Helpful
792
Solutions
Recent Badges
Awards
3
Created by
Stephen Rodriguez
in Wireless Security and Network Management
in Wireless Security and Network Management
02-20-2019
08:22 AM
02-20-2019
08:22 AM
yes and no....
You can't block the clients from seeing the SSID from the WLC.
The client are going to see any SSID that is in their area.
You could look into some RF film on windows to help restrict what they can see.
Is there an issue with your users connecting to incorrect SSIDs?
Steve
... View more
Created by
Stephen Rodriguez
in Wireless - Mobility Documents
in Wireless - Mobility Documents
03-03-2017
07:28 AM
03-03-2017
07:28 AM
that is a different issue. This document is around the timers and what values should work to keep authentication happening quickly.
From what you're saying, it sounds like you would want to enable the Fast SSID change.
Controller > General > Fast SSID Change - set to enable.
... View more
08-30-2016
02:02 PM
I have access to the Meraki API and have been playing with it a little bit. I see that I can do a call to : https://dashboard.merakicom/api/v0/organizations and this will list out the organizations that I have admin access too. But is there a call that can be made that shows if the organizations I have access to are API enabled? Thanks, Steve
... View more
Labels:
03-10-2016
10:22 AM
I've been looking for API documentation as well, so that I can automate building of estimates, and have not been able to find it.
However I did create a python script to grab the price list and clean it up
https://github.com/wifijanitor/GPL
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless Security and Network Management
in Wireless Security and Network Management
11-19-2015
10:32 AM
11-19-2015
10:32 AM
Honestly I'd load the code to both WLC, and then push the new image to the "primary Flex AP" at each site.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010010001.html
HTH,
Steve
... View more
DCA should have nothing to do
in Wireless Security and Network Management
11-19-2015
09:58 AM
11-19-2015
09:58 AM
DCA should have nothing to do with it. Even if the AP changes channels the clients state in the MSCB wouldn't change.
Now, I might look at the sessions timeout and see if you wanted to increase that.
It may also have something to do with the group key rotation for the PSK, which would make it seem random.
HTH,
Steve
... View more
Yes, the certificate needs to
in Wireless Security and Network Management
11-16-2015
07:34 AM
11-16-2015
07:34 AM
Yes, the certificate needs to be issued from a public/well known CA. Otherwise the client device won't have the Root CA in it's trust list.
And yes, the common name needs to match. To set the name on the WLC, you put the FQDN under the Virtual IP configuration, and that will become the URL the client attempts to go to.
HTH, Steve
... View more
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-11-2015
11:10 AM
11-11-2015
11:10 AM
So the WLAN is enabled for FlexConnect local switching, and you went into the AP and mapped the VLAN?
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-11-2015
10:53 AM
11-11-2015
10:53 AM
I would go with FlexConnect for the remote sites.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless and Mobility
in Wireless and Mobility
11-06-2015
11:48 AM
11-06-2015
11:48 AM
sorry, debug capwap ap ip address and debug capwap ap controller ip address
Steve
... View more
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
in Other Wireless - Mobility Subjects
11-06-2015
11:47 AM
11-06-2015
11:47 AM
if you want to use the SonicWall as the DHCP server, you need to disable DHCP proxy on the WLC.
HTH,
Steve
... View more
11-06-2015
11:43 AM
ok, you can try this:
debug capwap console cli
debug capwap client no-reload
capwap ap ip address
capwap ap controller ip address
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless and Mobility
in Wireless and Mobility
11-06-2015
11:39 AM
11-06-2015
11:39 AM
that AP is running a capwap image, so you can't configure the AP directly.
You need to have the AP join the WLC, and then you can set it's IP there.
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless Security and Network Management
in Wireless Security and Network Management
11-05-2015
09:45 AM
11-05-2015
09:45 AM
Looks like SHA-256 is supported already.
Generate CSR
and it looks like you need to specificy -sha256
http://itigloo.com/security/generate-an-openssl-certificate-request-with-sha-256-signature/
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless and Mobility
in Wireless and Mobility
11-05-2015
09:32 AM
11-05-2015
09:32 AM
Per the 8.0.120.0 Release Notes the OEAP600 is still supported
what do you get from:
debug mac-address < ap mac address >
debug capwap events enable
debug capwap erros enable
HTH,
Steve
... View more
Created by
Stephen Rodriguez
in Wireless Security and Network Management
02-20-2019 08:22 AM
02-20-2019 08:22 AM
yes and no.... You can't block the clients from seeing the SSID from the
WLC. The client are going t...
Created by
Stephen Rodriguez
in Wireless - Mobility Documents
03-03-2017 07:28 AM
03-03-2017 07:28 AM
that is a different issue. This document is around the timers and what
values should work to keep au...
08-30-2016 02:02 PM
I have access to the Meraki API and have been playing with it a little
bit.I see that I can do a cal...
03-10-2016 10:22 AM
I've been looking for API documentation as well, so that I can automate
building of estimates, and h...
Created by
Stephen Rodriguez
in Wireless Security and Network Management
11-19-2015 10:32 AM
11-19-2015 10:32 AM
Honestly I'd load the code to both WLC, and then push the new image to
the "primary Flex AP" at each...
Created by
Stephen Rodriguez
in Wireless Security and Network Management
11-19-2015 09:58 AM
11-19-2015 09:58 AM
DCA should have nothing to do with it. Even if the AP changes channels
the clients state in the MSCB...
Created by
Stephen Rodriguez
in Wireless Security and Network Management
11-16-2015 07:34 AM
11-16-2015 07:34 AM
Yes, the certificate needs to be issued from a public/well known CA.
Otherwise the client device won...
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
11-11-2015 11:10 AM
11-11-2015 11:10 AM
So the WLAN is enabled for FlexConnect local switching, and you went
into the AP and mapped the VLAN...
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
11-11-2015 10:53 AM
11-11-2015 10:53 AM
I would go with FlexConnect for the remote sites.
http://www.cisco.com/c/en/us/td/docs/wireless/cont...
11-06-2015 11:48 AM
sorry, debug capwap ap ip address and debug capwap ap controller ip
address Steve
Created by
Stephen Rodriguez
in Other Wireless - Mobility Subjects
11-06-2015 11:47 AM
11-06-2015 11:47 AM
if you want to use the SonicWall as the DHCP server, you need to disable
DHCP proxy on the WLC. HTH,...
11-06-2015 11:43 AM
ok, you can try this: debug capwap console cli debug capwap client
no-reload capwap ap ip address ca...
Created by
Stephen Rodriguez
in Wireless and Mobility
11-06-2015 11:39 AM
11-06-2015 11:39 AM
that AP is running a capwap image, so you can't configure the AP
directly. You need to have the AP j...
Created by
Stephen Rodriguez
in Wireless Security and Network Management
11-05-2015 09:45 AM
11-05-2015 09:45 AM
Looks like SHA-256 is supported already. Generate CSR and it looks like
you need to specificy -sha25...
Public Statistics
| Date Registered | 05-22-2006 12:08 PM |
| Date Last Visited | 06-11-2019 10:28 AM |
| Total Messages Posted | 4,607 |
| Total Helpful Votes Received | 2097 |
Helpful Votes Given To
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
Awards
Cisco Designated VIPs
2014 Wireless
Cisco Designated VIPs
2013 Wireless
Cisco Designated VIPs
2012 Wireless
