About Stephen Rodriguez

Stephen Rodriguez · ‎03-03-2017

that is a different issue. This document is around the timers and what values should work to keep authentication happening quickly. From what you're saying, it sounds like you would want to enable the Fast SSID change. Controller > General > Fast SSID Change - set to enable.

Stephen Rodriguez · ‎08-30-2016

I have access to the Meraki API and have been playing with it a little bit. I see that I can do a call to : https://dashboard.merakicom/api/v0/organizations and this will list out the organizations that I have admin access too. But is there a call that can be made that shows if the organizations I have access to are API enabled? Thanks, Steve

Stephen Rodriguez · ‎03-10-2016

I've been looking for API documentation as well, so that I can automate building of estimates, and have not been able to find it. However I did create a python script to grab the price list and clean it up https://github.com/wifijanitor/GPL HTH, Steve

Stephen Rodriguez · ‎11-19-2015

Honestly I'd load the code to both WLC, and then push the new image to the "primary Flex AP" at each site. http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010010001.html HTH, Steve

Stephen Rodriguez · ‎11-19-2015

DCA should have nothing to do with it. Even if the AP changes channels the clients state in the MSCB wouldn't change. Now, I might look at the sessions timeout and see if you wanted to increase that. It may also have something to do with the group key rotation for the PSK, which would make it seem random. HTH, Steve

Stephen Rodriguez · ‎11-16-2015

Yes, the certificate needs to be issued from a public/well known CA. Otherwise the client device won't have the Root CA in it's trust list. And yes, the common name needs to match. To set the name on the WLC, you put the FQDN under the Virtual IP configuration, and that will become the URL the client attempts to go to. HTH, Steve

Stephen Rodriguez · ‎11-11-2015

So the WLAN is enabled for FlexConnect local switching, and you went into the AP and mapped the VLAN? HTH, Steve

Stephen Rodriguez · ‎11-11-2015

I would go with FlexConnect for the remote sites. http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html HTH, Steve

Stephen Rodriguez · ‎11-06-2015

sorry, debug capwap ap ip address and debug capwap ap controller ip address Steve

Stephen Rodriguez · ‎11-06-2015

if you want to use the SonicWall as the DHCP server, you need to disable DHCP proxy on the WLC. HTH, Steve

Stephen Rodriguez · ‎11-06-2015

ok, you can try this: debug capwap console cli debug capwap client no-reload capwap ap ip address capwap ap controller ip address HTH, Steve

Stephen Rodriguez · ‎11-06-2015

that AP is running a capwap image, so you can't configure the AP directly. You need to have the AP join the WLC, and then you can set it's IP there. HTH, Steve

Stephen Rodriguez · ‎11-05-2015

Looks like SHA-256 is supported already. Generate CSR and it looks like you need to specificy -sha256 http://itigloo.com/security/generate-an-openssl-certificate-request-with-sha-256-signature/ HTH, Steve

Stephen Rodriguez · ‎11-05-2015

Per the 8.0.120.0 Release Notes the OEAP600 is still supported what do you get from: debug mac-address < ap mac address > debug capwap events enable debug capwap erros enable HTH, Steve

Stephen Rodriguez · ‎11-05-2015

Looking at the Cisco Error meessage decoder, that could be realted to the LSC authorization you have enabled. I would disable LSC: no ap auth-list ap-policy authorize-lsc-ap reboot and see if the AP joins. HTH, Steve

Date Registered	‎05-22-2006 12:08 PM
Date Last Visited	‎08-08-2018 12:02 AM
Total Messages Posted	4,606
Total Helpful Votes Received	2693