Hi there, IÂ’ve got a problem hopefully someone can help me with. I have the above mentioned AP and it is configured, working well and providing wireless access to several laptops on our domain. The thing is I canÂ’t get access to the web-based interface to add new laptops Mac addresses to the AP as I currently have them secured with local list Mac address authentication but my user name and password when entered in the web browser login dialog box wonÂ’t allow me in although strangely it does allow me to login using the same credentials when I telnet into the AP. Does anyone know why I canÂ’t get logged in using the web interface even though the user name and password does appear to be correct as I can telnet in? Also if you have any suggestions how I could sort this without having to perform the password recovery procedure, as I donÂ’t want all the config on the AP wiped and want to avoid having the set the whole thing up again. As I workaround if anyone knows what the commands are to allow me to add the Mac addresses of the new laptops so they are added to the local list Mac address authentication list so the new laptops are secured that would be great. Thanks in anticipation, Tony ... View more

My company is looking at purchasing the UC540 system for our offices- is this the best option for 15 users, with the possiblility of 1 or 2 remote users, ability to use mobility and presence and room to grow with other features in the future? Also, can anyone recommend a Cisco Partner in the Arlington, VA area who is experienced in the UC500 series systems? ... View more

Hi I am new to the CISCO forums and could not find info where I searched, so of someone can point me in the right direction it will be much appreciated. We want to roll out Voice over Wireless LAN networks for a company, I need to investigate specific considerations for doing this over the 802.11n wireless network. Found technical papers on doing it for .11a and g, but nothing on .11n . Would rather work with detailed info on .11n networks, than using legacy specs. Info will be highly appreciated ... View more

dear all, i would like to have a support to allow traffic of PPTP and GRE ports ... View more

dear all, i would like to have a support to allow traffic of PPTP and GRE ports ... View more

Hi, Can anyone tell me how to setup automatic VPN failover using 2 seperate ISP circuits. Eg, Our Local office has 2 different internet lines conneced to an ASA5510. we VPN from this office to all other remote locations. All traffic originates here. Circuit 1 is primary (default Gateway). I use SLA montoring/Route Tracking to monitor remote office public IP's on ASA. When circuit 1 fails, the default route then goes out Circuit 2 and sets up a new tunnel. All this works as expected. The problem is that the crypto maps on the remote ASA will still try to route all traffic destined the local office back to Circuit 1 IP as it is listed first on the interface crypto map. what i then see on the remote ASA is 2 tunnels up to both circuit 1 and 2. I cannot add an additional tunnel peer on the remote end as traffic does not originate there. any ideas? ... View more

Hello to All, I am new to Cisco HW! I have a ASA5510 i have changed the firewall mode to Transparent, after chaning it i can't access it via ASDM. I have assigned a IP address to aca (192.168.1.1) Eth 0/0 no shutdown and eth 0/1 no shutdown i can ping to 192.168.1.1 from PC if i connect a cable to eth 0/0 ot eth 0/1 but if i connect a cable to ma 0/0 cant ping...... ... View more

Hi! I'm trying to configure ASA 5505 to pass FTP connection to Win2003 IIS FTP server on port 58158. Works fine with port 21 but not any other port. I get : 227 Entering Passive mMode (192.168.1.10,142,158) The server sent a passive answer with a non routable address. This IP is the internal server address. When I use port 21 the IP address above is the external address ocf the router and everything works fine. Using static NAT rule Interface inside, server IP address. Translated Interface outside, use Interface IP address. Enablr Port Address Translation, TCP port 21 to 21 (or 58158 to 58158) Any idea? ... View more

I am looking to use an ASA 5510 as a VPN device only (similar to the old VPN Concentrator) We already have an ASA5510 acting as a firewall to the internet from our central office. We also have a MPLS network to 7 other locations, and they all go through the Central Office for internet access. I will have VPN client users, and site to site VPNs connecting to the CO, and will need to access hosts in other sites in the MPLS network, as well as hosts in the CO. I am confused on where I should place my VPN ASA. I was thinking that I should put it at the same level of my Firewall ASA, but then I am not sure what I need to use as far as routing to make sure my traffic is able to flow properly. It would not let me post an attachment, so here is a link of the CO and MPLS general setup. http://www.asicorp.us/ciscolayout.jpg Any insight would be greatly appreciated. ... View more

Hi,recently i have installed IME but it is not showing any event data on event monitoring,its showing all the information regarding IPS and its health and connectivity but not showing any data, Please help Thanks ... View more

I am running 2 pairs of Cisco ASA5510 which terminate VPNs and provide perimeter security to our business. I would like to upgrade the code to benefit from the VISTA supported SSL vpn client. Has anyone done this from 7.2.4 to 8.2 and have they found the new version of code to be stable and bug free. ... View more

I have a Cisco VPN 3000 concentrator that uses AD authentication to my domain controller. Everyone in AD can connect. How do I continue to authenticate through AD but only allow specific accounts to use the vpn? Or deny specific accounts from using the VPN? ... View more

Hi, Many universities and colleges around the country use Cisco Clean Access Agent and require that all students log in to their network using it. Macs are the most popular "campus computers" these days and with many new Freshman students buying their first laptop now, they come pre-installed with mac OSX 10.6.1 aka snow leopard. Currently, the clean access agent doesn't recognize osx10.6.1 as a valid OS. The fix is simple, to just change Clean Access Agent to recognize snow leopard as a valid OS. However, Cisco has done nothing to fix this, even though they had access to snow leopard before it was even released. Many college students can't get on the network or internet because of this issue, and it should be fixed ASAP. If anyone knows a work around for this, or knows when a new version of Clean Access Agent that fixes this is being released, please let me know. Thanks ... View more

Hello, I have a customer who suffered a crash of his 4507R with dual Sup IV supervisor 2 weeks ago. The primary one has not come to life, it only turns on the POWER led and only the "ODD" UTILIZATION leds, all in green. The secondary, that at time of the crash did not come up had neither configuration nor any logging information. It is now up and running. Its IOS was not changed, nor its rom image. I appreciate if anyone can send me any clue or info for identifying the possible cause of the crash. Thanks a lot, Julio Sanchez Avalos CCIE #3053 SUP IV INFORMATION 4507-ADM#sh ver Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I5K91S-M), Version 12.2(25)EWA4, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Fri 23-Sep-05 12:49 by ssearch Image text-base: 0x10000000, data-base: 0x115EF984 ROM: 12.1(20r)EW1 Dagobah Revision 95, Swamp Revision 28 4507-ADM uptime is 3 weeks, 10 hours, 3 minutes Uptime for this control processor is 2 weeks, 6 days, 13 hours, 49 minutes System returned to ROM by power-on System restarted at 00:04:07 ARG Thu Aug 20 2009 System image file is "bootflash:cat4000-i5k91s-mz.122-25.EWA4.bin" 4507-ADM#sh bootflash: -#- ED ----type---- --crc--- -seek-- nlen -length- ---------date/time--------- name 1 .. image 52B97781 CC3EE4 32 12861028 Sep 21 2004 23:30:37 -03:00 cat4000-i5k91s-mz.122-20.EWA.bin 2 .. image 95C3AF25 192FD4C 33 13024744 Feb 22 2006 19:05:11 -03:00 cat4000-i5k91s-mz.122-25.EWA4.bin 3 .. unknown 2BBA3496 1930288 35 1211 Aug 17 2009 12:24:42 -03:00 post-2009.08.17.15.24.29-failed.txt 4 .. unknown 23C16DC6 19307CC 35 1219 Aug 20 2009 00:04:03 -03:00 post-2009.08.20.03.04.03-passed.txt 35452980 bytes available (25888716 bytes used) File post-2009.08.17.15.24.29-failed.txt Power-on-self-test for Module 2: WS-X4515 Port/Test Status: (. = Pass, F = Fail, U = Untested) Reset Reason: Software/User Port Traffic: L2 Serdes Loopback ... 0: F 1: . 2: F 3: . 4: F 5: . 6: . 7: . 8: F 9: . 10: F 11: . 12: . 13: . 14: F 15: F 16: F 17: F 18: F 19: . 20: F 21: . 22: F 23: . 24: . 25: . 26: F 27: . 28: F 29: . 30: F 31: . Port Traffic: L2 Asic Loopback ... 0: . 1: F 2: F 3: . 4: . 5: . 6: F 7: F 8: . 9: F 10: F 11: F 12: F 13: F 14: F 15: . 16: F 17: . 18: . 19: F 20: . 21: F 22: . 23: F 24: . 25: F 26: . 27: . 28: . 29: . 30: . 31: . Port Traffic: L3 Asic Loopback ... 0: . 1: . 2: . 3: . 4: . 5: F 6: . 7: . 8: F 9: . 10: . 11: F 12: F 13: F 14: F 15: F 16: . 17: F 18: F 19: F 20: . 21: . 22: F 23: F 24: F 25: F 26: F 27: F 28: F 29: . 30: . 31: . Switch Subsystem Memory ... 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: . 24: . 25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: . 36: . 37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: . 48: . 49: . 50: . 51: . 52: . 53: . 54: . 55: . Module 2 Failed ... View more