Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Yea9632
08-28-2019
Stats
Member since
04-02-2015
59
Posts
0
Helpful
2
Solutions
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
08-28-2019
04:08 AM
08-28-2019
04:08 AM
Yes, tested with a different computer, same thing, and I changed the URL that should be used after logging, same unfortunately I have no control over Adipsys, I will ask for that.. strange
... View more
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
08-27-2019
09:42 AM
08-27-2019
09:42 AM
Hello Patoberli, Found out that the I applied a Local ACL while I should have used Flexconnect ACLs instead, since the APs used are registred remotly in Flexconnect mode. now the user gets the portal Web page and put his infos, the problem is that once he submits the infos he gets back the same page of the portal asking to fill infos again and again and again, what do you think could be the issue ?
... View more
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
08-25-2019
01:28 PM
08-25-2019
01:28 PM
Hi ammahend, you mean the page to which the user is redirected ? i must be missing something here ... btw the WLC is not hosting the captive portal ... the hotspot manger used is Adipsys, users should be authenticated there, I used the External web athentication
... View more
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
08-25-2019
07:59 AM
08-25-2019
07:59 AM
Hello everybody, I have an issue where the captive portale won"t work properly, the problem is that I have control over the WLC only and not adipsys platform I think I did what should be done in the WLC following the official guide provided by adipsys , here's the link to it https://docplayer.net/23047440-Hotspot-manager-configuration-guide-for-cisco-wlc-adipsys-sas-2405-route-des-dolines-06560-valbonne-sophia-antipolis.html when a user connect to the AP, it gets redirected to the URL defined but cannot open it, like there's is no internet, thought it was HTTPS redirection problem, enabled it by using "config network web-auth https-redirect enable" but still I just need to make sure that the problem is not from the WLC side, do you have any idea guys ? where should I look in such situation ? Thank you
... View more
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
08-22-2019
01:18 AM
08-22-2019
01:18 AM
Thank you for your reply, indeed, the WLC is behind a FW and NAT is enabled on it, the public IP is added to the WLC tho, since the NAT used is the NAT-T. the important thing for me is the WLC, Things that I will add to the list you provided : - APs Mac address filtering, so no Rogue APs can join - Console AP Passwords, so none can login into remote APs ( who knows) and reveal the Public IP address of the WLC ( technically the IP of the outside firewall) - Use of the Flexconnect mode (Data plane routed using the nearest end) - use of the DTLS so the Control plane exchanges between the WLC and the remote AP will be encrypted (Needs a license i'm aware about this) What do you think ?
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-25-2019
06:36 AM
07-25-2019
06:36 AM
Yes, I noticed this and i'm afraid of to fail my setup when I try to move to the production... All documentations say that only 5246 & 5247 are used in CAPWAP process, but I find out that random ones from the 52XX range are assigned ... for the moment the registration process worked perfectly fine using a my home router only ( using port forwarding)
... View more
Created by
Yea9632
in Wireless Security and Network Management
in Wireless Security and Network Management
07-25-2019
05:14 AM
07-25-2019
05:14 AM
Hello, I'm deploying a new WLC which will use a public IP address (behinde a NAT & port forwarding) to register remote APs over the internet... the only ports that will be open are 443 ( for management purpose), 5246 & 5247 for CAPWAP flow... my question is : How can I secure the access to that WLC from external attacks in those 3 ports.... is there any options available in the WLC to avoid such problems, or everything security related should be done at the firewall level ? Thank you in advance
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-24-2019
02:39 AM
07-24-2019
02:39 AM
HI Scott, Thanks for the advices, really helpful, one last question please, do you think DTLS is enough in a design where APs are registred through internet in remote locations, or it's mandatory to use OEAP ? I would like to use only DTLS but not sure of the impact
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-23-2019
12:32 AM
07-23-2019
12:32 AM
Hello Scott, Thank you for your feedback, can you please explain to me the particularity with Flexconnect ? I configured the AP with Flexconnect mode, and finally was able to make the AP join the WLC through internet... the missing option was the NAT address in the WLC (CONTROLLER menu ==> Management interface ==> NAT address), once addded the AP has joined instantly Can you please clarify the Flexconnect point you've mentionned, I would like to respect recommanded practices, because I didn't add the MAC address manually, all I did was giving the Public IP address of the WLC to the AP Thank you
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-22-2019
01:18 AM
07-22-2019
01:18 AM
Hello Resika, Yes I did this as explained in my post "Before all of this, checked that if the AP is able to register to the same WLC locally and it works (primary WLC ip address used was the private one), once I used internet for the same process it won't work( by including the public ip address of the WLC in the AP)" I feel like i'm close to find out what exactly is missing, I see that the WLC send an answer to the AP but it can't join tho...do you have any idea? please take a look at the OP logs
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-19-2019
10:39 AM
07-19-2019
10:39 AM
any idea guys ?
... View more
Created by
Yea9632
in Wireless and Mobility
in Wireless and Mobility
07-19-2019
08:55 AM
07-19-2019
08:55 AM
Hello, I'm trying to make an AP join a controller over the internet, I think I've done all the setup needed to make this work, here's what I did so far : - booted the AP and defined the public IP address of the WLC in the WLC managers list( NAT is configured and tested) - defined NAT rules in the external router wired to the WLC, port forwarding made for the following ports : external ports 443(TCP&UDP) (for management from the outside), 5246 and 5247 (Both UDP) respectively towards internal 443(TCP&UDP), 5246 and 5247 (UDP) ==> tested HTTPS access using Public IP : OK - added the following command to avoid nat problems :config network ap-discovery nat-ip-only disable -disabled latecy check aswell : config ap link-latency disable all -rebooted the AP Before all of this, checked that if the AP is able to register to the same WLC locally and it works (primary WLC ip address used was the private one), once I used internet for the same process it won't work( by including the public ip address of the WLC in the AP) the registration process shows that the AP can't join the WLC, X.X.X.X is the public IP address of the WLC : CAPWAP State: Discovery [*07/19/2019 15:46:05.5533] Discovery Request sent to X.X.X.X, discovery type STATIC_CONFIG(1) [*07/19/2019 15:46:06.1331] Discovery Request sent to X.X.X.X, discovery type STATIC_CONFIG(1) [*07/19/2019 15:46:06.1331] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*07/19/2019 15:46:06.1331] Discovery Response from X.X.X.X [*07/19/2019 15:47:13.0999] Discovery Response from X.X.X.X [*07/19/2019 15:47:13.0000] [*07/19/2019 15:47:13.0000] CAPWAP State: DTLS Setup [*07/19/2019 15:48:10.0222] dtls_disconnect: ERROR shutting down dtls connection ... [*07/19/2019 15:48:10.0222] [*07/19/2019 15:48:10.0222] [*07/19/2019 15:48:10.0222] CAPWAP State: DTLS Teardown [*07/19/2019 15:48:14.7707] No more AP manager addresses remain.. [*07/19/2019 15:48:14.7707] Failed to join controller. [*07/19/2019 15:47:14.0000] [*07/19/2019 15:47:14.0000] CAPWAP State: DTLS Setup In the WLC side : spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21: Discovery Request from Y.Y.Y.Y:5264 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 200, MaxLicense=200 joined Aps =0 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 apType = 58 apModel: AIR-AP1832I-I-K9 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 apType: Ox3a bundleApImageVer: 8.3.143.0 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 version:8 release:3 maint:143 build:0 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 apType = 58 apModel: AIR-AP1832I-I-K9 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 apType: Ox3a bundleApImageVer: 8.3.143.0 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 version:8 release:3 maint:143 build:0 *spamApTask4: Jul 22 16:06:16.152: 00:f8:b4:20:2c:21 Discovery Response sent to Y.Y.Y.Y:5264 System information: vWLC, version : 8.3.143.0 AP : AIR-AP1832I-I-K9 What in your opinion could be the issue ? Thanks
... View more
- Tags:
- vwlc
Labels:
Created by
Yea9632
in Unified Computing System Discussions
in Unified Computing System Discussions
07-03-2019
04:18 AM
07-03-2019
04:18 AM
Hello Kirk, I appreciate your effort to give accurate answers, and details as much as you can to give you an idea about what is happening, we have this S3260 with only 1 server node, this server node has 4 NICs, beside of this nothing was purchased (no hardware / software), in the existing infrastructure we have a 2960X switch and other UCS servers that will need to get access to a shared file located in the storage S3260, and that's it, i'm wondering if we can trunk 4 NICs of the server node or just link them to the switch directly, and use the mentioned applications to manage the entire storage, do you see this as "doable" solution ? I know it's a waste of such chassis, but i'm trying to make this work with what I have now......it's mandatory to use other equipments (fibrechannel switch etc ...) or it can work that way I mentioned ? beside of the hardware requirements , the applications validated in the CVD can work in the scenario I mentioned ? my goal is to share the storage volume available in those disks (around 270 TB) as file share I believe the application you provided to me allow to create and share such volume Thanks so much
... View more
Created by
Yea9632
in Contact Center
in Contact Center
07-02-2019
01:09 PM
07-02-2019
01:09 PM
Oh, I have this configured for Agents as well (knowledge workers), they're recorded and at the same time they log in/out in cisco finesse, so in order to record those new users ( not CC agents) I can do the same without the need of using finesse right?
... View more
Created by
Yea9632
in Unified Computing System Discussions
in Unified Computing System Discussions
07-02-2019
12:16 PM
07-02-2019
12:16 PM
Hi Kirk, it may sound stupid,can I purchase one of the applications and use it in the chassis S3260 with a catalyst switch (by using NICs of the server node) we don't need any high speed transfer or anything (so no need for nexus fibrechannel switch etc ..), just file share that will allow me to exploit the whole volume of disks available
... View more
Created by
Yea9632
in Wireless Security and Network Management
08-28-2019
08-28-2019
Yes, tested with a different computer, same thing, and I changed the URL
that should be used after l...
Created by
Yea9632
in Wireless Security and Network Management
08-27-2019
08-27-2019
Hello Patoberli,Found out that the I applied a Local ACL while I should
have used Flexconnect ACLs i...
Created by
Yea9632
in Wireless Security and Network Management
08-25-2019
08-25-2019
Hi ammahend,you mean the page to which the user is redirected ? i must
be missing something here ......
Created by
Yea9632
in Wireless Security and Network Management
08-25-2019
08-25-2019
Hello everybody,I have an issue where the captive portale won"t work
properly, the problem is that I...
Created by
Yea9632
in Wireless Security and Network Management
08-22-2019
08-22-2019
Thank you for your reply,indeed, the WLC is behind a FW and NAT is
enabled on it, the public IP is a...
07-25-2019
Yes, I noticed this and i'm afraid of to fail my setup when I try to
move to the production... All d...
Created by
Yea9632
in Wireless Security and Network Management
07-25-2019
07-25-2019
Hello,I'm deploying a new WLC which will use a public IP address
(behinde a NAT & port forwarding) t...
07-24-2019
HI Scott,Thanks for the advices, really helpful, one last question
please, do you think DTLS is enou...
07-23-2019
Hello Scott,Thank you for your feedback, can you please explain to me
the particularity with Flexcon...
07-22-2019
Hello Resika,Yes I did this as explained in my post "Before all of this,
checked that if the AP is a...
07-19-2019
Hello, I'm trying to make an AP join a controller over the internet, I
think I've done all the setup...
07-03-2019
Hello Kirk,I appreciate your effort to give accurate answers, and
details as much as you canto give ...
07-03-2019
Thank you for your feedback,In the meanwhile, we have tested another
codec with the same screens .. ...
Public Statistics
| Date Registered | 04-02-2015 07:47 AM |
| Date Last Visited | 08-28-2019 08:06 AM |
| Total Messages Posted | 59 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 10 | |
| 10 | |
| 15 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
