Aironet 1242 IOS commands
I'm trying to make airnoet 1242 access point model #AIR - LAP1242AG - A - K9 and I use the guide to
The IOS version is 12.3 (11) JX1 but when I try the commands standard IOS (configure Terminal is not a valid command) I get an error 'order unreconized' I can not access the web GUI. I put the ip address and can ping but when I navigate to it I get nothing.
I would be grateful for any help.
You are not able to access the GUI, or enter the usual IOS commands because your AP running LWAPP software that is used when you want to use a wireless network centralized with controllers (WLC) wireless local area network.
If you want to use this AP as a standalone access point, then you must download an IOS image on it.
To achieve this (IMO), the simplest method is to follow the following steps:
1. enable ios on the AP controls by running the command "debug lwapp console cli".
2 - configure the IP address on the physical interface and make the point of access to a tftp server.
3 - Place an IOS image on the tftp server
4 - AP, type the command: "archive download-sw / overwrite/reload tftp: / // '.
If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.
Tags: Cisco Wireless
I have 2 Setup bridges wireless Cisco Aironet 1310, the line-of-sight, 3/4 mile, one as Root as Non-Root. Sometimes they drop their connection, but a hard reboot, one or two bridges will re-establish the connection. What is the equivalent IOS command to the
"GUI > system software > System Configuration > reboot now" command? I would like to be able to telnet to the units and issue/script, the appropriate command.
the command is "recharge".
BRIDGE # reload
In order to solve problems that result from a problem with a vpn connection, where the router contains an ios firewall, knowing the correct controls are essential. What are the proper commands that should be used for the display of information related to vpn problems? For example, on a pix commands show conn, isa to show her, see the ipsec sa, sh help etc exlate in the determination of the issues. What are some commands which correspond to these and others can be used on a router with a firewall ios?
Take a look at this link to learn more about the Cisco IOS Firewall.
People just a quick question about Cisco AP 1242... which is the recommended IOS for 1242 to make autonomous AP. in the second place, I received the new AP and to my surprise when I open it I can't find no antenna with it. My question is will it work without antenna then what antenna devrais I buy keeping in mind that I will be making it autonomous Ap with router ADSL heard they have different antennas
So why would cisco sell Ap without antenna this is very starnge as per your say it will not work which is very starnge......
It is not strange. It's logical. How do I know what Cisco antenna, as a customer, you want?
I am setting this AP as autonomus and will hook up with ADSL modem so kindly advise the Antenna's shd i but all four.
I gave you the part numbers and I gave you the link to the document. It's now your job to choose the one you want. A single 1240 to ideally two 2.4 Ghz and two 5.0 Ghz antenna. Optionally, disable either radios or possibly disable diversity.
I'm trying to update my Aironet AP1231G IOS. It is running IOS version 12.2 (3) JA ED. I tried many upgrades to the matching under the Aironet 1200 and 1230 categories versions but they do not work. I get the error "ERROR. The software update was interrupted and could not be completed." I tried via tftp, http and via command line. Someone knows what's the problem? Any help would be great. Thank you.
Assign an ip address in the same subnet as the AP is in and place the connection in the same vlan as the AP
I have configured my aironet 1242 to involve multiple SSID, I put a management on the BVI interface ip address. The interface has been configured on the mode of the trunk on the switch.
Everything works fine with the SSID but I'm not able to reach the management ip address.
does anyone have a solution?
Thank you very much.
At first, it seems that you use Vlan 1 natively, which means not identified.
Now, please make sure the address IP of BVI belongs to this range of virtual local network IP addresses.
So don't 172.30.30.101 IP 255.255.255.0 gateway by default - 172.30.30.1 belongs to the vlan 1?
Now, however, you did not specify the vlan native on the switchport.
Use this command to set up.
Switch(Config-if) # trunk switchport vlan 1 native
stop at the port and enable it again so it takes affect immediately.
Let us know the result if it still does not then that I mentioned earlier, the information of vlan and IP address ranges.
I would like to know if possible to run a windows program (i.e. DIR or WINVER) on a machine windows on the network via a computer of IOS command line is connected to the same network. Basically, I have 2 computers in a network, a MAC OS and the other is WINDOWS. MAC OS I want to run a command of windows inside the windows machine.
For example, via the terminal in my mac I want to connect on the windows machine, and run any windows program I have in the windows machine.
I know it's possible to do on linux via the command line WMI Windows Management Instrumentation command-line.
Do we have something similar to the WMI for IOS command line?
I'm confused. You mention a PC (Windows OS), Mac OS (Apple computer) and iOS (Apple iPod touch, iPhone and iPad operating system).
You can get apps that allows a computer iOS to use a computer mac or Windows computer such as LogMeIn or GoToMyPC.
Yu can also get the app that allows you to use your Mac to access a PC.
I currently have a deployment of Cisco Aironet SAP1602E Wireless point to point bridge (bridge using RAP and card, root wireless and Non-Root Bridge) to expand a layer 2 VLAN from one building to the other. It currently operates uisng open authentication and encryption - and is administered remotely via the bridge of root, to get wireless (manage) the bridge Non-Root - RAP wireless remote.
Try to configure the PSK WPA2-PSK remotely via the GUI or CLI - first setup - I informed a similar error to her below indicating that:
Error: Key-management WPA is requried for WPA-PSKRead around, it seems, there is a configuration-control problem, and that I need to specify the mode as WPA2-PSK first, before then being able to specify the PSK there instead of using. However, as soon as this mode is specified on RAP, my remote administration is broken - as probably the RAP try to use WPA2-PSK to look for a PSK, which has not yet been configured. Am I missing something obvious here, or is the order of operations of CLI (1] convert to WPA - PSK; (2] shared secret to apply PSK) as a migration from open to WPA2-PSK cannot be configured remotely (short of preparation of a startup-config; TFTPing presents more; and issuance of a 'reload' remote control)? Can someone please enlighten me as to what the logic is here - no doubt I should be able to specify a PSK first (fo without worrying if I use WPA, WPA2 or other), and then be able to specify that I want as the layer of encryption (WPA) to make use of this pre-parameter PSK? If it was a router, you don't can me to add something to the authentication key chain OSPF; before clarifying its use - why so different Aironet Wireless IOS?
You're right, and because you will have to enter several lines of configuration to switch to WPA2-PSK with AES didn't really matter; the AP would reset the radio anyway because you make changes related to the radio interface. It would be very useful that if Cisco router/switch IOS 'macro' feature available AP thus in changes like this, unfortunately this is not the case.
Start with the nonroot AP and make sure that the following lines are added to your configuration. If you add by the console, the order must be like that, do it by downloading a new configuration of booting with tftp, that it does not matter.
encryption ciphers aes - ccm mode
SSID dot11 TEST
authentication wpa key management
WPA - psk ascii 0
Please rate helpful messages... :-)
I am trying sample and adding a number of OIDs in the mib/ISDN on 2431 & 2921 boxes. The number of T1s on the boxes can vary with the model and configuration of the box. I studied the OID I want to loop through and am sure those to whom I need to try, but I can't build the digital oid using the command 'Add' and get the SNMP get command use the result. Here is my test cmdlet:
No test event manager applet
applet Test Event manager
Info action 200 type snmp oid 188.8.131.52.184.108.40.206.220.127.116.11 get-exact type! isdnSignalingGetIndex
game action 202 j "$_info_snmp_value".
game action 203 I '1 '.
game action 204 k '2 '.
206 action value calls '0 '.
action 210 all $i lt $j! Browse the ISDN interfaces
action 215 all 4 $k! Browse calls in & stats connectes.2 &.4
game action 220 myoides "18.104.22.168.22.214.171.124.126.96.36.199."
action 222 Add $myoid ' $k$ I ".
Info action 223 type snmp oid get exact $myoid
action 224 puts "" myoides = $myoid, i = $i, j $j, k = $k, value = snmp oid = $_info_snmp_value ".
action 225 regexp ' [0-9] + "" $_info_snmp_value ".
the 226 if action $_regexp_result eq 1
227 Add $Calls action $_info_snmp_value
game action 228 $Calls "$_result '.
229 action puts 'calls is $Calls. "
230 action ended
action 232 increment k 2
end of the 234 action
action 240 increment i
250 action ended
clear all system event handler
test run the event handler
Here is the result when I run the cmdlet:
bctrunks-2431-2 #event man run test
myoides = 188.8.131.52.184.108.40.206.220.127.116.11, i = 1, j = 2, k = 2, 2 = snmp oid value
Calls = 0
myoides = 18.104.22.168.22.214.171.124.126.96.36.199, i = 1, j = 2, k = 4, 2 = snmp oid value
Calls = 0
Here's a snmpwalk on Solaris 10 of the poll server the OID I am trying sample and add
-bash-3, $00 snmpwalk-v1 - c TWC-default 10.40.209.2 188.8.131.52.184.108.40.206.220.127.116.11
SNMPv2 - SMI:transmission.18.104.22.168.0 = INTEGER: 2<---- this="" is="" isdnsignallinggetindex="" which="" is="" 1="" +="" last="" isdn="" port="">---->
-bash-3, $00 snmpwalk-v1 - c TWC-default 10.40.209.2 22.214.171.124.126.96.36.199.188.8.131.52
SNMPv2-SMI::transmission.184.108.40.206.1.1.1 = Counter32 : 10
SNMPv2-SMI::transmission.220.127.116.11.1.2.1 = Counter32 : 10<----- this="" is="" the="" number="" of="" isdn="" outbound="" calls="">----->
SNMPv2-SMI::transmission.18.104.22.168.1.3.1 = Counter32 : 2
SNMPv2-SMI::transmission.22.214.171.124.1.4.1 = Counter32 : 2<------ this="" is="" the="" number="" of="" isdn="" inbound="" calls="">------>
SNMPv2-SMI::transmission.126.96.36.199.1.5.1 = Counter32 : 0
-bash-3, $ 00
In this case, the cmdlet must obtain the OID 188.8.131.52.184.108.40.206.220.127.116.11.2.1 & 18.104.22.168.22.214.171.124.126.96.36.199.4.1 values and add them.
The comand 'append' does not seem to be working properly, as indicated by the value of myoides. The IOS command result search tool for the "add action".
order does not explicitly say where the result of append it is placed, so I guess that the result is placed in the variable 'myoides' in my test applet.
I have successfully used the 'action info exact snmp oid
get-type type' syntax in the past, but I do not know if it works using a constructed string variable.
Let me know if you can help me. Thanks in advance.
Add use the variable name not its value. Try this instead:
action 222 Add myoides ' k $I ".
I configured Cisco IOS to authenticate via a server RADIUS (Cisco's ISE). By mistakely I put all authentication via RADIUS only.
Now, I can not connect via RADIUS but unable to connect through credetials local Admin of Cisco IOS and for this reason I am not able to access the privileged commands.
Is there a way back so this connection by admin (SMAP) would be possible and not on the SHELF?
I do not have access to 'configure', 'enable the RADIUS user commands '.
That worked before? BTW, what code IOS are you running?
What error you see on the IOS command line interface when ISE is DOWN and you're trying to connect with the local user account?
Do you have local authentication as a method of failover? You have paper before IOS config you locked?
You can check that the ISE live authentication records if the user is authenticated by the radius server. Can you use the RADIUS credentials, go to LSE > operations > authentication > records messages.
Did you write the changes? If this is not the case, the last resort would be to RELOAD.
* Does the rate of useful messages *.
I have an obligation to protect a single system using maximum connections embryonic tag on the end of the command "static." However, the subnet of class-C all this machine is underway and is already covered by a large static for the whole subnet.
Question: Static commands like routing in the IOS commands, where the itinerary trumps the more generic road? See--->
If I have a static which publishes 10.1.1.0 (class-C), but I put an another static, with * parameters * for 10.1.1.27/32, you take effect?
From my understanding of what you're trying to accomplish, I think you would want the opposite--static specific for 10.1.1.27 should be higher in the order than the more general 10.1.1.0 static. In this way, if an xlate must be built for the 10.1.1.27 host, specific static will take it. If the xlate is for something else in the 10.1.1.0 subnet, it will bypass the specific static and hit the more general one. Make sense?
I am trying to configure a cisco 850 router but I can't do a ping to the outside world of Vlan1.
show running-configLooks follow
Current configuration : 5563 bytes!! Last configuration change at 15:33:02 UTC Sat Aug 13 2016 by ciscoversion 15.2no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname fw2.myfw.tld!boot-start-markerboot-end-marker!!logging buffered 51200 warnings!aaa new-model!!!!!!!aaa session-id commonwan mode ethernet!!!ip dhcp excluded-address 10.10.10.1ip dhcp excluded-address 192.168.1.1ip dhcp excluded-address 129.x.x.5!ip dhcp pool ccp-pool import all network 192.168.1.0 255.255.255.0 dns-server 188.8.131.52 184.108.40.206 default-router 192.168.1.1 lease 0 2! ! ! ip domain name mydomain.tldip name-server 220.127.116.11ip name-server 18.104.22.168ip cef no ipv6 cef! ! ! ! crypto pki trustpoint TP-self-signed-1017650632 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1017650632 revocation-check none rsakeypair TP-self-signed-1017650632! ! crypto pki certificate chain TP-self-signed-1017650632 certificate self-signed 01 3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 31303137 36353036 3332301E 170D3135 30343037 31303536 30375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30313736 35303633 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 81008B15 A50BCE53 C1A10611 78247737 97E31A5D 653AF401 024B244B F96B48E0 0A1B41EE 16FBFDD1 46F2E1E2 1329D2C6 EEFBCF5B 217DE650 7D2729B0 266008F3 AC4565EA 53D7FA5B 35761F14 6FBDCFAC 24994667 CB0311A9 7FE25580 7D9564C3 BFE10A4A F5F57C4F C4E18EC9 19874BCA 03127F56 252D04B8 9465A23F FBB9045B D9EF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 551D2304 18301680 146EAE54 B0C95DC2 0561F596 BC47E94B EF80617E F9301D06 03551D0E 04160414 6EAE54B0 C95DC205 61F596BC 47E94BEF 80617EF9 300D0609 2A864886 F70D0101 05050003 81810014 F5B63E51 AD80D4A0 3230E94D 3D1BE457 5D7CF78D 3C911F32 C7238D24 4A8C84D5 D5D4F744 EA2FFD5C 4A40E7A1 A517BFE3 10CC6078 5F446A15 F60EA41E 08C688AF A7834485 0991C739 F3CA38FE CFAA31E2 C72031C1 BAEFA756 719E4903 705C98A7 E20CB004 6FC82D22 D4E62E0C DBA54481 F6A68B3D AA905352 DD76B19F CD4190 quit! ! username cisco password 0 somepasswordusername admin privilege 15 secret 5 $1$JJZR$kw8yTTHkjUGKIfB8sQiyJ0! ! controller VDSL 0 shutdown ! ip telnet source-interface Vlan1ip ssh port 2222 rotary 1ip ssh source-interface Vlan1ip ssh rsa keypair-name 1024! ! ! ! ! ! ! ! ! ! ! ! interface ATM0 no ip address shutdown no atm ilmi-keepalive! interface Ethernet0 no ip address shutdown ! interface FastEthernet0 no ip address! interface FastEthernet1 no ip address! interface FastEthernet2 no ip address! interface FastEthernet3 no ip address! interface GigabitEthernet0 no ip address! interface GigabitEthernet1 description PrimaryWANDesc_WAN interface ip address 129.x.x.5 255.255.255.0 duplex auto speed auto! interface Vlan1 description $ETH_LAN$ ip address 192.168.1.1 255.255.255.0 ip helper-address 192.168.1.254 ip nat inside ip virtual-reassembly in ip tcp adjust-mss 1412! ip forward-protocol ndip http serverip http access-class 23ip http authentication localip http secure-serverip http timeout-policy idle 60 life 86400 requests 10000! ! ip dns serverip nat inside source list nat-list interface GigabitEthernet1 overloadip route 0.0.0.0 0.0.0.0 GigabitEthernet1! mac-address-table aging-time 15no cdp run! ! ! banner exec ^C% Password expiration warning.----------------------------------------------------------------------- Cisco Configuration Professional (Cisco CP) is installed on this device and it provides the default username "cisco" for one-time use. If you have already used the username "cisco" to login to the router and your IOS image supports the "one-time" user option, then this username has already expired. You will not be able to login to the router with this username after you exit this session. It is strongly suggested that you create a new username with a privilege level of 15 using the following command. username <myuser> privilege 15 secret 0 <mypassword> Replace <myuser> and <mypassword> with the username and password you want to use. -----------------------------------------------------------------------^C banner login ^C-----------------------------------------------------------------------Cisco Configuration Professional (Cisco CP) is installed on this device. This feature requires the one-time use of the username "cisco" with the password "cisco". These default credentials have a privilege level of 15. YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN CREDENTIALS Here are the Cisco IOS commands. username <myuser> privilege 15 secret 0 <mypassword>no username cisco Replace <myuser> and <mypassword> with the username and password you want to use. IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF. For more information about Cisco CP please follow the instructions in the QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp -----------------------------------------------------------------------^C ! line con 0 no modem enableline aux 0line vty 0 4 access-class 23 in privilege level 15 transport input telnet ssh! scheduler allocate 60000 1000! end
I am connected via the port console of the router and can ping the outside world only from port GigaEthernet1 whose IP address
Clients that connect on VLan1 get IP addresses in the range of
192.168.1.0/24and these clients can ping each other, the gateway that is
192.168.1.1and the GigaEthernet1 that has the intellectual property
What's not in this case? Any suggestion is appreciated the most.
Thanks for your post. I had a look at your configuration, and it is great that you are a few short steps on your NAT is why it does not work. Please follow the steps below in order to get this work properly.
1. first of all, let us remove the old configuration NAT then back to a clean slate with the following commands.
no ip nat inside source list nat-list interface GigabitEthernet1 overloadclear ip nat translation *
2. now, we will create a list of access control allows for NAT traffic and create the new NAT statement for that tie together. * NOTE: If the version of IOS, you are running requires mask rather than generic then change 0.0.0.255 to 255.255.255.0.
access-list 100 permit ip 192.168.1.0 0.0.0.255 anyip nat inside source list 100 interface GigabitEthernet1 overload
3. the next step is to specify the logical role of the interfaces in question, whether they are 'inside' or ' outside'.
interface vlan1 ip nat inside exitinterface GigabitEthernet1 ip nat outside exit
4. Finally, save us the configuration and reload.
copy run startreload
After the unit is returned as a result of charging, please try again. In some cases - depending on the version of the IOS, you have to ping the outside world from a computer on the local network rather than just sourcing of the interface VLAN. Try this back and forth, and let me know how get you there. I can't wait to hear back.
Please evaluate the useful messages and mark the correct answers.
Is there a way to tell which calling button switched on after the call is connected to the system of UCCX? We have a call center, and we transfer people for a 3rd party via pressing the number 2. Is it possible to see if someone is pressing the buttons right through CDR? If not to CDR, then where?
There is a possibility that you can capture events of DTMF using IOS commands.
If the calls come from outside (PSTN) via voice gateway you can configure dtmf method NOTIF SIP / RTP NTE in dial-peers.
Check out this blog https://anetworkerblog.com/2011/02/06/dtmf-on-voip/
If NOTIFY SIP/INFO, you can capture even via the PICS Messages
If RTP NTE command you can use voip rtp debugging session named event indicates when the call is active to discover the entered digits.
Otherwise you just extract the RTMT SDL and translator allows to analyze the call and find the entered digits.
Here I havd showed an example of method of dtmf H245 Alphanumeric between CUCM and voice gateway. Call Earth to Script UCCX.
Please note if found complete user!
I was looking through a 1130AG trying to stop radio stations for a day to test. I acceded to these via the web browser. I disabled the A and B/G radios since the location and then went to another location and disabled the FastEthernet (wired) connection. I want to back up these radio and now I can't access the web interface because I disabled the wireless connection. Can anyone help please get out and direct me where to go next door to activate the radios on the access point (without reset if all goes well) and without the ability to access through the web interface based on?
Thanks a lot for your help
Hi Dayne, you are welcome to my friend! ... Sorry for the spelling mistakes before your name (cannot read or type sometimes :)
Here is some info for the use of Hyperterminal Console connections
Info from the console;
Cisco IOS command modes
The Cisco IOS user interface is divided into several different modes. The commands available depend on which mode you are currently in. Enter a question mark (?) at the system prompt to get a list of commands available for each command mode.
When you start a session on the access point, you begin in user mode, often called user EXEC mode. Only a limited subset of the commands are available in user EXEC mode. For example, most of the user EXEC commands is controls spot, such as show commands, which show the current status of the configuration, and clear commands, which clear counters or interfaces. The user EXEC commands are not saved when the access point reboots.
To have access to all commands, you must enter privileged mode. Normally, you must enter a password to enter privileged mode. In this mode, you must enter privileged EXEC mode before you can enter global configuration mode.
Using the configuration modes (global, interface and line), you can make changes to the running configuration. If you save the configuration, these commands are stored and used when the access point reboots. To access the various configuration modes, you must start in global configuration mode. From global configuration mode, you can enter interface configuration mode and line configuration mode.
I hope this helps!
When you try to view the available wireless networks - I'm not able to see "intheair" announced. Am I missing something? Thank you.
dot11 ssid intheair
authentication wpa key management
infrastructure ssid in option
WPA - psk ascii 7 jabadahutcantina
no ip address
encryption vlan 1 tkip encryption mode
base speed - 1.0 2.0 basic basic-5, 5 6.0 9.0 basic-11, 0 12.0 18.0 24.0 36.0 48.0 54.0
root of station-role
encapsulation dot1Q 1 native
No cdp enable
Bridge-group subscriber-loop-control 1
Bridge-Group 1 covering-disabled people
Bridge-Group 1 block-unknown-source
No source of bridge-Group 1-learning
unicast bridge-Group 1-floods
The command that controls the "Broadcast" of the SSID is "guest mode". Take a look;
Comments-mode (SSID configuration mode)
The guest SSID configuration mode-mode command to configure the radio (for the specified SSID) interface to support the guest mode. No form of the command to disable the guest mode.
The access point can have a guest mode SSID or not at all. The guest mode SSID is used in the beacon and frames response to poll requests that specify the SSID generic or empty. If there is no guest mode SSID, the tag contains no SSID and survey with the Joker SSID requests are ignored. Disable the guest mode secures networks a little more. Comments mode activation helps its clients which scan passively (do not pass) associate with the access point. It also allows clients configured without an SSID to associate.
This example shows how to set the LAN wireless for specified guest mode SSID:
(config-if-ssid) #-Guest mode
This example shows how to reset the setting mode to default values (no SSID broadcast):
(config-if-ssid) # no comments-mode
This doc IOS command;
I hope this helps!
Maybe you are looking for
I have a computer laptop g4 250 HP with an intel i5-5200u and integrated graphics card HD 5500. I've heard a thousand times that it is impossible to add a dedicated gpu on a laptop, but: HP provides aservice guide with the largest part of the laptop.
I use a device to simulate in my proposed acquisition of analog signal, and when I try to set the property 'ReadRelativeTo' of the workflow to "MostRecentSample", it throws an error saying that I can't use "CurrentReadPosition". This happens with a
Hello I just got my HP restore CD and tried to reformat my computer laptop dv6 windows 7, however it would not boot from the CD. When I insert the CD and reboot the laptop, I pressed F11 to access the screen, it says to insert the CD and follow the p
I ran a test on the keyboard and the section number of the keyboard worked perfectly. When I typed the numbers on a laptop or a research section, it has not worked. It's somehow doesn't recognize is not this section. Please help. Thank you.
Hello I need a support from you, I bought a setrday tour here in Germany with Windows 7 Home Premium. But it came with Deutsch as a base language that I have no idea how work with the menu of the screen of welcome and all in German and I'm on pain. I