Change Interfaces

I have Setup port 0 as an internal interface and external interface 1 port. I want to spend (port 0 = outside, port 1 = inside). Can I connect to the ASA via the Console Port or Port administration to make this change? I connect via SSH and ASA I was unable to save this change. Thank you.

Console port would be the best option because you change autour interfaces and console connection will not affect your communication with the SAA itself.

Tags: Cisco Security

Similar Questions

CS6 change interface like cs3

My version is cs6. different from the cs3 user interface.
How can I change the interface as cs3?
I hope that the solution.

You can customize your workspace.

Together of the workspace overview | Learn Dreamweaver CS6 | Adobe TV

But you can't return a user to interface 3-1/2 versions removed CS6. Too many changes to the web standards has been since then. And the new HTML and CSS Properties panels reflect these changes.

Nancy O.

the new interface of YT and comments

Hello

up to 2 hours ago, I was able to post comments on youtube.
YT changed interface (font size). Now I'm unable to post a comment, post it now botton is grayed out. Thank you.

Try to clear the cache and delete cookies only from Web sites that are causing problems.

"Clear the Cache":
- Firefox/tools > Options > advanced > network > content caching Web: 'clear now '.
'Delete Cookies' sites causing problems:
- Firefox/tools > Options > privacy > "Use the custom settings for history" > Cookies: "show the Cookies".
Start Firefox in Safe Mode to check if one of the extensions (Firefox/tools > Modules > Extensions) or if hardware acceleration is the cause of the problem.
- Put yourself in the DEFAULT theme: Firefox/tools > Modules > appearance
- Do NOT click on the reset button on the startup window Mode safe
- https://support.Mozilla.org/KB/safe+mode
- https://support.Mozilla.org/KB/troubleshooting+extensions+and+themes

3750 stand-alone switch battery change error message displays

We have some 3750 autonomous through our network. IT restarts automatically. through the history of logging, it shows Stack_Link_Change message but this switch is autonomous.

---------------------------------------------------------------------------------------

C3750-1 # sh version
Cisco IOS software, software C3750 (C3750-IPBASE-M), Version 12.2 (35) SE5, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Updated Friday 19 July 07 19:15 by nachen
Image text-base: 0 x 00003000, database: 0 x 01080000

ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M), Version 12.1 (19(r)) EA1b, VERSION of the SOFTWARE (fc2)

The availability of C3750-1 is 3 hours, 11 minutes
System to regain the power ROM
System restarted at 23:22:58 GMT Monday, August 8, 2011
System image file is "flash: c3750-ipbase - mz.122 - 35.SE5.bin".

Cisco WS-C3750 - 24 p (PowerPC405) Prozesseur (D0 revision) 118784K / 12280K bytes of memory.
Card processor ID CAT0847N0Y3
Last reset of tension
4 virtual Ethernet interfaces
24 FastEthernet interfaces
2 gigabit Ethernet interfaces
Password recovery mechanism is activated.

512K bytes of memory simulated by flash not volatile configuration.
Basic Ethernet MAC address: 00:12:80:65:94:00
Number of the motherboard: 8312-73-05
Power supply part number: 341-0029-03
Motherboard serial number: CAT08470DDE
Power supply serial number: LIT0841015S
Revision number of the model: D0
Motherboard revision number: A0
Model number: WS-C3750-24PS-S
System serial number: CAT0847N0Y3
Top Assembly part number: 800-21982-02
Top of page revision number of the Assembly: B0
Version ID: n/a
Revision number of hardware consulting: 0x0A

SW Version SW Image model switch ports
------ ----- ----- ---------- ----------
* 3 26 WS-C3750 - 24 P 12.2, C3750 SE5 (35) - IPBASE-M

Configuration register is 0xF

---------------------------------------------------------------------------------------------------------------

C3750-1 #sh logging

* Mar 1 05:00:33: % SYS-5-CONFIG_I: configured from the system memory

* Mar 1 05:00:33: STACKMGR-5-SWITCH_READY %: switch 3 is READY

* Mar 1 05:00:33: STACKMGR-4-STACK_LINK_CHANGE %: battery Port 1 3 switch has changed state down

* Mar 1 05:00:33: STACKMGR-4-STACK_LINK_CHANGE %: battery Port 2 switch 3 has changed state down

* Mar 1 05:00:34: % STACKMGR-5-MASTER_READY: Master Switch 3 is READY

* Mar 1 05:00:34: % LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, state change downstairs

* Mar 1 05:00:34: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Vlan48, change of State down

* Mar 1 05:00:34: % SYS-5-RESTART: System restarted.

Cisco IOS software, software C3750 (C3750-IPBASE-M), Version 12.2 (35) SE5, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2007 by Cisco Systems, Inc.

Updated Friday 19 July 07 19:15 by nachen

* Mar 1 05:00:34: % SNMP-5-start COLD: SNMP agent on host C3750-1 shall be the subject of a cold start

* Mar 1 05:00:35: % LINK-5-CHANGED: Interface FastEthernet3/0/22, changed state down administratively

* Mar 1 05:00:35: % LINK-5-CHANGED: Interface Vlan1, changed state down administratively * Mar 1 05:00:33: % SYS-5-CONFIG_I: configured from the system memory
* Mar 1 05:00:33: STACKMGR-5-SWITCH_READY %: switch 3 is READY
* Mar 1 05:00:33: STACKMGR-4-STACK_LINK_CHANGE %: battery Port 1 3 switch has changed state down
* Mar 1 05:00:33: STACKMGR-4-STACK_LINK_CHANGE %: battery Port 2 switch 3 has changed state down
* Mar 1 05:00:34: % STACKMGR-5-MASTER_READY: Master Switch 3 is READY
* Mar 1 05:00:34: % LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, state change downstairs
* Mar 1 05:00:34: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Vlan48, change of State down
* Mar 1 05:00:34: % SYS-5-RESTART: System restarted.
Cisco IOS software, software C3750 (C3750-IPBASE-M), Version 12.2 (35) SE5, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Updated Friday 19 July 07 19:15 by nachen
* Mar 1 05:00:34: % SNMP-5-start COLD: SNMP agent on host C3750-1 shall be the subject of a cold start
* Mar 1 05:00:35: % LINK-5-CHANGED: Interface FastEthernet3/0/22, changed state down administratively
* Mar 1 05:00:35: % LINK-5-CHANGED: Interface Vlan1, changed state down administratively

The bugs that I've provided are also associated with stand-alone switches, I can't share bug internal details.

I've seen this problem before, & I understand that it is a standalone switch.

Most of the time that it would be because ports of defective battery which can not really be detected there software. I also looked at the case attached to the bug & found a few similar cases.

How can I change language of myanmar in Windows 8.

How change language Windows myanmar 8.je found no police of myanmar (Myanmar ordinary text) in change language preferences. But found in the fonts folder. And how do I change interface in the language of myanmar. Help me please.

Hi MinHtoon Min,

Thanks for posting your question in the Microsoft Community.

I'm sorry to inform you that we do not have a pack of languages for Myanmar at the present time.

List of available language pack

Reference link:

http://Windows.Microsoft.com/en-us/Windows/language-packs#lptabs=WIN8

How to add the language pack in windows 8

http://Windows.Microsoft.com/en-us/Windows-8/language#1TC=T1

If you need further assistance, please answer and we will be happy to help you.

Change of mutiple discovered - erase all Diaritics

Hi all
I made a script to remove a range of diacritics to the selected text (The Squiggly bits at the top and bottom of letters) that works but I thought could be made more effective by findText().
My question is: can a single search for a range of Unicode (or also a list of words like MOM, MOM, MOM, MOM, MOM etc.) so that they can be deleted or modified to the same thing (in the case of the list of words to the mother). without having to loop through each character in the selection?
my script is:
```
#target "InDesign"
app.doScript("main()", ScriptLanguage.javascript, undefined, UndoModes.FAST_ENTIRE_SCRIPT, "Remove Vowels");

function main()
{
 var cc, t, w, x, d, q;
cc=0
t = app.selection[0];
w = new Array;
x = new Array;
for(d=0; d<t.characters.length-1; d++){
    w[d]=t.characters[d];
try{  
   
  myCharacter= w[d];
    myChar=myCharacter.contents;
    unicode=myChar.charCodeAt (0);
 // Unicode range to remove
 if  (((unicode > (0x0590) && unicode  < (0x05BE))||
        (unicode >  (0x05C0) && unicode  < (0x05C3))|| 
        (unicode >  (0x05C3) && unicode  < (0x05C6)))||
        unicode == (0x05BF)||
        unicode == (0x05C7))
        {x[cc]=d; cc++}
    else 
    
}
catch (noUnicode) {};
}    

q=cc-1;
while (q>-1){
    try {
w[x[q]].remove();        
        }
    catch (error) {};
    q--;
    }}
```
I would also like to know if you can change a list of beach or Word unicode using the indesign regular / change interface?
Thanks in advance.
Trevor

Find the unicode beaches:

[\x{0590}-\x{05BE]} (find the range 0590-05BE)

[\x{0590}-\x{05BE}\x{05C0}-\x{05C6]} (find the ranges 0590-05BE and C 0-05 05 c 6)

Replace the items in a list with a single element:

Search for: \b(mom|mum|mommy|mummy|mam)\b

Replace with the mother

You must do this on the GREP tab.

Peter

AP c1130 and 7.4 WLC

I have a problem what do I do?

No session registration is currently active.

* 14:29:38.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:29:39.343 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:29:39.344 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1
* 14:29:39.346 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:29:39.346 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:29:39.347 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:29:39.347 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:29:39.547 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:29:39.548: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:29:39.609: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:29:39.610: bsnInitRcbSlot: slot 1 has NO radio
* 5 Nov 14:29:40.632: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:29:40.714 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:29:40.719 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:29:40.724 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:29:41.749 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:29:42.749: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:29:49.682 Nov 5: % 3-CAPWAP-ERRORLOG: go join a capwap controller
* 14:29:49.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:29:50.347 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:29:50.348 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1% do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:29:50.350 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:29:50.350 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:29:50.350 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:29:50.350 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:29:50.548 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:29:50.548: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:29:50.609: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:29:50.609: bsnInitRcbSlot: slot 1 has NO radio
* 5 Nov 14:29:51.631: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:29:51.663 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:29:51.668 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:29:52.693 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:29:53.694: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:30:00.681 Nov 5: % 3-CAPWAP-ERRORLOG: go join a capwap controller
* 14:30:01.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:02.340 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:02.341 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1% do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:30:02.343 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:30:02.343 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:30:02.343 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:30:02.343 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:30:03.166 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:30:03.166: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:30:03.229: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:30:03.229: bsnInitRcbSlot: slot 1 has NO radio
* 14:30:03.252 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed state down administratively
* 14:30:03.303 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:03.304 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:03.309 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 5 Nov 14:30:04.251: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:30:04.333 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:04.338 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:04.343 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:30:05.368 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:30:06.369: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:30:13.302 Nov 5: % 3-CAPWAP-ERRORLOG: go join a controller capwap % do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:30:13.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:14.339 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:14.340 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1
* 14:30:14.342 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:30:14.342 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:30:14.343 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:30:14.343 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:30:14.539 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:30:14.539: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:30:14.600: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:30:14.600: bsnInitRcbSlot: slot 1 has NO radio
* 5 Nov 14:30:15.622: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:30:15.654 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:15.659 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:30:16.684 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:30:17.684: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:30:24.674 Nov 5: % 3-CAPWAP-ERRORLOG: go join a capwap controller
* 14:30:25.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:26.338 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:26.339 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1% do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:30:26.341 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:30:26.341 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:30:26.342 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:30:26.342 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:30:26.540 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:30:26.541: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:30:26.602: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:30:26.602: bsnInitRcbSlot: slot 1 has NO radio
* 14:30:26.676 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:26.678 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:26.683 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 5 Nov 14:30:27.624: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:30:27.707 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:27.712 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:27.717 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:30:28.742 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:30:29.743: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:30:36.676 Nov 5: % 3-CAPWAP-ERRORLOG: go join a capwap controller
* 14:30:37.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:38.331 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:38.332 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1% do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:30:38.334 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:30:38.334 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:30:38.334 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:30:38.334 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:30:39.154 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:30:39.154: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:30:39.214: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:30:39.215: bsnInitRcbSlot: slot 1 has NO radio
* 14:30:39.237 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed state down administratively
* 14:30:39.289 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:39.290 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:39.296 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 5 Nov 14:30:40.237: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:30:40.321 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 14:30:40.326 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:40.331 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:30:41.356 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:30:42.356: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:30:49.289 Nov 5: % 3-CAPWAP-ERRORLOG: go join a controller capwap % do not forget to ask the administrator of the CA to revoke your certificate.

No session registration is currently active.

* 14:30:49.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:50.339 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:30:50.340 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1
* 14:30:50.342 Nov 5: % 3-CAPWAP-ERRORLOG: white event 10 & combination State 5.
* 14:30:50.342 Nov 5: % 3-CAPWAP-ERRORLOG: CAPWAP SM Manager: unable to process the message status type 10 5.
* 14:30:50.342 Nov 5: % 3-CAPWAP-ERRORLOG: could not manage capwap control message from the controller
* 14:30:50.343 Nov 5: % CAPWAP-3-Journal of ERROR: failed to process the encrypted package 172.16.10.1 capwap
* 14:30:50.542 Nov 5: % DTLS-5-ALERT: WARNING received: close notify alert 172.16.10.1
* 5 Nov 14:30:50.542: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 172.16.10.1:5246
* 5 Nov 14:30:50.604: % CLIENTERRORLOG-3-LWAPP: LWAPP LED Init: incorrect led State 255
* 5 Nov 14:30:50.604: bsnInitRcbSlot: slot 1 has NO radio
* 5 Nov 14:30:51.626: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
* 14:30:51.659 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
* 14:30:51.664 Nov 5: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
* 14:30:52.689 Nov 5: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
* 5 Nov 14:30:53.689: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
* 14:31:00.678 Nov 5: % 3-CAPWAP-ERRORLOG: go join a capwap controller
* 14:31:00.000 Nov 5: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.16.10.1 peer_port: 5246
* 14:31:01.339 Nov 5: % CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.16.10.1 peer_port: 5246
* 14:31:01.340 Nov 5: % CAPWAP-5-SENDJOIN: send request to join 172.16.10.1% do not forget to ask the administrator of the CA to revoke your certificate.

Below, wire and make sure that you got a version of the software which have a command to fix this cert.

https://supportforums.Cisco.com/document/12453081/lightweight-AP-fail-create-capwaplwapp-connection-due-certificate-expiration

HTH

Rasika

Pls note all useful responses *.

AIR-LAP1242AG-A-K9 cannot adhere to WLC

Guys,

I have problem, I try to connect AIR-LAP1242AG-A-K9 AP WLC 4400 with the 7.0.98.218 software, but the HA indicator is blink and always request new IP address (based on console logg AP), this device can ping from LAN but unstable (based on logg, the always AP request new IP address).

Anyone have experience with this case?

It's newspaper when I try the console to AP.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

XMODEM file system is available.

flashfs [0]: 15 files, 4 folders

flashfs [0]: 0 orphaned files, orphaned directories 0

flashfs [0]: Total number of bytes: 15998976

flashfs [0]: bytes used: 10084864

flashfs [0]: available bytes: 5914112

flashfs [0]: flashfs fsck took 36 seconds.

Basic Ethernet MAC address: 00: 1 d: 45:36:86:ca

Initialization of the ethernet port 0...

Reset the ethernet port 0...

Reset done!

upward, 100 Mbps, full-duplex Ethernet link

Ethernet port initialized 0: connection is established

Loading "flash:/c1240-k9w8-mx.124-23c.JZ/c1240-k9w8-mx.124-23c.JZ"...########################################################################################################################################################################################################################################################################################################################################################################################################################################################

'Flash:/c1240-k9w8-mx.124-23c.JZ/c1240-k9w8-mx.124-23c.JZ' file, unzipped and installed, point of entry: 0 x 3000

execution of...

Legend restricted rights

Use, duplication, or disclosure by the Government is

subject to such restrictions as set out in paragraph

(c) Commercial - limited computer software

The rights to FAR clause 52.227 - 19 and subparagraph s

(c) (1) (ii) rights to technical and computer data

Clause of DFARS 252.227 - 7013 section software.

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

Cisco IOS software, software of C1240 (C1240-K9W8-M), Version 12.4 (23 c) JZ, RELEASE SOFTWARE (fc1)

Technical support: http://www.cisco.com/techsupport

Copyright (c) 1986-2011 by Cisco Systems, Inc.

Updated Thursday, April 6, 11 15:01 by prod_rel_team

Proceed with the initialization of the system

Proceeding to unmask interrupts

Initialization of flashfs...

flashfs [1]: 15 files, 4 folders

flashfs [1]: 0 orphaned files, orphaned directories 0

flashfs [1]: Total number of bytes: 15740928

flashfs [1]: bytes used: 10084864

flashfs [1]: available bytes: 5656064

flashfs [1]: flashfs fsck took 5 seconds.

flashfs [1]: the complete initialization... done Initializing flashfs.

Radio0 present A506 7100 E8000000 A0000000 80000000 3

Radio1 present A506 6700 E8000100 A0040000 80010000 2

This product contains cryptographic features and is under the United States

States and local laws governing the import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third party approval to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. laws and local countries. By using this product you

agree to comply with the regulations and laws in force. If you are unable

to satisfy the United States and local laws, return the product.

A summary of U.S. laws governing Cisco cryptographic products to:

http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

If you need assistance please contact us by mail at

[email protected] / * /.

Cisco AIR-LAP1242AG-A-K9 (PowerPCElvis) Prozesseur (revision A0) 25590K / 7168K bytes of memory.

Card processor ID FTX1135B3ZF

PowerPCElvis CPU at 262 Mhz, revision number 0 x 0950

Last reset of tension

Image LWAPP 7.0.98.218 version

1 interface FastEthernet

2 802.11 radios

32K bytes memory simulated by flash not volatile configuration.

Basic Ethernet MAC address: xxxxxxxxxx

Part number: 73-9925-06

Kit numbered PCA: 800-26579-05

Revision number of PCA: xxxxx

Serial number of PCB: xxxxxxx

Top of page Assembly part number: xxxxxxx

Top of page the Assembly serial number: xxxxxxx

Top of page revision number: A0

Product/model number: AIR-LAP1242AG-A-K9

% Please first set a domain name.

Press RETURN to get started!

* 00:00:06.526 Mar 1: % SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: crypto IOS FIPS self-test passed

* 00:00:08.150 Mar 1: % SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: crypto RADIO FIPS self-test passed on Dot11Radio interface 0

* 00:00:09.747 Mar 1: % SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: crypto RADIO FIPS self-test passed on 1 Dot11Radio interface

* 00:00:09.863 Mar 1: % LWAPP-3-CLIENTEVENTLOG: reading and initialized AP event log (contains 1024 messages)

* 00:00:09.895 Mar 1: State of the voice_diag_test of WLC is false

* 00:00:12.004 Mar 1: % LINK-3-UPDOWN: Interface FastEthernet0, changed State to

* 00:00:12.072 Mar 1: % SYS-5-RESTART: System restarted.

Cisco IOS software, software of C1240 (C1240-K9W8-M), Version 12.4 (23 c) JZ, RELEASE SOFTWARE (fc1)

Technical support: http://www.cisco.com/techsupport

Copyright (c) 1986-2011 by Cisco Systems, Inc.

Updated Thursday, April 6, 11 15:01 by prod_rel_team

* 00:00:12.072 Mar 1: % SNMP-5-start COLD: SNMP agent on host AP001d.4536.86ca knows a cold start

* 00:00:12.154 Mar 1: % CAPWAP-5-CHANGED: CAPWAP changed state of DISCOVERY

* 00:00:12.161 Mar 1: % LINK-5-CHANGED: Interface Dot11Radio1, changed State to reset

* 00:00:12.161 Mar 1: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset

* 00:00:12.369 Mar 1: % SSH-5-ACTIVATED: SSH 2.0 has been activated

* 00:00:13.016 Mar 1: % LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed State to

* 00:00:13.170 Mar 1: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio1, change of State down

* 00:00:13.170 Mar 1: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs

* 00:00:20.493 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxxx.xxxx

* 00:00:30.976 Mar 1: State of the voice_diag_test of WLC is false

* 00:00:31.083 Mar 1: message logging LWAPP to 255.255.255.255.

* 00:00:34.263 Mar 1: % CDP_PD-4-POWER_OK: full power - supply NEGOTIATED online

* 00:00:34.304 Mar 1: % LINK-3-UPDOWN: Interface Dot11Radio1, changed State to

* 00:00:34.342 Mar 1: % LINK-3-UPDOWN: Interface Dot11Radio0, changed State to

* 00:00:35.265 Mar 1: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed State to

* 00:00:35.265 Mar 1: % SYS-6-LOGGINGHOST_STARTSTOP: logging to host started 255.255.255.255 - initiated CLI

* 00:00:35.304 Mar 1: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:00:42.131 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:00:42.135 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:00:42.139 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP - CONTROLLER.tester .net

* 00:01:32.143 Mar 1: % CAPWAP-5-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.

* 00:01:34.274 Mar 1: % CDP_PD-4-POWER_OK: full power - supply NEGOTIATED online

Not in a bound State.

* 00:01:40.659 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.

* 00:01:40.778 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxxx.xxxx

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:01:48.652 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:01:48.655 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:01:48.657 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP - CONTROLLER.tester .net

* 00:02:28.661 Mar 1: % CAPWAP-5-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.

Not in a bound State.

* 00:02:37.173 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.

* 00:02:37.290 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxx.xxxx

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:02:45.164 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:02:45.167 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:02:45.169 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP - CONTROLLER.tester .net

* 00:03:25.170 Mar 1: % CAPWAP-5-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.

Not in a bound State.

* 00:03:33.681 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.

* 00:03:33.798 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxxx.xxxx

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:03:41.673 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:03:41.676 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:03:41.678 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP - CONTROLLER.tester .net

* 00:04:21.679 Mar 1: % CAPWAP-5-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.

Not in a bound State.

* 00:04:30.191 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.

* 00:04:30.308 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxxx.xxxx

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:04:38.181 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:04:38.184 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:04:38.187 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP - CONTROLLER.tester .net

* 00:05:18.191 Mar 1: % CAPWAP-5-DHCP_RENEW: could not find WLC by using DHCP IP. Renew DHCP IP.

Not in a bound State.

* 00:05:26.703 Mar 1: % 3-CAPWAP-ERRORLOG: event white 38 & combination of State 2.

* 00:05:26.820 Mar 1: % ADDRESS_ASSIGN-6-DHCP: Interface FastEthernet0 assigned address DHCP 10.10.11.150, mask 255.255.255.0, hostname AP001d.xxxx.xxxx

Translate "CISCO-CAPWAP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

Translate "CISCO-LWAPP - CONTROLLER.tester .net '... the domain server (10.10.10.40)

* 00:05:34.694 Mar 1: % 3-CAPWAP-ERRORLOG: did not get the server DHCP server log settings.

* 00:05:34.696 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CAPWAP-CISCO - CONTROLLER.tester .net

* 00:05:34.699 Mar 1: % 3-CAPWAP-ERRORLOG: could not resolve CISCO-LWAPP-CONTROL

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Thank you!!!

Hi John,.

If your WLC mgt vlan does not enable DHCP, yes you can try to manually configure an IP address like below (IP & Gateway and WLC mgt IP info that you need to change to according to your intellectual property regime). If the keyword CAPWAP does not use LWAPP keyword in the syntax of the command

LWAP #debug capwap console cli

LWAP #capwap ap 10.10.110.5 ip address 255.255.255.0

LWAP #capwap ap ip default gateway - 10.10.110.1

IP LWAP ap controller 10.10.110.10 #capwap

LWAP #debug lwapp console cli

LWAP #lwapp ap 10.10.110.5 ip address 255.255.255.0

LWAP #lwapp ap ip default gateway - 10.10.110.1

IP LWAP ap controller 10.10.110.10 #lwapp

This refer for details

http://mrncciew.com/2013/03/17/AP-registration/

Position the console AP output this time if it does not work

HTH

Rasika

Pls note all useful responses *.

BGP MPLS ATT

I'm having a problem with a circuit ATT MPLS Ethernet with BGP. I have a 140 circuit with ATT MPLS network and this is the only site where I will have this type of problem.

RECS to the CPE BGP to Rabat and the circuit goes up and down. Finally the circuit will remain difficult. I see at the bottom of my router. ATT tests the circuit and say they are testing their equipment clean. If I go in my equipment and close the physical interface that connects to the ATT equipment the port constantly monte to the TOP and BGP is restored without any problem.

* 26 sep 23:37:36.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state down

* 26 sep 23:37:37.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 26 sep 23:37:51.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to

* 26 sep 23:37:52.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed State to

* 26 sep 23:37:53.195: % ADJCHANGE-5-BGP: neighbor 172.X.X.X Up

* 26 sep 23:40:07.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state down

* 26 sep 23:40:08.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 26 sep 23:40:08.319: % NBR_RESET-5-BGP: neighbor 172.X.X.X reset (flap Interface)

* 26 sep 23:40:08.339: % ADJCHANGE-5-BGP: neighbor 172.X.X.X down the flap of the Interface

* 26 sep 23:40:08.339: % BGP_SESSION-5-ADJCHANGE: 172.X.X.X a unicast IPv4 topology neighbor base removed from Rabat Interface session

* 26 sep 23:45:20.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to

* 26 sep 23:45:21.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed State to

* 26 sep 23:45:22.527: % ADJCHANGE-5-BGP: neighbor 172.X.X.X Up

* 26 sep 23:46:53.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state down

* 26 sep 23:46:54.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 26 sep 23:46:54.319: % NBR_RESET-5-BGP: neighbor 172.X.X.X reset (flap Interface)

* 26 sep 23:46:54.339: % ADJCHANGE-5-BGP: neighbor 172.X.X.X down the flap of the Interface

* 26 sep 23:46:54.339: % BGP_SESSION-5-ADJCHANGE: 172.X.X.X a unicast IPv4 topology neighbor base removed from Rabat Interface session

* 26 sep 23:46:56.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to

* 26 sep 23:46:59.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 27 sep 00:01:16.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to

* 27 sep 00:01:17.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed State to

* 27 sep 00:01:24.171: % ADJCHANGE-5-BGP: neighbor 172.X.X.X Up

* 27 sep 00:02:18.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state down

* 27 sep 00:02:19.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 27 sep 00:02:19.319: % NBR_RESET-5-BGP: neighbor 172.X.X.X reset (flap Interface)

* 27 sep 00:02:19.339: % ADJCHANGE-5-BGP: neighbor 172.X.X.X down the flap of the Interface

* 27 sep 00:02:19.339: % BGP_SESSION-5-ADJCHANGE: 172.X.X.X a unicast IPv4 topology neighbor base removed from Rabat Interface session

* 27 sep 00:10:11.971: % LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state down administratively

* 27 sep 00:10:16.963: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to down

* 27 sep 00:10:20.319: % LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed State to

* 27 sep 00:10:21.319: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed State to

* 27 sep 00:10:23.911: % ADJCHANGE-5-BGP: neighbor 172.X.X.X Up

Hello

Looking at this exit there is certainly a problem of layer 1 over there if its wiring or connection mux fault t, 9/10 its side ISP but you will likely replace the local wiring to keep out them

carrier lost 13, 0 no carrier, 0 break out

carrier and no carrier has lost the carrier is an electrical signal that use Ethernet devices to detect if the wire is being used by an another transmitting station.

The carrier lost counter increases whenever there is a loss of sense of the carrier. This occurs when the material emits a frame on the wire and does not see its own carrier wave on the Ethernet. The absence of the carrier signal increments the counter by any carrier.

carrier lost

Description: Cisco IOS sh interface meter. The number of times that the carrier was lost in the transmission. Common causes: find a bad cable. Check the physical connection on both sides.

Ipv6 access list does not apply autonomous Aironet 3602I-E

As you can see in the attached config I configured two SSID (2G & 5 G) for a third (2G only) SSID and PEAP WPA2-Ent on the vlan 2 for 'poor team access as guest '.

Basically I forced the Dot11Radio0.2 interface in the Group of deck 1 to get all three SSIDS on vlan 1 (since I want just a quick way and dirty to allow its customers access to the internet, without having to configure a vlan separate everywhere).

The guest SSID (XX COMMENTS) allows tkip in addition to BSE and uses a PSK rather than PEAP. Access lists configured on Dot11Radio0.2 IPv4 allows clients connected to this SSID get an IP by DHCP, use the DNS servers on the local network and access the internet. All other traffic for the local network is blocked by access lists guest_ingress and guest_egress.

This all works very well, ipv4 is blocked for guests invited as expected. However, ipv6 is something different. For some reason, the ipv6 access list is completely ignored.

Because I don't need ipv6 for guest access, I thought that I have completely block and do with it. As you can see I have this set:

interface Dot11Radio0.2
guest_ingress6 filter IPv6 traffic in
guest_egress6 filter IPv6 traffic on

and these ipv6 access lists have a rule of "refuse a whole" only. Yet, the XX COMMENTS SSID connected client gets an ipv6 address of the server on the LAN DHCP6 and has full connectivity. For ipv4, that I had to explicitly allow DHCP packets to the client not even get an IP, so the ipv6 access lists are not clearly applied.

No matter if I move the access interface Dot11Radio0 instead lists, they don't do anything. I thought that maybe I should add a "enable ipv6" on the Dot11Radio0.2 interface (even if ipv6 traffic was very good, even where it shouldn't), but when I set "enable ipv6" Dot11Radio0 or Dot11Radio0.2 the radio goes into a sort of infinite loop of reset:

000261: Sep 23 2016 22:32:50.512 it IS: % DOT11-5-EXPECTED_RADIO_RESET: restart Radio Dot11Radio0 interface due to the reset of the interface
000262: Sep 23 2016 22:32:50.516 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
000263: Sep 23 2016 22:32:50.524 it IS: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
000264: Sep 23 2016 22:32:51.516 it IS: % LINEPROTO-5-UPDOWN: Line protocol on the Interface Dot11Radio0, state change downstairs
000265: Sep 23 2016 22:32:51.560 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
000266: Sep 23 2016 22:32:51.568 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
000267: Sep 23 2016 22:32:51.576 it IS: % LINK-5-CHANGED: Interface Dot11Radio0, changed State to reset
000268: Sep 23 2016 22:32:52.608 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to
000269: Sep 23 2016 22:32:53.608 it IS: % LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed State to
000270: 22:32:53.608 Sep 23, 2016 it IS: % DOT11-5-EXPECTED_RADIO_RESET: restart Radio Dot11Radio0 interface due to the reset of the interface
000271: Sep 23 2016 22:32:53.612 it IS: % LINK-6-UPDOWN: Interface Dot11Radio0, changed State to down
etc.

In addition, when creating a list like this ipv6 access:

guest_egress6 IPv6 access list
refuse an entire ipv6

The other is automatically created:

IPv6-guest_egress6 role-based access list
refuse an entire ipv6

A deletion also removes the other.

What is happening with these ipv6 ACLs, why they are not blocking all traffic? Why do I get an acl "role-based" too? Is associated it with?

Is there a another way to kill just any ipv6 on the SSID of COMMENTS XX traffic while leaving alone on others? That's all I need at this stage. If the ipv6 ACL do not work, perhaps this can be done (ab) using a service-policy or policy routing? I'm ready to creative solutions :)

PS. I know this is not the recommended method to configure a guest SSID, but it should still work IMO.

You have encountered a bug I discovered a few months ago (CSCva17063), in your case, the workaround is to apply the ACL on the physical rather than the void interface interface (because you want to completely block IPv6 in any case). I write (more) my conclusions regarding the traffic that refusal on autonomous APs in a blogpost, might be interesting for you to read as well.

Remember that the access point used as a bridge between the wired infrastructure and wireless, not as a router. There's some IOS routing of commands (like the "enable IPv6" command you pointed out) , but these are not the characteristics that should be used or need to be enabled on an access point.

Because the networks internal and customer spend somewhere else, I would perform filtering on this device instead. Also sub gi0.2 interface is missing from your configuration, so I do not think that access as a guest is currently working at all?

Please rate helpful messages... :-)

I'm losing configuration when I turned off my Cisco 857 router

I bought the new router Cisco 857 of the shop. Router must have been used before as I couln can't go inside with name of user and password default cisco/cisco.

Well I followed digital and reset the password for the user name and password. Now I have finally connected to Cisco CP express on my IE browser.

I discovered that someone was using a router in the shop that's why I countries: ' t log in to him in the first place. In any case the problem is that when I changed my configuration and applies the settings he remembers until I turned off. When I turn on again he remembers all the parameters of this shop.

He returned everything back: IP address, former account to level 15 and password - just like after the password reset.

I tried again and he again lost the settings. So I found instructions:

http://www.Cisco.com/en/us/products/HW/routers/ps233/products_tech_note09186a00800a65a5.shtml

I followed it and changed once again all the settings of the router. My settings are still lost after the power on/off. I noticed that when I do everything first bit it shows

0x2102 not 0x2142 like they think that is password reset mode.

Here is my output from Hyper Terminal:

=============================

Cisco#enable

Cisco#show start

Using 3359 out of 131072 bytes

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname Cisco

boot-start-marker

boot-end-marker

logging buffered 51200 warnings

enable secret 5 $1$hpKF$Rc1tl6r45J8iHG7EN5jSk.

no aaa new-model

crypto pki trustpoint TP-self-signed-3185909327

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3185909327

revocation-check none

rsakeypair TP-self-signed-3185909327

crypto pki certificate chain TP-self-signed-3185909327

certificate self-signed 01 nvram:IOS-Self-Sig#5.cer

dot11 syslog

no ip dhcp use vrf connected

ip dhcp excluded-address 10.10.10.1

ip dhcp pool ccp-pool

import all

network 10.10.10.0 255.255.255.248

default-router 10.10.10.1

lease 0 2

ip cef

no ip domain lookup

ip domain name molinary.com

username admin privilege 15 secret 5 $1$jD3j$r6ROikgGsIlcMTGjkxFQ6.

username username privilege 15 password 0 password

Change Interfaces

Similar Questions

Maybe you are looking for