Cisco bridge Setup root nonroot

Similar Questions

• Cisco 1700 Setup as a hub for Cisco Anyconnect VPN

  The complete configuration for the router is attached. Additional configuration includes forwarding port 443 (the two tcp/udp), udp 4500, udp 500 and udp 50 to 192.168.1.20.

  Objective: Configure Cisco 1700 router as a VPN server, which a Cisco Anyconnect VPN client in. The VPN server is behind a NAT.

  Question 1: The Cisco Anyconnect client pulls its set of configuration of the router? I just need to point to the correct IP address and hit connect and it will do the rest? If not, what additional client side configuration must be done? I noticed, it tries to connect on port 443 to my router, but I don't really know why and I know that my router is not listening on this port, so I know I'm missing something:-D.

  Question 2: What are the features specifically include easy vpn server? I am confused as to exactly what it is. From what I can tell when you configure easy vpn server you simply set up a regular VPN.

  Question 3: Cisco Easy VPN remote has something to do with Cisco Anyconnect or they are completely distinct?

  Sorry for the newbie questions. It's really hard to understand the different systems and features on it and most of the examples I found dealt with the VPN router to router rather than configurations just for computers of end users, but I'll be the first to admit that I am new on this hahaha.

  Thanks for your help.

  PS: Any comment on the misconfigs are welcome. I'm still trying to understand fully exactly what each command does.

  Grant

  Grant,

  AnyConnect can do SSLVPN or IPsec (with IKEv2), ezvpn is all about IKEv1, it won't work.

  There (part 3) customers who will be able to connect to ezvpn, as well as the former customer Cisco VPN, but AC is not.

  BTW... it's not 50/UDP, this is IP protocol 50 (or sometimes 51) - ESP (or AH).

  You don't have TCP and UDP 443 for IPsec, but you may need them for SSL.

  And seriously... series of 1700? Wow, this is a 'retro' kit :-) Support ended 6 years ago.

  M.

• Cisco Aironet SAP1602E - changing open to WPA - PSK access remote (RAP and map)

  I currently have a deployment of Cisco Aironet SAP1602E Wireless point to point bridge (bridge using RAP and card, root wireless and Non-Root Bridge) to expand a layer 2 VLAN from one building to the other. It currently operates uisng open authentication and encryption - and is administered remotely via the bridge of root, to get wireless (manage) the bridge Non-Root - RAP wireless remote.

  Try to configure the PSK WPA2-PSK remotely via the GUI or CLI - first setup - I informed a similar error to her below indicating that:

  Error: Key-management WPA is requried for WPA-PSK

  Read around, it seems, there is a configuration-control problem, and that I need to specify the mode as WPA2-PSK first, before then being able to specify the PSK there instead of using. However, as soon as this mode is specified on RAP, my remote administration is broken - as probably the RAP try to use WPA2-PSK to look for a PSK, which has not yet been configured. Am I missing something obvious here, or is the order of operations of CLI (1] convert to WPA - PSK; (2] shared secret to apply PSK) as a migration from open to WPA2-PSK cannot be configured remotely (short of preparation of a startup-config; TFTPing presents more; and issuance of a 'reload' remote control)? Can someone please enlighten me as to what the logic is here - no doubt I should be able to specify a PSK first (fo without worrying if I use WPA, WPA2 or other), and then be able to specify that I want as the layer of encryption (WPA) to make use of this pre-parameter PSK? If it was a router, you don't can me to add something to the authentication key chain OSPF; before clarifying its use - why so different Aironet Wireless IOS?

  You're right, and because you will have to enter several lines of configuration to switch to WPA2-PSK with AES didn't really matter; the AP would reset the radio anyway because you make changes related to the radio interface. It would be very useful that if Cisco router/switch IOS 'macro' feature available AP thus in changes like this, unfortunately this is not the case.

  Start with the nonroot AP and make sure that the following lines are added to your configuration. If you add by the console, the order must be like that, do it by downloading a new configuration of booting with tftp, that it does not matter.

  interface Dot11Radio0
  encryption ciphers aes - ccm mode

  SSID dot11 TEST
  authentication wpa key management
  WPA - psk ascii 0

  Please rate helpful messages... :-)

• ASSOCIATION NON-ROOT FOR NON-ROOT?

  Hello

  I have an AIR-AP1242AG-A-K9 and two AIR-AP1242AG-N-K9. I have already set up that they work as bridge.

  Bridge of root with---> 1 AIR-AP1242AG-N-K9 wireless clients

  Non-Root Bridge1 with---> 1 AIR-AP1242AG-N-K9 wireless clients

  Non-Root Bridge2 with---> 1 AIR-AP1242AG-A-K9 wireless clients

  I noticed after reset root bridge or one of the non-root that fills when I type the command 'sh DOt11 associations' results show that there is a connection between the Bridge Non-Root 2. When this happened to the connection of customers related to the APs is very unstable.

  as far as I know, the association is just between the bridges of root and Non-Root.

  I Don t know why it happened.

  To avoid this, I turn off in one of the bridge nonroot (AIR-AP1242AG-A-K9) the option 'Force Infrastructure Device to associate only... »

  Cisco's docs show an example of a config when there is a root bridge and a bridge not root, but in my case, I have 2 nonroot bridge and bridge of a single root.

  I would like to know if the config for my scenario must be different from the simple scenario (1 root and 1 non-root).

  I hope that someone of you can help me.

  Concerning

  You are right.  I'd only authentication mac on the nonroot Bridge 1.  In this way, you can prevent the roots not to associate with each other if they really are.  Then if it works, you can set the authentication mac on the bridge of root with the mac address of two nonroot bridges.

• Radio0-802. 11A address MAc indicated but not enable ROOT - AP

  Hello

  I have a ROOT access point and 2 NO ROOT APs does not work well, sometimes NO roots lost connection with ROOT. I need to change everything for the new.

  After the associated parameter config in each of them, NO ROOT with the ROOT AP, so far everything looks very good.

  When I type sh dot11 association on ROOT, the other is shown.

  ROOT >
  ROOT > sh dot11 associations

  802.11 client Stations on Dot11Radio0:

  SSID [link]:

  MAC address IP Device Name Parent State
  003A.9922.1f20 0.0.0.0 Br-client - Assoc 003a.9924.2ba0---> 802.11 has
  Bridge of 003a.9924.2ba0 192.168.1.249 NON-ROOT2 self Assoc
  Bridge of 003a.9933.e070 192.168.1.251 NON-ROOT1 self Assoc
  003A.9935.1BA0 0.0.0.0 Br-client - Assoc 003a.9933.e070---> 802. 11A

  ROOT >

  with the old ROOT AP only showed info related to NON-ROOT2 and NON-ROOT1 Radio0 802 mac address. 11 g; I do not understand why is indicated as much info on the other interface, in College, they are disabled.

  is there something wrong with the PA? is a bug?

  This reach the operation?

  on NON-ROOT is the info shown

  NON-ROOT1 >sh dot11 ASSociations

  802.11 client Stations on Dot11Radio0:

  SSID [link]:

  MAC address IP Device Name Parent State
  003A.9933.eb30 192.168.1.250 ROOT 11 g-bridge - Assoc

  NON-ROOT2 >sh dot11 associations

  802.11 client Stations on Dot11Radio0:

  SSID [link]:

  MAC address IP Device Name Parent State
  003A.9933.eb30 192.168.1.250 ROOT 11 g-bridge - Assoc

  NON-ROOT2 >

  Concerning

  Hello

  There was an internal bug filed for what you see. The bug will be marked as external, so it can be viewed with the Cisco Bug tool in the following days.

  For bug summary:

  CSCti72291    Root watch non-pont bridge another radio as a client bridge.

  Everything associated with Dual radio AP root and non-root bridge mode bridge
  Watch radio nonroot bridge disabled as br-client root bridge.

  1. set up a dual radio ap as a root bridge and another ap non-root Bridge.
  2 combine the two AP
  3. link to the root bridge table indicates nonroot bridge another mac-address client-br radio.

  Also if the bridge root partner nonroot bridge via interface d0/d1.
  The bridge root configure d0 as root bridge triggers radio reset in vice versa and d1 interface

  This bug has been closed for the time being and there is no solution as this is added as part of the fixed CSCsj68025 bug.
  So in summary all the time that NRB associated root bridge, it updates the root on the two radio stations (point 0 and point 1).
  This happens regardless of the State of radio (upwards or downwards).  It has no side effects because of this behavior.

  Please let us know if none is more on that.

  Kind regards

  Alex

• helps bridge configuration

  Hi all

  I try to fill 2 VLANS using 1 one ssid but failed. The APs are Cisco AIR-AP1242AG-A-K9. Here is the configuration. Please help find the problem or share a sample of the configuration. Thank you very much.

  -------------------------------------Root Bridge-------------------------------------------------------------------

  Root #sh run
  Building configuration...

  Current configuration: 1834 bytes
  !
  version 12.4
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  name of host root
  !
  enable secret 5 $1$ qvkA$ iCQUBDBCeHOS8qVo7RhaS.
  !
  No aaa new-model
  !
  !
  dot11 syslog
  !
  dot11 ssid CS832A
  VLAN 28
  open authentication
  shared authentication
  authentication-key wpa version2 management
  infrastructure-ssid
  WPA - psk ascii 7 06575F706A1D594D5D45455B5D507F7B007D6B6606
  !
  dot11-arp Optionally cache
  negotiating inline power injector substitute
  !
  !
  05280F1C2243 Cisco 7 password username
  !
  !
  Bridge IRB
  !
  !
  interface Dot11Radio0
  no ip address
  no ip route cache
  !
  encryption ciphers aes - ccm mode
  !
  SSID CS832A
  !
  Speed basic - 1.0 2.0 - basic basic - basic-11 5.5, 0
  no short preamble
  channel 2412
  station-role root bridge
  !
  interface Dot11Radio0.10
  encapsulation dot1Q 10
  no ip route cache
  Bridge-group 10
  !
  interface Dot11Radio0.28
  28 native encapsulation dot1Q
  no ip route cache
  Bridge-group 28
  !
  interface Dot11Radio1
  no ip address
  no ip route cache
  Shutdown
  DFS block 3 Strip
  channel SFR
  root of station-role
  Bridge-Group 1
  Bridge-group subscriber-loop-control 1
  Bridge-Group 1 block-unknown-source
  No source of bridge-Group 1-learning
  unicast bridge-Group 1-floods
  Bridge-Group 1 covering-disabled people
  !
  interface FastEthernet0
  no ip address
  no ip route cache
  automatic duplex
  automatic speed
  !
  interface FastEthernet0.10
  encapsulation dot1Q 10
  no ip route cache
  Bridge-group 10
  !
  interface FastEthernet0.28
  28 native encapsulation dot1Q
  no ip route cache
  Bridge-group 28
  !
  interface BVI1
  IP 192.168.28.11 255.255.255.0
  no ip route cache
  !
  IP http server
  no ip http secure server
  IP http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
  1 channel ip bridge
  !
  !
  !
  Line con 0
  line vty 0 4
  local connection
  !
  end
  Root #sh ip int brie
  Interface IP-Address OK? Method State Protocol
  BVI1 192.168.28.11 YES manual down down
  Unordered Dot11Radio0 YES TFTP upward upwards
  Dot11Radio0.10 unassigned YES unset upward, upward
  Dot11Radio0.28 unassigned YES unset upward, upward
  Dot11Radio1 unassigned YES NVRAM administratively down down
  FastEthernet0 unassigned YES NVRAM up up
  FastEthernet0.10 unassigned YES unset upward, upward
  FastEthernet0.28 unassigned YES unset upward, upward
  Virtual-Dot11Radio0 unassigned YES TFTP low low
  Virtual - Dot11Radio0.10 not assigned YES unset down down
  Virtual - Dot11Radio0.28 not assigned YES unset down down
  Root #.
  Root #show dot11 bssid

  Comments interface SSID BSSID
  Dot11Radio0 001a.302e.01e0 not CS832A
  Root #.
  Root #.
  Root #show dot11 Association
  Root #.

  ---------------------------------------------Non-Root Bridge----------------------------------------------------------------------

  Non-Root #sh run
  Building configuration...

  Current configuration: 1857 bytes
  !
  version 12.4
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  Non-Root host name
  !
  enable secret 5 $1$ RJ4C$ WDM/tBrstgdLxdOQcm6YO /.
  !
  No aaa new-model
  !
  !
  !
  dot11 ssid CS832A
  VLAN 28
  open authentication
  shared authentication
  authentication-key wpa version2 management
  infrastructure-ssid
  WPA - psk ascii 7 06575F706A1D594D5D45455B5D507F7B007D6B6606
  !
  dot11-arp Optionally cache
  negotiating inline power injector substitute
  diet pre-standard trading online
  !
  !
  05280F1C2243 Cisco 7 password username
  !
  Bridge IRB
  !
  !
  interface Dot11Radio0
  no ip address
  no ip route cache
  !
  encryption ciphers aes - ccm mode
  !
  SSID CS832A
  !
  Speed basic - 1.0 2.0 - basic basic - basic-11 5.5, 0
  no short preamble
  station-role nonroot bridge
  !
  interface Dot11Radio0.10
  encapsulation dot1Q 10
  no ip route cache
  Bridge-group 10
  !
  interface Dot11Radio0.28
  28 native encapsulation dot1Q
  no ip route cache
  Bridge-group 28
  !
  interface Dot11Radio1
  no ip address
  no ip route cache
  Shutdown
  DFS block 3 Strip
  channel SFR
  root of station-role
  Bridge-Group 1
  Bridge-group subscriber-loop-control 1
  Bridge-Group 1 block-unknown-source
  No source of bridge-Group 1-learning
  unicast bridge-Group 1-floods
  Bridge-Group 1 covering-disabled people
  !
  interface FastEthernet0
  no ip address
  no ip route cache
  automatic duplex
  automatic speed
  !
  interface FastEthernet0.10
  encapsulation dot1Q 10
  no ip route cache
  Bridge-group 10
  !
  interface FastEthernet0.28
  28 native encapsulation dot1Q
  no ip route cache
  Bridge-group 28
  !
  interface BVI1
  IP 192.168.28.12 255.255.255.0
  no ip route cache
  !
  IP http server
  no ip http secure server
  IP http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
  1 channel ip bridge
  !
  !
  !
  Line con 0
  line vty 0 4
  local connection
  !
  end

  Non-Root #sh ip int brie
  Interface IP-Address OK? Method State Protocol
  BVI1 192.168.28.12 YES NVRAM low low
  Dot11Radio0 unassigned YES manual reset down
  Reset Dot11Radio0.10 unassigned YES unset down
  Reset Dot11Radio0.28 unassigned YES unset down
  Dot11Radio1 unassigned YES NVRAM administratively down down
  FastEthernet0 unassigned YES NVRAM up up
  FastEthernet0.10 unassigned YES unset upward, upward
  FastEthernet0.28 unassigned YES unset upward, upward
  Virtual-Dot11Radio0 unassigned YES TFTP low low
  Virtual - Dot11Radio0.10 not assigned YES unset down down
  Virtual - Dot11Radio0.28 not assigned YES unset down down
  Non-Root #.
  Non-Root #show dot11 bssid

  Comments interface SSID BSSID
  Dot11Radio0 003a.9889.50a0 not CS832A
  Non-Root #.
  Non-Root #.
  Non-Root #show dot11 Association
  Non-Root #.

  Did you put this unit through CLI?

  I highly recommend do you by GUI (Internet explorer)

  There are a few mistakes...

  Initially this remove the SSID configuration:

  shared authentication

  Then apply encryption AES - CCM vlan native (28)

  Let us know how it goes...

• Wifi bridge with customer

  Hi all

  The wireless client works with wireless bridge, said AP1400?

  Thank you

  MAK

  Hi Mak,

  Currently the only bridge that does not accept client connections / association is the bridge of BR1310.

  The BR1410 will not accept any client association on this subject, it can be associated with only other bridges BR1410.

  The BR1310 has a "RootAP" mode, which allows to associate not only bridges not root which are also BR1310s, but association of customers such as wireless laptops and other models of APs as 1200s.

  I hope this helps.

  URL for more information BR1310:

  http://www.Cisco.com/en/us/products/ps5861/index.html

  Kind regards

  Aaron

• Cisco Jabber CDR analysis and reporting: the lost packets and other info call stating "Null."

  Hello

  I have recently setup Cisco Jabber Setup and make a video call between Mac and Windows laptop. When I go to the CDR reporting, I can find my call details when I search after the end of the call. However, I see lost packets, jitter, latency as Null.

  I looked in the support forums and made all the required configurations such as going to service settings and allowing the call diagnosis. I also uncheck CDR load only one box, but not seeing any information other than the ip address and the details of the bandwidth of VideoCAP.

  Am I missing something?

  CDR.png

  

  No, the CMR is not implemented in any current version of Jabber, the next version of Jabber will be the first to have * some * RMC capacity.

  What you see at the present time, is the expected behavior.

• Cannot install the Client VPN Cisco due error 1722

  Dear,

  I went to istall the Cisco VPN Client SW. But my laptoop installation finished with error 1722. Here is the log file fagment:

  MSI (s) (74:B0) [12:07:23:006]: product: Cisco Systems VPN Client 5.0.07.0440 - error 1722. There is a problem with this Windows Installer package. A program run as part of the Setup did not finish as expected. Contact your provider to support personal or package.  Action CsCaExe_VAInstall, location: C:\Program Files (x 86) \Cisco Systems\VPN Client\VAInst64.exe, command: nopopup I "C:\Program Files (x 86) \Cisco Client\Setup\CVirtA64.inf" CS_VirtA

  I use Windows 7 Home Premium on my laptop, the UAC turned OFF and the antivir SW is uninstalled. I searched on the net but I do not find a satisfactory solution.

  Please someone knows how can I fix this?

  Thank you

  Milan

  Hello

  The question you posted would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want.

  http://social.technet.Microsoft.com/forums/en-us/category/w7itpro

  Hope this information is useful.

• RMS Expressway Cisco licenses for B2B calls

  Hi Experts,

  We have Cisco Expressway Setup for B2B calls. We have 6 licenses RMS across Highway C & E, making 3 on EXP E and 3 on EXP C.

  Now, I'm able to do 3 Conference of the party including the host. Myself and 2 other B2B calls for a video conference. Where that we watched for 3 with the exception of the host Party Conference.

  We were under the impression that if we buy 3 licenses RMS, we have 4 video party conference. It's 3 outside calls excluding the host.

  Can someone explain how the RMS license.

  Our IPT put in place:

  CUCM 10.5

  SX20 - recorded at CUCM

  Motorway C - containing 3 licenses RMS

  Highway E - containing 3 licenses RMS

  Concerning

  Benyoucef

  Hi, Renaud,.

  Licenses RMS are concurrent, so in your case both licenses RMS (one in each Expressway) per call are necessary. You can check the following positions related to similar queries

  https://supportforums.Cisco.com/discussion/12444331/Jabber-guest-require...

  https://supportforums.Cisco.com/discussion/12522961/RMS-license-Cisco-ex...

  https://supportforums.Cisco.com/discussion/12240916/Expressway-LIC-exp-r...

  Manish

  -Does the rate of useful messages-

• Aironet 1200 with a radio and 802.11 g

  Can an AP 1200 with an 'a' and 'g' radio be used as a bridge (for backhaul) "one" of the radio and a point of access to the radio of 'g' at the same time?

  Thank you

  Kim

  Yes, you set the radio has to be root/nonroot mode, with the SSID as the infrastructure. Then G radio you leave at the default value and set what auth/cipher of the you want.

• Wireless router + internet = blu - ray player?

  Is it possible?
  I use the Belkin router 54 + existing as a bridge/access point wireless and get a new N Router for the internet.
  It is possible to configure the wireless ap/bridge G router and connect it with a cable ethernet for the BDV-E370?

  I am answering my own question.
  It is possible.
  I loaded the dd - wrt firmware on both routers and I configured the router that is connected to the Sony Reader as a client bridge or Repeater (acts as an Extender of signal with half of the speed + wap).
  YouTube is a very good video on dd - wrt Repeater bridge Setup.
  http://www.YouTube.com/watch?v=UD-Hq3kgvk4
  I had a router Belkin F5D7231-4, but I've upgraded to a router n, Linksys E2000, which is the Repeater on 5 GHz bridge (main router is a Linksys WRT610n-v2). Both work very well.
  I bought the rebuilt a little more than for ($65+$ 32) then the Sony usb adapter, but at the same time, I upgraded my network 2.4 ghz + 5 ghz n too. So basically I have two simultaneous networs in my house.
  If you use only a router that you add to your existing wireless network, it is much cheaper then buying the Sony adapter and at the same time that you can extend your wireless signal too.

• Intermittent wireless

  I just installed the E2500 think my old router was the problem and still have intermittent problems with wireless connectivity.  I always excellent (all bars) of the signal, but internet access come and go, even though my wired connection to the same router is good.   I have check the connectivity with the network and sharing Center in the tool bar.  I have the same problem with my Dell laptop, my Cisco bridge used with my BluRay and my wife IPhone and IpPad.  Comcast said that their monitor shows no loss of service in the last days, when I had connectivity problems.   Any ideas?

  Update:

  I gave up and paid $40 + $6 / mo for Comcast wireless phone support.  Very useful, but they could not also support the bridge wireless for my BluRay.  And they had my printer on the network to start.  He took my screen and made the appropriate changes in the settings through Cisco Connect.  The problem comes from my MS Vista operating system.  He plays well with the system of encryption used for the wireless.  XP and Win 7 is ok.  They have intensified the wepa to WEP that intends to change the security system.  Seems to work now.  Hooray.  With less encryption setting is slower, 54 Mbps, rather the 144 I see me before then it worked.  Much better than zero.

• EA2700 Smart WiFi unable to connect

  I can't connect my router via the Smart of Wifi utility EA2700.

  As soon as I put on the router, I used the CD it came with and attempted to implement. While I was in the range of the router and I can see it in my list wireless, I couldn't set it up.

  I came the usefulness and using the prompt of windows 7 I was able to change the SSID and I got a generic password.

  I was able to connect my laptop to the router with the password and access the internet.

  When went to set it up via the Smart Wifi utility using the same password I can't access it. My laptop is connected, but I can't access the router in the utillity.

  Directly, I have connected my laptop to the router with a cable right cat5 from the Ethernet port of my laptop to the port on the Router #1 and tried the utillity smart wifi. Still I can not connect.

  I tried to use that the IP 192.168.1.1 in the browser can still connect.

  I tried to use the CCC Web site still nothing.

  Prompt repeat me the invalid password, you mind right now I already have logged 3 more devices with the generic password.

  Any advice will be greatly appreciated.

  Have your tried using "admin" instead? You have not exactly set up the router using the Cisco Connect Setup Wizard, so the router password is not the same as the password of your wireless network. Login to http://192.168.1.1 or http://myrouter.local and use "admin" password. If you have upgraded the firmware on the router during installation, you can also go to http://linksyssmartwifi.com. Here, you can access the page locally (use 'admin' password again) or create a Linksys Wifi Smart account for cloud-base access.

• Ganymede ACS 5.4 asr 9001 authorization

  Hello

  If anyone can help with Ganymede attributes users authoriezed on cisco asr 9001 (ios/xr)

  Thank you

  Yoram

  You should know the command you are trying to emit belogns to which task.

  Then you know that the task is mentioned according to which task group.

  Visit this link to know how to perform the above:

  https://supportforums.Cisco.com/docs/doc-15944

  Then, you must configure the GANYMEDE server + to return the attribute that puts the task under the privilege of the user:

  See here: http://goo.gl/7YP5zu

  I use the following command on the ACS server in the config of user group (we have version 4.2):

  task = #cisco - support, rwx:admin, #root - system

  This will be the user inherit the read, write and execute access to the 'admin' task and will put the user in the local (locally defined on the router) 'cisco-support' and 'root-system' users groups.

  NOTE: we did two things at the top. inherits access to the task AND put the user in the context of local groups selected. I don't know if it can be used without the other.

  HTH

  Amjad

  Rating of useful answers is more useful to say "thank you".