Router ISR 3945 with WLC

Similar Questions

• Xfinity X 1 modem/router is compatible with the Airport Extreme? How it should be configured to maintain my wireless network?

  I got a modem Comcast/Xfinity upgrade. Xfinity X 1 modem/router is compatible with the Airport Extreme? How it should be configured to maintain my wireless network?

  Whenever you change the modem or modem/router on a network, AirPort Extreme will be reset to the default settings and then set it up again to work properly with the new modem. For this he would be...

  Turn on AirPort Extreme for a few minutes... If it is not already turned on

  Hold in the reset button on the back of the AirPort Extreme for 7-8 seconds, then release it.

  Allow a minute for the AirPort Extreme restart to a slow, flashing amber light status

  Make sure that an Ethernet cable connects to one of the four LAN <-->Ethernet ports on the modem/router on port WAN "O" on AirPort Extreme

  To start the Setup program, click the WiFi icon at the top of the screen on your Mac and are looking for a list of the new AirPort base station

  Just below that, click directly on the AirPort Extreme and then follow the prompts for configuration "Wizard".

  When you configure AirPort Extreme once again, you can use the same wireless network name and the same password that you used with AirPort Extreme with the 'old' modem, if you wish, or use a new wireless network name and password

• E2500 router communicates only with HP printer cable.

  I have a HP color LaserJet 2605dn printer and router e2500. I decided to run an Ethernet cable from the router to the printer instead of via the USB port of the laptop that works fine for a couple of years.

  Is the green light on the router would be flashing quick or light yellow on the printer. Guess there is a communication problem. After some reading material at random on Web sites and messages, I manually changed the IP address of the printer: 192.168.1.110 (that is outside the range of the DHCP users (6) quantity, which starts at 192.168.1.100)

  Leave the configuration window Panel > devices Printers & I added a new "Standard TCP/IP Port" to match the one I put manually (192.168.1.110).

  I varied results when I ping this new IP address while that the yellow light on the Ethernet port on the printer flashes quickly. Sometimes I will have 4 packets that have been sent in the ping also received, sometimes none are received, sometimes 1 and sometimes 2 packets are received. For example, ping results are contradictory and I don't know why that should be.

  I guess that none of my configurations 'Basic Wireless Settings' and "Wireless Security" have an impact here. After all, I'm trying only to communicate with my printer wirelessly via my laptop to the printer via a network cable. Also, I'm not a very technical person. I managed to get this far, but I'm at a loss for what keeps my router to communicate with the printer of mine. Any help would be appreciated. Thank you.

  Using the printer management page, make sure you on the JetDirect Automatic for networking information. If your automatic support of networking, it must acquire an IP address from the router if the LAN cable is in good working condition. Make a print on the printer configuration page to see what IP address it acquired from the router.

  If you decide you want to put a static IP address on the printer, make sure you on the JetDirect information
  Manual and instead use 192.168.1.110 tends in the poole DHCP address, try using 192.168.1.26. You will need configure the printer driver in windows accordingly to point to the IP address.

• Cisco router restarts randomly with Bus error

  Cisco router restarts randomly with the following error:

  System has been restarted by error of bus to PC 0x4183614C, speech 0 x 95848 at 09:30:28 UTC Tuesday, April 23, 2013

  I've pasted below see the chimneys and release the version.

  view the stacks

  
  

  Minimum factory chimneys:

  Format name / free

  5396/6000 inspect Init Msg

  Subsystem SPAN 5368/6000

  58920/60000 EEM Auto record Proc

  Automatic start of 4772/6000 upgrade process

  DIB 5164/6000 error message

  HAND OF SASL 5396/6000

  4968/6000 LICENSE DEFAULT AGENT

  5368/12000 Init

  4216/6000 update prst

  4384/6000 VPN_HW_MIB_CREATION

  5188/6000 RADIUS INITCONFIG

  Update process random rom 2128/3000

  8356/12000 SSH process

  Stats URPF 5316/6000

  Interruption of battery level:

  Level named format / unused

  Network interfaces 1 1484828 6284/9000

  2 3264990 8548/9000 DMA/Timer Interrupt

  3 1 8388/9000 PA Int management Manager

  Console 4 115 8612/9000 Uart

  External interrupt 5 0 9000/9000

  NMI 7 223352 8564/9000 interrupt handler

  Spurious interrupts: 11

  System has been restarted by error of bus to PC 0x4183614C, speech 0 x 95848 at 09:30:28 UTC Tuesday, April 23, 2013

  Software of 2800 (C2800NM-ADVSECURITYK9-M), Version 12.4 (24) T, RELEASE SOFTWARE (fc1)

  Technical support: http://www.cisco.com/techsupport

  Updated Thursday 25 February 09 17:55 by prod_rel_team

  Image text-base: 0 x 40011240, database: 0x42B41940

  The failure of the system stack trace:

  FP: 0X472252B8, RA: 0X4183614C

  FP: 0 X 47225310, RA: 0X418312F8

  FP: 0 X 47225348, RA: 0X41647DC0

  FP: 0X472253A8, RA: 0X4164A8F4

  FP: 0 X 47225428, RA: 0X4164B248

  See the version

  
  

  Cisco IOS software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 12.4 (24) T, RELEASE SOFTWARE (fc1)

  Technical support: http://www.cisco.com/techsupport

  Copyright (c) 1986-2009 by Cisco Systems, Inc.

  Updated Thursday 25 February 09 17:55 by prod_rel_team

  ROM: System Bootstrap, Version 12.4 (1r) [hqluong 1r], RELEASE SOFTWARE (fc1)

  availability of Cisco is 28 minutes

  System returned to ROM by bus to the 0x4183614C PC error, address 0 x 95848 at 09:30:28 UTC Tuesday, April 23, 2013

  System image file is "flash: c2800nm-advsecurityk9 - mz.124 - 24.T.bin".

  This product contains cryptographic features and is under the United States

  States and local laws governing the import, export, transfer and

  use. Delivery of Cisco cryptographic products does not imply

  third party approval to import, export, distribute or use encryption.

  Importers, exporters, distributors and users are responsible for

  compliance with U.S. laws and local countries. By using this product you

  agree to comply with the regulations and laws in force. If you are unable

  to satisfy the United States and local laws, return the product.

  A summary of U.S. laws governing Cisco cryptographic products to:

  http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

  If you need assistance please contact us by mail at

  [email protected] / * /.

  Cisco 2821 (revision 53.51) with 1036288K / 12288K bytes of memory.

  Card processor ID FCZ1017732F

  2 gigabit Ethernet interfaces

  2 modules of virtual private network (VPN)

  Configuration of DRAM is wide with parity 64-bit capable.

  239K bytes of non-volatile configuration memory.

  250880K bytes of ATA CompactFlash (read/write)

  Configuration register is 0 x 2102

  You want to use the tool interpreter of output for this work:

  http://www.Cisco.com/pcgi-bin/support/OutputInterpreter/home.p

  For more information about the resolution of crashes, see this article:

  http://www.Cisco.com/en/us/products/HW/IAD/ps397/products_tech_note09186a00800b4447.shtml

  In this case, it looks like CSCsy09250, described here:

  http://www.Cisco.com/en/us/products/CSA/Cisco-SA-20100324-SCCP.html

  You should contact Cisco for the software updated by following the instructions of this bulletin.

  That crash possibly caused by part of sone intentionally sends out packets malformed to your device, so if you have reason to believe that someone in your community could run metasploit or similar "Penetration Testing" tools, you can look into that as well.

• ACS RADIUS timeout with WLC 7.0 5.0

  Hi guys,.

  I'm setting up a device Cisco Secure ACS 1120 running 5.0.0.21 ACS to manage the RADIUS of a Cisco WLC 5508 device query running the 7.0.116.0 version.

  • These devices have open communication on all ports - no firewall or ACL
  • they have successful ping communication

  The following statements illustrate some but not all debugging I did to make sure that each device works properly in isolation.

  • Using the simple windows (radserv2.exe) instead of the Cisco ACS RADIUS server
    • This works and the WLC gets answer my fortune Server RADIUS
  • Using a simple windows EAP client to query the ACS using the RADIUS protocol
    • This works and the FAC processes the RADIUS request and sends a response
  • Placed a customer wireshark on the network to inspect the time-out.
    • Wireshark saves the package to the WLC for GBA using port 1812 but does not see responses to GBA package

  At the moment I have the

  1. WLC accepting wireless client association and
  2. sending the query RADIUS (EAP - TLS, PEAP and EAP-FAST) for GBA,
  3. the WLC receives no answer and generates a timeout message and separates the client.
     1. Note this is not a rejection or a similar message, the simple ACS does not even the package. i.e. There is absolutely nothing in the logs of ACS to suggest that he had even received a package of radius of the WLC.

  In summary the WLC and GBA properly operate independently, but they do not communicate via radius.

  Any help appreciated thanks

  It seems that you use ACS 5.0 without tasks.

  For your information, the version of the product is now up to 5.2 and 5.3 ACS should soon be released

  I recall there was a problem with ACS 5.0 with WLC operations that has been resolved in patch for 5.0

  I'm not sure of the specific CDETS but can be:

  CSCsy17858 Any manipulation of Tunnel-Type & Tunnel-Client-Endpoint uploading incorrect

  ACS 5.0 has a rollup with all the patches being accumulated approach

  My recommendation would be to download the patch 8 for ACS 5.0: 5.0.0.21.8

  Patch can be downloaded from CEC

  To install a patch set a repository on ACS (cumulative patches are larger than 32 MB, you can not use TFTP to it), copy the patch file in the repository, click ACS CLI:

  # acs patch installs repository

• Cannot save with WLC 4402 LAP

  Hi all

  I have cisco WLC (AIR-WLC4402-12-K9) with two LAP (AIR-LAP1131AG-A-K9) connected to move and one of the TOUR is able to register with WLC while the other was autonomous AP which has been converted to KNEES who fails to register with WLC. I see that the AP is able to enter the Ip address and even joined the WLC but fails to register. Please help us solve this problem. I have attached all papers relevant to this case. Waiting for your answer.

  FYI I aimed below URL, but could not able to figureout the reason.

  http://www.Cisco.com/en/us/products/ps6366/products_tech_note09186a00808f8599.shtml

  I don't understand.  You have TWO 2 1131AG.  We joined for the last two days and another recently joined.  Say the other keeps "bouncing"?

  Have you checked if the WAP is declining because of the power?

• router in 1921 with the double nat ADSL problem

  I have problems with the implementation of a router in 1921 with double lines ADSL for failover. For some reason any internet traffic keeps using Dialer 1 as internet main connection, while 2 Dialer should be primary. Also, when I finish my NAT with allowed a full acl, it translates the public ip address of the 2-to-1 Dialer the Dialer before she sends in the internet.

  This is my config:

  !
  interface GigabitEthernet0/0
  Voice netwerk description
  IP 192.168.77.254 255.255.255.0
  IP helper 192.168.177.1
  IP helper 192.168.177.254
  IP nat inside
  IP virtual-reassembly in
  IP tcp adjust-mss 1400
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  Inside the interface description
  IP 192.168.177.254 255.255.255.0
  IP mtu 1492
  IP nat inside
  IP virtual-reassembly in
  IP tcp adjust-mss 1400
  automatic duplex
  automatic speed
  !
  ATM0/0/0 interface
  Description 1/10 Mb Tele2 ADSL
  no ip address
  No atm ilmi-keepalive
  PVC 0/35
  aal5mux encapsulation ppp Dialer
  Dialer pool-member 1
  !
  !
  interface Ethernet0/0/0
  no ip address
  Shutdown
  !
  ATM0/1/0 interface
  no ip address
  No atm ilmi-keepalive
  !
  interface Ethernet0/1/0
  VDSL 5/50 Mb KPN description
  no ip address
  !
  interface Ethernet0/1/0.6
  KPN VDSL description
  encapsulation dot1Q 6
  PPPoE enable global group
  PPPoE-client dial-pool-number 2
  service-policy output parent policy
  !
  interface Dialer1
  Tele2 ADSL description
  the negotiated IP address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  IP mtu 1492
  NAT outside IP
  IP virtual-reassembly in
  encapsulation ppp
  IP tcp adjust-mss 1400
  Dialer pool 1
  Authentication callin PPP chap Protocol
  PPP pap sent-username *.
  No cdp enable
  card crypto SAL_map
  !
  interface Dialer2
  VDSL KPN description
  the negotiated IP address
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  IP mtu 1492
  NAT outside IP
  IP virtual-reassembly in
  encapsulation ppp
  IP tcp adjust-mss 1400
  load-interval 30
  Dialer pool 2
  PPP authentication pap callin
  PPP pap sent-username *.
  No cdp enable
  card crypto SAL_map_VDSL

  !

  IP nat inside source overload map route sheep interface Dialer1
  IP nat inside source overload map route nonat2 interface Dialer2
  IP route 0.0.0.0 0.0.0.0 Dialer2 Track1
  IP route 0.0.0.0 0.0.0.0 Dialer1 254
  !

  auto discovering IP sla
  ALS IP 10
  echo ICMP - 62.69.174.75 source-interface Dialer2
  Timeout 30000
  frequency 30
  Annex IP SLA 10 life never start-time now
  !

  access-list 102 deny ip 192.168.177.0 0.0.0.255 host 192.168.1.249
  access-list 102 deny ip 192.168.178.0 0.0.0.255 host 192.168.1.249
  access-list 102 deny ip 192.168.179.0 0.0.0.255 host 192.168.1.249
  access-list 102 deny ip 192.168.177.0 0.0.0.255 172.28.1.0 0.0.0.255
  access-list 102 deny ip any 192.168.255.0 0.0.0.255
  access-list 102 deny ip any 192.168.254.0 0.0.0.255
  access-list 102 deny ip 192.168.177.0 0.0.0.255 192.168.179.0 0.0.0.255
  access-list 102 deny ip 192.168.177.0 0.0.0.255 192.168.178.0 0.0.0.255
  access-list 102 deny ip 192.168.177.0 0.0.0.255 192.168.79.0 0.0.0.255
  access-list 102 deny ip 192.168.177.0 0.0.0.255 192.168.78.0 0.0.0.255
  access-list 102 deny ip 192.168.77.0 0.0.0.255 192.168.179.0 0.0.0.255
  access-list 102 deny ip 192.168.77.0 0.0.0.255 192.168.178.0 0.0.0.255
  access-list 102 deny ip 192.168.77.0 0.0.0.255 192.168.79.0 0.0.0.255
  access-list 102 deny ip 192.168.77.0 0.0.0.255 192.168.78.0 0.0.0.255
  access-list 102 permit ip 192.168.177.0 0.0.0.255 any
  access-list 102 permit ip 192.168.77.0 0.0.0.255 any
  !

  Dialer-list 1 ip protocol allow
  Dialer-list 2 ip protocol allow
  !
  nonat2 allowed 10 route map
  corresponds to the IP 102
  Set the interface Dialer2
  !
  sheep allowed 10 route map
  corresponds to the IP 102
  Set the interface Dialer1

  the ACL is built to exclude some ips private for ipsec VPN destinations.

  Any suggestions on what I'm missing? It must use dialer 2 as primary internet connection and failover of Dialer 1 if IP SLA fails. The SLA config seems to work properly:

  SH ip route

  S * 0.0.0.0/0 is directly connected, Dialer2
  84.0.0.0/32 is divided into subnets, subnets 1
  C 84.246.25.231 is directly connected, Dialer1
  145.131.0.0/32 is divided into subnets, subnets 1
  C 145.131.131.112 is directly connected, Dialer2
  192.168.77.0/24 is variably divided into subnets, 2 subnets, 2 masks
  C 192.168.77.0/24 is directly connected, GigabitEthernet0/0
  The 192.168.77.254/32 is directly connected, GigabitEthernet0/0
  192.168.177.0/24 is variably divided into subnets, 2 subnets, 2 masks
  C 192.168.177.0/24 is directly connected, GigabitEthernet0/1
  The 192.168.177.254/32 is directly connected, GigabitEthernet0/1
  192.168.254.0/24 is variably divided into subnets, 2 subnets, 2 masks
  S 192.168.254.0/24 is directly connected, Dialer2
  192.168.254.37/32 S [1/0] via 77.241.229.241
  S 192.168.255.0/24 is directly connected, Dialer1
  212.121.121.0/32 is divided into subnets, subnets 1
  C 212.121.121.183 is directly connected, Dialer2
  213.144.228.0/32 is divided into subnets, subnets 1
  C 213.144.228.72 is directly connected, Dialer1

  http://docwiki.Cisco.com/wiki/category:NAT

  Above document indicates "Beware of the use of the ACL for the NAT with" ip allow a whole ' you can get unpredictable results. " I suggest using the "road-map sheep/nonat2 permit 20" instead of "allow a whole."

  For others, change the config as follows-

  !

  ALS IP 10
  Dialer2 interface source ICMP echo 8.8.8.8
  Timeout 30000
  frequency 30
  Annex IP SLA 10 life never start-time now

  !

  IP route 8.8.8.8 255.255.255.255 permanent dialer2

  !

  !
  nonat2 allowed 10 route map
  corresponds to the IP 102
  match interface Dialer2
  !
  sheep allowed 10 route map
  corresponds to the IP 102
  match interface Dialer1

  !

  IP nat inside source overload map route sheep interface Dialer1
  IP nat inside source overload map route nonat2 interface Dialer2

  !

  NAT-TRACK event manager applet

  track event 1 show all

  order cli action 0.1 'enable '.

  action 0.2 wait 2

  action command 0.3 cli "clear ip nat translations forced."

  action 0.4 syslog msg "Translation NAT cleared after state change of track"

  !

  -Ginette

• Need to know if my router is compatible with windows 7

  The microsoft Web site seems to send me in circles and it drives me crazy! What I want to know is if my wireless method NB9W router is compatible with windows 7 or not...

  It is a work laptop and our COMPUTER technician has not set. I can connect to the network wirelessly at work, but not my own wireless network at home. I read that some 'old' routers are not compatible with windows 7.

  I can't find any info on my model of router on the microsoft Web site. Help please!

  Hello

  Collate support method because it might be and need the firmware, for example.

  Using WPA or WPA2 (and not WEP) security? The value WPA or WPA2.

  NB9W
  http://www.netcomm.com.au/Netcomm-products/VoIP/nb9w?SQ_PAINT_LAYOUT_NAME=support

  This implies that it is Windows 7 compatible (might still need the firmware)

  Windows 7 - obtain an IP address
  http://www.YouTube.com/watch?v=XC7Ebm0UKi8

  and

  Windows 7 - wireless connection
  http://www.YouTube.com/watch?v=MqWJ7exMJhE

  NB9W
  http://www.netcomm.com.au/Netcomm-products/VoIP/nb9w

  Method Support
  http://www.netcomm.com.au/support

  It can be configured to not work on networks other than at work, have your tried on
  other networks in addition to work and home?

  I hope this helps.

  Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

• Router ISR Cisco 1941 with ISDN lines.

  Are there any card that can support the IRB on the ISR1941?

  Thank you

  It is not on the same page: VIC2-2BRI-NT/TE

• ASR vs router ISR for encrypted traffic

  I'm looking for a router that can handle up to 1 Gbps of traffic encrypted through a GRE over IPSec connection.  We currently use a 2951-SEC/K9, who overcomes to 80 MB/s @ 70% of the CPU.  I've been watching 3945 SRI but question if an ASR 1001-X would be a better choice for this project.  Someone saw on routers ISR vs ASR?   3945 do has the same bandwidth encrypted cap that the 2951 have?

  Hello

  I can't serve you with measures or similar at the moment.
  But I did intensive tests in the past with SRI and ASR with crypto.

  From my experience, I can tell you that ASR is the choice much better if it's crypto and QoS, etc.. The ASR have pretty good cryptographic chips on board, and you just need to allow their (SEC/K9).

  I did not use ASR 1006 1001-X remote ASR, but only with the first ESP shipped and I could easily encrypt 1 Gbps. ASR 1001-X has an ESP much more sharp with up to 20Gbps troughput, and up to 8 Gbps of crypto (activated license). If you must certainly not run into problems with this unit.

  It is also much more future-proof since you can concede more performance. So if you can afford an ASR, I'd certainly go for it.

  Kind regards
  Markus

• ISE with WLC AND switches

  Hello

  We run 3xWLC controller with 800 AP using ISE 1.2 for authentication wireless 802. 1 x. I was looking in the config of the ISE and notice of 400 edge cheating only 2x2960s are configured with 802. 1 x (ISE RADIUS config) and SNMP and only 2 of the port is 2 ap tie with swtich remaining ports.and the 3XWLC in network devices.

  I do not understand how an access point is to do this work (802.1 x) because it is location on different site and people are connecting to various different locations. ISE almost run/do 11 876 profiled ends.

  version 12.2
  !
  boot-start-marker
  boot-end-marker
  !
  enable secret 5 $1$ fokm$ lesIWAaceFFs.SpNdJi7t.
  !
  Test-RADIUS username password 7 07233544471A1C5445415F
  AAA new-model
  Group AAA dot1x default authentication RADIUS
  Group AAA authorization network default RADIUS
  Group AAA authorization auth-proxy default RADIUS
  start-stop radius group AAA accounting dot1x default
  start-stop radius group AAA accounting system by default
  !
  !
  !
  !
  AAA server RADIUS Dynamics-author
  Client 10.178.5.152 server-key 7 151E1F040D392E
  Client 10.178.5.153 server-key 7 060A1B29455D0C
  !
  AAA - the id of the joint session
  switch 1 supply ws-c2960s-48 i/s-l
  cooldown critical authentication 1000
  !
  !
  IP dhcp snooping vlan 29,320,401
  no ip dhcp snooping option information
  IP dhcp snooping
  no ip domain-lookup
  analysis of IP device
  !
  logging of the EMP
  !
  Crypto pki trustpoint TP-self-signed-364377856
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 364377856
  revocation checking no
  rsakeypair TP-self-signed-364377856
  !
  !
  TP-self-signed-364377856 crypto pki certificate chain
  certificate self-signed 01
  30820247 308201B 0 A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30
  69666963 33363433 37373835 36301E17 393330 33303130 30303331 0D 6174652D
  305A170D 2E302C06 1325494F 03550403 32303031 30313030 30303030 5A 303031
  532D 5365 6C662D53 69676E65 642D 4365 72746966 69636174 652 3336 34333737
  06092A 86 4886F70D 01010105 38353630 819F300D 00308189 02818100 0003818D
  B09F8205 9DD44616 858B1F49 A27F94E4 9E9C3504 F56E18EB 6D1A1309 15C20A3D
  31FCE168 5A8C610B 7F77E7FC D9AD3856 E4BABDD1 DFB28F54 6C24229D 97756ED4
  975E2222 939CF878 48D7F894 618279CF 2F9C4AD5 4008AFBB 19733DDB 92BDF73E
  B43E0071 C7DC51C6 B9A43C6A FF035C63 B53E26E2 C0522D40 3F850F0B 734DADED
  02030100 01A 37130 03551 D 13 6F300F06 0101FF04 05300301 01FF301C 0603551D
  11041530 13821150 5F494D2B 545F5374 61636B5F 322D312E 301F0603 551D 2304
  18301680 1456F3D9 23759254 57BA0966 7C6C3A71 FFF07CE0 A2301D06 03551D0E
  04160414 56F3D923 75925457 BA09667C 6C3A71FF F07CE0A2 2A 864886 300 D 0609
  F70D0101 5B1CA52E B38AC231 E45F3AF6 12764661 04050003 81810062 819657B 5
  F08D258E EAA2762F F90FBB7F F6E3AA8C 3EE98DB0 842E82E2 F88E60E0 80C1CF27
  DE9D9AC7 04649AEA 51C49BD7 7BCE9C5A 67093FB5 09495971 926542 4 5A7C7022
  8D9A8C2B 794D99B2 3B92B936 526216E0 79 D 80425 12B 33847 30F9A3F6 9CAC4D3C
  7C96AA15 CC4CC1C0 5FAD3B
  quit smoking
  control-dot1x system-auth
  dot1x critical eapol
  !
  pvst spanning-tree mode
  spanning tree extend id-system
  No vlan spanning tree 294-312,314-319,321-335,337-345,400,480,484-493,499,950
  !
  !
  !
  errdisable recovery cause Uni-directional
  errdisable recovery cause bpduguard
  errdisable recovery cause of security breach
  errdisable recovery cause channel-misconfig (STP)
  errdisable recovery cause pagp-flap
  errdisable recovery cause dtp-flap
  errdisable recovery cause link-flap
  errdisable recovery cause FPS-config-incompatibility
  errdisable recovery cause gbic-invalid
  errdisable recovery cause psecure-violation
  errdisable cause of port-mode-failure recovery
  errdisable recovery cause dhcp-rate-limit
  errdisable recovery cause pppoe-AI-rate-limit
  errdisable recovery cause mac-limit
  errdisable recovery cause vmps
  errdisable recovery cause storm-control
  errdisable recovery cause inline-power
  errdisable recovery cause arp-inspection
  errdisable recovery cause loopback
  errdisable recovery cause small-frame
  errdisable recovery cause psp
  !
  internal allocation policy of VLAN ascendant
  !
  !
  interface GigabitEthernet1/0/10
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  interface GigabitEthernet1/0/16
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  interface GigabitEthernet1/0/24
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  !
  interface GigabitEthernet1/0/33
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  interface GigabitEthernet1/0/34
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
  !
  interface GigabitEthernet1/0/44
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  !
  interface GigabitEthernet1/0/46
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  interface GigabitEthernet1/0/48
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
  !
  interface GigabitEthernet1/0/49
  Description link GH
  switchport trunk allowed vlan 1,2,320,350,351,401
  switchport mode trunk
  MLS qos trust dscp
  IP dhcp snooping trust
  !

  interface GigabitEthernet1/0/52
  Description link CORE1
  switchport trunk allowed vlan 1,2,29,277,278,314,320,401
  switchport mode trunk
  MLS qos trust dscp
  IP dhcp snooping trust
  !
  !
  interface Vlan320
  IP 10.178.61.5 255.255.255.128
  no ip-cache cef route
  no ip route cache
  !
  default IP gateway - 10.178.61.1
  IP http server
  IP http secure server
  IP http secure-active-session-modules no
  active session modules IP http no
  !
  !
  Access IP extended ACL-AGENT-REDIRECT list
  deny udp any any domain eq bootps
  permit tcp any any eq www
  permit any any eq 443 tcp
  IP extended ACL-ALLOW access list
  allow an ip
  IP access-list extended by DEFAULT ACL
  allow udp any eq bootpc any eq bootps
  allow udp any any eq field
  allow icmp a whole
  allow any host 10.178.5.152 eq 8443 tcp
  permit tcp any host 10.178.5.152 eq 8905
  allow any host 10.178.5.152 eq 8905 udp
  permit tcp any host 10.178.5.152 eq 8906
  allow any host 10.178.5.152 eq 8906 udp
  allow any host 10.178.5.152 eq 8909 tcp
  allow any host 10.178.5.152 eq 8909 udp
  allow any host 10.178.5.153 eq 8443 tcp
  permit tcp any host 10.178.5.153 eq 8905
  allow any host 10.178.5.153 eq 8905 udp
  permit tcp any host 10.178.5.153 eq 8906
  allow any host 10.178.5.153 eq 8906 udp
  allow any host 10.178.5.153 eq 8909 tcp
  allow any host 10.178.5.153 eq 8909 udp
  refuse an entire ip
  Access IP extended ACL-WEBAUTH-REDIRECT list
  deny ip any host 10.178.5.152
  deny ip any host 10.178.5.153
  permit tcp any any eq www
  permit any any eq 443 tcp

  radius of the IP source-interface Vlan320
  exploitation forest esm config
  logging trap alerts
  logging Source ip id
  connection interface-source Vlan320
  record 192.168.6.31
  host 10.178.5.150 record transport udp port 20514
  host 10.178.5.151 record transport udp port 20514
  access-list 10 permit 10.178.5.117
  access-list 10 permit 10.178.61.100
  Server SNMP engineID local 800000090300000A8AF5F181
  SNMP - server RO W143L355 community
  w143l355 RW SNMP-server community
  SNMP-Server RO community lthpublic
  SNMP-Server RO community lthise
  Server SNMP trap-source Vlan320
  Server SNMP informed source-interface Vlan320
  Server enable SNMP traps snmp authentication linkdown, linkup cold start
  SNMP-Server enable traps cluster
  config SNMP-server enable traps
  entity of traps activate SNMP Server
  Server enable SNMP traps ipsla
  Server enable SNMP traps syslog
  Server enable SNMP traps vtp
  SNMP Server enable traps mac-notification change move threshold
  Server SNMP enable traps belonging to a vlan
  SNMP-server host 10.178.5.152 version 2 c lthise mac-notification
  SNMP-server host 10.178.5.153 version 2 c lthise mac-notification
  !
  RADIUS attribute 6 sur-pour-login-auth server
  Server RADIUS attribute 8 include-in-access-req
  RADIUS attribute 25-application access server include
  dead-criteria 5 tent 3 times RADIUS server
  test the server RADIUS host 10.178.5.152 auth-port 1812 acct-port 1813 username test-RADIUS 7 key 03084F030F1C24
  test the server RADIUS host 10.178.5.153 auth-port 1812 acct-port 1813 username test-RADIUS 7 key 141B060305172F
  RADIUS vsa server send accounting
  RADIUS vsa server send authentication

  any help would be really appreciated.

  I'm not sure that completely understand the question; But if LSE is only political wireless, then none of the wired switches need any configuration of ISE.

  Access points tunnel all wireless traffic to the WLC on CAPWAP (unless you use FlexConnect). This is the configuration 802. 1 x on the WLC that implements policies defined in ISE.

  Switches wired never need to act as an access network (n) device and so do not need to be defined in ISE unless or until you want to apply policies of ISE for wired devices...

• What wireless router works well with Satellite A200-401

  On the point of buying a computer laptop Satellite A200-401 can anyone suggest a good affordable wireless router that works well with this?

  Steve

  HM, this is a strange question because I doesn´t depends on the machine, the card information wireless installed. But in general a Netgear router is always a good choice... they are reliable, Don t need a lot of power and you can expand your network with these special Nergear '"Externders = range.

  I have a Netgear WGR614 and it works like a charm, it has everything you need.

  Here´s a link:

  http://www.NETGEAR.com/products/RoutersandGateways/GWirelessRouters/WGR614.aspx

  Check it out. :)

  Welcome them

• Equium A100-027: unable to connect to D - LINK 514 router via WiFi with Vista

  I HAVE PROBLEM WITH MY TOSHIBA EQUIUM A100-027 MOBILE TO CONNECT THE ROUTER D-LINK 514. I HAVE WINDOWS VISTA ON MY LAPOP.

  I can't get the laptop to connect to my network using its internal wireless card. He's going to detect it but when I click on connect I am presented with "Windows cannot connect to the network.

  SOMEONE CAN ME SAY THE SOLUTION TO THIS PROBLEM.
  Thank you

  Hello

  I put t think it is a hardware problem and therefore, you should check your access point and the configuration of the WLan card.
  Did you use a WLan encryption, Mac address filtering?
  If so, disable encryption on the WLan router and try to connect to the network without additional security settings.

  If it will work and you can successfully connect to the WLan and then the problem was caused by incorrect security settings.

  Please check!

• WNDR3400V2 (RN600) router - wireless repeating with Wireless Modem Arris

  I need help. I have an Arris wifi Modem (TG862) - recently installed when moving into a new House and the signature to the top for cable internet. I have a problem with weak wifi signal in the rear rooms - with signal drop. I have the spare WNDR3400V2 - so, how can I use it to boost my signal, preferably wireless? I have trouble to get the right settings when you configure as Repeater with different guides does not not exactly to my hardware. I don't have too much knowledge on this and how do it, but any help will be appreciated. The PC in the bedroom becomes signal well enough, I'm fighting to get compatible with phones wifi...

  In order to strengthen the signal on the desired location, run a long ethernet cable from the modem to the NETGEAR router.

  Still, there is no way for these 2 devices to be connected wireless to the other.

• What wifi router works best with an iMac

  Please be nice to me I don't really know what I'm talking about, but really really need help.  We have an iMac with wifi connections and currently run a cisco linksys e1000, who is five years old at least, and I'm sure is very tired, either completely obsolete.  We have a lot of buffering when using our Apple TV and someone recommended to get a

  ASUS RT-N66U - 900Mbps router dual band Wireless-N Gigabit LAN/WAN, 2 x USB, printing FTP UPnP Server VPN, IPv6 to replace the Cisco.  It will work with our IMAC?  Do we need a separate thing called a modem.  If it won't work not please can any kind person recommend a router to update that works.

  Thank you very much

  Vicki

  Use the Apple Airport Extreme Base Station.  The modem is what connects the router to your cable service.