Aironet 1100 with iPAQ 5450 and LEAP

Hi All,
I have a 5450 iPAQ with built in LEAP support. We use the 1100 Aironets on our WLAN. When I enable LEAP on the iPAQ the device never associates to the AP at all?
I have debugged for "dot11 aaa dot1x all" on the AP but never see any events coming through. It looks as if the device is not associating to the AP at all. The status on the device just sits on "Initialiasing".
I'm running 12.2(8)JA on the 1100. Is there a setting I'm missing to support non-cisco hardware from the AP because my Cisco LAN adapter works fine with LEAP from my laptop.
Has anyone else seen this or got it working?

Try resetting all WEP keys on both the AP and the client card. This can help confirm that an error in the key entry was not made, thereby precluding this as a possible source of the inability to complete an association.

Similar Messages

Aironet 1100 with Static Address

Hi All
I have taken over some access points from a company which were providing our wireless service and have not yet received the IP scheme information.
I need to get onto one of the Aironet 1100 access points to see what the config etc is.
I will only be able to take it down for a few hours, how to I actually connect to it.
I am pretty sure it is configured with a static IP address which I do not know so is there anyway of connecting to it without using the Reset to Default method obviously!
I have tried IPSU and a hub but no good.
All replied gratefully received!!
Darran

Thanks for the replies guys but it hasnt solved my problem.
Looks like it's not a static address after all
I have done the following
1. Plugged the AP into a switch on our network and connected to it wirelessly. I receive an IP the very same as if I was plugged into the switch directly and when I do an IPconfig I get the very same info as if I was plugged directly in. Still cannot find the AP IP Address though.
2. Plugged the AP into a switch on our network and connected to the switch and did a show cdp neighbour, the access point does not show up, only other switches.
3. Read the user guide and connected my laptop directly to the AP with a CAT 5 cable and gave the laptop an address of 10.0.0.2 . The AP does not seem to revert to 10.0.0.1 as suggested in the manual.
4. I have tried to run the IPSU under all the above conditions, searching by the mac address of the AP but it has not received anything.
ANy other ideas, Im at my wits end!!

Aironet 600 with Mac Filtering and a switch..

How does the Aironet 600 handle Mac Filtering if I were to connect a switch to port 4 on the back ("Secured" network port). Does it authenticate each MAC or does it do somthing similar to how 802.1x with multi-host works, the first mac authenticates and then the port's wide open? My use-case here is a printer at a remote home-office. The printer doesn't have a supplicant in it so I need to use mac filtering. Thanks.

MAC authentication is all I use for my OutStationed workers. No wifi, just the rlan. Since the rlan is configured for DHCP only, no IP gets passed until MAC auth occurs.
When Cisco packaged this up, they said 4 is enough.. IF you use an un-managed (non-cisco) switch.
I had a need for 2 workstations and 2 digiports.. SOP sys a managed switch.. oops. the switch consumed 2 MAC's right off the top.. 1 for itself and 1 for each vlan.
After enablilng 2 rlans, and configuring a pair on different networks, we discovered that they were bridged in the 602 (or somewhere).
We ended up switching out the 602 for an ASA5505

Problems in using Msync with IPAQ 3760 and Active SYnc 3.5

Hi,
Environment :-
IPAQ 3760
Windows NT workstation
Active Sync 3.5
I am using Active Sync 3.5 which does not need RAS
configuration on the machine.
I am unable to run msync.exe. It does not give any errors
messages.
The 9i lite documentation talks about RAS settings.
If anyone has faced similar prob coudl you please let me know
the solution.
regards,
Sonal

You do not need to make a RAS connection with Pocket PC 2002,
because now ActiveSync itself makes an IP connection, and
Oracle9i Lite just needs an IP connection for synchronization no
matter how you establish it. Hi, I also experience the same problem. Using PocketPC 2002 I have a pasthru connection. Ik kan browse on the Internet with Internet Explorer, so the connections works.
mSync just seems to do nothing. When I press the Sync button, nothing happens (not even a progress bar).
Any idea?
Thanks,
Bas.

LEAP protocol for ipaq 5450

Our facility is using LEAP protocol for WLAN. I would like to use my new ipaq 5450 with buildin WLAN to access. Has anyone tried LEAP with a pocket pc? Anyone know if CISCO has a driver for ipaq 5450 for LEAP?

Oops. Sorry I have a 3870. With a aironet pcmcia card. There are very few companies that support LEAP's proprietary protocol. Some companies are licensing it with cisco. I am facing the same challenge with these built in WLAN (True Moble) cards from Dell. Unless its an aironet cards or a intel2100(newly licensed from cisco) LEAP functionality is probably going to be next to impossible. at least for now

HP iPAQ 5450 with Windows Mobile 2003 802.1x and certificates.......

This maybe a bit off topic but I am struggling trying to get some answers out of HP.
We have some HP iPAQ 5450/5550's all running Windows Mobile 2003 - to use 802.1x Authentication with PEAP or TLS-EAP we need certificates installing on the PocketPCs. We have a Windows 2000 Active-Directory integrated Certificate Authority that publishes certificates to W2K machines OK - initially HP didn't include any way of importing Certificates but have released the SDK Certificate Enrolment Tool (enroll.exe). We have tried for several days to get a certificate but to no avail and we are struggling to find any information out. Has anyone on here managed this? If so how?
Thanks
Andy

Obviously the WindowsCE devices can't be 'members' of the domain as they would need W2K to do that (create a computer account etc). The enrollment tool is available from HP's website (software & drivers etc). Once I installed the enroll.exe tool I modified the enroll.cfg file to request a 'computer' certificate from my CA, this is now installed and appears in 'Settings, System, Certificates'. I have yet to actually test this with a Cisco AP as I just can't get my hands on one.......
Andy

Aironet 1100 Default Username and Password not working

I have a Cisco Aironet 1100 series access point (AP1120B) that after resetting to factory defaults the default username and password (Cisco and Cisco) aren't working in the web GUI. I am able to telnet to the AP's IP and log in with Cisco and Cisco but don't know the ENABLE password. I have tried Cisco and cisco and everything else i could think of with no luck. any help would be appreciated.
I also have a Cisco Aironet AP1242AG that is doing the same thing.

Hi Rich,
I assume that you are using the mode button to reset the configurations on these units -- this procedure *should* reset all credentials to Cisco.
If this is still not working, you can try the following:
1) Connect console port and power-cycle unit
2) When IOS starts loading, hit ESC key twice to get to the boot-loader prompt
3) At the boot-loader prompt show a directory of the flash filesystem (dir flash:)
4) Delete or rename the files "config.txt" and "env_vars", then boot the system ("delete flash:/config.txt" "delete flash:/env_vars")
-Patrick Croak
Wireless TAC

Linux clients not associating with Aironet 1100

Does anyone know if there is an issue with a Linux client associating with an Aironet 1100 using WEP? Windows clients are connecting fine, and the Linux client connects to Linksys branded APs with WEP no problem.
Aironet config:
IOS 12.3(2)
16 AP on same SSID, different cells
128-bit WEP
Linux client:
Dlink Airplus DWL-G630
Kernel: Slackware 2.6.12.2
Commands used to associate
ifconfig ath0 up
iwconfig ath0 ath0 mode managed key restricted [2] {key}
dhcpcd ath0
After bringing up the ath0 interface, and running the iwconfig, you can see the iwconfig settings are sticking, but it seems to be jumping around APs when you watch the MAC of the AP. It goes from a valid MAC address to FF:FF:FF:FF:FF:FF and then to another valid address, and back again. This does not happen on the Linksys AP.
Any ideas?
Thanks,
Andy

Try entering the key (on the Linux box) as hex.
Most of the Windows client software lets you enter the key in ASCII ... some client software requires that you put in the hex translation.
You can check the logs on the 1100 to see what the failure message is ,,, but I'd bet it'll be something along the lines of "Invalid Key"
Good Luck
Scott

Aironet 1100 AP (11.b) - am I stuck with WEP?

Hi all,
I have several Aironet 1100 series access point. These are the 11.b with WEP encryption. Can I upgrade those to WPA or higher, or am I stuck with what I have?
Thanks in advance for any information.

Hi Noel,
try out this one:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008054339e.shtml#config_ap
This is a step by step guide for WPA2. You can not have WPA2 since the lack of a G-Radio interface. But WPA is possible.
Just change these few things:
Step 2a. Choose TKIP as Cipher
Step 3c. Tick also CCKM
I have the same setup running with 1200 APs only b Radios.
The difference is that WPA uses TKIP for encryption and WPA2 AES.
WPA2 is the modern implementation, but WPA meets the actual security needs of the most companies.
I hope that helps.
Best regards,
Frank
P.S. Please rate helpful posts.

Cisco 7920 and Aironet 1100 (Downloading config file)

For some reason the 7920 is trying to Downlaod the config file and can't pass that screen.
It authenticates just fine and the i get the screen "downloading config file" and that's it.
It's been doing the same thig all morning.
Not sure what's going on.
please help.
Call Manager 4.1.3 Aironet 1100
Thanks
Zeek

ok, so i guess after a while, the phone said "upgrading firmware" and after resseting, i got to the screen with the line up.
I still have a problem though.
i can dial a phone, it will call but once someone answer on the other side, the 7920 resets itself.
PLease help.

I am trying to use East West Quantum Leap Symphonic Orchestra with Garageband '11 and East West isn't showing up on the Audio Unit Modules List. Help?

I am trying to use East West Quantum Leap Symphonic Orchestra with Garageband '11 and East West isn't showing up on the Audio Unit Modules List. Help?

Not sure what to say. Have the free version, installed it and GB found it. Perhaps contact East West support if you have a paid version...

Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points

Hi Guys,
I would like to go for "Dynamic VLAN Assignment with RADIUS Server and Aironet Access Points 1300". I want the AP to broadcast only 1 SSID. The client find the SSID ->put in his user credential->Raudius athentication->assign him to an specific vlan based on his groupship.
The problem here is that I don't have a AP controller but only configurable Aironet Access Points 1300. I can connect to the radius server, but I am not sure how to confirgure the AP's port, radio port, vlan and SSID.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
I go through some references:
3.5 RADIUS-Based VLAN Access Control
As discussed earlier, each SSID is mapped to a default VLAN-ID on the wired side. The IT administrator may wish to impose back end (such as RADIUS)-based VLAN access control using 802.1X or MAC address authentication mechanisms. For example, if the WLAN is set up such that all VLANs use 802.1X and similar encryption mechanisms for WLAN user access, then a user can "hop" from one VLAN to another by simply changing the SSID and successfully authenticating to the access point (using 802.1X). This may not be preferred if the WLAN user is confined to a particular VLAN.
There are two different ways to implement RADIUS-based VLAN access control features:
1. RADIUS-based SSID access control: Upon successful 802.1X or MAC address authentication, the RADIUS server passes back the allowed SSID list for the WLAN user to the access point or bridge. If the user used an SSID on the allowed SSID list, then the user is allowed to associate to the WLAN. Otherwise, the user is disassociated from the access point or bridge.
2. RADIUS-based VLAN assignment: Upon successful 802.1X or MAC address authentication, the RADIUS server assigns the user to a predetermined VLAN-ID on the wired side. The SSID used for WLAN access doesn't matter because the user is always assigned to this predetermined VLAN-ID.
extract from: Wireless Virtual LAN Deployment Guide
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html
==============================================================
Dynamic VLAN Assignment with RADIUS Server and Wireless LAN Controller Configuration Example
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml#switch
==============================================================
Controller: Wireless Domain Services Configuration
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c951f.shtml
Any help on this issue is appreicated.
Thanks.

I'm not sure if the Autonomous APs have the option for AAA Override. On the WLC, I can go into the BSSID, Security, Advanced, and there's a checkbox that I would check to allow a Radius server to send back the VLAN.
I did a little research and it looks like the 1300 may give this option but instead is defined as "VLAN Override". I've found the release notes for 12.3(7)JA5 (not sure what version you're running) that give mention and a link to configuring EAP on page 4: http://www.ciscosystems.ch/en/US/docs/wireless/access_point/1300/release/notes/o37ja5rn.pdf
Hope this helps

I want to run PEAP and LEAP at the same time...

I have an environment where I have 25 Laptops connected to my wireless network using PEAP and TKIP over an XP wireless client with a certificate. I also just purchased 25 IPAQ's with built-in wireless and they have the ability to do LEAP or PEAP. I am having issues getting the certificate to take up residence on the IPAQ's, so I thought I could do LEAP instead. What are the caveats of running both protocols at the same time and what configuration issues will I run into with this on the IPAQ's?
I tried to setup LEAP yesterday without success, basically because I don't know what step I am leaving out. Maybe its TKIP that is causing the problem, I don't know.
Any help would be greatly appreciated.
David Beaver

The access point doesn't know or care which EAP flavor you're using; LEAP vs PEAP is configured on the client, and you have to specify on your server which flavor(s) you'll allow.
Supporting both PEAP and LEAP is inelegant, though, and exposes some of your clients to the dictionary attacks LEAP is subject to. You'd be better served by getting PEAP working correctly on your iPaqs.
You don't need clientside certificates for PEAP, and you don't need to put the server certificate on the iPaq unless you're self-signing. If you are and the problem is that the iPaq isn't accepting your root cert, then the problem may be that it's not in a format the iPaq recognizes. Try importing the root cert into IE and then re-exporting it in DER format, then see if the iPaq will take that.
Also make sure that your pda's are flashed with the latest OS and firmware patches. I've got PEAP working just fine on my HP 5500, but it did take a little tweaking to get it there.

Aironet 1100 / 802.3af Power Over Ethernet (POE) Support

I was under the impression that the Aironet 1100 supports 802.3af POE. I purchased a NetGear FS108P POE switch, however, when I plug in the 1100, it does not receive any power.
I have seen references in the documentation to a Cisco inline power injector and a Cisco Catalyst switch that can provide POE to the 1100 and maybe they will work, however, will the 1100 only work with those devices?? If so, it would seem that the 1100 really doesn't support the 802.3af standard and that Cisco's implementation of POE is proprietary.
Any input would be appreciated.
Thanks,
Michael

Hi Michael,
As you have discovered (unfortunately) is that the 1100 only supports Cisco Pre-standard PoE :( Have a look;
Single 802.11g radio offering 54 Mbps of capacity
2.4 GHz integrated diversity dipole antennas
Available in an autonomous version only
16 MB of memory with 8 MB of storage
Operating temperature range of 32 to 104?F (0 to 40?C)
**Inline power support (Cisco pre-standard)**
From this doc;
http://www.cisco.com/en/US/products/hw/wireless/ps4570/prod_brochure0900aecd8035a015.html
The good news is that either of the options you listed will work just fine. I would go for the power injector probably just for neatness sake.
POWERING OPTIONS
The Cisco Aironet 1100 Series can be powered either locally using the AC-DC power adapter, or over the Ethernet cable when coupled with a device capable of delivering in-line power, such as an in-line power-capable Cisco Catalyst? switch, Catalyst in-line power patch panel, or Cisco Aironet Power Injector.
The AC-DC power adapter is included with the access point and can also be ordered as a spare part. The Cisco Aironet Power Injector can either be configured to the order or can be ordered separately.
You can use either;
AIR-PWR-A= Cisco Aironet Power Supply-Input 110-240VAC, Output 48VDC, 380 mA-for 1100 and 1200 Series
AIR-PWRINJ3= Cisco Aironet Power Injector for the 1100 and 1200 Series Access Points
From this doc;
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_data_sheet0900aecd8045690f.html
Hope this helps! And good luck!
Rob
Please remember to rate helpful posts.....

Setting aironet 1100 to factory default

I am trying to reset an aironet 1100 back to factory default. The only button on the bottom of the unit that I can see is one that says mode on it. Is their somewhere else where the factory default can be reset at. Thanks

Hello,
This should work for your situation:
Reset the APCisco IOS Software
Complete the steps in this section in order to reset Cisco IOS Software-based APs.
Note: Cisco IOS Software-based APs have a default configuration that includes a username and password combination. Both the username and password are "Cisco", which is case-sensitive. After you reset to factory defaults, be prepared to give "Cisco" as both the username and password when you are prompted by either the GUI or the command-line interface (CLI).
If the privileged command prompt ap# is available in the CLI, the write erase command and the reload command erase the startup configuration and reset the unit.
If the GUI is available, choose System Software > System Configuration. Press the Reset to Defaults button.
If neither the GUI nor the CLI is available with sufficient privileges, complete these instructions in order to use the Mode button:
Disconnect power from the AP.
Disconnect the power jack for external power or the Ethernet cable for inline power.
Press and hold the MODE button while you reconnect power to the AP.
Hold the MODE button until the Status LED turns amber, and then release the button.
The Status LED turns amber in approximately 1 to 2 seconds.
After the AP reboots, reconfigure the AP and use the web browser interface, the Telnet interface, or Cisco IOS Software commands.
Note: The AP is configured with the factory default values that include:
The IP address, which is set to receive an IP address with DHCP
The default username and password, "Cisco"
Here is the link to the actual doc:
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_password_recovery09186a00800949d0.shtml#resios
Hope this helps!
Rob
Please remember to rate helpful posts........

Aironet 1100 with iPAQ 5450 and LEAP

Similar Messages

Maybe you are looking for