Aironet 1142N-A-K9 Quick Setup for Security

Hello All!  We recently purchased this AP for a "quick" proof of concept for Wireless N in our facility.  I purchased the stand alone model in the hopes that it would be a quick setup to test with.  I'm familiar with routing and switching with Cisco however not so much on the security / wireless side.  My goal is to enable the 802.11n radio along with something like WPA2 with a pre-shared key (no radius server etc).  Just something quick that's moderately secured to test with.  Any help would be appreciated, thanks!

Cisco 802.11n Design and Deployment Guidelines
http://www.cisco.com/en/US/customer/solutions/collateral/ns340/ns394/ns348/ns767/white_paper_80211n_design_and_deployment_guidelines.html
Configure 802.11n on the WLC
http://www.cisco.com/en/US/customer/products/ps6366/products_tech_note09186a0080a3443f.shtml
Hope this helps.  Don't forget to rate our posts.  Thanks.

Similar Messages

  • Setups for Security

    Three questions here. My iMac sits at home. No one else has access to it. And I am retired. Please tell me about these options in the Security Preferences screen.
    Firewall. Does the average person need this activated?
    Firevault. Is this necessary for all?
    I don't have the Missing Manual for Mavericks yet. So I often look up topics in the MM for Lion. He mentions something on page 510 about "closing the backdoor" so hackers can't 'Ping" an idle or sleeping computer. The Security Preferences in Mavericks don't seem to address this. Has the new OS got built-in security for this.
    Wiping an HD clean, installing fresh OS and then restoring preferences from a TImeMachine backup.
    I was getting some odd behavior on my HD that DiskWarrior detected. From the error messages, the Alsoft (DW company) support people suggested I erase the HD and install a new system. And to be sure, wipe the HD clean first. I posted about this before, and the kind people on this forum agreed. I wonder, though, would it be save to Restore my old Network and Kechains and System Preferences from my TM backup?

    I'll weigh in on this:
    1. You don't need a firewall if you use a hardware router with its own built-in firewall.
    2. You have no real need for FileVault unless you require military level security.
    3. Do have a strong log-in password for your Admin account. Be sure to write it down somewhere safe.
    4. Be sure you use strong passwords for any sites you use that require logins; especially ones where you purchase things.
    5. Don't do your banking online or pay bills online. These places have security systems too easily cracked.
    6. Use a credit card as infrequently as possible. Your financial information is not available on cash.
    7. If you are behind a good router you should not have problems with hackers. If you use wireless, then be sure to activate security in the router to prevent others from accessing your network.
    8. Pinging your backdoor can be blocked by using the firewall, but I don't think you have much to fear here. Only experienced hackers even know what that is. And, who wants your information? Unless you have millions in cash available, hackers aren't interested in you or your bank accounts. I haven't used any of these advanced security setups in 30 plus years of computing - I'm 72 and retired. I don't even both with anti-malware software
    9. It's safe to restore your old keychain as long as you know you haven't permitted anything you'd be worried about. Network and system preferences should be no problem.

  • Configuration/Setup for securing PI messages with certificates

    Hello Experts,
    I'm looking for some guidance/suggestions/direction in regards to installing and using certificates when exchanging data with trading partners via PI 7.0.  It's something new to us and it's been a bit of a struggle.
    In scenario 1, we want to send to, and receive from, xml documents with a partner.  We currently send from our PI system, but want to receive the messages back thru an F5 network (?) which would decrypt the message and pass it along to PI.  This also takes care of load-balancing.
    In scenario 2, we want to exchange EDI messages using the AS2 Adapter from Seeburger.  Again, messages would be sent from PI and received by the F5 network.
    The F5 would act as the SSL termination point (if that's the correct term), and pass the decrypted message to PI via a normal http transfer.
    We are storing our partners' certificates within PI, and configuring the communication channels to use them.  Is this correct?  Do they need to be stored on the F5 as well?  Do we then give them our certificate from the F5, or do they need a certificate from our PI server, or both?
    I guess what I'm looking for is some straight-forward SSL 101 documentation, especially where it applies to middleware like the F5.  Thanks in advance for any help you can give.

    Hi,
    Just a quick note on the certificates; if you want to encrypt messages sent from PI you need the public key of the receiver stored in PI (J2EE key store) with which to encrypt the messages. When receiving files back from partners, they would need to encrypt the messages with the public key of F5 certificate. F5 would then use its private key to decrypt the message before passing to PI.
    So, yes, you are correct to store the certificates of your partners in PI which will be used in encryption of outbound messages. F5 would only need the private keys of the certificate that your partners have encrypted with, no need for PI certificates to be stored in F5 (unless you also need digital signatures).
    Hope this helps.
    Br,
    Kenneth

  • Is there any quick buttons setup for going back or forward

    Is there any quick buttons setup for going back or forward for navigating on a website. I would like to press a button to go back or forward while surfing different websites.

    Do you mean the back and forward history of a tab or buttons on a web page to go to the next and previous page?
    * [[Keyboard shortcuts]]
    * [[Mouse shortcuts]]
    *NextPlease!: https://addons.mozilla.org/firefox/addon/390
    There are other things that need attention:
    Your above posted system details show outdated plugin(s) with known security and stability risks that you should update.
    # Shockwave Flash 10.0 r45
    # Next Generation Java Plug-in 1.6.0_14 for Mozilla browsers
    Update the [[Managing the Flash plugin|Flash]] plugin to the latest version.
    *http://www.adobe.com/software/flash/about/
    Update the [[Java]] plugin to the latest version.
    *http://www.oracle.com/technetwork/java/javase/downloads/index.html (Java Platform: Download JRE)

  • HT5570 Can any one let me know how to setup new security question answers required for purchases of which the previous answers been forgotten.

    I am trying to do some purchases from my account balance of USD 50.00. But not able to do it as I have forgot the answers for security questions. Thus, I have been trying to setup new answers for that, but could not find any way to do so. Please help me on this.

    You need to ask Apple to reset your security questions. To do this, click here and pick a method; if that page doesn't list one for your country or you're unable to call, fill out and submit this form.
    (118301)

  • I want to set up two apple id's (w/facetime)  one for personal use, and one for professional use.   I get the validation email, click the link -and it says it won't work for security/timeout reasons.   failure prevents setup of second account.

    I can set up my personal account just fine.  personal apple id is my [email protected]  - I can setup the ipad and face time no problem.
    But I don't want to be facetime tutoring with my personal account.  I want students to find me by my .edu address
    I cannot complete the second apple Id setup, as the confirmation email always fails.  Even if I disable all firewall/blocking in outlook and windows. 
    I get an error every time.  
    Your request couldn't be completed.
    This may have occurred for security reasons or because your session timed out.
    So much for Apple being the "simpler" PC for users.  
    I've been a Windows user/technician for many years.   I've never seen anything this aggravating.
    Anyone run into this before?

    Saw this in another forum. You could try it.
    Under the FaceTime Account you can only have 1 email set up, but below that you can set up multiple email accounts as phone numbers, I do it all the time.
    FaceTime is set up with my account, but since the iPad is more of a family device (its mine, but everyone is allowed to use it), my sister programed her email so that her friends can call her on the iPad and so did my Mom and brother. Their friends dial their numbers (email addresses) and the iPad still rings even though the main number is mine account.
     Cheers, Tom

  • No icon for security setup

    I have a new Linksys wireless router that I successfully installed yesterday.  It seems to work fine.  But I cannot setup the security because there is no icon in my system tray in the lower right corner of my screen.  There are lots of icons there but no Linksys icons.  I reinstalled the router but still no icon.  I have looked at the entire tray, not just the most used icons.
    Any suggestions?
    Amy

    Amy are you talking about wireless security?
    Try to go to http://www.linksys.com/kb.
    look for answer id 949
    it has explicit intsructions on how to setup wireless security.
    I read this website alot and it teaches you alot of things,
    "Give them nothing... But take from them everything..."
    -Leonidas "300"

  • Setup crypto for secure communication with other switches

    What kind of code can be used to setup crypto for secure communication with other switches.

    ok but is there any special code i need to write if i need to create a crypto secure communication between some particular switches.

  • My browser dowloads everything automatically in MyDocuments. But, for security reasons, I need to setup a different download path, to a different location, where I keep my personal files. How do I change the download path? Thanks, Dan.

    My Firefox 3.6 is setup to download anything automatically in MyDocuments (which I never use).
    For security reasons, I designated a different location on my hard drive, where I keep my confidential files.
    How do I change this downloading path? I tried to change it by going to "Tools-Options-Save Files To", but it does not work.
    Thanks,
    Dan.

    Do you have any extensions that might interfere?<br />
    See [[Troubleshooting extensions and themes]]
    Does it work if you select Tools > Options > General : Downloads : "Always ask me where to save every file" ?
    Your above posted system details show outdated plugin(s) with known security and stability risks.
    # Shockwave Flash 10.0 r42
    # Java Plug-in 1.6.0_03 for Netscape Navigator (DLL Helper)
    Update the [[Java]] plugin to the latest version.
    *http://java.sun.com/javase/downloads/index.jsp (Java Platform: Download JRE)
    Update the [[Managing the Flash plugin|Flash]] plugin to the latest version.
    *http://www.adobe.com/software/flash/about/

  • Ideal setup for a home security lab?

    Hi!!
    I am focussing on getting a home lab setup for practising cisco Security. Can some one suggest me some network devices that i can buy.. I am getting the following
    2 Cisco 1741 Routers
    1 2950 Switch
    2 Cisco 501 PIX
    Do you think I can setup a good with the following equipments?
    Thanks
    Shyam

    Hello,
    The following is listed for the the CCIE Security lab:
    http://www.cisco.com/web/learning/le3/ccie/security/lab_equipment.html
    * Cisco 2600 Series Routers
    * Cisco 3600 Series Routers
    * Cisco 3700 Series Routers
    * Cisco Catalyst 3550 Series Switches
    * Cisco PIX 500 Series Security Appliances
    * Cisco VPN 3000 Series Concentrators
    * Cisco IPS Series 4200 intrusion prevention system sensors
    * Cisco Secure Access Control Server for Windows
    * Certificate Authority Support
    * Cisco ASA 5500 Series Adaptive Security Appliances*
    I would 'aim' for that. Also go in the link and see the relevant code levels you should be working with.
    --Jason

  • Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

    Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

    Set up each Mac for Time Machine backups in the normal way.  Time Machine will keep each backup separate on the Time Capsule, so users will only be able to see the backups of their own Mac.
    Yes....there are convoluted workarounds that might allow one user to see the backups of another.....IF...they know the administrator password of the "other" Mac.
    As far as Internet sharing, all users will have access to the Internet if they have a wired or wireless connection. If a Mac connects using wireless, it is possible to limit the time that they are allowed to connect to the network.
    For example, you might limit the ability to connect to the wireless from say each Weekday from 8 AM to 6 PM.
    With a wired Ethernet connection, you cannot limit access times to the Internet.

  • Cisco Aironet 1142N at elementary school

    Hi. We're having a tough time at a couple of elementary schools that are using a number of Cisco products which we got through a deal with AT&T. I really hope you can give us some guidance. Here's our situation: We have an elementary school equipped with about eight Cisco Aironet 1142N access points. Signals go to 3 stacked switches (Cisco Catalyst 3750 PoE-48) and are managed via a Cisco wireless LAN controller (NME-AIR-WLC12-K9).
    We are having significant bandwidth problems. If we get more than 12 laptops (we've got a "mobile Macintosh lab") simultaneously online, the network freezes.We can't even get more than 15 iTouches online simultaneously.
    Here's the rest of the setup: our *elementary* school is connected via fiber (probably 10MB) to the *intermediary* school and then to the district office. The district office is connected to the Internet (county depart of Ed is officially the ISP; AT&T is the service provider).  The AT&T link may be 6MB.At the *intermediary* school the data traffic for the mobile Macs is    handled by an
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    Apple Xserve workgroup server.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    The XServers are for Directory Services only (log in authentication for the MacBook Labs). There is one Open Directory Master at the intermediary school, and an Open Directory Replica at each site. A LightSpeed Total Traffic Control Server does content filtering for us. There are also about 5 Cisco (Windows-based) servers helping manage data at the intermediary school (VOIP and Wifi traffic only).The rest of the traffic (internal, wired ethernet) is handled by the Cisco switches and controllers; for external traffic - after the controllers it goes to the LightSpeed Traffic Control server then out the Cisco FireWall.
    Sorry to dump all that on you, but candidly since we installed the Aironets in September we haven't really been able to effectively use the mobile Mac lab. Ideally we'd like to be able to run about 30 laptops simultaneously. They don't have to get video -- just google searches would be a start.
    We should also note that at this elementary school, we have 4 wifi networks running different VLANs available through the Aironets. The one that has the most problems is the one I've described above -- it's supposed to be for student access. We have a teacher-only network that does NOT seem to have the same bandwidth constraints as the student network. We also Cisco VOIP phones all over the school, but use of the phones is modest.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:"Times New Roman";
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    What we’d like to know:
    1.     Is it likely that we have an insufficient number of access points or that that those access points can’t handle? If so, is the problem likely that we need more access points? (and if that's true, why is the teachers' network ok?)
    2.     Is the problem more likely at the server or switch choke point?
    3.     Is it likely that the problem involves Student accounts rather than teacher accounts? Why would this be so?
    4.     What are the best ways to test what’s causing our choke points?
    Thank you for your help!!!

    Thanks all for your comments. Here are some responses as well as our current "plan of action." I'd VERY MUCH welcome any additional suggestions that you have about the test we're going to run (probably next Tue).
    1. Channel: the site operates on Channel 1 (2.4 Ghz)
    2. Professional site survey: no: AT&T is supposed to do it at some point as they're our ISP. But that hasn't yet happened. No idea when it might.
    3. Aggressive load balancing?  We don't know as AT&T has that info.
    4. 15th client... Once we exceed 15 clients, access for all clients grinds to a halt. The slowdown is a pretty steep curve (not quite a cliff) for 15 clients when we use iPods; it begins at 12 clients or so when we use Macbooks.
    5.   
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:12.0pt;
    font-family:Cambria;
    mso-ascii-font-family:Cambria;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Cambria;
    mso-hansi-theme-font:minor-latin;}
    Does your WLAN come to a halt or does the wired LAN gets affected too?
    When we experience these problems, the teachers’ wireless LAN is unaffected. The only place we’re experiencing the slowdown is on the wireless LAN that’s used by the students. We have a “computer lab” with a wired network of about 30 PCs. (Ethernet CAT 5 to fiber on the way out of the building). This is a separate VLAN from the (student) wireless VLAN. When the student wireless VLAN stalls, it DOES NOT affect either the wired VLAN or teacher network. We do experience slowdowns on the WIRED student VLAN but no where as severe as on the WIRELESS VLAN. (In other words, we can run all 30 wired PCs on the wired LAN).
    6. Could inability to get more computers on the network be due to an address limitation in the NAT server?
    No. We have a big, big address range.
    Here's our current plan: we're going to VERY CAREFULLY chronicle the drop off in usage at several points during the day:
    8:00 am (no students)
    10:00 am (busy school but probably not much student wifi usage)
    noon: we'll run a test with +15 students using laptops and measure the bandwidth using a network speed checker at every point. That way, we figure we'll have a clearer chart of the usage breakdown.
    Does anyone have any suggestions of addition things we should monitor during this test? We're going to do it next Tue (2/19).
    In addition, if there are any specific questions that we should put to AT&T, I'd love to hear them.
    Thank you all!!

  • HT4557 whats the best itunes/appleID setup for family of 3 with 3 ipads, 3 iphones, one PC with all music on.  if we use 3 separate ones how do we share purchased and home content?

    been with apple for years.  one itunes/appleID in use for family - all purchases and downloads on the one account..
    now got 3 ipads, 3 iphones and when we update the software, we seem to get text/facetime issues due to multiple email addresses and phone numbers for the different devices that each individual uses.  For example, I send a text and it appears to have come from my wife or son to the recipient.  Not good !
    there seems to be direction from apple that each of us should use our own apple id, thogh how do I link the accounts so enable family sharing of music/media we have purchased etc - Id also like to be able to review and keep a private eye on what my son downloads as he is 11 yrs old ! I manage this currently as we allow him access to the password for itunes (as we all use the same id today)
    Am i better setting up accounts for my wife and son independent of my own, or not. Each of us would like access to the family content we have and the master library of synced content.  I just want the most simplistic approach that apple, or others would recommend. 
    Is there a better or optimum setup for a family as we cannot be alone.....

    Thanks for the help, but a follow up question now.
    My iPhone won't arrive for a little while, but my wife already got hers and she wants to set it up now. Using my Apple ID for the purchases, if she starts setting hers up, can she change her iCloud ID to something else quickly? It keeps telling us that we have to sign in with the AppleID first.
    Should we just set up an iCloud account via normal internet before trying all this via iPhone?

  • I am trying to setup to secure a redirect public port to a private port

    I i am trying to setup to secure a redirect public port to a private port to a Microsoft server exchange
    A user coming from the outside(Untrusted security level 0) will connect to IIS server in the DMZ(Trusted security level 50) with a port 443 to a PIX 515 , the IIS server has a application called Detour Service(Service transparently reroutes any TCP connection from one IP Port to any other IP Port) will initiate a connection to Microsoft server exchange to the inside(trusted security level 100).
    Do you think it is the right solution I term of security?yes or no, are do you have a better solutution
    Thanks
    User port destination 443(outside)>>>>>> IIS server port destination 9999(DMZ)>>>>>>>>>>> Microsoft server exchange(inside)

    Actually the connection from lower security level to higher security level is blocked. You can apply an access list to limit traffic from inside to outside, or allow traffic from outside to inside. For transparent firewall mode, you can also apply an EtherType access list to allow non-IP traffic.

  • SSL Certificate setup for Web/Address Book/iCal in 10.7 Lion?

    I know nothing about certificates. I plan to use my Mini server to help manage my family's computers which are pretty spread out across the U.S. My plan is to use profile manager for device management, host a couple websites (one secure for home security cams) and share address books and calendars. This is as much a geek gadget project as it is "useful" so I understand I may be creating some work for myself
    Anyway, can someone walk me through the correct setup for certificates? My research is showing me a LOT of options/parameters. Due to the expense, i don't want to create one just to find it won't serve my purposes.
    Also, I think i'm going with RapidSSL...$50 is the cheapest I've come across...hopefully the offer what I need?

    I have just spent 30 minutes on the phone to a pleseant chap in Athens, and now have a solution.
    We tried several options and the final one worked - so simple.
    Click on the apple symbol > system preferences > iCloud > disable contact sync > keep contacts
    Check search, in my case it worked for the first time in several weeks :-)
    then re-enable contact sync as follows:
    Click on the apple symbol > system preferences > iCloud > re-tick contacts > merge contacts
    Search still works
    Hallelujah!

Maybe you are looking for

  • How to extend clips after multicam editing.

    I recently learned how to use multicam editing and I think it is such a fantastic tool. One of the things that I struggled with, however, is the ability to extend/shorten one of the clips because the footage was too shaky during the transition to ano

  • Blurry BBM display picture

    whenever i update my display picture on my new bbz10 the display picture is always blurry. help in fixing this

  • KE1Z transfer planned sales revenue  to FI-GL but the amout is double.

    Dear all:    I have transfered the planning sales revenue using KE1Z  and if I change the data in KEPM and transfer to FIGL again.The revenue will post the total amount  again. ex. step 1.KEPM  Rev $100 to FIGL           >  KE1Z transfer to FI>report

  • Reval for New GL - local ledger (Z5)/Leading Ledger (OL)

    I would like to find out if it is possible to restrict someone access to only running reval on the local ledger, but not on the leading ledger.  The purpose is that we would like the local accountants to run reval on the local book (Z5), but we do no

  • Where to replace cracked screen of i phone 5

    my screen of i phone 5 is cracked , so i need to replace i from the new screen for it ,where i could find the right place for it in india