IPad on the Enterprise network

Hello All -
I am looking to get some more information on the iPad in the enterprise. We are currently using Cisco wireless running a corporate SSID using WPA+WPA2 with AES and 802.1X.
Is anyone running iPad's in the 802.1X enterprise? We use a Device CA for all of our devices, is it possible to use this on the iPad or do you have to use client CA?
I am using the iPad configuration utility to try and configure my test iPad, but it doesn't seem to work like I need it to. I get to a certain point and it wants username and password. I do not want a user to have to login, so this would lead me to believe client CA needs to be used and not Device CA.
Can anyone help me out?

First, try a system reset. It cures many ills and it's quick, easy and harmless...
Hold down the on/off switch and the Home button simultaneously until you see the Apple logo. Ignore the "Slide to power off" text if it appears. You will not lose any apps, data, music, movies, settings, etc.
If the Reset doesn't work, try a Restore. Note that it's nowhere near as quick as a Reset. It could take well over an hour! Connect via cable to the computer that you use for sync. From iTunes, select the iPad/iPod and then select the Summary tab. Follow the on-screen directions for Restore and be sure to say "yes" to the backup. You will be warned that all data (apps, music, movies, etc.) will be erased but, as the Restore finishes, you will be asked if you wish the contents of the backup to be copied to the iPad/iPod. Again, say "yes."
At the end of the basic Restore, you will be asked if you wish to sync the iPad/iPod. As before, say "yes." Note that that sync selection will disappear and the Restore will end if you do not respond within a reasonable time. If that happens, only the apps that are part of the IOS will appear on your device. Corrective action is simple - choose manual "Sync" from the bottom right of iTunes.
If you're unable to do the Restore, go into Recovery Mode per the instructions here. You WILL lose all of your data (game scores, etc,) but, for the most part, you can redownload apps and music without be charged again. Also, if you have IOS-7, read this.

Similar Messages

Using iPad in the Enterprise; close but challenges......

Getting closer to being able to use iPad in the Enterprise. Two challenges so far; sorting functions in Numbers Application not existent? Work around? and the second issue, tracking changes in a word document or Pages document when using Pages on iPad?
Can't analyze data without sorting feature. Can't review legal or contracts without seeing who changed what? Any workarounds besides use my Mac Air?
Thanks

Getting closer to being able to use iPad in the Enterprise. Two challenges so far; sorting functions in Numbers Application not existent? Work around? and the second issue, tracking changes in a word document or Pages document when using Pages on iPad?
Can't analyze data without sorting feature. Can't review legal or contracts without seeing who changed what? Any workarounds besides use my Mac Air?
Thanks

Providing DRC solution for ATMs in the enterprise network

Hi all,
I am looking for ideas on how to provide a Disaster Recovery solution for thousands of ATMs (Automated Teller Machine) deployed in the bank enterprise network. The solution should consider
the following facts:-
1.- Having the ATMs switch the connection to the Server at DRC shouldn't be automatic. This situation might last for the next few years until DRC becomes mirror image of primary data center.
2.- The ATM servers at the primary and disaster recovery center is single server equipped with high availability (Tandem). I mean to say, there is no SLBs invloved in the connection
3.- The application running on the ATMs is calling the ATM Server by hardcoded IP address in the application. The bank is willing to visit the ATMs to change once and forever.
I see source natting as the most appropriate solution, however your opanion and expertise are appreciated.
Thanks
Sami

Sami,
what kind of solution are you looking for ?
Is the concern the connection from ATM to central location ?
Or is it a concern about the server at the central location ?
For connection issues, I don't see any other solution than providing multiple lines.
If the concern is the single server, you could have a loadbalancer somewhere in your network.
The loadbalancer can use probes to check the health of the server.
If the primary fails, or is unreachable, you can automatically redirect the traffic to the standby.
ATM machines will point to the virtual ip (you could reuse the current ip and assign a new one to the servers).
Not sure where to place the loadbalancer without a better idea of the problem to solve and the network.
Gilles.

VRF Lite running in the enterprise network

Hello everybody
Altough VRF lite (or Mulit VRF) seems to be a Service Provider Tecnology.
Does it make sense to use it in an Enterprise Network to isolate Networks from others ?
I cant find any design paper which describes if this would make sense.
What do you think. Is someone using it ? Does Cisco recommend it ?

Yes, VRF-lite SHOULD be used in an Enterprise environment to isolate the different security classes of devices.
In the past you would isolate different groups of users using Layer1, i.e. separate hubs either totally isolated or connected together by a router with ACLs. Since the PCs were only connected at shared 10 Mbit and the routers were such low performance and worms weren't really prevalent, this was not a big security issue at the time.
Then we migrated to VLANs, which essentially allowed Layer2 isolation within the same switch to provide the same functionality of separating different classes of users and to break up broadcast domains. Unfortunately, everyone connected the VLANs together at Layer3 with a router (or SVI) which essentially connected everything together again! And almost no one gets the ACLs right (if at all) to isolate the VLANs from each other. In fact, in most cases every VLAN can automatically reach every other VLAN from a Layer3 or IP perspective. This is a huge security problem.
Enter VRF-lite, essentially created by Cisco as their tag switching migrated to standards based MPLS and had a need to isolate Layer3 security domains from each other within the same switch (or router). Think of VLANs for routing tables. VRF stands for 'Virtual Route Forwarding', which basically means separate routing tables. Since VRF-lite is a per-switch feature (running locally to the switch) you will need to use other technologies to connect multiple VRF-lite switches together and keep the traffic isolated, see below.
What makes this so secure is that there is no command within the switch to connect different VRFs together within the same switch. You would need to connect a cable between two ports on the same switch configured in different VRFs to be able to communicate between them (recent IOS 12.2SR allows tunnels with different source VRFs but that is a corner case). The reason for this is simple, remember the basis for VRF (and VRF-lite) is for a service provider to isolate multiple customers from each other within the same switch. Just like an ATM, Frame-Relay, SONET, or Optical switch, the command line makes it very difficult (or impossible) to accidentally connect 2 different customers together.
Think about that. Even if someone was able to get ssh enable access to your switch (you aren't running telnet anymore, right?!), they CAN'T connect 2 VRFs together with any command.
And, yes, this is highly recommended by Cisco Engineers and is actually deployed far more than you think. I have VRF-lite running on at least 10 client's networks and those are LARGE networks. VRF-lite was integrated into the environment purely to solve a Layer3 security class isolation issue. I have used Layer3 dot1q trunks on c6500 switches and tunnels to keep isolated connectivity between VRFs between switches.
In Cisco speak, VRF-lite falls under the topic of 'Path Isolation' which is combined with other features that isolate traffic within the same network such as dot1q trunking, tunneling, VPN, policy-routing, and MPLS. Do a search on Cisco's web site for 'path isolation' and you will find a bunch of info.
See the following URLs for a good start:
http://www.cisco.com/en/US/netsol/ns658/networking_solutions_design_guidances_list.html
http://www.cisco.com/en/US/netsol/ns658/netbr0900aecd804a17db.html
http://www.cisco.com/en/US/netsol/ns658/networking_solutions_white_paper0900aecd804a17c9.shtml
As always, rate all posts appropriately, particularly those that provide value and don't be shy about following up with additional questions or comments.
Good luck!

I can't print wirelessly from my iMac although it is connected to the same network as the printer and I can print fine from my iPad to the same network

I have downloaded and installed the driver from the HP website for the HP Envy 5530. While I can send documents from my iMac to the printer using a USB cable, it will not print wirelessly. When I tried to install the wireless connection, I got the dialogue box saying "Devise not reachable" and it suggested I check whether the iMac is connected to the wireless network (it is and the signal strength is excellent, Safari runs well) and that I check the printer is connected to the same network (it is). I am able to print items from my iPad wirelessly using the network so I don't understand why the iMac won't recognise the printer wirelessly when everything else works fine.

From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Advanced
and check the box marked
          Include Bonjour in the Bookmarks menu
if it's not already checked. Then select
          Bookmarks ▹ Bonjour ▹ Name of printer
A web page served by the printer should open. Does it?

TS1398 My iPad finds the WiFi network I want to join (and it

My iPad finds the right WiFi network, and it's a network it has been able to connect to in the past. But when i click on the network it says unable to connect. The network is password protected, but when i click on the network i am not prompted for the password. I reset the WiFi (and it connects to other devices just fine), and i have reset the WiFi on the iPad, and nothing changes.
Thanks,
Ally

Some things to try first:
1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
4. Go into your router security settings and change from WEP to WPA with AES.
5. Renew IP Address: (especially if you are droping internet connection)
    •    Launch Settings app
    •    Tap on Wi-Fi
    •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
    •    In the window that opens, tap on the Renew Lease button
~~~~~~~~~~~~~~~~~~~~~~~~~
iOS 6 Wifi Problems/Fixes
Fix For iOS 6 WiFi Problems?
http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
iOS 6 iPad 3 wi-fi "connection fix" for netgear router
http://www.youtube.com/watch?v=XsWS4ha-dn0
Apple's iOS 6 Wi-Fi problems
http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
~~~~~~~~~~~~~~~~~~~~~~~
Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
How to Fix: My iPad Won't Connect to WiFi
http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

Personal iPads in the enterprise - keeping work/personal apps separate

Hi All,
I work in IT for a school district. Recently, we got a grant for iPad training. As part of that training, every teacher that attended the classes was given an iPad. The problem is, that because of the way the grant was structured, the iPads ended up belonging to the teachers personally instead of belonging to the school district. Since all these teachers now own their own iPads, we do not want to spend the money to buy them a second "work" iPad.
I am trying to come up with a solution that allows those teachers to use their own iPads in our school environment. Specifically, I am looking for a way to be able to purchase needed iPad apps with school funds, install them on the users' personal ipads, but prevent the user from backing up/syncing those apps with their home Mac/PC.
The best idea we have come up with so far is to create a generic Apple ID for each teacher, such as "schoolname-01", "schoolname-02", etc. The school's IT department would then be the only ones who would have the passwords for those accounts. The IT department would then download and install the school owned apps on the teachers' personal iPads using one of the generic "schoolname-xx" accounts. The theory is that the iPad registers and stores the Apple ID used to purchase each app, so we will be able to tell what apps are bought with school money and what apps are bought by the teacher for personal use.
Obviously, this is not an ideal solution, but we haven't been able to come up with a better one. The biggest question we have is this: each of these personal iPads is going to be sync'd with the teacher's home Mac/PC. Since the home Mac/PC will not be authorized for the generic "schoolnamexx" Apple ID that was used to install the school apps, will that mean that only the teacher's personal apps will be backed up when they sync with iTunes, or will iTunes back up every app, regaurdless of what Apple ID was used to purchase it?
Also, since an iPad can only sync with one Mac/PC, how can we back up the apps purchased with school funds? Theoretically, we can re-download them from the app store, but only so long as they are still available for sale.
I would appreciate feedback from anyone who has had success integrating personal iPads into a work environment.

Hi gyrhead,
Thanks for the information. I understand that the teachers will not be able to transfer app purchases from the school Apple ID to their personal Apple ID. The concern we have is this: what do we do when a teacher with a personal iPad with school software on it leaves the district? I know we can re-download the software purchased with the school Apple ID onto a new iPad, but how do we get the school software off the teachers iPad?
If a teacher leaves under bad circumstances, there is not much hope that we will be able to remove the software from their iPad. If their is a solution to remotely wipe apps installed under a specific Apple ID I would love to know about it.
However, if a teacher leaves and it is an amicable parting, we are hoping that the teacher will allow us to remove the school software from their iPad. However, even if we remove the software from the iPad, couldn't the teacher just restore it from their home Mac/PC? If the teacher syncs his/her iPad to their home computer, will it back up just the apps purchased under their personal Apple ID or will it also back up the apps purchased under the school Apple ID as well? If it is the latter, then I don't see how we could prevent the teacher from reinstalling the school apps, even after we remove them from the iPad.
As long as the school can still install the apps it purchased on a new iPad, that last issue is not a huge concern for me. However, the upper management/legal guys want to know the answer to this one.

IPad in the Enterprise

Hi all,
Do you know if there is a way to limit the enterprise users to download only the applications that are "accepted" by the company? Is there kinda a config profile to set up?
Any help greatly appreciated.
Thanks and cheers,
Pierreg256

Dave, Tom,
What I understand from the discussion I'm having with you both (and correct me if I'm wrong) is that there are two distinct channels to provide users with apps :
- the apple appstore : gives users gazillion applications to download and install
- one's company 'private' appstore : set up using enterprise over the air application distribution.
The two channels can live together on the same device without interfering one with each other.
But, when you want to apply restrictions at the application level, though, the configurations profiles you can apply are far too generic and prevent a company to list a predefined set of "allowed" apple appstore applications the users can download on their own.
Whereas distributing your own applications and provisioning profiles via email or OTA is more fine grained and allows you to deliver only the ones you really want to selected users.
As you stated, i will definitely contact an apple sales rep to see if I can get more info.
I really want to thank you both in helping me find an "acceptable" solution to my current issue. This is the first time I join this discussion forum, and I already get very good answers! Thanks guys! I really appreciate and get back on this forum for my next questions.
Cheers,
Pierre.

State of the enterprise network & wireless technology

In your opinion, what do you think is the single most gating factor for an enterprise to be able to provide wireless access to corporate resources on a LAN?
and what does an enterprise need to do today to get their network ready for wireless?

In our environment, infrastructure was the biggest factor. It is very difficult and expensive to wire (and re-wire) our facility so putting in access points throughout and wireless nics eliminates the problem. It also very convenient for our users with notebooks. There are other factors as well but thats the main reason.

How can i save and download word documents on my ipad without the pages app

Need to know how to save documents on my ipad so i can share the same version of documents between my computer and my ipad on the same network. I do not have the pages app. and Most of the documents are either pdfs of word docs. so need to be able to save them on ipad and retrieve them when i am on the move. Pls help?

You have to have an app on the iPad that is compatible with the particular file type that you want to save, edit or share. You can look at any of the word processing apps - Pages is one, Documents to Go, Quick Office Pro - but you have to have one like that in order to save and edit Word files.
With pdf files - iBooks will work to save them - but that's all. Other apps like GoodReader will let you annotate them.
You have to decide which app will serve your needs best and them download them in order to save, edit and share those file types.

Ps CC 2014 not opening files on enterprise network - any ideas?

I've recently run in to an issue where i cannot open any files or start a new .PSD when logged into my company's network.
However, when I'm working at home on my personal network, everything is functioning normally.
Any ideas what the issue might be? Our IT help desk do not support Adobe CC, but if I can make a suggestion as to what the snag might be on the enterprise network, I might be able to avoid having my PC re-imaged, which is the only solution they've suggested so far!
Thanks!
Jon

If I drag a .jpg or .png in to Ps, nothing opens.
If I use 'File -> Open' and select .PSD, .jpg,, .png, nothing...
If create a new document, still nothing.
All these scenarios work just fine when not logged in to the company network.
I've uninstalled/reinstalled Ps, updated all Dell drivers.

IPad Backups and Enterprise PC Management

In my company, we image Windows PCs as a deployment strategy. In some cases when troubleshooting a problem, it is easier and quicker for our end users to simply reimage the PC rather then spending hours troubleshooting the problem.
As we deploy iPads to the enterprise, we will need to have iTunes added to our image. If someone inserts their iPad into their PC running iTunes, iTunes will backup the unit problem. If say the following week, we need to replace their PC (either with a new one or we reimage their PC), the next time they plug in their iPad into the PC, I believe it will wipe the unit, because when the unit was activated, it was "married" to the original PC it was activated on. Is there a way to prevent iPads from wiping themselves when a new PC is provisioned for an employee or their existing PC is reimaged? If not, am I able to simply copy the iTunes folder from the original PC to the new one to keep the "marriage"?

If you update iTunes to the latest version on the machine you plan to retire or wipe, then copy the itunes folder from the user profile in Windows or Mac. On the new machine or freshly imaged machine, update the iTunes so that it's running the same version. Just copy that itunes folder back to the proper location under the users profile and all should be ok. the kay here is to be sure to run the same version on the old and new, hence why I suggest updating prior to moving so that you have a one to one version. going from an old to a newer version will cause issues. Likely due to the database iTunes uses being a different version.

I cant seem to connect to the guest network i created on the airport extreme.

i seem to have set the base station up ok, but setting up the guest network has me pulling my hair out, i have set this up on my mac however when i try to connect my ipad to the guest network it accepts the password but all i get is that pinwheel forever spinning and not actually connecting. also when i open airport utiliy and see the base station in the top left corner the button that says connected devices when clicked shows nothing, they are greyed out, however when i click on the base station i do see my ipad and iphone and mac.

Whethere or not the guest network feature will work correctly depends on what type of device is providing your Internet connection.
The Guest Network will work if you have a simple modem.
Unfortunately, most Internet Service Providers furnish a modem/router to their customers.....which will not allow the Guest Network feature to be activated correctly.
If you are not sure whether you have a modem or modem/router.....post back with the make and model number of the device that you call your "modem".

TS1398 Got the dreaded no wifi on my wife's iPhone 4S. Wifi greyed out and no luck with the reset network instructions. Why isn't Apple addressing this issue? We are a family of Apple product users, 2 ipads, an ipad mini, 4 iPhones but one isn't working!

Got the dreaded no wifi on my wife's iPhone 4S. Wifi greyed out and no luck with the reset network instructions. Why isn't Apple addressing this issue? We are a family of Apple product users, 2 ipads, an ipad mini, 4 iPhones but one isn't working! Issue began whenwe upgraded the operating system.....
Come on Apple.....get this issue sorted out!

Just out of warranty. This is a software issue. everything was ok until the software update. Apple just need to sort it out.

My ipad recognizes my home network but will not connect to the internet. When I click on AirPort/preferences at the top of the imac screen it says..."AirPort has a self-assigned ip address and may not connect to the internet".How can I change ip address?

My ipad recognizes my home network but will not connect to the internet. When I click on AirPort/preferences at the top of the imac screen it says..."AirPort has a self-assigned ip address and may not connect to the internet". If this is the root of the problem,how can I change ip address?
Ipad will connect no problem to other networks.

First thing you need I think is to get your iMac connected to the Internet.
Shut down your iMac and you iPad. Then power off your router. Wait 30 seconds and power up the router.
After the router indicates that it is connected to the Internet then start up your iMac and see if it connects. If the iMac connects to the Internet then your iPad should too.
If this power up sequence doesn't work you'll have to dig into the router setup to make sure it is working properly.

IPad on the Enterprise network

Similar Messages

Maybe you are looking for