2811 routers working with ISE?

Hello,
Has anybody had any success with using a Cisco 2811 router with an Identity Service Engine application config?
I understand the 2800 series routers are not compatible with ISE but I have quite a number of them to work with and am hoping somebody has found a workaround for this.
Ideas?
Thanks,

Ah, so you are trying to run dot1x on a switch module on your ISR G1. Unfortunately, that hardware would not be supported. For a list of compatible hardware check out the ISE Compatibility Guide:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/compatibility/ise_sdt.html
Thank you for rating helpful posts!

Similar Messages

Client Exclusion Policies on WLC not working with ISE as RADIUS Server

Hi,
for our Guest WLAN (Security Setting for this SSID:Layer2: MAC filtering, Layer3:none) we use ISE as RADIUS Server. On WLC I enabled client exclusion polices and checked all options (Excessive 802.11 Auth. Failures etc..).. But even if a client fails 20times at authentication, it is not excluded on the wlc. It works with other SSIDs, where security settings are set to 802.1x.
Am I missing any settings here or do you have some tipps on how to troubleshoot this?
Thanks very much!

Hi Renata,
If those guest failures are not associated with valid guest users (i.e. people who have forgotten their account or entering the wrong password) there isn't anything that can be done. The main point of Guest WLAN is to make it as easy as possible for Guests - individuals with device configurations you don't want to deal with or know about, to connect your network for internet access. From a WiFi/802.11 perspective, the standard Guest WLAN setup means its easy for any device to connect.
If your Guest WLAN has the following:
SSID is broadcast enabled, Security = OPEN, Encryption = none, then any 802.11 device can find the WLAN via passive scanning and connect. And any device that connects will get the ISE portal. Once recieveing that portal they can guess away at valid username/password.
I would suspect that unless your Guest WiFi is adjacent to a Mall, school, hotel or other hi-density area of individuals with time and electronics on their hands, other than alerts in your ops window and logs, resources associated with this (WLC & ISE) are very low.
You can try and dull the noise a few ways.
Option 1. create and ISE log filter on those alerts so they don't cluter the console.
Option 2. Stop broadcasting the SSID. This is not a security measure, but will cut volume of people connecting to the SSID significantly. You will have to tell your guests what SSID or include it in their credential communication.
Option 3. Put a very simple PSK on the SSID. The PSK will become a public secret - shared with valid guests, doesn't have change as it's purpose is not security. You will have to include this information on their credential communication.
Option 4 - both 2 and 3
The most effective option would be 3.
Good Luck!

What wireless routers work with the MacBook Pro?

I have been having problems with my inconsistent D-Link 624 and I realize that I will have to replace it.
I would like to know what routers are compatible with the MacBook Pro. My D-Link worked fine with my iBook but I think it does not work with the Intel binary. Any suggestions?

I had problems with a number of different Linksys routers (dropped signal, couldn't connect to some iChat AV calls, etc). I'd been using some Airport express routers for music around the house, which I switched around a made a primary wireless router and a reange exapnder. I've had ZERO problems since.
BTW, I was having almost identical problems with my PowerMac G5 (with a wireless card).
I'm curious if something in recent upgrades (10.4.7?) has changed the OS's ability to connect reliably with non-Apple routers.
But at least my Apple routers seem to be working very well.

Will Netgear routers work with BT Broadband?

Will any routers, including Netgear and Belkin work with BT Broadband?

IanC wrote:
Gamerwillz wrote:
Will any routers, including Netgear and Belkin work with BT Broadband?
Yes.
But ensure it is compatible with the upgraded version of BT's broadband. ADSL2 ADSL+ ? Whatever it is
Why do upgrades always come with a downgrade

3850 controller ACL working with ISE

Hi all
I was wondering if anyone can point me to the right direction. I was setting up BYOD access with ISE and Legacy controllers as follows:
- create rule on ISE with Redirect / Airspace ACL
- once that rule is hit ISE would send ACL name that needs to be applied on the controller (i.e. NSP-IOS )
- controller would need to have the same ACL created locally with matching name
- there are certain rules on old controllers allowing inbound / outbound traffic + denying traffic to be redirected
now I want to use the same principle with 3850 controller.
question is -> where do I configure this ACL, globally or under WLAN.... Also, what about direction - inbound / outbound that used to be the case with legacy controllers?

The ACl should be under the WLAN

Routers that work with iChat AV?

Since Apple's list of approved routers hasn't been updated for years, I would love to hear from anyone who has purchased a router recently that works with iChat for audio/video, including any special setting changes/tips. Could anyone with a success story post here? I'm tired of the error 8 messages which in at least some cases seems to be router related.

@stevesol
I have used the DI-604 for about 5 years now. It is a great and cheap router/firewall. The only problem that I have ever had was an odd one. I have a mac pro. i have an external amp that I use for playing my music through. I had a cable run from the rear audio out to the amp. After the last firmware update (mac pro EFI firmware update 1.1) I could not use ichat anymore. If I bypassed the router and went straight to the modem then all was fine. It turned out that there was a major conflict with my setup using the router and rear audio out port but if i used the front headphone jack everything was fine. Other than that the DI-604 is very good. I open port 5190 on the router and have good results. If you are not sure how to open up ports then check out this site. It shows to open up a whole pile of ports but the 5190 port works fine for me.
http://www.portforward.com/english/routers/port_forwarding/Dlink/DI-604/iChat.ht m
I would also recommend this fine site from one of the other posters. Ralph Johns site is excellent
http://www.ralphjohnsuk.dsl.pipex.com/page2.html
and of course what Apple has to say about their firewall
http://docs.info.apple.com/article.html?artnum=93208

C3 did not work with all the types of routers

Hi!
My problem is with the C3 (Hungarian 03.36 Vodafone), that the e-mail program is not working with all the wlan routers. My home router is Asus WL-520GC and with it I get communication error, but with a Linksys or a Tplink router everything is good. How can it be?
(I ve heard it from outhers too)
(both WPA2personal and DHCP)
I tried it with factory settings, but same problem: communication error.
Pls help!

Solved: I had to upgrade the firmware of the router.
It works

My imac will not connect to wifi what so ever. i have tried 3 different routers and all my other apple devices work fine. when i take it to the genius bar it seems to work with apples instore wifi. thus leading the "geniuses" to say nothing is wrong.

my imac will not connect to wifi what so ever. i have tried 3 different routers and all my other apple devices work fine. when i take it to the genius bar it seems to work with apples instore wifi. thus leading the "geniuses" to say nothing is wrong.

Back up all data before making any changes.
Step 1
Take all the applicable steps in this support article.
Step 2
If you're running OS X 10.8.4 or later, run Wireless Diagnostics and take the remedial steps suggested in the summary that appears, if any. The program also generates a large file of information about your system, which would be used by Apple Engineering in case of a support incident. Don't post the contents here.
Step 3
If you're not using a wireless keyboard or trackpad, disable Bluetooth by selecting Turn Bluetooth Off from the menu with the Bluetooth icon. If you don't have that menu, open the Bluetooth preference pane in System Preferences and check the box marked Show Bluetooth in menu bar. Test. Continue if you find that Wi-Fi is faster with Bluetooth disabled.
From that same menu, select Open Bluetooth Preferences. If the box labeled Discoverable is checked, uncheck it. Click the Advanced button, and in the sheet that opens, uncheck the top three boxes, if any are checked. Click OK. Enable Bluetooth and test again.
If the application called "Bluetooth Setup Assistant" is running, quit it.
Step 4
This step will erase all your settings in the Network preference pane. Make a note of them before you begin, and recreate them afterwards. It may be helpful to take screenshots of the preference pane.
Triple-click the line below on this page to select it:
/Library/Preferences/SystemConfiguration
Right-click or control-click the highlighted line and select
Services ▹ Reveal
from the contextual menu.* A folder should open with an item named "SystemConfiguration" selected. Move the selected item to the Trash. You may be prompted for your administrator password.
*If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). In the Finder, select
Go ▹ Go to Folder...
from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.
Step 5
Reset the System Management Controller.
Step 6
Make a "Genius" appointment at an Apple Store, or go to another authorized service center.
Back up all data on the internal drive(s) before you hand over your computer to anyone. There are ways to back up a computer that isn't fully functional — ask if you need guidance.
If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you have at least two complete, independent backups, and you know how to restore to an empty drive from any of them.) Don’t erase the recovery partition, if present.
Keeping your confidential data secure during hardware repair
*An SSD doesn't need to be zeroed.

Currently have house wide wireless network and using external HD (USB) for time machine. HD broken. would Time capsule work with current routers etc or make them redundant?

I currently have a large house wide wireless network and I am using a dedicated Buffalo HD with USB for time machine. The HD has gone bad and can't be repaired. I am thinking of replacing it with a Time Capsule. Will this fit in with my current routers etc, render them redundent ? I THOUGHT THAT THE HD I BOUGHT WAS OF GOOD QUAILTY BUT IT HAS BROKEN AFTER 2 YEARS. HOW LONG CAN ONE HOPE FOR A TIME CAPSULE TO LIVE (USING QUALITY SURGE DEVICES ETC) ? Does one need to backup the backups?
ALSO: Is ther e any way to back up from Time Machine off site ( mobile me etc) in case the house burns down?

Steve M. wrote:
I know I should have redundant backups and should probably have a second external HD and eventually will.
Yes, that's best.
But for now, if I partition (I'm assuming I should) a new 1 TB external HD, how big should I make the TM partition vs. the SD partition at this point assuming I have under 100 GB on my internal Mac HD? Is this a feasible way of doing things here in the near term.
Your best bet is to make your TM partition 2-3 times the size of the amount of data you anticipate backing-up. Put it first on the drive; that way, later on you can delete the partition below it, expand the TM partition, and make a new, smaller partition for SD (or use the whole drive). See #1, #3, #5 and #6 in the Frequently Asked Questions *User Tip,* also at the top of this forum, for details.
By the way, any recommendations on which peripheral HDs to consider? I was very surprised on a recent visit to my local Apple Store that they have a large stock of WD My Studio drives. I mentioned to an Apple sales person that I had always heard WDs were kind of a no-no among Mac users but she assured me the current crop of them were much improved. Any comment on that??
Most any drive will work with Macs, and Time Machine.
If you're going to put a "bootable clone" on it, be sure it's a bootable drive. Most PPC Macs can boot only from FireWire; most Intels can boot from F/W or USB. But some Western Digitals won't boot a Mac. Their list of which ones should and +should not+ boot: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/stdadp.php?pfaqid=1787. But note the disclaimer that they don't support it +*at all.+*.
In addition, many of them have a built-in sleep mode that cannot be disabled, and sometimes interferes with Time Machine backups: http://wdc.custhelp.com/cgi-bin/wdc.cfg/php/enduser/stdadp.php?pfaqid=1376

List of routers/access points that work/don't work with new airport extreme

Lets try to put together a list of routers/access points that work with the integrated airport extreme in the new intel macs and 10.4.5 (or 10.4.4) The purpose is to determine what is needed to make this work.
1) only wireless g, 802.11b does not seem to have this problem, psp probably is not supported by most 802.11b cards so its probably disabled in that mode.
I'll start off.
imac dou core. ( 1 week old)
dlink 2100ap , wireless g , does not work, slow not paifully slow internet access, very degraded video/audio streaming over local network.

I'm afraid 11b is affected.
I have a D-Link DSL 604+ router, which is 11b only.
Wireless is very slow, I noticed it right away. I get the sawtooth readout in activity monitor's network section.
Also, after putting the iMac to sleep it cannot find my wifi network upon waking. I have to restart the system before it'll connect to my wifi network again.

Does Air Express Work with other brand Routers?

I just got an Airport Express. I can't seem to get it to work with my Linksys router. Are the supposed to work with other brands, or only Apple?

Since you now have two 802.11n AirPorts, you will want to take advantage of the "extend a network" feature this version offers instead of the 802.11g WDS.
Here's the basic setup to extend the 802.11n AirPort Extreme Base Station (AEBSn) with the AXn ...
o If practical, place the base stations in near proximity to each other during the setup phase. Once done, move them to their desired locations.
o Open AirPort Utility and select the base station that will connect to the Internet.
o Choose Manual Setup from the Base Station menu, or double-click the base station to open the configuration in a separate window. Enter the base station password if necessary.
o Click AirPort in the toolbar, and then click Wireless.
o Choose “Create a wireless network” from the Wireless Mode pop-up menu, and then select the “Allow this network to be extended” checkbox.
o Next, select the base station that will extend this network, and choose Manual Setup from the Base Station menu, or double-click the base station to open its configuration in a separate window. Enter the base station password if necessary.
o Choose “Extend a wireless network” from the Wireless Mode pop-up menu, and then choose the network you want to extend from the Network Name pop-up menu.
o Enter the base station network and base station password is necessary.
o Click Update to update the base station with new network settings.
(ref: Page 46 of "Designing AirPort Networks Using AirPort Utility.)

My Time Capsule does not work with existing WiFi

Following a question solved on March 24 by LaPastenague, but gone bad again.
Apple AirPort Time Capsule
I felt the need for a physical backup of my data, as I would not completely trust the different clouds. I use, and have used Dropbox for 4-5 years and are very satisfied with that, but I am still not sure if or when a political lunatic will shut off the internet.
I purchased the Apple AP Time Capsule 2T, because all my other stuff are Apple, and that it's wireless. My old backup is Maxtor 300 GB.
Since we stay 2-3 weeks on two locations, one in Norway and one in Sweden (two different countries) we must use Mobile Broadband 4G, cables or fibre connections are useless for us, and we don't have it up to the houses. I have one mini router for each country, we bring with us iPhones, iPads, iMac, Apple TV, APExpress. When we pass the boarder I change the mini router, and the system continues working perfect on the WiFi, except the APExpress that needs to be reconfigured, but then it works.
The APTC was difficult to make working as it would not accept to be in an existing network, but with good help from the Apple Community, LaPastenague, with forcing the TC connect to the APE with Ethernet cable in bridge mode, ref "My Time Capsule does not work with existing WiFi" from March 24, the problem was solved and all gadgets worked together in a perfect harmony, until we changed location.
Now, as I have my second WiFi network, and the APExspress is reconfigured, it's like the TC thinks, I am the base boss here, I am not taking orders from APE one more time, and it simply does not work, not only that, it fluctuates all the time.
I have a slight feeling that the two WiFi bands are making the trouble as during the configuration of the TC sometime the last figure 6 and 7 pops up, and that has something two do with the two different 2,4 and 5 GHZ bands
So, I am curious if you have any idea ?
I am thinking of returning the TC if I don't make it work now, but how do I delete all the data that's on it?

I can deal with the last question first and easily.
I am thinking of returning the TC if I don't make it work now, but how do I delete all the data that's on it?
Open the airport utility .. go to the disk tab and select erase.
When you select erase you will get mulitiple options.
Quick removes the file table but does not delete the files,, it takes 2min or less.
A Zero out data is the secure way,, by writing 0 ie low level drive format.
It can take several hours..
7 pass will take a week.. not recommended..
35 pass erase is ridiculous.. it would take a month.. put an ax through the TC. It is quick and better.
Now, as I have my second WiFi network, and the APExspress is reconfigured, it's like the TC thinks, I am the base boss here, I am not taking orders from APE one more time, and it simply does not work, not only that, it fluctuates all the time.
The fact that it did work and has now failed might point to faulty unit.
The only way to tell is reset it properly to factory and start over.
Universal Factory Reset.. any model TC or AE.
Unplug your TC/AE from power or turn off at the power point.
Hold in reset. and power the TC/AE back on.. all without releasing reset and keep holding in for about 10sec. (this is often difficult without a 2nd person or a 3rd arm).
Release it when the status light flashes rapidly. If it doesn’t flash rapidly you have missed it and try again.
Note..
Be Gentle! Feel the switch click on. It has a positive feel.. add no more pressure after that.
TC/AE will reboot after a couple of minutes with default factory settings and will wipe out previous configurations of the router.
No files are deleted on the hard disk in a TC.. No reset of the TC deletes files.. to do that you use erase from the airport utility.
Generally having multiple wireless AP should not cause problems.. but it is better to set channels manually.. so it doesn't go beserk rotating channels.
Remember to keep all names short, no spaces and pure alphanumeric.
Sadly though the Apple routers have no logging now and no SNMP and almost nothing to help diagnose a problem, so if it continues .. take it back to apple.. they have given you no other method of fixing it.

How do I Get My Router to Work With iChat ? FAQ 2

Replaces iCh: FAQ 2 How to get my router to work with iChat?
Getting your router started with iChat.
Appropriate for using iChatAV 2 upwards
Glossary for this FAQ
Routers: Any configurable device that sits between your computer and the internet link you have.
Routers seem to fall into two categories
Those that work straight from the box. See Apple Doc 93333
NOTE
This Doc has not been updated since Jan 04
and those that do not.
This post will deal with what you may need to look at.
First off make sure your device is acting as a DHCP server. (if you are already on the internet you may not have to bother with this.)
Check in the Network Preference Pane, in the "Built in Ethernet" option from the "Show" drop down list.
Make sure the TCP/IP tab is the 'front' one. You should be able to see Configure IPv4 and it most likely reads Using DCHP. Make a note of your IP address. It will start 10.xxx.xxx.xxx or 192.168.xxx.xxx (the 'x' s will stand for any number between 1 and 255).
Your router is most likely to be configurable from your browser. You will need to find the IP address to type into the browser from any Readme or PDF files that came on the install disk or visit the makers website and download a manual.
DMZ Demilitarised Zone
This is a less secure setting that basically opens all ports and points the incoming data to your computer. (not helpful if you have more than one computer on your LAN)
NAT Sometimes called NAPT and related to Port Forwarding (also Virtual Server or Pin Holes)
These settings are usually found in an Advanced setting.
You will need to set an incoming IP address (Usually 0.0.0.0 for any outside server), a port that data will arrive on, the Inside computers IP address (your computer) and the port it will deal with the data on and the protocol it will use.
iChat uses TCP and UDP so some devices will need the settings done twice, once for each protocol.
See Apple Doc 93208 for more information.
Note:
Note 1 should read:
1. All iChat AV traffic is UDP except for ports 5190 and 5298, which need to be open for both TCP and UDP; and 5220, 5222, which need to be open for TCP only.
UPnP Universal Plug n Play.
This is a simple Plug and Play type of setting. iChat can find it's own way through a router if the device has this capability.
Trigger Ports
Some devices offer a security measure that works by a first or trigger port receiving a data packet and then opening further ports when accepted.
The first port for incoming Video or Audio invites is port 5678. When you click on the invite window the process moves to port 5060 (so these will need to be opened by the trigger port) for negotiating the final group of ports from the group of 20 (16384-16403 These will need to open when the trigger says so as well). Therefore port 5678 triggers ports 5678, 5060, 16384-16403. All on UDP. Port 5190 neeeds to trigger port 5190 for both TCP and UDP
Wireless
Here you will have to read around but this Apple Doc 58514 might be a good starting place.
Multiple devices
Make sure only one is acting as a DHCP server. Make sure wireless devices are bridged properly.
Further Help
I have found that this site (ADSLGuide) to be helpful.
It is British based but I have linked you to the Apple Related Discussions Forum.
Eliminating Problems on my Personal web pages.
The ports and their function within iChat. (my pesonal Web pages again)
This is not a step by step approach. You will have to read around the information about your device.
Collected FAQs and Expansions: Index Page
Also http://www.portforward.com/routers.htm for instructions with Pics on Port Forwarding.
Ralph
G4 Dual 1Ghz MDD with extra HDs X3. Mac OS X (10.4.3) Have you read the iChat FAQs ?? They have moved to Users Tips

Replaces iCh: FAQ 2 How to get my router to work with iChat?
Getting your router started with iChat.
Appropriate for using iChatAV 2 upwards
Glossary for this FAQ
Routers: Any configurable device that sits between your computer and the internet link you have.
Routers seem to fall into two categories
Those that work straight from the box. See Apple Doc 93333
NOTE :This Doc has not been updated since Jan 04
and those that do not.
This post will deal with what you may need to look at.
First off make sure your device is acting as a DHCP server. (if you are already on the internet you may not have to bother with this.)
Check in the Network Preference Pane, in the "Built in Ethernet" option from the "Show" drop down list.
Make sure the TCP/IP tab is the 'front' one. You should be able to see Configure IPv4 and it most likely reads Using DCHP. Make a note of your IP address. It will start 10.xxx.xxx.xxx or 192.168.xxx.xxx (the 'x' s will stand for any number between 1 and 255). The range 172.16.xxx.xxx is also a possible value at this point. Rarely used, but it is part of the RFC for Address Allocation for Private Internets.
Your router is most likely to be configurable from your browser. You will need to find the IP address to type into the browser from any Readme or PDF files that came on the install disk or visit the makers website and download a manual.
DMZ Demilitarised Zone
This is a less secure setting that basically opens all ports and points the incoming data to your computer. (not helpful if you have more than one computer on your LAN)
NAT Sometimes called NAPT and related to Port Forwarding (also Virtual Server or Pin Holes)
These settings are usually found in an Advanced setting.
You will need to set an incoming IP address (Usually 0.0.0.0 for any outside server), a port that data will arrive on, the Inside computers IP address (your computer) and the port it will deal with the data on and the protocol it will use.
iChat uses TCP and UDP so some devices will need the settings done twice, once for each protocol.
See Apple Doc 93208 for more information.
Note:
Note 1 should read:
1. All iChat AV traffic is UDP except for ports 5190 and 5298, which need to be open for both TCP and UDP; and 5220, 5222, which need to be open for TCP only.
UPnP Universal Plug n Play.
This is a simple Plug and Play type of setting. iChat can find it's own way through a router if the device has this capability.
Trigger Ports
Some devices offer a security measure that works by a first or trigger port receiving a data packet and then opening further ports when accepted.
The first port for incoming Video or Audio invites is port 5678. When you click on the invite window the process moves to port 5060 (so these will need to be opened by the trigger port) for negotiating the final group of ports from the group of 20 (16384-16403 These will need to open when the trigger says so as well). Therefore port 5678 triggers ports 5678, 5060, 16384-16403. All on UDP. Port 5190 neeeds to trigger port 5190 for both TCP and UDP
Wireless
Here you will have to read around but this Apple Doc 58514 might be a good starting place.
Multiple devices
Make sure only one is acting as a DHCP server. Make sure wireless devices are bridged properly.
Further Help
I have found that this site (ADSLGuide) to be helpful.
It is British based but I have linked you to the Apple Related Discussions Forum.
Eliminating Problems on my Personal web pages.
The ports and their function within iChat. (my pesonal Web pages again)
This is not a step by step approach. You will have to read around the information about your device.
Collected FAQs and Expansions: Index Page
Also http://www.portforward.com/routers.htm for instructions with Pics on Port Forwarding.
With thanks to Macmuse.
Ralph
G4 Dual 1Ghz MDD with extra HDs X3. Mac OS X (10.4.3) Have you read the iChat FAQs ?? They have moved to Users Tips<</a>/span>

My iPad Mini with retina display suddenly will not connect to the Internet. It shows full wifi bars, yet no web pages will load. My Internet is working with all other apple devices in my house. The iPad also no longer works with celluar data.

My iPad Mini with retina display suddenly will not connect to the Internet. It shows full wifi bars, yet no web pages will load. My Internet is working with all other apple devices in my house. The iPad also no longer works with celluar data. I'm not sure what has happened. It was working fine a few hours ago. I have tried resetting it, ive restarted my browser etc. I tried to erase all data from my Ipad but I can't do that because it needs to sign into my Apple ID and use the Internet!

Some things to try first:
1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
4. Go into your router security settings and change from WEP to WPA with AES.
5. Renew IP Address: (especially if you are drooping internet connection)
    •    Launch Settings app
    •    Tap on Wi-Fi
    •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
    •    In the window that opens, tap on the Renew Lease button
6. Potential Quick Fixes When Your iPad Won’t Connect to Your Wifi Network
http://ipadinsight.com/ipad-tips-tricks/potential-quick-fixes-when-your-ipad-won t-connect-to-your-wifi-network/
~~~~~~~~~~~~~~~~~~~~~~~~~
Fix WiFi Issue for iOS 7
http://ipadnerds.com/fix-wifi-issue-ios-7/
iOS 6 Wifi Problems/Fixes
Wi-Fi Fix for iOS 6
https://discussions.apple.com/thread/4823738?tstart=240
How To: Workaround iPad Wi-Fi Issues
http://www.theipadfan.com/workaround-ipad-wifi-issues/
Another Fix For iOS 6 WiFi Problems
http://tabletcrunch.com/2012/10/27/fix-ios-6-wifi-problems-ssid/
Wifi Doesn't Connect After Waking From Sleep - Sometimes increasing screen brightness prevents the failure to reconnect after waking from sleep. According to Apple, “If brightness is at lowest level, increase it by moving the slider to the right and set auto brightness to off.”
Fix For iOS 6 WiFi Problems?
http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
iOS 6 iPad 3 wi-fi "connection fix" for netgear router
http://www.youtube.com/watch?v=XsWS4ha-dn0
Apple's iOS 6 Wi-Fi problems
http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
~~~~~~~~~~~~~~~~~~~~~~~
iPad: Issues connecting to Wi-Fi networks
http://support.apple.com/kb/ts3304
How to Boost Your Wi-Fi Signal
http://ipad.about.com/od/iPad_Troubleshooting/a/How-To-Boost-Your-Wi-Fi-Signal.h Mt
Troubleshooting a Weak Wi-Fi Signal
http://ipad.about.com/od/iPad_Troubleshooting/a/Troubleshooting-A-Weak-Wi-Fi-Sig nal.htm
How to Fix a Poor Wi-Fi Signal on Your iPad
http://ipad.about.com/od/iPad_Troubleshooting/a/How-To-Fix-A-Poor-Wi-Fi-Signal-O n-Your-iPad.htm
iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
How to Fix: My iPad Won't Connect to WiFi
http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Connect iPad to Wi-Fi (with troubleshooting info)
http://thehowto.wikidot.com/wifi-connect-ipad
10 Ways to Boost Your Wireless Signal
http://www.pcmag.com/article2/0,2817,2372811,00.asp
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
Some Wi-Fi losses may stem from a problematic interaction between Wi-Fi and cellular data connections. Numerous users have found that turning off Cellular Data in Settings gets their Wi-Fi working again.
You may have many apps open which can possibly cause the slowdown and possibly the loss of wifi. In iOS 4-6 double tap your Home button & at the bottom of the screen you will see the icons of all open apps. Close those you are not using by pressing on an icon until all icons wiggle - then tap the minus sign. For iOS 7 users, there’s an easy way to see which apps are open in order to close them. By double-tapping the home button on your iPhone or iPad, the new multitasking feature in iOS 7 shows full page previews of all your open apps. Simply scroll horizontally to see all your apps, and close the apps with a simple flick towards the top of the screen.
Wi-Fi or Bluetooth settings grayed out or dim
http://support.apple.com/kb/TS1559
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
 Cheers, Tom

How to configure Cisco ASA 5500 to work with the iPhone

We have Cisco ASA 5510 (latest firmware version), and apparently, according to Cisco website it is compatible with new iPhone 3G's IPSec client:
http://www.cisco.com/en/US/docs/security/vpnclient/cisco_vpnclient/iPhone/2.0/connectivity/guide/iphone.html
We've setup our first iPhone properly. It connects fine to the network, shows VPN connection as active. Gets a private IP address. But does not let any traffic go to the internal network. We thought it might be DNS problem, but it cannot connect to Exchange server even when using IP address instead of DNS. No luck either.
After checking ASA logs, we found that iPhone goes through Phase 1 authentication correctly. But then gives some kind of error, mentioning "Attribute 5".
Has anybody been successful configuring ASA5500 series (in particular 5510) to be used with iPhone?
I noticed that many people are having these problems.
Please do not post to this topic if you have ANY OTHER Cisco device.
Cisco specifies that iPhone is compatible only with Cisco ASA 5500 Security Appliances and PIX Firewalls. Neither Cisco IOS VPN routers nor the VPN 3000 Series Concentrators support the iPhone VPN capabilities.
Let's keep this topic only for users of ASA 5500 series and PIX Firewalls.
It would be extremely helpful for a large number of users if somebody posted a list of settings for ASA5500 or PIX firewall that DO work with iPhone 2.0
Thank you!
Oleg R

We found the solution and a bug in Cisco firmware (seems to be a bug).
First of all, thanks to our Chief Systems Architect Seb, here is a config that worked for us on a Cisco 5520 (latest firmware).
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set iphone esp-3des esp-sha-hmac
crypto ipsec transform-set iphone mode transport
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set pfs
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 iphone
crypto map outside_map 10 match address vpn
crypto map outside_map 10 set transform-set ESP-AES-256-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEMDEFAULT_CRYPTOMAP
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 20
authentication pre-share
encryption aes-256
hash sha
group 5
lifetime 86400
crypto isakmp nat-traversal 20
group-policy iphone internal
group-policy iphone attributes
wins-server value <insert ip> <insert ip>
dns-server value <insert ip> <insert ip>
vpn-tunnel-protocol IPSec
ipsec-udp enable
ipsec-udp-port 10000
split-tunnel-policy tunnelspecified
split-tunnel-network-list value iphone_splitTunnelAcl
default-domain value <insert domain name>
tunnel-group iphone type remote-access
tunnel-group iphone general-attributes
address-pool VPN-Pool
authentication-server-group ActiveDirectory2
default-group-policy iphone
tunnel-group iphone ipsec-attributes
pre-shared-key <insert pre-shared key>
For iPhone you have to be using IPSec tab for configuration.
We tried to set up this config using the wizards, but it would not work.
Later it turned out that wizards by default set this setting:
"crypto isakmp nat-traversal 20"
equal to zero and there is no way to change it from the GUI.
Only after we changed it (increased the value from 0 to 20) through the command line the connection started working perfectly.
Please let me know how it works out for you.
Message was edited by: Rogik
Message was edited by: Rogik

2811 routers working with ISE?

Similar Messages

Maybe you are looking for