7921 or 7921G - Is there a Difference - Want to use EAP-TLS

Hi All,
I have a Cisco 7921G and there is conflicting info about the phones supporting eap-tls.
Some docs say yes it does, some say it does not?
Many thx indeed,
Ken
I dont have the option on my phones (under wlan config), and was wondering if I need to order a different phone?
Also, As just posted in another thread, can you use MS AD to manage the phones, like you can have data devices doing a compare of SAN/CN/Binary to MS AD?
Many thx indeed,
Ken

thx dude.
this is almost real-time :)))
Top-man
A question out to all else, does anyone use MS AD to manage phones? Like you can with laptops running windows, or is this a no-go
Thx
Ken

Similar Messages

  • Cisco 7921 - Does anyone Use EAP-TLS in their VoWLAN Deployments?

    Hi Guys,
    I am looking at making a technology decision, in regards to VoWLAN and authentication.
    For our Data Deployment, we use EAP-TLS with a PKI infrastructure and ACS. The ACS passes fields from the certs to AD for verification.
    Can I do exactly the same for the Voice Deployment?
    Has anyone used EAP-TLS with Voice? Are there any problems? Or should I just go ahead and get some certs minted for the phones, setup some AD accounts and whey hey, its time to party?
    Many thx indeed,
    Ken

    Hi Michael,
    So looking at the deployment guide, this is worded (imho) in a confusing manor? Sorry.
    CCKM is listed under authentication, where i though CCKM is an authentication "key managment" protocol?
    It also says 802.1x authentication with AES encrytion, under the authentication heading?
    It says eap-tls, should this not say 802.1x eap-tls or collapse this with the 802.1x authentication?
    ahh, when it says 802.1x, does that mean 802.1x dynamic wep?
    Would it be correct to say, that I want to use 802.1x eap-tls with tkip and CCKM?
    Sorry, this hurts :)
    Thx,
    Ken
    Wireless Security
    When deploying a wireless LAN, you must provide security. The Cisco Unified Wireless IP Phone 7921G supports the following wireless security features.
    Authentication
    - Cisco Centralized Key Management (CCKM)
    - 802.11i (802.1x authentication + TKIP encryption)
    - 802.11i (802.1x authentication + AES encryption)
    - 802.11i (Pre-Shared key + TKIP encryption)
    - 802.11i (Pre-Shared key + AES encryption)
    - Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling (EAP-FAST)
    - Extensible Authentication Protocol - Transport Layer Security (EAP-TLS)
    - Protected Extensible Authentication Protocol (PEAP)
    - Lightweight Extensible Authentication Protocol (LEAP)
    - Open and Shared Key
    Encryption
    - Advanced Encryption Scheme (AES)
    - Temporal Key Integrity Protocol (TKIP) / Message Integrity Check (MIC)
    - 40-bit and 128-bit Wired Equivalent Protocol (WEP)
    Cisco Centralized Key Management (CCKM)
    When using 802.1x type authentication, you should implement CCKM for authentication. 802.1x can introduce delay during roaming due to its requirement for full re-authentication. CCKM centralizes the key management and reduces the number of key exchanges. Also, WPA introduces additional transient keys and can lengthen roaming time. TKIP encryption is recommended when using CCKM for fast roaming as CCKM does not support AES currently.

  • HT204053 how can i change my account for the messages app o my mac? I have my school email and I do not know how that got there i just want to use my apple or iCloud account.

    im having trouble changing my account for the messages app on my mac. im not a mac wiz

    From the menu bar, select
    Messages ▹ Preferences ▹  Accounts
    Sign out of the account. Add another one and sign in.

  • Authentication eap-tls on ACS or local EAP WLC over Lwapp and 7921

    Hi All,
    I install WLC to provide Wlan architecture and the project was extended for VoWLAN. we have 7921 and E51 running over the wide WLAN architecture.
    Computer using Data over wirless are working over PEAP done by ACS and CA signed certificate + user secret on PC is link to the domain account and secret stay the login and password. Our problem is that user and password is link via ACS to Active Directory. The policy of password is to change frequently.
    For the Phone we are actually running authentication over Leap but I'm working to define the best security solution for us.
    I confront PEAP and Eap-TLS for now:
    1) PEAP check the authentication of ACS via certificate trust and authenticate via MS-Chapv2 and the secret password known by user. My problem here is the phone can only be static what is potentially not acceptable
    2) Eap-tls which is the best secured security due to the double side certificate authentication + (login / password) on the phone
    so I need to manage here Certificate Management ? I mean I can use either the MIC CA certificate on the phone or User CA defined one which I can put on ACS or Local EAP WLC and the put the ACS CA trust on the Phone.
    If I understood well I have to put User.cer and ACS_CA.cer on each phone and pout the User_CA on the ACS ?
    I have already Certificate on the ACS signed by CA (like veri-signed) so I must create CSR for any phones to be able to use the same CA ?
    I'm thinking to use also the local Eap certificate of Controller to manage all of that to avoid every potential money to pay to the trust CA of ACS
    can you help me to know if I understood everything good ? I would be please to exchange experience on that
    thanks ;)
    bye

    I am currently using EAP-TLS authentication on my wireless users using ACS 3.2. I have had that problem before. This is what I did...
    Setup a Microsoft Certificate server as my
    CA. You can use same machine wih your ACS and CA.
    Then, generate certificate signing request from ACS then request a server certificate from CA then copy and install a certificate to ACS. On the ACS, go to global authentication setup check the EAP-TLS cetificate. If it failed to respond means that the server certificate is not properly setup.
    On the windows xp clients, connect your machine using wired LAN, then request a certificate from CA(the same CA that you have use to your ACS) using IE (ex. http://CAip/certsrv), but this time request a client certificate. The name you should put when requesting the cert must be you local windows user, use 1024, choose microsoft base cryptographic provider 1.0. then installl the certificate on the client. Verify you client certificate it i was installed properly.
    At that poit you should be able to connect you r wireless client using EAP-TLS.

  • I received a car charger for xmas. I have an iPhone 4. Is there a difference in the charging dock between the older and newer iphones? I don't want to damage it by shoving a cable in that is designed for a newer model.

    I received a car charger for xmas. I have an iPhone 4. Is there a difference in the charging dock between the older and newer iphones? I don't want to damage it by shoving a cable in that is designed for a newer model.

    there are 2 connectors the old pin30 and the new ligthing bolt
    they don't look very much alike so if anybody were damage byt forcing it in it would be their own fault seeing how diffrent they are

  • If I want to buy the iPad Air from US although I'm from Hong Kong, is there any difference between buying in Apple Store and in BestBuy ?

    If I want to buy the iPad Air from US although I'm from Hong Kong, is there any difference between buying in Apple Store and in BestBuy ?
    E.g. I buy it in BestBuy, I still can take the iPad Air to the genius bar if there are problems for the iPad?
    Thanks!

    Yes, as long as you buy a new device from an Apple Authorized reseller (which BestBuy is) then you have the normal Apple one year warranty with it.  Apple will honor that warranty in any of their stores, and anyone with any Apple device is welcome in any Apple retail store with questions or seeking help.

  • Hey, I'm doing some cross browser testing and i want to know Is there any difference between the behavior of Firefox in an operating system 64bit & operating system with 32bit. (like windows7/windows vista...)

    ''duplicate of https://support.mozilla.com/en-US/questions/905881''
    Hey, I'm doing some cross browser testing and i want to know Is there any difference between the behavior of Firefox in an operating system 64bit & operating system with 32bit. (like windows7/windows vista...)

    Hi Kossa,
    You can also check if the issue occurs in
    Clean Boot. If the issue disappears in the Clean Boot environment, you can continue to narrow down which entry is causing the issue.
    Besides, uninstall it and re-download
    a fresh copy of FireFox to check the result. If the issue still exists, create a new user account to see if it occurs.
    If the issue persists, you can contact Mozilla Support directly and use Internet Explorer (IE) during the time.
    J
    Please Note: The third-party product discussed here is manufactured by a company that is independent of Microsoft. We make no warranty, implied or otherwise,
    regarding this product's performance or reliability.
    Regards,
    Linda

  • Hey, I'm doing some cross browser testing and i want to know Is there any difference between the behavior of Firefox in an operating system 64bit & operating system with 32bit. (like windows7/windows vista...) Thanks,

    Hey, I'm doing some cross browser testing and i want to know Is there any difference between the behavior of Firefox in an operating system 64bit & operating system with 32bit. (like windows7/windows vista...) Thanks,

    Hi O_H_I_O,
    Have you got an error code ?
    Considering it is a brand new machine ,please update the machines .To get a better performance of the machines ,we should always keep it up to date .
    There is a possibility that the DVD/CD-ROm drives driver is old or has corrupted .Please open the device manager , update or reinstall the driver to have a check.
    Apart from this ,we can run the built-in tool to a diagnostic :
    Control Panel\All Control Panel Items\Troubleshooting\All Categories\Hardware and Devices
    We also can run the following fixit tool to have a check.
    Fix problems with CD or DVD drives that can’t read or write media
    http://support.microsoft.com/mats/cd_dvd_drive_problems
    Best regards

  • Is there a difference between the Z10 and Q10, except the keyboard?

    Since now it was simple, BlackBerry had 3 lines left till now: Curve (lower), Torch (touch screen, no idea how powerful is the machine) and Bold (the strongest machine).
    What about the new Z and Q lines?
    Is there a difference , except the keyboard for the Q line or the machines really differ in power and features?
    Thanks

    My understanding is that the devices will be the same. The screen size will be different (1024 x 768 vs 720 x 720 pixels), but other than that and the obvious difference of virtual vs. physical keyboard, they should both be the same with the same features.
    I hope that info helps!
    If you want to thank someone for their comment, do so by clicking the Thumbs Up icon.
    If your issue is resolved, don't forget to click the Solution button on the resolution!

  • Is there a difference in quality between exporting to .dv in iMovie09 & FCP

    I recently purchased FCP to do batch exporting of full quality .dv files because '09 didn't seem to have that option. I've been messing around with it now, though, and it appears as though both are capable of doing this. I've searched for this information and found conflicting results-- is exporting to .dv in iMovie destructive or is there no difference between '09 and FCP?

    This thread sounds mysteriously similar to this one.
    http://discussions.apple.com/thread.jspa?threadID=2380150&start=0&tstart=0
    If you export to .dv with either FCP or iMovie I'm quite certain that you will be re-compressing your video. That's just the nature of the interleaved file structure of .dv
    I you import .dv into FCP you will have to render the audio ONE time. Not the video.
    If you export .mov files using the current settings (which should be DV NTSC) you will NOT be re-compressing the video. but you will have a .mov file.
    FCP is NOT the right application for archival or any sort of file management tasks. File management is one of FCPs weakest attributes.
    You may want to have a look at CatDV
    good luck
    g

  • Is there a difference in Premier and After Effects Performance in terms of intel or AMD?

    Is there a difference in Premier and After Effects Performance in terms of intel or AMD?  Forget the speed issue, assume that the processors are of comparable speed and also assume that the system is built beyond recommended requirements.  When it comes to reliablility and performance of either processor working and managing data with CS5, is there a difference?  I am looking to build a computer with multiple CPU's so i7 if out as well (unless you can convince me that have only one CPU is better than building with multiple)  Thanks for reading and I'm looking forward to any help you may give me!  Bow.

    See Harm, this is why I am a BIG fan of your post!!!  Also thank you John for responding as well.  I have been wrestling with purchasing a new computer for months now looking for a CS5 CPU, trying to find the most economical purchase.  The last computer I had bought was specifically for CS2 and I spent over $8500 dollars for it in 2006.  A dual XEON 2.80 with Hyperthreading.  Back then I thought I had a great machine, but now looking at what I paid for, i feel much wiser.
    I have seen the benchmark test and studied it closely, but until this post, I didn't know how the results translated into real world results.  I figured out pretty quickly AMD is no where near to Intel currently.
    I am looking to edit primarily with AVCHD and will be using After Effects extensively.  So of course, I want processor speed and plenty of RAM.  But it gets expensive.  Sandy Bridge looks like an option but there is a RAM limitation and the recent problems with it.  i7 processors look like a good option but they are also 24 gig limitation.  Of course dual CPU Xeon gives me unlimited RAM practically, BUT i have a limited budget.
    So in looking at the Benchmark Test, (which I love, but can't equate to real world applications - i.e. Time Savings between results - because i don't know what the length of the footage is) it has been hard to gauge a cost/gain benefit when choosing my next machine.
    I noticed your results are 65.0 to ADK's 35.0 under the h.264 CPU performance.  I guess I am asking what is that in a real world time crunch difference?
    P.S. I do realize that the ADK results aren't average.  If you wish, you may reference the #1 system with the top average of 45.0 under the h.264 CPU performance to give me an idea on comparision.  Also, I noticed your machine is overclocked.  Does overclocking make CS5 any less stable?
    Thanks for all you do Harm, I appreciate your dedication to us Adobe followers.  You to John!
    (sorry it has taken some time to respond)
    Also, I noticed you are using Areca ARC-1680iX-12.  Nice!

  • Are there any differences between Server 2012 and Server 2012 R2 that might impact TFS or SQL server required for TFS?

    Hi,
    In the interest of just getting started and learning the basics of setting up TFS, I previously setup an IDE using a large workstation running Windows 8.  I set up the required servers for TFS using VM's through Hyper-V.  I am now transferring
    everything to a new and separate physical server.
    My question stems from a problem I had when I originally setup the TFS system the 1st time.  I couldn't get SQL server to work using the Server 2012 R2 download from the subscription center.  When I used Server 2012, it worked, so I proceeded that
    way just to get going.
    So now I'm setting things up anew on a new physical box, I want to ask up front, is there some difference in the R2 version that causes problems with either TFS or SQL server, or was there likely some oversight on my part when I did things the 1st time?
    As an addendum to my question, I always assumed R2 merely means the Server software has progressed to a refined state and is ready for wide distribution and easy setup.  I assumed that there are no differences between the Standard version and the R2
    version.  Is that understanding correct?
    Thanks.

    Hi Daniel,
    Thanks for your response.  That's a great link.  I don't recall seeing a page that is so clear and easy to read back when I was doing this the 1st time, but I probably just missed it.  That helps.
    I am/was using TFS2013 and VS2013.  As I recall, my problem was getting SQL Server to work, but I thought asking this question on this forum was wiser because I figured everyone using TFS would be well familiar with these issues.
    At any rate, it seems as though TFS2013 is fine with Server 2012 standard or R2.
    I was using SQL Server 2012, and it also seems as though it works on R2:
    https://msdn.microsoft.com/en-us/library/ms143506(v=sql.110).aspx
    Anyway, thanks for your support.  I'll be trying this again and we'll see.

  • I did re-set my password and when I click on Install for Mavericks, I still get a box for "administrator password" and it still won't accept my new password. Is there a difference between my Apple ID and the administrator password they're asking for?

    I downloaded Mavericks and it won't install. I did re-set my password and when I click on Install for Mavericks, I still get a box for "administrator password" and it still won't accept my new password. Is there a difference between my Apple ID and the administrator password they're asking for? I never had an administrator password-- I just hit enter and have never had a problem before with previous installations. I'm on an iMac, from 2007, running Mt. Lion (version 10.8.5). I've been looking for other's posts who may be having the same problem, but haven't found any. Can anyone help?

    Ugh. The 'no password, no work' thing is a recent Apple development. I ran into it on my system and ended up having to do a clean install on a partition I fully erased.
    I suppose, if you have the ability to, go online and look up how to burn a bootable DVD image. Download the 10.8.4 image then use the Disk Utility to make a boot image of it. You'll need a dual-layer DVD or a USB drive (or memory stick at least 8GB) If you've got an optical drive, burn the disk, if you've a USB device, use that.
    Then get a pocket drive and copy your important files off the system or let Time Machine do a full backup.
    When the backup is done, insert the disk and hold down the C key until the machine boots off of the DVD. At the point you get to the start window, go to the menu and choose the Disk Utility.
    In the Disk Utility, reformat the drive. You go to the actual DRIVE (not the Macintosh HD, but the root above it that is the actual hard drive device)
    I always do this and *partition* it into several volumes, the benefit being, you can store all of your music, documents and importans stuff on that secondary storage volume you make - it will have it's own index and then the first volume is where you put the OS and it will have it's own index as well. That way, if the OS throws a wobbler and you need to reinstall, you don't lose your data.
    Depending on the size of your hard drive, it is good to give your OS partition at least 60GB and optimally 100GB, and the rest for storage.
    Name your volumes, use the little box sliders to manually size them or put that number in the size window, select for the format, Mac OS Extended (Journaled) and hit Apply and then the Disk Utility will quickly create your new partitions.
    Once finished, quit the Utility and it will return you to the OS installer. Select the volume you want to install to and it should start up and install.
    Once the installation is done, you'll get the new machine startup then you MUST put in a password for the computer. Once you're in, and to the desktop, don't bother with any Mountain Lion updates, go right to the App Store and get the Mavericks update and let it install the app to your Applicaitons folder, then do that install.
    On a side note, there MAY be a way to make a disk image from the Mavericks application and avoid the entire Mountain Lion step.. I honestly do not know, but a bit of hitting the search engines may find out if there is. I think that if you looked for "make Mavericks boot disk or boot image' you may find something.
    Good luck!

  • Are there any differences?

    Are there any differences? on Ipod Video bought in USA and Europe? or are they just the same?
    Ive heard that some people have problem with ipods in europe with the pal system when they bought it in USA.
    Regards Kim

    The only difference I would think there would be between iPods sold here or in Europe is the default option for video out display. So, if you buy your iPod in Europe, and you want to display something from your iPod on a TV in the US, you would just have to change and option. Here is an article that goes over that a bit:
    http://docs.info.apple.com/article.html?artnum=300250

  • Is there any difference in oracle database and forms database

    i want to know is there any difference in oracle database and forms 6i database
    ,if i import some file through oracle database then same data will exist in forms database or not
    thanks

    Oracle Forms is a Rapid Application Development (RAD) tool not a database. With Forms, you connect to an Oracle database to query and display data from the database as well as insert new or update existing data. Consequently, if exists in the database - you should be able to display it in a Form.
    Craig...

Maybe you are looking for