802.1x failure
Trying to connect to my works wireless network. It uses 802.1x, I only need to supply my active directory username/pw, but when I do that I get a certificate failure. iPhones and Droids are working and my laptop doesnt have an issue. Anyone have any ideas?
-Thanks
Post relates to: Pixi Plus p121vzw (Verizon)
The WLC is configured for 802.1x, its the IAS you need to look at and see if its setup to use EAP-TLS, which requires a certificate on the client side. You also have to see if your policy is for machine authentication or not. Take a look at the failure logs in IAS as that will give you a better understanding of what is happening.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"
Similar Messages
-
802.1X failure on win 7 non-domain clients
Hello,
I have a WLC 2504(code 7.0.235) installed and two AP 3502 (local mode).
RADIUS Server is a IAS runnning on my AD server.
I had a domestic AP before Cisco solution, using the same RADIUS server and everything was ok.
After migration Windows 7 domain clients and Apple devices connects without issue. However when I try to connect non-domain windows 7 clients into wireless network (802.1X) and got failure. Apple devices out of domain can connect, certificate pop-up appears and connection flows.
I check certificates and everything looks ok for me. I remove a windows 7 client from domain and test it too, an got the same error. Certificate are install on windows 7 clients.
Could Cisco controller interfering in this authentication process ?
Can someone give me a direction ?
Thanks EderThe WLC is configured for 802.1x, its the IAS you need to look at and see if its setup to use EAP-TLS, which requires a certificate on the client side. You also have to see if your policy is for machine authentication or not. Take a look at the failure logs in IAS as that will give you a better understanding of what is happening.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered" -
I have been an Apple TV since the first shipment. I have 2 units in my AV network with an Apple Mini acting as a central computer that both units stream/sync from. My wireless is configured at 802.11N with Wide channels on via a 100mb Apple Airport Extreme. I run a separate 802.11B/G network for my other devices. I upgraded the Airport Extreme to the latest firmwares and everything was working wonderfully. My Apple TVs functioned as always no drops, no stutters, no sync issues, and no disconnects. I upgraded to the latest Apple TV firmware to get the Genres support for my video library (400 Plus Titles from my own DVD's). Now both units disconnect randomly. I have scoured the support forums and have tried all the suggestions of turning wide channels off, changing from the automatic selection to a fixed channel, and various other solutions. The only one that seems to work is switching and CRIPPLING my airport Extreme to work in 802.11B/G compatibility mode. This is unacceptable!!!! Now to watch my movies I must decrease my network performance by 2/3. I used to get 300mb solid with my Laptop (Macbook Pro), now I get luck to get 130mb. There has to be some discussion from Apple on how to fix this. It is an obvious problem with the driver that was upgraded in the last firmware patch on the AppleTV and it is obviously manifesting itself in 802.11N mode. Some people might want to say that it is the Airport Extreme that is the problem.. I would disagree. I have used a couple different packet sniffing tools to monitor my connection on my Macbook Pro working in 802.11N mode and I have seen no drop in connections, no drop / or loss of packets for periods of over 12 hours. During that same time both Apple TVs dropped over 7 times. Several of the drops were during streaming playback. Any suggestions or help would be grateful. Any response from Apple would be grateful .
Thank you.Trying to determine if this is my problem...
I just received my 160GB Apple TV this past Friday (Apr 11).
I am running WinXP Pro with a D-Link DIR-655 802.11n network.
My AppleTV came with 2.0 software out of the box. I went ahead and upgraded to 2.1 (or whatever)
To sync my library for the first time, I went wired without a hitch.
When I added it to my TV in the living room, the problems started.
It would range from working perfectly for a short time (selecting HD Trailers would play right away), then it would go to start playing, then hang or take forever to fill the bar and just hang, to the most common...
Anytime I would select something that used the wireless network, including even checking the network connection (which showed full strength) the system would reboot itself. It happened so many times I was ready to take to the Apple Store for a replacement.
Then I read this post and tried 2 things, changed my router to "n" mode only, no change.
Then to "g" only, everything now works.
I wish the status screen on the AppleTV would show more information, I'm not even sure I am connecting at N speeds to begin with.
So, does this sound like a similar problem or do I have a faulty device?
Thanks. -
Cannot create notes in Apple Mail: Assertion failure, exception thrown
If I choose File > New Note, nothing happens. The console log displays the attached messages. What could be causing this?
06/04/2011 14:23:18 Mail[802] * Assertion failure in +[NoteView updateFontAndRule:], /SourceCache/Mail/Mail-1084/MessageViewer.subproj/NoteView.m:210
font-family cannot be nil
0 Message 0x00007fff854ed780 -[MFAssertionHandler _handleFailureWithPreamble:description:arguments:] + 137
1 Message 0x00007fff854ed6e5 -[MFAssertionHandler handleFailureInMethod:object:file:lineNumber:description:] + 220
2 Mail 0x000000010009416e 0x0 + 4295573870
3 Mail 0x0000000100093e16 0x0 + 4295573014
4 CoreFoundation 0x00007fff8772c96c _invoking__ + 140
5 CoreFoundation 0x00007fff8772c83d -[NSInvocation invoke] + 141
6 Mail 0x000000010006665a 0x0 + 4295386714
7 Foundation 0x00007fff86f198ea nsnotecallback + 167
8 CoreFoundation 0x00007fff876ff000 __CFXNotificationPost + 1008
9 CoreFoundation 0x00007fff876eb578 _CFXNotificationPostNotification + 200
10 Foundation 0x00007fff86f1084e -[NSNotificationCenter postNotificationName:object:userInfo:] + 101
11 Mail 0x0000000100002a65 0x0 + 4294978149
12 WebCore 0x00007fff8610c843 _ZN7WebCore15ProgressTracker21finalProgressCompleteEv + 83
13 WebCore 0x00007fff8610c7d8 ZN7WebCore15ProgressTracker17progressCompletedEPNS5FrameE + 104
14 WebCore 0x00007fff86093e3a _ZN7WebCore11FrameLoader26recursiveCheckLoadCompleteEv + 298
15 WebCore 0x00007fff861b4567 ZN7WebCore14DocumentLoader23removeSubresourceLoaderEPNS14ResourceLoaderE + 135
16 WebCore 0x00007fff861b3a3c _ZN7WebCore17SubresourceLoader16didFinishLoadingEv + 124
17 Foundation 0x00007fff86f9a608 _NSURLConnectionDidFinishLoading + 113
18 CFNetwork 0x00007fff807741a0 ZN19URLConnectionClient23_clientDidFinishLoadingEPNS26ClientConnectionEventQueueE + 174
19 CFNetwork 0x00007fff807d99ae _ZN19URLConnectionClient26ClientConnectionEventQueue33processAllEventsAndConsum ePayloadEP20XConnectionEventInfoI12XClientEvent18XClientEventParamsEl + 254
20 CFNetwork 0x00007fff807d9c1a _ZN19URLConnectionClient26ClientConnectionEventQueue33processAllEventsAndConsum ePayloadEP20XConnectionEventInfoI12XClientEvent18XClientEventParamsEl + 874
21 CFNetwork 0x00007fff80760825 _ZN19URLConnectionClient13processEventsEv + 121
22 CFNetwork 0x00007fff80760600 _ZN17MultiplexerSource7performEv + 160
23 CoreFoundation 0x00007fff876f4401 __CFRunLoopDoSources0 + 1361
24 CoreFoundation 0x00007fff876f25f9 __CFRunLoopRun + 873
25 CoreFoundation 0x00007fff876f1dbf CFRunLoopRunSpecific + 575
26 HIToolbox 0x00007fff802ee7ee RunCurrentEventLoopInMode + 333
27 HIToolbox 0x00007fff802ee5f3 ReceiveNextEventCommon + 310
28 HIToolbox 0x00007fff802ee4ac BlockUntilNextEventMatchingListInMode + 59
29 AppKit 0x00007fff881dbe64 _DPSNextEvent + 718
30 AppKit 0x00007fff881db7a9 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 155
31 AppKit 0x00007fff881a148b -[NSApplication run] + 395
32 AppKit 0x00007fff8819a1a8 NSApplicationMain + 364
33 Mail 0x00000001000025a4 0x0 + 4294976932
34 ??? 0x0000000000000002 0x0 + 2
06/04/2011 14:23:18 Mail[802] An exception was thrown 'Cannot lock focus on image <NSImage 0x1015ef800 Size={0, 0} Reps=(
)>, because it is size zero.'. Stack trace:
0 CoreFoundation 0x00007fff877577b4 __exceptionPreprocess + 180
1 libobjc.A.dylib 0x00007fff839a90f3 objcexceptionthrow + 45
2 CoreFoundation 0x00007fff877575d7 +[NSException raise:format:arguments:] + 103
3 CoreFoundation 0x00007fff87757564 +[NSException raise:format:] + 148
4 AppKit 0x00007fff88317990 -[NSImage _lockFocusOnRepresentation:rect:context:hints:flipped:] + 319
5 AppKit 0x00007fff88317847 __-[NSImage lockFocusWithRect:context:hints:flipped:]block_invoke1 + 100
6 AppKit 0x00007fff882abba1 -[NSImage _usingBestRepresentationForRect:context:hints:body:] + 178
7 AppKit 0x00007fff883177cd -[NSImage lockFocusWithRect:context:hints:flipped:] + 289
8 AppKit 0x00007fff88317697 -[NSImage lockFocusFlipped:] + 142
9 Mail 0x000000010009474d 0x0 + 4295575373
10 Mail 0x0000000100094512 0x0 + 4295574802
11 Mail 0x0000000100094237 0x0 + 4295574071
12 Mail 0x0000000100093e16 0x0 + 4295573014
13 CoreFoundation 0x00007fff8772c96c _invoking__ + 140
14 CoreFoundation 0x00007fff8772c83d -[NSInvocation invoke] + 141
15 Mail 0x000000010006665a 0x0 + 4295386714
16 Foundation 0x00007fff86f198ea nsnotecallback + 167
17 CoreFoundation 0x00007fff876ff000 __CFXNotificationPost + 1008
18 CoreFoundation 0x00007fff876eb578 _CFXNotificationPostNotification + 200
19 Foundation 0x00007fff86f1084e -[NSNotificationCenter postNotificationName:object:userInfo:] + 101
20 Mail 0x0000000100002a65 0x0 + 4294978149
21 WebCore 0x00007fff8610c843 _ZN7WebCore15ProgressTracker21finalProgressCompleteEv + 83
22 WebCore 0x00007fff8610c7d8 ZN7WebCore15ProgressTracker17progressCompletedEPNS5FrameE + 104
23 WebCore 0x00007fff86093e3a _ZN7WebCore11FrameLoader26recursiveCheckLoadCompleteEv + 298
24 WebCore 0x00007fff861b4567 ZN7WebCore14DocumentLoader23removeSubresourceLoaderEPNS14ResourceLoaderE + 135
25 WebCore 0x00007fff861b3a3c _ZN7WebCore17SubresourceLoader16didFinishLoadingEv + 124
26 Foundation 0x00007fff86f9a608 _NSURLConnectionDidFinishLoading + 113
27 CFNetwork 0x00007fff807741a0 ZN19URLConnectionClient23_clientDidFinishLoadingEPNS26ClientConnectionEventQueueE + 174
28 CFNetwork 0x00007fff807d99ae _ZN19URLConnectionClient26ClientConnectionEventQueue33processAllEventsAndConsum ePayloadEP20XConnectionEventInfoI12XClientEvent18XClientEventParamsEl + 254
29 CFNetwork 0x00007fff807d9c1a _ZN19URLConnectionClient26ClientConnectionEventQueue33processAllEventsAndConsum ePayloadEP20XConnectionEventInfoI12XClientEvent18XClientEventParamsEl + 874
30 CFNetwork 0x00007fff80760825 _ZN19URLConnectionClient13processEventsEv + 121
31 CFNetwork 0x00007fff80760600 _ZN17MultiplexerSource7performEv + 160
32 CoreFoundation 0x00007fff876f4401 __CFRunLoopDoSources0 + 1361
33 CoreFoundation 0x00007fff876f25f9 __CFRunLoopRun + 873
34 CoreFoundation 0x00007fff876f1dbf CFRunLoopRunSpecific + 575
35 HIToolbox 0x00007fff802ee7ee RunCurrentEventLoopInMode + 333
36 HIToolbox 0x00007fff802ee5f3 ReceiveNextEventCommon + 310
37 HIToolbox 0x00007fff802ee4ac BlockUntilNextEventMatchingListInMode + 59
38 AppKit 0x00007fff881dbe64 _DPSNextEvent + 718
39 AppKit 0x00007fff881db7a9 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 155
40 AppKit 0x00007fff881a148b -[NSApplication run] + 395
41 AppKit 0x00007fff8819a1a8 NSApplicationMain + 364
42 Mail 0x00000001000025a4 0x0 + 4294976932
43 ??? 0x0000000000000002 0x0 + 2
)A final weird follow-up: the “Note font" part of the Fonts & Colours preference panel wasn't visible before. In other words, if the wrong font is selected, you don't have the option to change it or even to know which fund could be corrupted.
-
Cannot get Windows 7 x64 laptop to connect to AIRONET 1140 WAP
I recently changed the configuration of my Aironet 1140 from WEP to WAP2-Enterprise to make it more secure. I am using the WAP as the radius server. After making the change I connected my Blackberry to the wap as well as a Samsung Chromebook. However when I tried to connect my HP laptop it is unable to connect. Watching from the Aironet's console I see that it is processing the association and windows ask me to enter my uid and password. When I do this I get an authentication error. I have tried several times adjusting parameters on windows but it always fails. Here is the configuration of the WAP:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap.acrtek-lab.com
logging rate-limit console 9
aaa new-model
aaa group server radius rad_eap
server 10.53.55.127 auth-port 1812 acct-port 1813
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 syslog
dot11 ssid Acrtek-WPA2
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
username XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
username XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm tkip
ssid Acrtek-WPA2
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
encryption mode ciphers aes-ccm tkip
ssid Acrtek-WPA2
antenna gain 0
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server local
no authentication eapfast
no authentication mac
nas 10.53.55.127 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
user xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.53.55.127 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxx
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end
Windows Configuration:
Details about network adapter diagnosis:
Network adapter Wireless Network Connection driver information:
Description . . . . . . . . . . : Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi Adapter
Manufacturer . . . . . . . . . : Broadcom
Provider . . . . . . . . . . . : Broadcom
Version . . . . . . . . . . . : 5.100.82.139
Inf File Name . . . . . . . . . : C:\Windows\INF\oem29.inf
Inf File Date . . . . . . . . . : Tuesday, September 18, 2012 5:42:34 PM
Section Name . . . . . . . . . : BCM43XNG2022_NT61
Hardware ID . . . . . . . . . . : pci\ven_14e4&dev_4727&subsys_1795103c
Instance Status Flags . . . . . : 0x180200a
Device Manager Status Code . . : 0
IfType . . . . . . . . . . . . : 71
Physical Media Type . . . . . . : 9
Diagnostics Information (Wireless Connectivity)
Details about wireless connectivity diagnosis:
Information for connection being diagnosed
Interface GUID: 5bab8bfe-12d7-4e0c-a46b-efc490047802
Interface name: Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi Adapter
Interface type: Native WiFi
Profile: Acrtek-WPA2
SSID: Acrtek-WPA2
SSID length: 11
Connection mode: Infra
Security: Yes
Connect even if network is not broadcasting: No
Connection incident diagnosed
Auto Configuration ID: 2
Connection ID: 3
Connection status summary
Connection started at: 2012-09-18 14:49:56-586
Profile match: Success
Pre-Association: Success
Association: Success
Security and Authentication: Fail
List of visible access point(s): 43 item(s) total, 43 item(s) displayed
BSSID BSS Type PHY Signal(dB) Chnl/freq SSID
00-1C-10-07-38-76 Infra <unknown> -79 11 linksys
70-56-81-CB-A2-7D Infra <unknown> -55 10 MRB LLC
08-86-3B-95-3B-E1 Infra <unknown> -77 11 belkin.be1
C0-C1-C0-52-FD-5F Infra <unknown> -75 11 AquaDeer-guest
70-73-CB-BB-9D-43 Infra <unknown> -60 1 the ridge by apple
00-17-C5-A5-5A-73 Infra <unknown> -67 2 MsPub
00-22-B0-BA-C7-E6 Infra g -72 1 mercer
E0-91-F5-D6-DF-76 Infra <unknown> -78 1 Chick-Fil-A
04-C5-A4-80-FC-50 Infra <unknown> -38 4 (Unnamed Network)
C8-3A-35-5D-AE-18 Infra <unknown> -82 4 medialink
00-23-69-1B-73-C9 Infra g -78 6 Matt and Heather
94-44-52-68-24-2B Infra <unknown> -73 5 Belkin.442B
68-7F-74-7E-50-74 Infra g -77 6 sjslinksys
00-1D-7E-49-E2-65 Infra g -75 6 Cubs
00-12-17-4B-4E-0D Infra g -41 8 (Unnamed Network)
C0-C1-C0-E4-3F-55 Infra <unknown> -78 6 SG Roi
C0-C1-C0-66-9F-CA Infra <unknown> -75 7 Heliman
66-33-4B-E1-47-27 Infra <unknown> -80 8 Jenny lake's Guest Network
00-1C-DF-A4-59-FB Infra <unknown> -60 10 radiofinger
C0-C1-C0-52-FD-5E Infra <unknown> -76 11 AquaDeer
08-86-3B-61-B0-BC Infra <unknown> -76 11 belkin.0bc
00-23-69-00-52-20 Infra g -70 11 670term
58-6D-8F-24-FC-21 Infra <unknown> -80 11 Bluejay1
04-C5-A4-80-FC-50 Infra <unknown> -36 4 Acrtek-WPA2
70-73-CB-BB-B3-49 Infra <unknown> -73 1 LeWonderment Inc.
E6-51-E4-A6-B1-25 Ad hoc g -78 4 megahoc.v24
00-17-C5-A5-5A-A9 Infra <unknown> -79 5 Vivaces
00-23-69-B4-5D-3E Infra g -81 6 Tanda
D0-66-7B-06-C7-45 Infra <unknown> -81 7 SEC_LinkShare_e70ac7
00-24-7B-5D-65-FA Infra g -80 6 myqwest0953
60-33-4B-E1-47-27 Infra <unknown> -81 8 Jenny Lake
00-25-9C-23-73-A6 Infra g -80 1 milehigh
00-24-01-DC-A4-3F Infra <unknown> -81 3 newwoman
C4-3D-C7-83-CE-74 Infra <unknown> -85 3 Desilets
08-86-3B-25-A7-CE Infra <unknown> -86 11 belkin.7ce
00-18-39-78-8F-92 Infra g -88 11 paul landow
98-FC-11-6E-E7-52 Infra <unknown> -80 11 China
28-CF-DA-B1-5F-03 Infra <unknown> -78 1 DeSanti
00-15-6D-D6-04-47 Infra g -69 1 (Unnamed Network)
00-21-91-10-1A-05 Infra g -81 1 dlink
1C-7E-E5-30-AE-66 Infra <unknown> -79 5 dlink
00-15-FF-26-47-98 Infra <unknown> -85 10 Verizon MIFI4510L 4798 Secure
00-23-69-38-2C-D2 Infra <unknown> -82 1 linksys
Connection History
Information for Auto Configuration ID 3
List of visible networks: 41 item(s) total, 41 item(s) displayed
BSS Type PHY Security Signal(RSSI) Compatible SSID
Infra <unknown> No 22 Yes linksys
Infra <unknown> Yes 82 Yes MRB LLC
Infra <unknown> Yes 26 Yes belkin.be1
Infra <unknown> No 30 Yes AquaDeer-guest
Infra <unknown> Yes 76 Yes the ridge by apple
Infra <unknown> No 62 Yes MsPub
Infra g Yes 36 Yes mercer
Infra <unknown> Yes 24 Yes Chick-Fil-A
Infra <unknown> Yes 94 Yes (Unnamed Network)
Infra <unknown> Yes 16 Yes medialink
Infra g Yes 24 Yes Matt and Heather
Infra <unknown> Yes 34 Yes Belkin.442B
Infra g Yes 26 Yes sjslinksys
Infra g Yes 30 Yes Cubs
Infra g Yes 92 Yes (Unnamed Network)
Infra <unknown> Yes 24 Yes SG Roi
Infra <unknown> Yes 30 Yes Heliman
Infra <unknown> Yes 20 Yes Jenny lake's Guest Network
Infra <unknown> Yes 76 Yes radiofinger
Infra <unknown> Yes 28 Yes AquaDeer
Infra <unknown> Yes 28 Yes belkin.0bc
Infra g Yes 40 Yes 670term
Infra <unknown> Yes 20 Yes Bluejay1
Infra <unknown> Yes 95 Yes Acrtek-WPA2
Infra <unknown> Yes 34 Yes LeWonderment Inc.
Ad hoc g No 24 Yes megahoc.v24
Infra <unknown> No 22 Yes Vivaces
Infra g Yes 18 Yes Tanda
Infra <unknown> Yes 18 Yes SEC_LinkShare_e70ac7
Infra g Yes 20 Yes myqwest0953
Infra <unknown> Yes 18 Yes Jenny Lake
Infra g Yes 20 Yes milehigh
Infra <unknown> Yes 18 Yes newwoman
Infra <unknown> Yes 10 Yes Desilets
Infra <unknown> Yes 8 Yes belkin.7ce
Infra g Yes 4 Yes paul landow
Infra <unknown> Yes 20 Yes China
Infra <unknown> Yes 24 Yes DeSanti
Infra g No 50 Yes (Unnamed Network)
Infra g No 22 Yes dlink
Infra <unknown> Yes 10 Yes Verizon MIFI4510L 4798 Secure
List of preferred networks: 5 item(s)
Profile: Acrtek-WPA2
SSID: Acrtek-WPA2
SSID length: 11
Connection mode: Infra
Security: Yes
Set by group policy: No
Connect even if network is not broadcasting: No
Connectable: Yes
Profile: ZRDD2
SSID: ZRDD2
SSID length: 5
Connection mode: Infra
Security: Yes
Set by group policy: No
Connect even if network is not broadcasting: No
Connectable: No
Reason: 0x00028002
Profile: GMANNET
SSID: GMANNET
SSID length: 7
Connection mode: Infra
Security: Yes
Set by group policy: No
Connect even if network is not broadcasting: No
Connectable: No
Reason: 0x00028002
Profile: Conference Rm
SSID: Conference Rm
SSID length: 13
Connection mode: Infra
Security: Yes
Set by group policy: No
Connect even if network is not broadcasting: No
Connectable: No
Reason: 0x00028002
Profile: rntdnet
SSID: rntdnet
SSID length: 7
Connection mode: Infra
Security: Yes
Set by group policy: No
Connect even if network is not broadcasting: No
Connectable: No
Reason: 0x00028002
Information for Connection ID 4
Connection started at: 2012-09-18 14:50:08-279
Auto Configuration ID: 3
Profile: Acrtek-WPA2
SSID: Acrtek-WPA2
SSID length: 11
Connection mode: Infra
Security: Yes
Pre-Association and Association
Connectivity settings provided by hardware manufacturer (IHV): Yes
Security settings provided by hardware manufacturer (IHV): No
Profile matches network requirements: Success
Pre-association status: Success
Association status: Success
Last AP: 04-c5-a4-80-fc-50
Security and Authentication
Configured security type: WPA2-802.1X
Configured encryption type: CCMP(AES)
802.1X protocol: Yes
Authentication mode: Invalid (5)
Number of 802.1X restarts: 1
Number of 802.1X failures: 0
Key exchange initiated: No
Number of security packets received: 2
Number of security packets sent: 1
Security attempt status: Success
Information for Auto Configuration ID 2
List of visible networks: 40 item(s) total, 40 item(s) displayed
BSS Type PHY Security Signal(RSSI) Compatible SSID
Infra <unknown> No 22 Yes linksys
Infra <unknown> Yes 85 Yes MRB LLC
Infra <unknown> Yes 22 Yes belkin.be1
Infra <unknown> No 32 Yes AquaDeer-guest
Infra <unknown> Yes 64 Yes the ridge by apple
Infra <unknown> No 74 Yes MsPub
Infra g Yes 60 Yes mercer
Infra <unknown> Yes 24 Yes Chick-Fil-A
Infra <unknown> Yes 86 Yes (Unnamed Network)
Infra <unknown> Yes 38 Yes medialink
Infra g Yes 36 Yes Matt and Heather
Infra <unknown> Yes 40 Yes Belkin.442B
Infra g Yes 62 Yes sjslinksys
Infra g Yes 30 Yes Cubs
Infra g Yes 95 Yes (Unnamed Network)
Infra <unknown> Yes 24 Yes SG Roi
Infra <unknown> Yes 28 Yes Heliman
Infra <unknown> Yes 20 Yes Jenny lake's Guest Network
Infra <unknown> Yes 81 Yes radiofinger
Infra <unknown> Yes 10 Yes AquaDeer
Infra <unknown> Yes 32
Diagnostics Information (Wireless Connectivity)
Details about wireless connectivity diagnosis:
For complete information about this session see the wireless connectivity information event.
Helper Class: Auto Configuration
Initialize status: Success
Information for connection being diagnosed
Interface GUID: 5bab8bfe-12d7-4e0c-a46b-efc490047802
Interface name: Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi Adapter
Interface type: Native WiFi
Profile: Acrtek-WPA2
SSID: Acrtek-WPA2
SSID length: 11
Connection mode: Infra
Security: Yes
Connect even if network is not broadcasting: No
Result of diagnosis: Problem found
Issue referred to: L2Sec Helper Class
Root cause:
Windows could not connect to "Acrtek-WPA2"
You can try to connect again.
Repair option:
Reset your wireless network adapter
This will disable and then enable the network adapter "Wireless Network Connection" on this computer.
Diagnostics Information (L2sec Helper Class)
Details about L2Sec Helper Class diagnosis:
For complete information about this session see the Wireless Diagnostic Informational Event.
Helper Class: Layer2 Security
Initialize Status: Success
Result of diagnosis: Problem found
Issue referred to: EAP Helper Class
Root cause (EAP):
Network authentication failed\nWindows doesn't have the required authentication method to connect to this network.
Detailed root cause:
EAP failed
Workaround for hypothesis: Contact the network administrator for "Acrtek-WPA2"
EAP workaround: Contact your network administrator\nWindows needs to be configured to use the authentication method required for this network.
Information for connection being diagnosed
Interface GUID: {5bab8bfe-12d7-4e0c-a46b-efc490047802}
Interface name: Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi Adapter
Interface type: Native WiFi
Profile: Acrtek-WPA2
SSID: Acrtek-WPA2
SSID length: 11
Connection mode: Infra
Security enabled: Yes
Connection ID: 3
Security settings provided by hardware manufacturer (IHV): No
Profile matches network requirements: Yes
Pre-Association and association status: Success
Security and Authentication:
Configured security type: Robust Secure Network (RSN / WPA2) with 802.1X
Configured Encryption type: CCMP (AES)
Security connect status: Fail 0x00050005
Number of security packets received: 4
Number of security packets sent: 3
802.1X protocol: Yes
Authentication Identity: User only
IAS Server engaged: Yes
EAP Method supported by IAS Server: Unknown
EAP type: 25
EAP Error: 0x40420016
Number of 802.1X restarts: 1
Number of 802.1X failures: 1
802.1X status: Fail 0x00050005
Key exchange initiated: No
Unicast keys received: No
Multicast keys received: No
Network Diagnostics Log
File Name: A20D3467-8AD4-483E-91F4-9EC5E18AA1F9.Diagnose.0.etl
Other Networking Configuration and Logs
File Name: NetworkConfiguration.cab
Collection information
Computer Name: ACCRETIVE-SW
Windows Version: 6.1
Architecture: amd64
Time: Tuesday, September 18, 2012 2:50:09 PM
Any help would be greatly appreciated.Hello Mr. Wells,
Thank you for your question.
However, the Small Business Support Community is limited to Cisco Small Business Products, and the Aironet products are considered as a Enterprise level devices.
I recommend you to post this question on the on the correct forum, in order to get a better response.
You can move your post using the Actions panel on the right.
Best regards,
Diego Rodriguez
Cisco Small Business Community Engineer -
Hi
I would like to ask that is wireless client MAC address has been assgin to Excluded Clients, does the WLC will ignore the "auth request" during the exclustion period?
FrankieConfiguring Client Exclusion Policies (GUI)
Step 1
Choose Security > Wireless Protection Policies > Client Exclusion Policies to open the Client Exclusion Policies page.
Step 2
Select any of these check boxes if you want the controller to exclude clients for the condition specified. The default value for each exclusion policy is enabled.
Excessive 802.11 Association Failures—Clients are excluded on the sixth 802.11 association attempt, after five consecutive failures.
Excessive 802.11 Authentication Failures—Clients are excluded on the sixth 802.11 authentication attempt, after five consecutive failures.
Excessive 802.1X Authentication Failures—Clients are excluded on the fourth 802.1X authentication attempt, after three consecutive failures.
IP Theft or IP Reuse—Clients are excluded if the IP address is already assigned to another device.
Excessive Web Authentication Failures—Clients are excluded on the fourth web authentication attempt, after three consecutive failures.
Issue the below command to see the time left when the client is excluded. default time is set to 60 sec.
show exclusionlist
Information similar to the following appears:
Dynamically Disabled Clients
MAC Address Exclusion Reason Time Remaining (in secs)
00:40:96:b4:82:55 802.1X Failure 51 -
ACS 5.1 Failure: 5411 EAP session timed out -- Wired 802.1X, machine-authentication
Hi guys,
I have a strange error here and I`m really disappointed.
We currently try to do "Wired-802.1X" with our Windows XP SP3 Clients with EAP-TLS and "machine-only" authentication.
We use ACS5.1 to authenticate the clients. At about 50% of the clients authentication works fine.
At the other clients we can see a strange error at the ACS.
At the Reports page --> "Authentications - RADIUS - Today" we see that a client is trying to authenticate, but this fails with the Failure Code: 5411 EAP session timed out.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure Reason
Sep 2,10 3:37:46.916 PM
Wired_802.1X_EAP-TLS
EAP-TLS
svacs01
5411 EAP session timed out
Steps
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
Evaluating Service Selection Policy
15004 Matched rule
15012 Selected Access Service - Wired_802.1X_EAP-TLS
11507 Extracted EAP-Response/Identity
12500 Prepared EAP-Request proposing EAP-TLS with challenge
11006 Returned RADIUS Access-Challenge
5411 EAP session timed out
At the switch I used "Authentication Open" to get the client working and capture traffic with wireshark.
Switch --> Request Identity --> Client
Switch <-- Response Identity <-- Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request EAP-TLS --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
Switch --> Request Identity --> Client
What is missing ist the Switch <-- Response EAP-TLS <-- Client
Any ideas what is going wrong ? Maybe someone had this error before ?
Any suggestions how to debug this ?
Thank you very much for your help!
MathiasHi @all,
I have this issue too. It occurs in our wireless environment. The problem for me is that I don't know which client (or clients) causes the error. The error occur many times per day.
Logged At RADIUS
Status NAS
Failure Details Username MAC/IP
Address Access Service Authentication
Method Network Device NAS IP Address NAS Port ID CTS
Security Group ACS Instance Failure Reason
Sep 7,10 11:50:36.143 PM
dot1x wireless
PEAP
bfnetacs01
5411 EAP session timed out
Kind regards,
Michael -
I am in the process of implementing machine based 802.1x to my company. I have 2 radius servers and 1 CA. The machines get their certificates via group policy. The group policy is working fine and everyone has been issued their certificates that are supposed
to have them. I wait til they get their certificates, then enter the commands for 802.1x on their port. I have about 50 machines that are working as they should, but I have three random machines that will not communicate whenever I flip the port on the switch.
The three machines have valid certificates and have full connectivity to the two radius servers and the CA. I do not believe it is a switch problem, because I have other machines connected to this switch that are authenticating properly. Also, I have
tried the 802.1x hotfix on these machines with no luck. I am wondering if there is anything that I could try on the clients that would keep them from authenticating. All of my clients are Windows 7 SP1 64 bit. Any suggestions would be appreciated! Hi,
Based on your description, you are deploying 802.1x authenticated wired network access. The issue is that three machines in your network can’t pass the 802.1x authentication.
About “The three machines have full connectivity to the two radius servers and the CA.” Does it mean that the three machines can ping two radius servers?
What errors did three machines receive when the three machines logon? Or are there any related event logs in the RADIUS server?
For example, in Windows 2012 R2 NPS server, you could check Security-Auditing event in Custom Views\Server Roles\Network Policy and Access Services.
You could also check the Audit Failure event. It is in the Windows Logs\Security directory.
Please also check if the wired network (IEEE 802.3) group policy was applied to the three machines.
You could run
gpresult /h c:\report.html to generate the result of group policy.
If you couldn’t find the group policy which you created, please run
gpupdate /force command in the three clients.
Best Regards,
Tina
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
ISE - AD 802.1x Authentication Failure (All of the sudden)
I have a WLC using ISE to authenticate through AD. (No certificates - only username & password)
ISE is single node deployment.
Its been running fine for the past 6 months, but all of a sudden I get the following errors:
Failure Reason: 12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution: Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause: Session was not found on this PSN. Possible unexpected NAD behaviour. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.
Any Ideas why this would happen ?im recevieing this error message also
Failure Reason: 12953 Received EAP packet from the middle of conversation that contains a session on this PSN that does not exist
Resolution: Verify known NAD issues and published bugs. Verify NAD configuration. Turn debug log on DEBUG level to troubleshoot the problem.
Root cause: Session was not found on this PSN. Possible unexpected NAD behaviour. Session belongs to this PSN according to hostname but may has already been reaped by timeout. This packet arrived too late.
but im running ISE 1.3 with patch 1 only noticed this after the upgrade.
nad is a 3560v2-24ps-s running c3560-ipservicesk9-mz.122-55.SE10.bin
any ideas anyone? -
Windows 7 802.1x (Wired) Authentication Failure when logging into Lync 2010
Hi
My company has implemented 802.1x Wired authentication, we use GPO to specify a
Wired Profile that uses a COMPUTER certificate.
We are finding that when a Windows 7 laptop comes out of sleep or hibernation, the laptop fails 802.1x authentication and does not connect to the network.
This issue only occurs intermittently, but have been proven to occur only when Lync 2010 is open. If we close Lync 2010 the issue does not occur. Lync 2010 installs a self signed USER certificate for authentication.
I am aware that there are some issues around Windows 7 not selecting the correct certificate when responding to authentication requests (KB2710995,
KB2769121) but these always specify that the issue occurs when 802.1x authentication uses USER certificates, not a mix of USER and COMPUTER. We have installed these hotfixes and the
issue still occurs.Hi,
From the description, you suspect the DHCP request cause this issue. Would you please send us the packets? Since it seems that you have looked into the traffic and found some clues.
Meanwhile, I found the following hotfix which may related to this issue.
No response to 802.1X authentication requests after authentication fails on a computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/980295/en-us
Next Action Plan:
1.Clean Boot
a. Click Start, click Run, type "msconfig" (without the quotation marks) in the Open box, and then click OK.
b. In the Startup tab, click the "Disable All" button.
c. In the Services tab, check the "Hide All Microsoft Services" checkbox, and then click the "Disable All" button.
======================================================
Clean Boot + binary search
In a Clean Boot, all the 3rd party services and startup programs are disabled. If the server can start normally in Clean Boot, we can be sure that the issue was caused by some 3rd party service or application. And then we can do a "binary search".
You can enable half of all the services in Services tab, and then restart the server to check the result. If the issue reoccurs, it means the culprit is in this list; if not, the culprit is in the other half. And then, we can continue the binary search, until
we find out the root cause. Please let me know if this action plan is OK for you.
2.Collect etl trace on the problematic client.
netsh trace start capture=yes overwrite=yes tracefile=c:\net.etl filemode=circular
****Try to reproduce this issue****
netsh trace stop
Please send the net.etl to us for underlying analysis.
For any concerns, please let us know.
Best regards,
Steven Song
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
hi, i'm not sure if i'm posting this in the right category but here goes
i wanna use 802.1x on our network but can't seem to get it to work. i followed all the instruction on the web site. it says authentication failed. i'm pretty sure the radius works because i use that same radius for our vpn authentication.
btw i'm using 48 port 2950-EI
config
aaa new-model
aaa authentication dot1x default group radius
interface FastEthernet0/3
switchport access vlan 52
switchport mode access
no ip address
dot1x port-control auto
dot1x timeout reauth-period 1
dot1x max-req 10
dot1x reauthentication
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key <password>
radius-server retransmit 3
am i missing something? thanksHello,
ok, the config looks all right then. Is there a firewall or some other filter active between the switch and the RADIUS server that might be blocking the ports 1812 and 1813 ?
Regards,
GP -
802.1X Wireless Login Failure when Rebooting
Greetings All,
I have a mixture of 10.6.x laptops (as well as some 10.5.x) laptops - both MacBooks and MacBook Pros. I have a Windows Radius Server with AD authentication. The laptops have been programmed, via a WPA2 Enterprise trust certificate and AD credentials to authenticate to the wireless network - which works. Problem is when I reboot, the connection doesn't keep. I need to keep hitting 'Connect' - it doesn't ask for credentials again, it just works. Reboot, same issue. If I logout however (no restart), the connection remains the same. Problem is that these laptops are also binded to an OD server, and at the login screenm I'm getting the red light for available network connections (because as mentioned above, in the background it wants me to re-connect).
I have seen numerous posts on this and/or similar issues but have yet to find a solution. I have re-added the entry, deleted all keychain entries, etc. It's just holding on after a reboot.
Any help would be greatly appreciated and thank you in advance.Hi,
From the description, you suspect the DHCP request cause this issue. Would you please send us the packets? Since it seems that you have looked into the traffic and found some clues.
Meanwhile, I found the following hotfix which may related to this issue.
No response to 802.1X authentication requests after authentication fails on a computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/980295/en-us
Next Action Plan:
1.Clean Boot
a. Click Start, click Run, type "msconfig" (without the quotation marks) in the Open box, and then click OK.
b. In the Startup tab, click the "Disable All" button.
c. In the Services tab, check the "Hide All Microsoft Services" checkbox, and then click the "Disable All" button.
======================================================
Clean Boot + binary search
In a Clean Boot, all the 3rd party services and startup programs are disabled. If the server can start normally in Clean Boot, we can be sure that the issue was caused by some 3rd party service or application. And then we can do a "binary search".
You can enable half of all the services in Services tab, and then restart the server to check the result. If the issue reoccurs, it means the culprit is in this list; if not, the culprit is in the other half. And then, we can continue the binary search, until
we find out the root cause. Please let me know if this action plan is OK for you.
2.Collect etl trace on the problematic client.
netsh trace start capture=yes overwrite=yes tracefile=c:\net.etl filemode=circular
****Try to reproduce this issue****
netsh trace stop
Please send the net.etl to us for underlying analysis.
For any concerns, please let us know.
Best regards,
Steven Song
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Airport Extreme 802.11ac and USB disk failure
hi,
Had an Airport Extreme 5th gen with a USB disk attached for over a year of which my Mac was using Time Machine and creating backups no problem, didnt skip a beat.
Just bought a new Airport Extreme 802.11ac, attached the same USB disk and Time Machine works once or twice then fails saying it cant find the disk. True enough if I open finder and try and find the disk its not listed.
Opening the airport utility it shows the disk attached. If I reboot the Airport Extreme the disk shows up again in finder for a short period of time.
Looks like they released a firmware update 7.7.1 which was supposed to fix this but it seems in my case it hasnt. Even factory reset after the update but no joy.
Normal wireless activities like internet access etc are fine.
Not sure if anyone else has experienced this yet? If not I guess ill try a non self powered disk or something, either that my AE is faulty.
thanks
mattMy experience with the 802.11ac extreme with 7.7.1 firmware suggests Time Machine doesn't work when the name assigned to the device (not the SSID) contains a period, which the out-of-the-box name does.
Out-of-the-box, with the default device name still assigned, I could not get Time Machine to recognize the remote disk on multiple 10.8.4 Macs until I created an empty folder on it. Yet once registered with Time Machine, backups never occurred to the disk--TM status was always "waiting". The server name displayed in TM had the period in "802.11ac" escaped with a backslash (i.e., "802\.11ac").
I renamed the extreme, but used a name that still contained a period. The same difficulty was encountered registering the disk with TM. Once registered, TM status for the disk was still "waiting".The server name again had the period escaped with a backslash.
Finally, I just removed the period from the name. Registering the disk with TM then occurred normally and backup began immediately.
(In an earlier case with the 7.7.0 firmware, I had no trouble registering and backing up to an 802.11ac Time Capsule that had previously been given a name without a period in it.) -
802.1x credentials failure with ACS 5.2
Hi all,
I recently tried to deploy an ACS appliance with version 5.2 installed on it for a customer.
After setting up the WLC to use the ACS as a radius server, and successfully testing connection from the ACS to the AD,
I get an error message " 12321 PEAP failed SSL/TLS handshake because the client rejected the ACS local-certificate" anytime a client tries to connect to the network.
This is surprising because I had already generated a certficate for the ACS from a CA and binded the CA signed certificate with the ACS, I also specified the CA in the client machine's wireless properties and checked the "validate certificate" button.
When I tried to connect using the internal identity store, the client was successfully authenticated without any certificate issues.
Any help on this will be appreciated.Hi,
Can you please send me the pdf output of the authentication for the user which passes authentication to the internal identity store and for the user account that fails when pointing to AD? Are you using an identity sequence or are you modifying the identity settings? If it is ok please attach it to your next post. If not please PM me and i can setup a share for you to upload the files to securely.
thanks,
Tarik -
Airport Drives Me CRAZY! New 802.11n Network Slower Than Old 802.11g/b
I've been using Macs since 1988 and consider myself an advanced user. However, every time I setup a new Airport wireless network or re-configure an existing one, I feel like a helpless newbie trying to figure out how to open a folder on my desktop. No matter how many times I read the manual or the help files or these forums, I can never grasp what seems like it should be a simple path from A to B to C.
Anyway, here's my current situation: I've been successfully (I think) running a 6 year old AP Extreme Base Station [AE] (in my home office addition) and 2 Airport Expresses [AX] (one AX roughly 15 feet from the base station--through sheetrock, and the second AX roughly 30 feet from the first AX--through sheetrock and some wooden stairs. (so roughly 45 feet from AE to 2nd AX). It wasn't the speediest thing going but it did the trick with older Macs.
I recently bought a MacBook Pro which supports 802.11n. I most often use this laptop at the point in the house furthest away from the AE (Base Station) The AE (Base Station) is in my home office connected to my MacPro desktop (see #1 below). In addition, the family iMac is also in that room furthest from the AE. Using the new MacBook Pro with the old 802.11/g/b network turned out to be painfully slow. I was experiencing the same slow network connection my family has complained about for years with their older Macs and 802.11g/b.
I decided it was time to upgrade the whole network, if only to speed up my MacBook Pro connection. Bought new 802.11n Airport Extreme (MC340LL/A) and 2 new 802.11n Airport Expresses (MB321LL/A). Setup did not go smoothly. Again, my normally competent Mac persona was reduced to a babbling three-year-old. Had three different Apple techs on the phone trying to help me through it. Got different, contradictory instructions from the last two. Finally got all three units working, only to find that not only does my MacBook Pro seem even more sluggish than when connected to the old 802.11g/b network, but my wife tells me web pages are taking at least twice as long to load as with the old network.
As concisely as I can lay this out:
*1. Airport Extreme (Base Station)*
Connected via Ethernet from its WAN port to my Comcast cable modem. One Ethernet (LAN) port on that AE is then connected via Ethernet to my Netgear 8-port Ethernet switch. Ethernet from switch to Ethernet port 1 on my MacPro. (MacPro does NOT have an Airport card because I forgot to order one. Also I confirmed that this setup was functional by connecting to the AE wirelessly with my MacBook Pro showing the name I'd given the new network prior to adding the two AX's to the mix).
Some Airport Extreme settings of note (all accessed via "Manual Setup" button):
Airport Tab > Summary
Version 7.5.1
Wireless Mode: Create a wireless network
Channel: 149 (Automatic), 1 (Automatic)
Wireless Clients: 3
Airport Tab > Base Station:
Allow Setup over WAN: Unchecked
Airport Tab > Wireless:
Allow this network to be extended: Checked
Airport Tab > Guest Network:
Nothing checked
Airport Tab > Access Control:
MAC Address Access Control: Not Enabled
Internet Tab > Internet Connection:
Connect Using: Ethernet
Ethernet WAN Port: Automatic (Default)
Connection Sharing: Share a public IP address [Think this one is probably wrong]
Internet Tab > TCP/IP:
Configure IPv4: Using DHCP
Internet Tab > DHCP:
Shows Beginning & Ending Address
Internet Tab > NAT:
Enable default host at: Unchecked and blank field
Enable NAT Port Mapping Protocol: Checked
Internet Tab > Advanced
Didn't touch anything here, so all at defaults
*2. Airport Express #1: Living Room Express (Closest to AE (Base Station)*
Airport Tab > Summary
Version 7.4.2
Wireless Mode: Extend a wireless network
Connect using: Wireless Network
Channel: 1 (Automatic)
Wireless Clients: 1
Airport Tab > Base Station:
Allow Setup over the Internet using Bonjour: Unchecked
Airport Tab > Wireless:
Wireless Mode: Extend a wireless network
Allow wireless clients: checked
Airport Tab > Access Control:
MAC Address Access Control: Not Enabled
Internet Tab > Internet Connection:
Connect using: Greyed-out, not selectable
Connection sharing: Greyed-out, not selectable
Internet Tab > TCP/IP:
Configure IPv4: Using DHCP
Shows IP Address
Internet Tab > Advanced
Didn't touch anything here, so all at defaults
*3. Airport Express #2: Dining Room Express (Furthest from AE (Base Station)*
Airport Tab > Summary
Version 7.4.2
Wireless Mode: Extend a wireless network
Connect using: Wireless Network
Channel: 1 (Automatic)
Wireless Clients: 2
Airport Tab > Base Station:
Allow Setup over the Internet using Bonjour: Unchecked
Airport Tab > Wireless:
Wireless Mode: Extend a wireless network
Allow wireless clients: checked
Airport Tab > Access Control:
MAC Address Access Control: Not Enabled
Internet Tab > Internet Connection:
Connect using: Greyed-out, not selectable
Connection sharing: Greyed-out, not selectable
Internet Tab > TCP/IP:
Configure IPv4: Using DHCP
Shows IP Address
Internet Tab > Advanced
Didn't touch anything here, so all at defaults
SETUP/GOALS:
With Airport Extreme (Base Station) as the starting point, have the two Airport Express units with the strongest, fastest signal possible, provide Internet access (and file sharing, iTunes speakers capability) to three Macs (one older iMac, one older PowerBook and my new MacBookPro). Again, I believe my new MacBook Pro is the only one with 802.11n support, so I don't expect the other Macs to take advantage of the speed boost offered by the three new 802.11n devices.
+Any and all help with this will be greatly appreciated. Thanks!+{quote}With the AirPort Extreme, in the AirPort panel, Wireless tab, click on the button for "Wireless Network Options", check the box for "5 GHz Network Name", and enter a different network name. (That can be trivially different, such as the name of the main network suffixed with an underscore and the digit 5.) Once configured that way, connect your "N" gear to each network in turn to see if one is any better than the other. (If you're wondering what effect this would have, it allows segregating your "N" gear from the older gear to prevent the older gear from slowing down your network. However, distance and interference from things like walls may negate any advantage.){quote}
William: I was gone most of yesterday, but had a chance to implement your recommendations today. I added the 5 GHz network as you suggested, but in order to connect to that at all with my 802.n11 MacBokk Pro, I need to be within a few feet of the AE (base station). If I try to access that network even from the next room (well within reach of both the AE and the livingroom AX, I get one bar and "failure to connect" messages just trying to logon to that network.
However, I did some experimenting that (as of right now, anyway) resulted in much faster network access, not only from my MacBook, but also from the older iMac which is the furthest Mac from the AE. According to my wife, that iMac is "loading web pages faster than I've ever seen them!"
Here's what I did:
1. Moved all three units to places where it seemed they would have the least amount of interference with the clearest path from unit to unit, also raising the height of both AXs from about 2-3 feet from the floor to about 5-6 feet from the floor.
2. Changed one setting on the AE (base station): Wireless Tab > Wireless Network Options > Multicast Rate ---> Changed this from Low to High.
I have a feeling the location shifts made the real difference, but I will try changing the multicast rate back to "Low" just to see what happens.
Paul
Maybe you are looking for
-
Problem with Scanning storage location
have been using elements 9 and have scanned many pix which seem to be automatically stored in pictures/adobe/scanned photos - no problem - they pop up in the organizer, then I can work on them if I want. all of a sudden, they are going to a differe
-
Adobe Premier Elements DVACORE.DLL Crash
Premier Elements 12 keep crashing on startup or shortly after startup with the same error message. Here's the problem details: Problem signature: Problem Event Name: APPCRASH Application Name: Adobe Premiere Elements.exe Application Vers
-
Problem with SUN C++ 6.2 installation
Hi, I am trying to install SUN C++ 5.3 on a Solaris machine running Solaris 8 and currently having SUN C++ 5.0. It appears to me that SUN C++ 5.3 is only available as part of the Forte Developer 6 update 2 package. So, I downloaded that package and i
-
REPLICATION BETWEEN ORACLE 10g and postgresql/MySQL/MSSQL SERVER??
Hi Friends. I want to know if there are a manner of replication between ORACLE and (postgresql or mysql or mssqlserver). Please, my email is [email protected] Thanks Manuel
-
Best way to read a switch - Help!
This should be easy and probably is but I just cant seem to track the state of a switch effectivly. What Im testing: Code written in C++ using DAQmx on Scientific Linux. Hardware is a 6221 PCI card. I have a switch which is configured to be active hi