Advantages of using a seperate controller for guest access?

Can someone give me a good reason to use a seperate controller in a DMZ for guest users versus just trunking a DMZ VLAN to the controller. Certainly it makes sense to have a guest controller when you DMZ is not accessable to the controller locations (or you have a bunch of remote locations, but only one internet connection), but in the event that the controllers are located in a place that it can hit the DMZ is there a good reason to use a guest controller.

I'm not even sure if that is a good reason. You can alway trunk to another non-routed VLAN and stick a cable modem and firewall to give guest user access. I'm working with someone now that thinks this is the way to go, but I've got to add a 4402-12, a switch (need GB connectivity for the controller) at a minimum. Again, it would make perfect sense if the location of the internet was not in the same building.

Similar Messages

Warning page on Cisco Wireless Lan Controller for guest access

Hi,
We have an Cisco wireless LAN controller 4400 in our organization, and lots of guest using our Wi-Fi network.
I would like to configure a warning and terms and condition page when guest using first time our network.
Can you please let me know is that possible without adding external web server and how to configure.
Many Thanks in Advance
Amit Sharma

Hi Amit,
Hope you are doing great!!
the below link will help you in getting the issue resolved!!
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00809bdb5f.shtml
Please dont forget to rate the usefull posts!!
Regards
Surendra

2504 with new-architecture enabled breaks MAC auth for guest access

Hello,
We have (2) 2504 WLC running version 7.6.120. WLC1 is the local controller and WLC2 is an achor controller for guest-access. We need to incorporate a 3850 for use with the WLC2 anchor. The guest access is currently working with Mac-Auth and Mac-Auth-Fail to Web-Auth.
When converged access is enabled on the WLC1 and WLC2, the MAc-Auth no longer works. That is, the previously authenticated user is now redirected to the Web-Auth page. The local controller shows the user as authenticated but the Anchor controller shows the state as WEb-Auth-REQD.
Rolling back using "config mobility new-architecture disable" and rebooting resolves the issue.
Does anyone what changes from the old to the new that would break this mac-auth/web-auth configuration?

You should reach TAC for these sort of issues. Not many people deploying this CA setup yet & you may not get direct feedback immediately.
HTH
Rasika

If I use the same iCloud account for my ipad and iPhone, will changes I make on one change on the other as well? I'm not sure of the advantage of using teh same iCloud for both devices.

If I use the same iCloud account for my ipad and iPhone, will changes I make on one change on the other as well? I'm not sure of the advantage of using teh same iCloud for both devices.

No, it only mirrors changes to synced data. This includes mail, contacts, calendars, reminders, safari bookmarks, notes, iWork documents and data, and photo stream photos (assuming you choose to sync all this data). Changes to iTunes data such as music, apps, podcasts, etc., are not synced using iCloud. In your example, if you delete an app from one device it will remain on the other until deleted there too.

Controllers in the same WISM module in the 6500, i'm trying to make one of them anchor controller for guest internet

I have 2 controller in the same WISM module and I'm trying to make one of them Anchor controller for guest WLAN, but when I give put the anchor controller in a separated non-routed VLAN and connect it to an outside switch by creating VLAN 192 on the core. ( the Internet router is connected to the same switch).-it is showing path down... ( VLAN 192 visitor Internet and VLAN 224 my internal controller management VLAN are not talking)
there is no routing between these 2 VLAN ( because of security), but i can't get the controller to communicate.
-if I connect my laptop to this switch I'm able to go out on Internet but my visitor WLAN is not able to get IP address from the router connected to this switch.
- I called Cisco and one the guys told me that i can leave the management in VLAN 224 for the controller to communicate ( which they did), but the issue I'm having right now is that my visitors are not getting IP addresses from this VLAN at all
some one please advise
vlan192   4/1 vlan 192              int g0/0 192.168.2.201
6500 ----- switch ---- router--------- (outside)
    |         |   |
    |        DHCP server
   WLC

A couple of questions, is VLAN 192 allowed across the trunk link to the wlc? Do you have an interface tagged for vlan 192, with a valid address? What is providing the DHCP?
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Snmp error for guest access ticket on two WLC

Hi,
I have one wcs (5.0.56.2) and two wlc 4400 ( 5.0.148.2). When i try to create a ticket for guest access on the two wlc without time restriction, it works well. But when I defined time restriction for the ticket, i have a snmp error on the passive wlc (snmp operation to device failed, attempt to set conflicting attribute value) and not on the active xlc.
Thks.

The lobby ambassador can specify the amount of time that the guest user accounts remain active. After the specified time elapses, the guest user accounts expire automatically.
The local user database is limited to a maximum of 2048 entries and is set to a default value of 512 entries (on the Security > General page). This database is shared by local management users (including lobby ambassadors), net users (including guest users), MAC filter entries, and disabled clients. Together these cannot exceed the configured database size.
For the configuration following URL may help you
http://www.cisco.com/en/US/docs/wireless/controller/5.0/configuration/guide/c5users.html

How to use taglibs in JSP for Database access

Hi
Could any one please tell me how to use taglibs in JSP for Database access
with regrds
Jojo

This is a sample how to connect to a MySQL database with JSTL 1.0:
<%@ page contentType="text/html; charset=iso-8859-1" language="java" import="java.sql.*" errorPage="" %>
<%@ taglib uri="http://java.sun.com/jstl/sql" prefix="sql" %>
<%@ taglib uri="http://java.sun.com/jstl/core" prefix="c" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>JSTL MySQL</title>
<link href="styles.css" rel="stylesheet" type="text/css" />
</head>
<body>
<c:catch var="e">
<sql:setDataSource var="datasource" url="jdbc:mysql://Your_Server_Name_Here/You_Schema_Here"
                       user="Your_Username_Here" password="Your_Password_Here"
                       driver="com.mysql.jdbc.Driver"/>
<c:out value="datasource= ${datasource}, Class = ${driver.class}"/>
<br />
<br />
<sql:query var="deejays" dataSource="${datasource}">SELECT * FROM Your_Table_Name_Here</sql:query>
<table>
<%-- Get the column names for the header of the table --%>
<c:forEach var="columnName" items="${deejays.columnNames}"><th><c:out value="${columnName}"/></th></c:forEach>
<tbody>
<%-- Get the value of each column while iterating over rows --%>
<c:forEach var="row" items="${deejays.rows}">
<tr><c:forEach var="column" items="${row}">
        <td><c:out value="${column.value}"/></td>
      </c:forEach>
</tr>
</c:forEach>
</tbody>
</table>
</c:catch>
<br />
<br />
<c:if test="${e!=null}"><span class="error">Error</span>�
<c:out value="${e}" />
</c:if>
</body>
</html>And this thread might help you:
http://forum.java.sun.com/thread.jspa?threadID=639471&tstart=44

E2500 with multiple APs for guest access

I got 5 E2500 routers and the main one has setup to IP address 192.168.1.254 and the rest APs are programmed into the bridge mode with the IP address 192.168.1.245 through 248. The secured wireless network works fine when I roaming between these APs but the only AP that I can get internet access for guest wireless network is the main (192.168.1.254) router; for every other APs, I will get the guest log on screen (prompt for guest access password) and no internet access after I type in the correct access password. Does the E2500 support multiple APs guest or it requires a special way to configure it? Please help...
Jim

Guest Access allows you to provide Internet connection to your guests, however, they will not have access to your computers or other personal data. When you set up your Valet or Linksys Wireless-N router, the Cisco Connect software will create two wireless networks with the same Wireless Network Name (SSID) that differs from one another by a -guest suffix to one of the wireless network names.
So first of all remove all the networks from the preferred list of the computer and then try to connect.

HT3728 I do not need another wireless network but want to use the airport express for printer access only. Can this be done and how?

I do not need another wireless network but want to use the airport express for printer access only. Can this be done and how?

You can configure the AirPort Expess to "Join a wireless network" and enable the Ethernet port so that Ethernet devices will be able to connect.
In order to print from the iOS devices, you will need to have an application like Printopia installed on your Mac. The Mac must be active when you want to print.
More details here: Printopia - AirPrint to Any Printer - Print from iPad - Print from iPhone ...
There is a free trial available for Printopia, so make sure that it will work before you buy the AirPort Express.

Using ISE for guest access together with anchor controller WLC in DMZ

Hi there,
I setup a guest WLAN in our LAB environment. I have one internal WLC connection to an anchor controller in our DMZ. I'm using the WLC integrated web-auth portal which works fine.
To gain more flexibility regarding guest account provisioning and reporting my idea is to use Cisco Identity Services Engine (ISE) for web-authentication. So the anchor controller in the DMZ would redirect the guest clients to the ISE portal.
As the ISE is located on the internal network while the guest clients end up in the DMZ network this would mean that I have to open the web-auth portal port of ISE for all guest client IPs in order to be able to authenticate.
Does anyone know of a better solution for this ? Where to place the ISE for this scenario, etc ?
Thx
Frank

So i ran into a similar scenario on a recent deployment:
We had the following:
WLC-A on private network (Inside)
ISE Servers ISE01 and ISE02 (Inside)
WLC-B Anchor in DMZ for Guest traffic (DMZ)
ISE Server 3 (DMZ)
ISE01 and ISE02 are used for 802.1X for the private network WLAN.
Customer does not allow guest traffic to move from a less secure network to a more secure network (Compliance reasons).
The foreign controller (WLC-A) must handle all L2 authentication and it must use the same policy node that the clients will hit for web auth. Since we want to do CWA, we use Mac Filtering with ISE as the radius server. If you send this traffic RADIUS authentication for Mac Filtering to ISE01/ISE02, it will use https://ise01.mydomain.com/... to redirect the client to. Since we don't allow traffic to traverse from the DMZ with the anchor in it back inside to the network where ISE01 and ISE02 are, client redirection fails. (This was a limitation of ISE 1.1. Not sure if this persists in 1.2 or not.
So what now? In our deployment we decided to use a 3rd ISE policy node (ISE03 in the DMZ) for guest authentiction from the Foreign controller so that the client will use a DNS of https://ise03.mydomain.com/... to redirect the client to. Once the session is authenticated, ISE03 will send a CoA back to the foreign which will remove the redirect for the session. Note, you do have to allow ISE03 to send a CoA.
In summary, if you can't allow guest traffic to head back inside the network to hit the CWA portal, you must add a policy node in a DMZ to use for the CWA portal so they have a resolvable and reachable policy node.

Advantages of using Final Cut Pro for animation

Is there anyone out there using Final Cut Pro 6 that could tell me what they feel are the advantages of using FCP 6 for animation as compared to Final Cut Express 3.5?

Okay, cool. I was gonna use that in the first place but I'm still learning it and so far all I know how to do on it is clean up the audio. I'm going through a Soundtrack Pro book right now and had to stop because I couldn't continue without a microphone. I'm getting that microphone this week and by the time I have the next batch of audio files to edit I'll know what I'm doing in Soundtrack Pro.
Thanks for the suggestion, I was seriously coming back to this question to elaborate for the sake of bumping this.
Oh yeah, if Soundtrack Pro is the answer, is it possible to bypass FCP on the way in AND on the way out?
Message was edited by: Etchie

Advantages of using BAPI over LSMW for data transfer

Hellow,
Can anybody please give an input for advantages of using BAPIs in data transfer compare to LSMW. If we use BAPI for data transfer of master and transaction data how it is more usefull compare to LSMWs developed.
Thanks in advance
Raghav

Hi Raghavendra,
Refer the links..may help.....
[http://www.*******************/search?q=BAPIandLSMW+comparision]
[http://www.*******************/search?q=bapi]
Regards,
Mdi.Deeba

How to use Fuzzy Logic Controller for transfer function in labview control and simulation loop?

I am facing problem with fuzzy PD logic controller for transfer function in control and simulation loop.
Plz Help me in this regard...................
i have attache snapshot of my program
Attachments:
fuzzy in simulation loop.JPG ‏52 KB

Hi Sankhadip,
Sorry for the late response. I was looking at your code and
I noticed that the graph scale does not start from zero. That might be the
reason why you don't see the transient in the simulation. To change the scales
simply double click on the lower limit and set it to zero. If this is not the
expected results, can you please post the expected results, so we can see what are the
differences between the results . Also, you might be using different
solvers, and that gives different results as well.
Thanks and have a great day.
Esmail Hamdan | Applications Engineering | National
Instruments

Need advice on storing configuration variables for use by FP2000 Controller for embedded application.

I am creating 8 machines that generally operate in the same way and each will be controlled using a FP-2000 controller. The only difference between the machines is a set of scaling constants and pass values for determining if the machine completed its process successfully.
In the past, using an idependent PC and Labview, I have created a configuration.vi for writing the constants and configuration variables to a data file on my hard drive. Then in the auto.vi I read(only once each time the program is started) the file and store the data in the program. I would like to do something similar with this system but am not familar with the Field Point system.
I know i
t is probably not difficult to store the data to the host computer and transfer it to the modules but I am better off writing to the modules once and storing the data onboard the FP controller for use by an embedded application. This way, if the network connection is lost for any reason, the machine can still operate. Is this possible, and if not what do you suggest in order to prevent being so reliant on the host computer?
Thank you for your help.

Mike,
There are a number of ways to accomplish what you desire. The easiest is to continue doing what you are already doing. The FP-20xx series modules treat their flash memory as if it was a hard drive, so the file I/O VI's in LabVIEW work just the same in a FP-20xx as on a regular computer running LabVIEW. The primary variation will be in how you write the files over the network. Since mapping network drives is more of a Windows functionality, you can not simply have a VI running on your host computer use a File I/O VI to write to a FP-20xx. Instead, what you will need to do is to write the file to you local drive and then FTP (file transfer protocol) the VI to the FP-20xx module. This can be done using the LabVIEW Internet toolkit or any 3rd party FTP util
ity. One word of advice; the OS on the FP-20xx does not support long filenames but due to a problem in the FTP server, long filenames (non 8.3 compliant) may be uploaded and once there, you will be unable to access the file again, even to delete it.
An alternative method that I have seen used is to use a global VI and write to it from the host machine through the use of VI server. You can then have the program on-board the FP-20xx save the globals to your configuration file.
Regards,
Aaron

Why we use package seperate folder for creating packages ?

hi
i have two doubts
1) in packages why we put seperate folder for pacage.. for creating the packages...?
2)with out creating the package folder ..is possible to any other way is there ?
thanks !!!

balakrishna.m wrote:
if is it there any option to create one folder..
all packge programs are saved into that folder.. "no need to creating a seperate folders".. ?Here's a suggestion.
Instead of continuing to waste everyone's time (including your own I might add) by repeating the same question in different forms why don't you ask us/tell us about the real problem that prompted this question in the first place.
I would guess that your real issue here is one of the following.
1)
Question: You don't want to have to create 100 folders.
Answer: Get an IDE.
2)
Question: You have actually hit some limit on some filesystem with regards to the number of directories in a directory.
Answer: Rethink your design for starters. It sounds like you have too many packages. You can also look to solve this in alternative ways (like putting the source/classes in different locations and using the classpath appropriately)
3)
Question: You just don't understand what packages are for.
Answer: Read the tutorial
4)
Question: You just don't like packages.
Answer: Tough. Accept it or choose another language.
If your real question doesn't appear above please ask it. But don't ask again if you must create different folders for different packages, that question has been answered repeatedly already.

Advantages of using a seperate controller for guest access?

Similar Messages

Maybe you are looking for