Allowed ports in ACLs for Wireless IP-Phones

I need to Apply ACL on one SSID which is used to allow the communication between just IP phones and for sure CallManger.
So I need to know which ports should I allow in ACLs:
I tried to allow the following ports:
UDP>> DHCP
udp port 69 TFTP
tcp port 2000 SCCP
udp range 16384 32767 FOR RTP Streaming
shall I enable any thing else????

These ports are fine.
CallManager discovery can occur several ways, one of them is DNS. If you use DNS discovery, you may want to add UDP 53. If CUCM information is fed from TFTP server files, then you are good with the ports mentioned in your list.
hth
J

Similar Messages

Restrictions ACL for Wireless AP to WLC in HREAP Desgin Setup

                   Hello, Everyone I have Wireless HREAP setup in which the Wireless LAN Controllers (WLC) are located across the WAN in DataCenter while the Wireless Access Points (AP) are located within the branches, so setup is fine but as security requirement mandates that the APs VLAN in the branch should be restricted from accessing any thing except neccessary communication to WLC across the WAN so on the interface VLAN assigned for the APs in the branch i Applied an inbound ACL as below and it works fine but after some times my be days i found that the Access points are not present in the WLC GUI and it will appear only if i removed the ACL...............So question here what else is missing in my ACL which is neccessary for AP communication to WLC?
Extended IP access list HO_AP_Restrictions
    10 permit udp any host (WLC 1 IP) eq 12222
    20 permit udp any host (WLC 1 IP) eq 12223 (58563 matches)
    30 permit udp any host (WLC 1 IP) eq 5247
    40 permit udp any host (WLC 1 IP) eq 5246 (58563 matches)
    50 permit udp any host (WLC 2 IP) eq 12222
    60 permit udp any host (WLC 2 IP) eq 12223 (22270 matches)
    70 permit udp any host (WLC 2 IP) eq 5247
    80 permit udp any host (WLC 2 IP) eq 5246 log (22270 matches)
    90 permit udp any host (ap-manager 1 IP) eq 12222
    100 permit udp any host (ap-manager WLC 1 IP) eq 12223
    110 permit udp any host (ap-manager WLC 1 IP) eq 5247 (440902 matches)
    120 permit udp any host (ap-manager WLC 1 IP) eq 5246 (1950854 matches)
    130 permit udp any host (ap-manager WLC 2 IP) eq 12222
    140 permit udp any host (ap-manager WLC 2 IP) eq 12223
    150 permit udp any host (ap-managerWLC 2 IP) eq 5247 (360037 matches)
    160 permit udp any host (ap-manager WLC 2 IP) eq 5246 (1484968 matches)

Thanks Amjad Abdullah and sorry for late reply i was on sick leave
Actually the issue was due to the ACL, which was blocking the DHCP (how stupidly I overlooked that)
I have did the same command as you instructed and it reveal that AP has timed out, so I have enabled debugging on ACL to see what kindly of communication is going on and I found many communication which I was keep allowing it based try and error till I found this log that Some APs IP address are trying to communicate to the default VLAN gateway IP address on port 67 which is DHCP then I realized this is the issue.....
In brief....the APs are assigned to a dynamic VLAN (DHCP-enabled) so when I apply the old ACL, the APs already has obtained an IP addresses and they work fine with WLC, but when the DHCP lease timer expires, the APs try to send DHCP renew to the default gateway in which no ACE inside the ACL is matching so that request being denied and therefore doesn't get an IP address so it loses communication with the WLC....
So I added the following ACE at the end of the above ACL
permit udp host 0.0.0.0 any eq bootps
NowI will always remember.......Security comes with cost

Cisco ACL for Wireless VLAN's

Hi all and Merry Christmas to you.
So I have been off work for a few days now playing in my lab, I have configured a number of VLAN’s to separate Data, Voice, Servers, Games Consoles and Guest on my Cisco 1142, I know it may be a bit of an over kill but it’s just me doing a bit of lab work and learning
What I’m after doing now is setting up ACL’s to deny the Guest and Games Console VLAN from accessing my LAN and I’m not sure where to start, I want to consoles only to be able to connect to PSN and Xbox networks as well as my DHCP server, and the guest network to connect to the web but again not my LAN, this is for users who come round with phones and tablets.
My lab look like this:-
Broadband > Cisco RVS4000 (soon to be ASA) > WS-C3560 > 1142 AP.
My DHCP server is on VLAN 6 with an IP address of 192.168.6.241
VLANs are: -
interface Vlan5
description *****DATA VLAN*****
ip address 192.168.5.253 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan6
description *****Servers*****
ip address 192.168.6.254 255.255.255.240
interface Vlan7
description *****VOICE*****
ip address 192.168.7.254 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan8
description *****VOICE WIFI*****
ip address 192.168.8.254 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan9
description *****WIFI CONSOLES*****
ip address 192.168.9.254 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan10
description *****WiFi Home*****
ip address 192.168.10.254 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan11
description *****WiFi Guest*****
ip address 192.168.11.254 255.255.255.240
ip helper-address 192.168.6.241
interface Vlan12
description *****Management*****
ip address 192.168.12.254 255.255.255.240
The AP config looks like:
dot11 ssid Console
   vlan 9
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 094F4107170A051103
dot11 ssid Home
   vlan 10
   authentication open eap eap_methods
   authentication network-eap eap_methods
   guest-mode
   mbssid guest-mode
interface Dot11Radio0.9
encapsulation dot1Q 9
ip helper-address 192.168.6.241
no ip route-cache
bridge-group 9
bridge-group 9 subscriber-loop-control
bridge-group 9 block-unknown-source
no bridge-group 9 source-learning
no bridge-group 9 unicast-flooding
bridge-group 9 spanning-disabled
interface Dot11Radio0.10
encapsulation dot1Q 10
ip helper-address 192.168.6.241
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
interface Dot11Radio0.12
encapsulation dot1Q 12 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
At the minutes I’m just trying to stop Console getting to the Home network before I move onto the rest
I have not got a clue where to start or where to place the ACL’s, would they be on the Switch or the AP itself?
Hope you can help me out.
Happy new year
Martyn

Here is a suport document in regards to autonomous ACL:
https://supportforums.cisco.com/docs/DOC-13768
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Bummer..my phone quit scanning for wireless networks

in Baja on vacation and my phone suddenly stopped scanning for wireless networks. Got any ideas? My partners iphone works fine. I reset my wireless networks in the settings window. I tried manually entering the network name and pass code. I removed and replaced my sim card. I'm hesitant to synch, backup and reset my phones settings since I definitely don't want to compromise it further. Been there done that.

Here is a solution that might help. I too had the unhappy message of " could not scan for wireless networks". Thinking it was a wifi hardware problem or software problem made me give up until an idea hit me. Maybe it was an app. that was giving me problems. So I deleted an app. I had , which was Devicescape Easy Wifi, and did a reset network setting. This solved my problem. So look at your app. list and delete any wifi app. and see if that works.

TS1574 n in head phone port,no option for internal speakers in option tab

Internal speakers not working, red light in head phone port, no option for internal speakers in option tab. No luck with tooth pick or paper clip.

1. Reset PRAM. http://support.apple.com/kb/PH4405
2. Reset SMC.     http://support.apple.com/kb/HT3964
    Choose the method for:
    "Resetting SMC on portables with a battery you should not remove on your own".
3. Applications > Utilities > Audio MIDI Setup
    Audio Devices window
    Side Bar
    Click the Built-in Output.
    Under Mute any of the boxes checked? If so uncheck it.
    Option click the speaker icon, if present and select Internal Speakers.
4. Launch iTunes and play a song through headphone and adjust the volume

HT4145 is it possible to use a sngle air port express both for streaming music to an audio system AND as a wireless base station

is it possible to use a single air port express both for streaming music to an audio system AND as a wireless base station

Yes you can - if it is your only router or it is after another Apple router - if you have a non-Apple router then it would have to be hard wired to create its' own wireless network.

Port forwarding on a bt 2 hub for my i phone with plex

Hi all i am trying to set up port forwarding for my i phone 4 with plex , how do i go about it ? step by step would be great ! cheers

Not sure what you're asking for... or why. Port forwarding is used for systems on your network that act as hosts or servers, so they can be contacted from the outside world through your NAT router.
As for setting up port forwarding, you will either need to reserve a DHCP address for your phone on your router, assuming it's acting as a DHCP server and has that capability, or set up a static address for your network on your phone, then set up port forwarding on your router to forward the correct ports to that address.
All of this is way beyond the scope of this forum with the exception of how to set the static address on the phone.

TS1398 this didn't help me at all. out of the clear clue my iPad can't even scan for wireless networks. even when I type in my home wireless network name. my phone can connect to it but for whatever reason my iPad won't. nothing I've tried works. I'm ****

believe me I've tried EVERTHING and my iPad still 'can't scan for wireless networks'. it happened all of a sudden and is really really frustrating. I really don't want to have to drive 40 minutes to the nearest 'genius bar'. I'm about ready to break this thing over my knee. I've even tried the frig trick. it worked for about 30 seconds. and then? nothing. any non sarcastic suggestions?

believe me I've tried EVERTHING and my iPad still 'can't scan for wireless networks'. it happened all of a sudden and is really really frustrating. I really don't want to have to drive 40 minutes to the nearest 'genius bar'. I'm about ready to break this thing over my knee. I've even tried the frig trick. it worked for about 30 seconds. and then? nothing. any non sarcastic suggestions?

Extended ACL for DHCP

Hi,
I'm having a problem creating an ACL to allow DHCP.
I want to secure a VLAN running across our Cisco wireless network infrastructure to limit access as much as I can.
Restricting access to limited ip addresses and ports is straightforward, but I can't seem to get the ACL correct to allow clients to obtain ip addresses via DHCP.
I seem to remember that the ACL for DHCP was a little odd -this is what I currently have:
permit udp any host 172.16.30.4 log
permit tcp any host 172.16.30.4 log
permit tcp 172.16.36.0 0.0.0.255 host 172.16.30.4 eq domain established log
permit tcp 172.16.36.0 0.0.0.255 host 172.16.30.27 eq 8080 log
permit tcp 172.16.36.0 0.0.0.255 host 172.16.30.82 eq 443 log
deny ip any any (28 matches)
172.16.30.4 is the DHCP server, and I would like to limit this to only the ports required for DHCP, but I haven't specified whilst debugging this problem - my inital config was for ports 67 and 68.
I'm seeing traffic being logged against the deny ip any any, so I know the client is trying to send to the correct network etc.
The IP helper address is configured on the interface and is 172.16.30.4.
Can some one let me know what I'm missing.
Cheers,
Steve

Hi,
Thanks for the response - I'll try the ACL for DHCP shortly.
With regard to the ACL:
permit tcp 172.16.36.0 0.0.0.255 host 172.16.30.4 eq domain established log
you are correct, that is for DNS.
However, on reflection I believe I will need tcp and udp for this rule as the client device will update DNS dynamically when it obtains an IP address from DHCP and I seem to recall DNS updates require tcp port 53?
Cheers,
Steve

Can an Airport become an Ethernet Jack for a VOIP phone?

I have an Airport Extreme broadcasting wifi already and need a remote ethernet jack for a voip phone in a place where there is no hard wired jack. Can the jack on the Express become a remoted jack?

Can the jack on the Express become a remoted jack?
Yes, assuming that the AirPort Express is located where it can receive a strong wireless signal from the AirPort Extreme.
If you need more wireless coverage in the area where the AirPort Express will be located, you can configure it to "extend a wireless network". The Ethernet port is also enabled in this setup.
Important....your AirPort Extreme must be the newer "n" version to allow this. The "n" version of the Extreme is square with rounded corners. The "old" version of the AirPort Extreme is shaped like a round dome.
If you do not need more wireless coverage in the are where the AirPort Express will reside, you can configure it to "join a wireless network" and then select the option to enable the Ethernet port. The "join" setup will work with either the "new" or "old" versions of the AirPort Extreme.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.

How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.
When Charter Tech goes to your site, have them connect the modem up, but do not connect the modem to your iMAC or MacBook Pro. What you want to do is connect the Airport Extreme to the iMac or MacBook Pro first with the Ethernet Cable. You have to do this to configure via Airport Utility to set up the Base Station Name & Base Station Password.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple Tv, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.
WHAT TO DO IF YOUR AIRPORT EXTREME WAS PREVIOUSLY SET UP FOR USE WITH ANOTHER CARRIERS ROUTER OR MODEM.
NOTE: If you already had your Airport Extreme connected for example, I previously had ATT Uverse and the Airport Extreme was connected to the Wireless Router Model 3801HGV, I disabled the Uverse Wireless and used the Airport Extreme for the Wireless signal in bridge mode, as the Airport extreme Signal is much stronger than the Uverse router, and I was able to obtain a Wireless signal with the Airport Extreme way much better with no signal loss which was very very frustrating with the Uverse router.
Anyhow if you had it hooked up like this, now that you will be using it with the Charter ARRIS Modem TM902A, you will need to reset the Airport Extreme to clear out the old data it has in memory, with the previous set up otherwise it will not work. Trust me I spent 6 hours trying to make it work reading all Apple Support Community questions and answers relating to this type issue/problem others have been having trying to get their set up working. I tried all the tips, and I finally decided just to see if by chance I would be able to connect with someone with Charter Tech support who might be familiar with Apple to be able to assist me and by luck I did. He told me why it was not working and was all due the previous configuration with the ATT Uverse router was still in memory with the Airport Extreme. Finally it was 10:30 PM when I decided to call Charter Tech Support and I had been working on this since 3:00 pm pacific. I did not call them earlier as all the post I read said they never received any good help from Charter. After calling them I finished up by 11:00 PM and was able to finally connect Apple Tv, iMac, iPhones and Macbook Pro. We love our Apple Product and Happy all is connected with the new
Internet Provider Charter. I must say the speed is way way much better than it ever was with AT&T Uverse.
THIS IS WHAT YOU WILL NEED TO DO:
First you will need to unplug the Airport Extreme, then by taking the tip of a pen or paper clip end you need to push the reset button on the back of the Airport Extreme and hold it
down and at the same time plug the power cord back into the Airport Extreme count to 5 or 10 then release the reset button. Then once he light in front of the Airport Extreme stops blinking you need to plug the Ethernet cable from the Airport Extreme to your iMAC or Macbook Pro, and restart which ever one you have, then open the Airport Utility once it is back up. If you see airport extreme pop up with the old network name or it shows and yellow triangle click on the Airport Extreme ICON it will not let you configure it but will ask if you want to get rid of it or remove and just do it. Then Again restart your iMAC or MacBook Pro, open up Airport Utility again, and on the top left you should see under “Other Airport Base Stations” the MAC ID for the Airport Extreme.
You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple TV, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
Wireless Security will be -> WPA/WPA2 personal or just WPA2
Enter the Wireless Password you want
Verify the Wireless Password (enter it again)
After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow. Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green. If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green. Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.

I just got a Charter Modem. Model TM822. While I was moving, my Airport Extreme was still at my old place.
I have a Linksys WRT320N I used for the initial Charter setup.
I can get my Airport to work here, but the Internet light on the Modem flashes Yellow.
Hasn't caused any issues so far but one thing I did notice.
On the Linksys there were 3 DNS servers listed.
The Airport Extreme only lists 2 and i don't see where I could add another, only change whats already there.
I tried everything above, but light on modem still flashes yellow.
I have the technicians cell phone. Told me "that shouldn't be" and gave the same advice listed above.
I'll break down and call Charter one day, see if it's on their end. NSA tracking may need a reset LMAO.

How to set up for wireless through time capsule

I have at&t u-verse but I disabled the wireless in u-verse modem and now have forgotten the steps to take to set up my time capsule but to wireless. I had my time capsule used as wireless router before we moved to a different state but it has been a few months not that I was using the at&t wireless router and I didn't like it and my time capsule would not back up so that's when I realized I must disable my wireless in the At&t modem and use the time caspule wirelss. Please help. Thank you

Power on the Time Capsule for a few minutes, then hold in the reset button firmly with a ball point pen or something similar for 10 seconds and release. Allow a full minute for the Time Capsule to restart to a slow, blinking amber light.
Connect an Ethernet cable from one of the LAN <--> Ethernet ports on the back of the Uverse router to the WAN "O" port on the Time Capsule
On your Mac, open up Macintosh HD > Applications > Utilities > AirPort Utility
Click on the Other WiFi Devices tab
Click on the Time Capsule
The setup utility will open up automatically and take a minute to analyze the connections then suggest a setup on a screen that looks like this:
Type in a simple name that you want to use for the Wireless Network Name
Type in a name that you want to use for the Time Capsule device
Type in a password
Verify the password
Click Next
The utility will set everything up for you in a minute or two. When you see the message of Setup Complete on the screen, click Done
You can now log onto the wireless network that you created by selecting the name and entering the password
Post back on your progress and we will next get backups going again

I have a Westell 6100G modem. I want to set up Airport Express for wireless. Can someone tell me how to do it step by step. I'm using an HP with Windows Vista. I'm a tech idiot.

Just got Airport Express to save on GBs of data. I have already a Westell 6100G which is for use as Internet Broadband, via Verizon. How do I set up the Airport Express with this Westell. Do I even still need the Westell, or do I need to also buy a wireless router? I'm a tech idiot and this is driving me nuts.

The Westell 6100G is a combination modem and router or gateway device. The AirPort Express is a wireless router.
Since the Express does not have a built-in modem, you will still need your Westell gateway in order to access the Internet.
Which exact model of AirPort Express do you have. It will be written (in very hard to read type on a label on one of the AirPort's sides). It should look something like: A1392. It may also state a Order#. In that case it would look something like: MC414LL/A
Regardless of which model you have, the basic network configuration would be that you would connect an Ethernet cable between the Westell's Ethernet port and the WAN (circle of dots) port on the Express. (Note: If you have an earlier model of the Express, you would connect the cable to the only Ethernet port on the Express.)
The good news is that you will not have to make any configuration changes to the Westell. We should be able to use it as configured.
What we are going to start with is getting a basic Wi-Fi network that should provide your computer with wireless access to the Internet. Once verified as working, we can fine-tune this network to include wireless security and any other goals that you may have.
Ready to start?
I would recommend that you do the following as a minimum:
Power-down the Westell and computer(s).
While all of the devices are powered-down, perform a "factory default" reset on the AirPort Express base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
Once the reset has completed, remove the AirPort Express from power.
Connect an Ethernet cable between the Westell and the AirPort Express.
Power-up the Westell; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

Any hope for quality basic phones?

I'm out of contract, just got done browsing for a basic replacement phone and am disappointed with the current offerings. I feel that was marketing and intended. I've been a Verizon Wireless customer since 2001 and I was grandfathered in once they bought Alltel. I like to use Verizon because I get good reception in my area on their voice network and many of my family and friends use the service, so we have free mobile-to-mobile calls and texts. I say free, but I consider it a bargaining chip that came as part of the fee in the plan that I pay for every month.
I do not want a "smart phone" my lifestyle doesn't need or desire it. I have computers at work and home and all my typical haunts, I don't want to carry around an additional Internet device in my pocket (yes I know basic phones can access the net too in a limited way, for a premium). Being constantly online isn't desirable to me. I don't want to be GPS tracked, or browse the Internet on a tiny little phone screen. I like my old voice and text plan, the price is right. I'm not inclined to pay at least an extra $30/month to start a service that I don't want and just open the door for data overage fees - Just to have a decent phone! It's a despicable and ethically embarrassing corporate strategy.
So without getting into the profit motivations for phasing out basic service plans by only offering smartphones, why can't we have:
Long battery life
modern tablet style ergonomics
decent reliable OS
possible wi-fi if desired
Good camera and flash
rugged enough to last at least the duration of a 2-year contract with normal wear
Good sound quality and antenna
Technologically we already nailed it, have been there a long time but instead you try to force us to commit to these expensive bells and whistles many of us don't need or request. In this day and age I feel that basic phone service is a need, so why not do it right and excel at it? You probably don't make as much money off of it, but I'm still happy to pay like I have been if you would just sell a reasonable device for me to use. I'm tired of being made to feel like a second class citizen in the Verizon store with my old flip phone because I just want options, and my requests are fundamental, only basic service and good performance with my phone.

That tired old argument?
I don't buy this supply side excuse. All these phones are useless without a service provider. Most are locked to providers. The manufacturers sell what the buyers want and the real buyers are the carriers, who then resell to the consumer. The carriers want to pay the leases on their new networks and maximize profits, so they need data plans. Many consumers want these features and many do not (jaymeson). My gripe is with the quality of Verizon's non-data plan phones sliding backwards...
In my business, satisfied repeat customers are the majority of clients. Did Verizon not make profit before the smartphone hype? Verizon is diversified and very large, they tend to trample the individual consumer and it's their way or the highway. I had an experience in what was called a "corporate" verizon store yesterday. I wanted to evaluate my plan and make sure they had count my promotional minutes. The new alert system I learned is based off only your plan minutes and so before knowing that I got nervous when texts came in that said that I was reaching my allotment early. I thought they dropped my promo. I went into the store to sort this out face-to-face. It was quiet, there were three salesmen standing in the corner twisting their thumbs and doing nothing while I waited half an hour to be seen by someone. After authenticating me with my account, supposedly they couldn't pull my plan up on their computer and rudely kept pounding the mantra that I had to call customer service! Total waste of my time.
I've ended up ditching Verizon and ordering a nice new out-of-contract smartphone (best bang for buck feature-wise) and it should be here in a couple days. I'm activating on a different network, not as expensive or fast, but I don't need the download speed perks and will block most of it. The prepaid as suggested by Weth provides the freedom that I want. I'm only remaining on Verizon until I get the new phone in to activate and port over my number. If I like it the business contract phones will follow.
I'm going to consider this thread closed. I learned there is NO hope for quality basic phones on verizon. Thanks for participating.

Preauth ACL for Wired guest not working

Hi Guys,
I have 5508 wireless lan controller running code 7.2. We recently implemented Wired guest access on the WLC and configured necessary changes on the switch. We also have wireless guest profile as well configured on the WLC. We have some people who usually use Jabber client for video conferencing so what we have done is we have configured a preauth acl so that if any users connect to the wireless guest profile they automatically connect to the Jabber server without going through the Web auth. We have applied the same ACL in the Wired guest profile as well but the problem is that Jabber is not able to connect unless we manually go through web browser and then authenticate, but it is working normally for wireless guest access without the web authentication. Let me know if this is some kind of bug or a known issue which can fixed in some way. Thanks in advance
- Krishna

Krishna:
Can you please confirm if other type of traffic (other than jabber traffic) is allowed by the pre-auth ACL?
try - for testing - to allow traffic -by same ACL - to some other destination and try via normal user to ping to open whatever session with that destination.
let me know if that works or not.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

Allowed ports in ACLs for Wireless IP-Phones

Similar Messages

Maybe you are looking for