Ap521 - 802.1x LEAP - with IAS ?

Hi there,
I wanted to do 802.1x PEAP with my AP521 in standalone access-point. unfortunetely.. in the data sheet it seems to support only LEAP with AP521.
http://www.cisco.com/en/US/prod/collateral/wireless/ps7306/ps7319/ps7338/product_data_sheet0900aecd8060c220.html
LEAP
Dynamic-WEP
Open-EAP Network-EAP
So, as I have Microsoft IAS, I was trying to figure out if LEAP is supported ... it seems that officialy not :
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00805e8297.shtml
and from microsoft also
http://technet.microsoft.com/en-us/library/cc785368(WS.10).aspx
But, some people on forum said there is some things you can do to make it work...
https://supportforums.cisco.com/message/1295984#1295984
By default, the access point sends reauthentication requests to the authentication server with the service-type attribute set to authenticate-only. However, some Microsoft IAS servers do not support the authenticate-only service-type attribute. Changing the service-type attribute to login-only ensures that Microsoft IAS servers recognize reauthentication requests from the access point. Use the dot11 aaa authentication attributes service-type login-only global configuration command to set the service-type attribute in reauthentication requests to login-only.
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a00802091b1.html
What Do you Think ?? did you guys done that ?
thanks

Phillippe,
PEAP is supported through the APs which is most likely what you will use in a Microsoft environment. This is covered under the Open-EAP heading.
--Jesse

Similar Messages

LEAP with CKIP Encryption?

Is it possible, to use LEAP with CKIP Encryption?
At the moment I use 802.1X with LEAP Authentication, but then only Static WEP is available as encryption.
I read somewhere in the documentation that at the moment only static CKIP is available.
Does this mean, that 802.1X (LEAP) with CKIP will be available in a future release?
At the moment I use 4402 with 4.0.179.8
Regards,
Christian...

LEAP with CKIP requires security combination requires 12.2(11)JA or later.It is supported on Windows 95/98, Me, NT, 2000, XP, Windows CE, Mac OS X, Linux, DOS.Refer URL
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a00804e7d09.html

IPhone Wi-Fi: WEP, 802.X, LEAP???

At work, the Wi-Fi network is like:
WEP
802.X
LEAP
On my laptop, when logging on to the wi-fi, the username is like so: domain\username
Is 802.X only supported under WPA encryption and not WEP? If so, does that mean I'm more or less screwed when it comes to my work wi-fi. I can't get any reception from ATT in the building I work in, so wi-fi would be nice
I've messed around with the confi utility and I still can't get it to log on...any help would be appreciated. Thanks!!

The "domain" used for windows login is not the same as domains for DNS so you don't need to do anything about the DNS or DHCP settings.
You should try your username both ways:
Username
OR
Domain\Username
Both are possible, it depends on the local setup of your network. Your local IT people will know the right authentication credentials to use. Many companies set up LEAP authentication based on your windows network login credentials but it doesn't have to be done that way.

ADF from JDeveloper 10.1.2 not compatible with iAS 9.0.1

Hi,
We developed an ADF Application with JDeveloper 10.1.2 and we use the ADF interMedia domains (e.g. oracle.ord.im.OrdDocDomain). The application runs fine in JDeveloper, but doesn't run on our iAS 9.0.4.1. We get the following exception:
java.lang.NoClassDefFoundError: oracle/sql/DatumWithConnection
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:219)
at oracle.jbo.common.java2.JDK2ClassLoader.loadClassForName(JDK2ClassLoader.java:38)
at oracle.jbo.common.JBOClass.forName(JBOClass.java:161)
at oracle.jbo.common.JBOClass.findDataClass(JBOClass.java:203)
at oracle.jbo.server.AttributeDefImpl.initFromXML(AttributeDefImpl.java:2061)
at oracle.jbo.server.AttributeDefImpl.loadFromXML(AttributeDefImpl.java:2013)
at oracle.jbo.server.EntityDefImpl.loadAttribute(EntityDefImpl.java:2815)
at oracle.jbo.server.EntityDefImpl.loadAttributes(EntityDefImpl.java:2779)
at oracle.jbo.server.EntityDefImpl.loadFromXML(EntityDefImpl.java:2362)
at oracle.jbo.server.EntityDefImpl.loadFromXML(EntityDefImpl.java:2106)
at oracle.jbo.server.MetaObjectManager.loadFromXML(MetaObjectManager.java:514)
[...rest of stacktrace omitted ...]
The problem is that the JDBC version of the iAS 9.0.4.1 is missing the class DatumWithConnection that is indirectly referenced by the interMedia classes supplied with JDeveloper 10.1.2.
In detail, oracle.ord.im.OrdDoc uses oracle.sql.STRUCT. The inheritance hierarchy of STRUCT is different in the JDBC versions on iAS 9.0.4.1 (oracle.sql.Datum <- oracle.sql.STRUCT) and JDeveloper 10.1.2 (oracle.sql.Datum <- oracle.sql.DatumWithConnection <- oracle.sql.STRUCT). The class file of oracle.ord.im.OrdDoc (from 10.1.2. JDeveloper) was apparently compiled the new JDBC driver version since it contains a reference to oracle.sql.DatumWithConnection. And that class cannot be found if run on iAS 9.0.4.1 with its old JDBC version.
I think this is a very serious problem, since it means that ADF from JDeveloper 10.1.2 is not compatible with iAS 9.0.4.1, in contradiction to the support matrix (http://www.oracle.com/technology/products/jdev/collateral/papers/10g/as_supportmatrix.html).
Upgrading the JDBC Driver on the iAS seems to be the only clean solution for this problem (we also tried using old versions of the ordim.jar etc. but that always leads to other problems). But simply exchanging the JDBC jar-files on the server breaks the Enterprise Manager on our iAS installation.
I have two questions:
1) Is there a recommended workaround for the compatibility issue described above?
2) Is there a documented and supported way to upgrade the JDBC driver of iAS 9.0.4.1? I searched OTN and MetaLink and haven't found anything about this.
Kind Regards,
Kay
P.S. It is surprising that this problem is rarely mentioned in the OTN forums at all. The only relevant thread is on the JHeadstart Forum:
JHeadstart Deployment Issue
P.S.2
More info on what we tested:
We have thoroughly checked that the 10.1.2. ADF runtime was correctly deployed on our iAS 9.0.4.1. We installed a OC4J 9.0.4.0.0 standalone on the same linux machine as our iAS 9.0.4.1 and deployed our application on it, getting the same error (java.lang.NoClassDefFoundError: oracle/sql/DatumWithConnection) as on the iAS. Replacing the JDBC drivers of the OC4J standalone with the version that came with JDeveloper 10.1.2 solved the problem.

I don't think that mixing classes from different jar file is a good idea. Nevertheless, we tested this approach already. Adding the DatumWithConnection.class from the 10.1.0.3.0 JDBC version to the jar file of the original JDBC version (of the iAS 9.0.4.1.0) caused a java.lang.VerifyError to appear.
The DatumWithConnection class is not simply added in the newer JDBC version. It is inserted into the inheritance hierarchy of oracle.sql.STRUCT and oracle.sql.Datum. Simply providing the new class next to the old JDBC driver will not work.
To give more information about what's wrong with updating the complete JDBC driver, I justed tested it again. To update the JDBC driver I stopped the server, changed the contents of jdbc/lib, started the server. I tried it with JDBC Version 9.2.0.5 as well as 10.1.0.3.0.
In both cases, our own application works, i.e. no more NoClassDefFoundError caused by oracle.sql.DatumWithConnection.
The Enterprise Manager shows strange behaviour, however. Some features work as usual but, for example, when I click on the "Applications" tab for our OC4J instance, we just get the following error shown in the browser:
An error was encountered while loading page. Failed to initialize configuration management user session.. See base exception for details.
Root Cause: TDU
Resolution: See base exception for details.. TDU
In one of the server logs I found the following stacktrace:
java.lang.NoSuchFieldError: TDU
 at oracle.net.resolver.NavDescription.navigate(Unknown Source)
 at oracle.net.resolver.NavServiceAlias.navigate(Unknown Source)
 at oracle.net.resolver.AddrResolution.resolveAddrTree(Unknown Source)
 at oracle.net.resolver.AddrResolution.resolveAndExecute(Unknown Source)
 at oracle.net.ns.NSProtocol.establishConnection(Unknown Source)
 at oracle.net.ns.NSProtocol.connect(Unknown Source)
 at oracle.jdbc.ttc7.TTC7Protocol.connect(TTC7Protocol.java:1777)
 at oracle.jdbc.ttc7.TTC7Protocol.logon(TTC7Protocol.java:215)
 at oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:365)
 at oracle.jdbc.driver.OracleDriver.getConnectionInstance(OracleDriver.java:547)
 at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:347)
 at java.sql.DriverManager.getConnection(DriverManager.java:512)
 at java.sql.DriverManager.getConnection(DriverManager.java:171)
 at oracle.context.isearch.admin.users.InstanceManager.getSchemaConnection(InstanceManager.java:688)
 at test.admin__status._jspService(_admin__status.java:112)
 at com.orionserver[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
 at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:349)
 at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:509)
 at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:413)
 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:765)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:317)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:793)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:208)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:125)
 at com.evermind[Oracle Application Server Containers for J2EE 10g (9.0.4.1.0)].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
 at java.lang.Thread.run(Thread.java:534)
Kind Regards,
Kay

OLM on content server with ias (10.1.3) java.lang.OutOfMemoryError

Dears,
we have set up OLM on content server with ias (10.1.3)
I'm Facing the following error when uploading 100 M learning material although i have changed the server properties of OC4J java heap size to 1024 - 2048 and maxpermsize to 1024
JSP Error:
Request URI:/OA_HTML/OA.jsp
Exception:
java.lang.OutOfMemoryError
Thanks,
Regards.

PLease refer Husain comments below
"Please see these docs.
OLM Content Import Erroring with java.lang.outofmemoryerror for Large Files [ID 368479.1]
When Importing And/Or Uploading Large Upk-Type Files Fail to Unzip [ID 735653.1]
Out Of Memory Errors While Uploading Large Content [ID 1130960.1]
Utilizing Content Servers with Oracle Learning Management [ID 374677.1]
Thanks,
Hussein"
apart from the above what I would normally is, while zipping the file I would exclude heavy content file and upload the file.
after uploading file, just go and paste excluded file in respective folder.
sathish

Installing linux O.S. for working with IAS 10gR2 and DB11g

Hi all.
I have a Dell server with linux enterprise 5.5, but I want to re install all, reformat ,
because I need to learn how to.
how decide which O.S install if I will use it with IAS 10g and Database 11g ?
best regards

toga wrote:
Hi all.
I have a Dell server with linux enterprise 5.5, but I want to re install all, reformat ,
because I need to learn how to.
how decide which O.S install if I will use it with IAS 10g and Database 11g ?
best regardsInstall the OS the product you have is certified for.
Or install the product that is certified for the OS you have.

What's the Portal bundled with ias 10.1.2.0.2 ? 10.1.2.0.1 or 10.1.2.0.2 ?

My Holy Graal is to upgrade Portal 10.1.4...
OUI claims I'm running
<ul>
<li>Oracle Application Server 10g 10.1.2.0.2 in one home (AS)</li>
<li>Oracle Portal 10g 10.1.2.0.1 under that same home</li>
</ul>
(I installed the AS home only for the Portal and the install went like a breeze).
However, when I display the [WEB] Enterprise manager home page it says :
Version : 10.1.2.0.2
Installation Type :Portal and Wireless
My install is :
<ul>
<li>One home with DBMS 10.1.2.0.1</li>
<li>One home with MRCA 10.1.2.0.2</li>
<li>One home wiith OIM 10.1.2.0.2</li>
<li>One home with AS 10.1.2.0.2</li>
</ul>
I was going to go straight to the portal upgrade and decided to look up the exact Portal version number through OUI. I wish I hadn't !!!
Can somebody confirm I do NOT need to apply 10.1.2.1 despite the
<a style="color:#0000ff" href="http://www.oracle.com/technology/products/ias/portal/html/upg_1014_1012_intro.html#SupportedVersions">
Warning</a> on the upgrade page. In other words that the Portal version bundled with ias 10.1.2.0.2 is 10.1.2.0.2 (and that OUI is wrong to claim otherwise).
Thx in adv
Alain Pannetier

I've upgraded yesterday night and all went well !
Except that the precheck detected that my repository db's aq_tm_processes was still unset.
I must have changed the current value only at install time (now it's also in the spfile).
 
The good thing is that you can run the upgrade script a second time and that it detects the already successfully executed steps.
So basically found the mrua its shrubbery ;-)
A

802.1x authentication with ACS 4.1 for MAC OSX

Hi,
I simply wanted to know if it's possible to have 802.1x authentication with MAC OSx on ACS Plateform 4.1?
If yes, what pre-required on ACS and MAC OSx? Methods of authentification which are recommended ?
I'm sorry, but i don't find documents which show validated test on 802.1x implementation method on ACS 4.1 with MAC OSx supplicant.
Thanks in advance
Best regards
Thanks

Yes, Refer to the below DOC
http://support.apple.com/kb/HT2717
Port settings and ACS configuration remain the same as you do it for windows based clients

802.1x RADIUS with EAP-TLS/EAP-TTLS & Dynamic VLAN Assignment

Hello, My team is looking for switches supporting 802.1x authentication on either EAP-TTLS or EAP-TLS protocols with dynamic vlan assignment enabled for these. Looking at the data sheets of the Linksys desktop switches, I found only SLM224G4PS and SLM224G4S models to support EAP-TLS or EAP-TTLS. Am I right? Do they support Dynamic VLAN Assigment for either of those protocols? This is not explicitly mentioned in the data sheets, and I happen to find switches from other manufacturers that announce to support EAP-TLS/EAP-TTLS but no dynamic vlan assignment. Thank you for any help.

SLM switches do support 802.1x RADIUS with EAP-TLS/EAP-TTLS unlike the SRW switches which support MD5. But I don't think that they support Dynamic VLAN.

802.1X Authentication with InTouch

Dear Community,
does anybody know if/when it's possible to use 802.1X authentication with the TelePresence InTouch 10?
It perfectly works on the C/SX codecs and as long as the Panels are connected directly to the Codec, there is no issue. But on some codecs, direct pairing is not possible and therefore I would need 802.1X authentication from the panels itself.
Thanks in advance!
Best regards
Alex

Hello!
We've just launched an Ask the Expert event on 802.1x
https://supportforums.cisco.com/discussion/12463991/ask-expert-8021x-configuring-and-troubleshooting-javier-henderson
Perhaps post your question with Javier as well!
Thank you!

802.1x authetication with dynamic Vlan assignment by a radius server

Hi
At school I want to start using 802.1x authentication with dynamic Vlan assignment by a Windows Server 2012R2 Radius server.
When a student logs in, I want it to be placed in the "Students" Vlan, when a Administrative employee logs in, I want it to be placed in the "Administative" vlan and when the client is unknown I want to place it in the "Guest" Vlan.
I have several SG200 switches and I configured everything as mentioned in the administrative guide but I cannot get it to work as desired.
What does work:
- If the client is permitted, the switch changes to "authorized" state. (before anyone logs on to the domain with that client)
- When a User logs on that is part of the Administrative employees, the switch changes to "authorized" and when a student logs on, it changes to "unauthorized".
So far so good.
But what doesn't work:
- it does not put the administrative employee in the Vlan "Administrative", it just enables the port on the switch but leaves it in the default vlan 1.
- I can not find the Guest VLAN.
Any help would be appriciated.

Hi Wouter,
Can you see in the packet capture Radius accept message VLAN attribute? Also please ensure you have the latest firmware and boot code:
http://www.cisco.com/c/en/us/support/switches/sg200-26-26-port-gigabit-smart-switch/model.html#~rdtab1
I would recommend you to open ticket with Small Business team so they can go with you through packet capture and configuration steps:
http://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html
Regards,
Aleksandra

JSP1.1 only with iAS/817??

Am I reading this wrong or is OracleJSP1.1 implementation only available with iAS or 817
Dissapointing you guys didnt release it here first on technet, been waiting for an upgrade to a JSP1.1 implementation for months whilst others said to give up and go for Jakarta and then when it comes its tied to new products
Rob

I've upgraded yesterday night and all went well !
Except that the precheck detected that my repository db's aq_tm_processes was still unset.
I must have changed the current value only at install time (now it's also in the spfile).
 
The good thing is that you can run the upgrade script a second time and that it detects the already successfully executed steps.
So basically found the mrua its shrubbery ;-)
A

JDBC-ODBC Bridge with iAS on UNIX

Can the Sun JDBC-ODBC bridge be used with iAS on UNIX (Solaris)? If possible, can someone share the basic steps. For example, what parameters to enter when configuring the bridge as a datasource and also how to pass needed environment variables (LD_LIBRARY_PATH has to have the path of the ODBC driver manager).
I need to connect to a ODBC driver on UNIX, no JDBC driver is available for this data source, nor is a Windows solution acceptable.
I have iAS 6.0 SP3 with iWS 4.1 SP9 on Solaris 8.

Hi,
I'm not sure if there is a free download available, but you can find some help by visiting the following URL http://www.dbmaker.com/Header/Frame_Forum.htm
For the exact steps, I think this would be more helpful http://www.dbmaker.com/reference/technotes/jdbc.html
Please let me know if this helps.
Regards
Raj

Configuring Web Server (IWS 6.0) on separate machine with IAS 6.0 SP3 (test drive)

Hi All,
I want to install the application server (IAS 6.0 SP3) on a Unix (Solaris 8)
server and web server (IWS 6.0) on another Windows NT server, in another
words a webless installation.
I have installed the IWS 6.0 on the NT machine and IAS 6.0 SP3 on the Unix
server successfully, but am having problem on the NT machine because the NT
version of the IAS 6.0 SP3 Evaluation doesn't allow installation of just the
web connector, and so I installed the whole package and then tried to
manually change the configuration so that hopefully it will marshall the
requests to the IAS installed on the Unix server. I couldn't get it to work
and it is giving an error that says
GX Error (GX2GX)
socket result code missing!!!
Have anyone else come across this scenario? I will appreciate it if you
could enlighten me on how it can be done. Thanks in advance.
Christopher Lam

Hi,
You donot have any option to choose a perticular component with iAS testdrive on
NT. So, you can not install only plugin at the webserver end.
I think manual editing doen not help. Can you please let me know what
modifications have you done clearly.
Thanks,
Rakesh,
Developer-Support, iAS.
"Christopher Lam (IseafoodXchange)" wrote:
Hi All,
I want to install the application server (IAS 6.0 SP3) on a Unix (Solaris 8)
server and web server (IWS 6.0) on another Windows NT server, in another
words a webless installation.
I have installed the IWS 6.0 on the NT machine and IAS 6.0 SP3 on the Unix
server successfully, but am having problem on the NT machine because the NT
version of the IAS 6.0 SP3 Evaluation doesn't allow installation of just the
web connector, and so I installed the whole package and then tried to
manually change the configuration so that hopefully it will marshall the
requests to the IAS installed on the Unix server. I couldn't get it to work
and it is giving an error that says
GX Error (GX2GX)
socket result code missing!!!
Have anyone else come across this scenario? I will appreciate it if you
could enlighten me on how it can be done. Thanks in advance.
Christopher Lam

EAP-TLS with IAS

Hi, has anyone got some good documentation on setting up EAP-TLS with windows 2003 Active Directory/CA, IAS and Cisco AP1200.
Cisco ACS 3.3 does not support NTLMv2 so I have to use IAS.
Any suggestions?

Hi,
I give you a good documentation explaining how to implement EAP-TLS with IAS (But it is not a AP1200)
Regards,
Davy

Ap521 - 802.1x LEAP - with IAS ?

Similar Messages

Maybe you are looking for