APPLSYSPUB and GUEST

Hi everyone, i have a doubt about these 2 users (APPLSYSPUB and GUEST).
When an user wants to connect to EBS, the user put his password and login, so the EBS create a connection to database with the user APPLSYSPUB for getting information about the user APPS and the responsabilities of this user of EBS. Then then user is inside of EBS.
But i don't know where the user GUEST works here?, because i have read too that this user is part of process of login, but i don't understand how the GUEST can validate a login process.
Thank you very much if somebody can help me with the doubt.

Please see old threads since we discussed this topic many times in the forum before.
http://forums.oracle.com/forums/search.jspa?threadID=&q=GUEST+AND+Account&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
http://forums.oracle.com/forums/search.jspa?threadID=&q=APPLSYSPUB+AND+Account&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Similar Messages

  • Timed Access controlling Main and Guest Network

    I have a Time Capusle 4G running software v7.5.2. I am running a Guest Network as well as a closed network.
    In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. My guest network is broadcasting but when a user tries to connect to it, they get an "Unable to connect" message. If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
    Obviously, this is a bug/missing feature and has been for several software revisions. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network, without using MAC address filtering on the Guest Network.
    It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network. Which renders the Guest Network feature pretty much useless.
    Hopefully this will be addressed in the near future. If other people are experiencing this problem, Please let me know.
    -Ghost

    It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network.
    Your observation is correct. Access control using Timed Access is an ALL or NOTHING feature for both the Main and Guest networks. The Guest network is basically a VLAN function.

  • File transfer problem between Host OS and Guest OS

    Hi,
    I have WIndows7 32 bit as a host OS in C drive. and i have installed the Virtualbox in D drive and installed CentOS 6 in virtual box as a guest OS.
    After installing the Guest Additions in CentOS and set the Drg n Drop-Bidirectional. it permits to create shared folder in CentOS but i am not able to drag n drop to any file from host to guest and vice versa.
    Also when i plug the pendrive it copy the partially data in guest OS then it show unpluggeed automatically in guest OS. It copy only .rpm file in guest OS (CentOS)
    please suggest how to copy the file from Host OS to guest OS and vice versa.
    I have installed VirtualBox-4.3.20-96997. i have installed also Oracle_VM_VirtualBox_Extension_Pack-4.3.20-96996.vbox-extpack on windows ( on host OS).
    Thanks.

    The following is from the virtualbox user manual:
    Drag’n’Drop This setting allows to enable Drag and Drop: Select a file on the desktop, click the left mouse button, move the mouse to the VM window and release the mouse button. The file is copied from the host to the guest. This feature is currently only implemented for Linux guests and only for copying files from the host to the guest.
    I guess that explains your experience with Drag'n Drop.
    Regarding USB and the pen drive, you cannot access a USB device in the host and guest OS at the same time. The technology does not support this. You will either have to capture the device to be used/mounted in the host or guest OS. Unless you configure the USB device in the virtual machine settings, the device will normally be captured by the host OS and become inaccessible by the guest OS.
    To copy files between Windows and a VirtualBox Linux guest you can use Putty and it's pscp.exe to copy files from Windows to Linux and vise versa. You may have o enable SSH on your Linux side. There was a post here yesterday, please check the last forum discussions. Alternatively you can also use WinSCP if you want a GUI tool.

  • ISE and Guest Portal

    WLC - 7.2.110.0
    ISE - 1.1.1
    I'm new to ISE. I want to set up a very basic method for BYOD users to access our wireless network. I've set up an SSID for external Web Auth, where users get redirected to the ISE Guest Portal: https://1.2.3.4:8443/guestportal/Login.action
    At that screen, users can enter their Active Directory credentials and login. Although the authentcation shows as successful under Operations -> Authentications, the user is redirected to the device registration page. On that page they see the message "We are unable to determine access privileges in order to access the network. Please contact your administrator." Their device MAC is listed, and they can enter a description but the "Register" button is greyed out.
    I'm getting overwhelmed with the amount of documentation available as well as the new terminology. I'm familiar with using Windows RADIUS servers, but ISE is very foreign to me now. Is there any documentation to help me understand how access requests are processed?

    As you asked the documents related to ISE and Guest Portal. I am sending you two docs which will help you in this case. Please find the below documents:
    http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html
    http://www.cisco.com/en/US/docs/security/ise/1.0.4/user_guide/ise10_guest_pol.pdf

  • Current best practice for Time service settings for Hyper-V 2012 R2 Host and guest OS's

    I am trying to find out what the current best practice is for Time service settings in a Hyper-V 2012 environment. I find conflicting information. Can anyone point me in the right direction. I have found some different sources (links below) but again the
    are not consistent. Thanks
    http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/11/19/time-synchronization-in-hyper-v.aspx
    http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(v=ws.10).aspx
    http://social.technet.microsoft.com/wiki/contents/articles/12709.time-services-for-a-domain-controller-on-hyper-v.aspx

    From the first link provided by Brian, it does state that the time service should be off, but then the update changes that statement.  Still best to rely on the first link in the OP - it was written by the guy that has been responsible for much of what
    gets coded into Hyper-V, starting from before there ever was a Hyper-V.  I'd say that's a pretty reliable source. 
    Time service
    For virtual machines that are configured as domain controllers, it is recommended that you disable time synchronization between the host system and guest operating system acting as a domain controller. This enables your guest domain controller to synchronize
    time from the domain hierarchy.
    To disable the Hyper-V time synchronization provider, shut down the VM and clear the Time synchronization check box under Integration Services.
    Note
    This guidance has been recently updated to reflect the current recommendation to synchronize time for the guest domain controller from only the domain hierarchy, rather than the previous recommendation to partially disable time synchronization between the
    host system and guest domain controller.
    . : | : . : | : . tim

  • VLAN Configuration for Internal and Guest Wireless

    Hello,
    We are using the following hardware…
    SG300-52MP switch -- latest firmware
    ASA 5512-X firewall -- 9.1
    Aironet AP1131AG WAP
    We have the following networks…
    10.252.4.0/24 = Internal = ASA-01 interface = VLAN1
    10.252.6.0/24 = Guest = ASA-02 interface = VLAN6
    10.252.6.0/24 = VOIP = ASA-03 interface = VLAN3
    The Aironet supports two SSIDs, Secure (RADIUS) and Guest (WPA2), which are supposed to provide access to the appropriate interface on the ASA.
    Relevant parts of the WAP configuration are…
    dot11 ssid GUEST
       vlan 6
    dot11 ssid SECURE
       vlan 1
    interface Dot11Radio0
    no ip address
    ssid GUEST
    ssid SECURE
    interface Dot11Radio0.1
    encapsulation dot1Q 1 native
    no ip route-cache
    bridge-group 1
    interface Dot11Radio0.6
    encapsulation dot1Q 6
    no ip route-cache
    bridge-group 255
    interface Dot11Radio1
    no ip address
    no ip route-cache
    ssid GUEST
    ssid SECURE
    interface Dot11Radio1.1
    encapsulation dot1Q 1 native
    no ip route-cache
    bridge-group 1
    interface Dot11Radio1.6
    encapsulation dot1Q 6
    no ip route-cache
    bridge-group 255
    interface FastEthernet0
    no ip address
    no ip route-cache
    interface FastEthernet0.1
    encapsulation dot1Q 1 native
    no ip route-cache
    bridge-group 1
    interface FastEthernet0.6
    encapsulation dot1Q 6
    no ip route-cache
    bridge-group 255
    interface BVI1
    ip address 10.252.4.4 255.255.255.0
    no ip route-cache
    ip default-gateway 10.252.4.1
    We can manage the WAP through it’s Internal IP address (10.252.4.4).
    And the “Guest” wireless network is working -- connecting to that SSID provides the client with the correct IP addressing (10.242.6.X from VLAN6/ASA-02).  [Note:  the VOIP DHCP and network access also works correctly.]
    The “Secure” wireless network is not working however -- the client never receives an Internal DHCP address from ASA-01, and even if you hard-code the client’s IP, no IP4 traffic ever passes.
    [Note:  connecting a device to a SG300 port with the “Default” configuration provides the client with an Internal DHCP configuration, and it works as intended.] 
    While this may be a problem with the WAP configuration, I would like to confirm that it is not an issue with the switch not passing traffic correctly.
    I have a feeling that I have configured the VLANs on the ports incorrectly.
    Relevant parts of the SG300 configuration are...
    v1.3.0.62 / R750_NIK_1_3_647_260
    vlan database
    vlan 3,6
    ip dhcp snooping
    ip dhcp relay address 10.252.4.1
    ip dhcp relay enable
    bonjour interface range vlan 1
    interface vlan 1
    ip address 10.252.4.2 255.255.255.0
    no ip address dhcp
    interface vlan 3
    name VOIP
    interface vlan 6
    name Guest
    interface gigabitethernet45 -- Access mode, Untagged VLAN6
    description ASA-Guest
    ip dhcp snooping trust
    switchport mode access
    switchport access vlan 6
    interface gigabitethernet46 -- Access mode, Untagged VLAN3
    description ASA-VOIP
    ip dhcp snooping trust
    switchport mode access
    switchport access vlan 3
    interface gigabitethernet47 -- Trunk mode, Untagged VLAN1 and Tagged VLAN6
    description WAP1
    switchport trunk allowed vlan add 6
    interface gigabitethernet48 -- Trunk mode
    description ASA-Internal
    ip dhcp snooping trust
    ip dhcp relay enable
    Can someone who understands this switch better than I do please confirm the VLAN configuration?  THANK YOU!

    Welcome to the discussion area!
    +PCI regulations do not consider VLAN a secure way of keeping the data isolated. Does anyone have any technical information on how the device creates the guest wireless network ?+
    I spoke to Apple Support some time ago and was told that Apple uses VLAN to create the Guest network, and also that formal documentation was not available on this topic. I was referred to the AirPort Extreme Specifications for available information.
    This was some time ago, so if you need more up to date info, you might want to try to contact Apple to see if they are willing to share more information about this feature. Although, since VLAN is used, your question may already be answered.
    FWIW, to use the Guest Network feature in a home situation, the AirPort Extreme must be set up as the main router controlling DHCP and NAT on the network. If you were thinking of installing the AirPort Extreme behind another router, the Guest Network feature would not be available in this type of configuration.

  • Poor disk io thourghtput on OVM and guest VM

    We are using DELL R720 with H710 raid controller.
    A wired problem about the disk io was discovered during tests.
    We found that the disk throught on VM server(OVS repo) and VM guest are only about 1/3 of the physical server, around only 50M/s.
    We are tring to compare disk io write with simple dd instruction on following enviroments with same hardware
    The test cases are:
    (H710, 2T 7200rpm * 8 configured with RAID10 as two virtual disks, first for ovm, second for OVS repo)
    1. Centos 6 installed directly
    2. OVM 3.2.1, sda
    3. OVM 3.2.1, /dev/mapper/36848f690ec834b0018df77d30704a452 (used by OVS repo)
    4. Guest vm Oracal Linux 6.0 on OVM 3.2.1,pvm (using local physical disk as OVS repository)
    The result is:
    1.Centos 6 installed directly
    dd if=/dev/zero of=~/a.out bs=16k count=20000 oflag=direct
    20000+0 records in
    20000+0 records out
    327680000 bytes (328 MB) copied, 1.85022 s, 177 MB/s
    2. OVM 3.2.1, sda
    dd if=/dev/zero of=~/a.out bs=16k count=20000 oflag=direct
    20000+0 records in
    20000+0 records out
    327680000 bytes (328 MB) copied, 2.5659 seconds, 128 MB/s
    3.OVM 3.2.1, /dev/mapper/36848f690ec834b0018df77d30704a452
    dd if=/dev/zero of=/OVS/Repositories/0004fb00000300000102bf00d2adeb8a/a.out bs=16k count=10000 oflag=direct
    10000+0 records in
    10000+0 records out
    163840000 bytes (164 MB) copied, 3.00933 seconds, 54.4 MB/s
    4. Guest vm Oracal Linux 6.0 on OVM 3.2.1,pvm
    dd if=/dev/zero of=~/a.out bs=16k count=20000 oflag=direct
    20000+0 records in
    20000+0 records out
    327680000 bytes (328 MB) copied, 7.60928 s, 43.1 MB/s
    We can see that on pure Centos 6 we got the reasonable disk io, on OVM sda the score is slower but still acceptable.
    But on OVM disk and guest VM, we saw a big drop.
    An interesting thing is : I have 3 guest vms on this vm server, when I run a same dd command samultaniously on 3 guest vms, I can still
    get the same score. Adding them together we get a 120+ MB/s throughput.
    I guess the reason might be that OVS put a io threshold on both OVS and each vms on it to make sure no single vm can drain up all disk io
    in order to preserve some to other vms ?
    I plan to use mongo db on the guest vm if the io is close to the real machine, could anyone please help me improve the disk io ?
    thanks a lot!
    Edited by: user12945979 on 2013-5-1 上午9:21
    Edited by: user12945979 on 2013-5-3 上午5:10
    Edited by: user12945979 on 2013-5-3 上午5:14

    Thanks for your advice,
    I followed played below tests against physical server(Centos6) and Oracal vm guest server(OL6,pvm).
    fio -filename=/srv/test.out -direct=1 -rw=randwrite -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio -filename=/srv/test.out -direct=1 -rw=randread -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio -filename=/srv/test.out -direct=1 -rw=randrw -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio -filename=/srv/test.out -direct=1 -rw=read -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio -filename=/srv/test.out -direct=1 -rw=write -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio -filename=/srv/test.out -direct=1 -rw=read -bs=4k -size=2g -numjobs=8 -runtime=60 -group_reporting -name=test
    fio version is 2.0.13
    The results shows random read on VM guest matches about 60% of physical server, and random write about 90%.
    But sequential read only counts about 42% and write 35%.
    I am not sure if the big drop on sequential read/write performance is reasonable. Maybe I did something wrong ?
                             Physical     VM guest
    randwrite(4k,60s)     write iops     2385          2114
                   bw(k)          9542          8456
    randread(4k,60s)     read iops     1455          838
                   br          5822          3352
    randrw(4k,60s)          read/write iops     791/794          569/565
                   b r/w           3167/3176     2278/2260
    write(4k,60s)          write iops     14465          5114
                   bw(k)          57864          20457
    read(4k,60s)          read iops     48870          20985
                   br           195483          83940
    Edited by: user12945979 on 2013-5-3 上午5:16

  • Why can't I assign hardware and guest os profiles to servers in the new SCVMM 2012 Service Templates?

    Trying to learn SCVMM 2012, but I'm confused about how Guest OS and Hardware Profiles work with the new 2012 Service Templates.
    I create a Hardware Profile and a Guest OS Profile. Then I open the Create VM Template wizard. In this wizard I can assign the Hardware and Guest OS profiles I created under the Configure Hardware and Configure Operating System steps in the wizard.
    If I open the new Service Template wizard, select a Single Tier Server (for example), open the Service Template Designer and go to the properties of the server I find under Hardware Configuration and OS Configuration I cannot assign my Hardware and Guest OS
    profiles to the server.
    Why is this? It seems like extra work to have not be able to assign these profiles to servers in a service template. Is there something fundamental I'm missing here?

    I have the same issues with the equipment I maintain. Two things are consistent that I see between this forum and my set up. I had 10.5 on all our Macs and each of them could connect with out issue to the shares on a windows xp machine. I have three Mac computers I am working with. 1. My main computer a MacBook Pro 2.4ghz core 2 duo, an Intel iMac, and an older Mac Pro G5 running OS 10.5 server.
    I have another server running kiosk or signage displays that is a windows xp machine. All of my macs could access the windows xp machine by clicking on it and authenticating to it and then the shares will show up.
    I upgraded my MacBook Pro first to 10.6 and have been unable to connect to the windows shares ever since. Keep getting Authenticatoin failure. So my work around is to transfer files to the 10.5 macs and then screen share one of them and access the windows share from them. Spoke with Apple support and they could not help and said it was a know issue but did not have a solution.
    Last week I upgraded the iMac to 10.6 and it too, now will not authenticate to the windows shares.
    Here are the strange things... I can take my macbook pro home and access all windows shares on my home networked computers. I even took the windows xp machine home from work to test it and I was able to connect to the shares without issue from my Macbook pro.
    Two things stand out ... you mentioned a Cisco router and we use a Cisco router at work. Also, both of us have upgraded to 10.6 and authentication fails at that time.
    Problem is between OS 10.6 and the Cisco routers I believe. I am not sure how to fix the issue though.

  • WCS and Guest IP addresses

    Hi,
    I have both corporate and guest WLANs available, the corporate infrastructure is 2 x WiSM modules with guest access via a 4402 anchort point controller.  When I view client connections in WCS, I see the DHCP address all corporate users have been allocated, but all guest users show up with IP address 0.0.0.0.  The guest users are allocated a DHCP address via a local pool defined on the anchor point controller.
    Is there any way I can see the IP address of each guest user?
    Many thanks
    Liam

    Hi,
    Clients get DHCP adderss no problem from local pool configured on anchor point controller.  The issue I am facing is that this IP information is not tunnelled through to WiSM module - if I check client details on anchor controller, it shows the IP address allocated to each user.  When I check same info on WiSM controller, it shows every IP address for guest access user as 0.0.0.0.
    For reporting and troubleshooting purposes I am wondering if the correct IP information can be shown.
    Regards
    Liam

  • Extend both main and guest networks with a 2nd Time Capsule?

    I have a 4th generation 2TB Time Capsule set up to broadcast primary and guest networks.  I am running out of storage.  I would like to increase my storage and I would also like to extend both primary and guest networks.
    I currently use an older Linksys router (WRT330N) operating in bridge mode (wired connection to the TC) to extend the primary network, but it does not extend the guest network.
    If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
    From searching the forum, it appears not, but I'd like to confirm.  Is true for both both wireless and cabled range extension options?
    If I'm not able to extend the guest network this way, I'm inclined to settle for extending the primary network as I currently do and look for other ways to increase my network storage capacity (e.g. by upgrading the drive in my existing TC).

    If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
    Yes, either using wireless or an Ethernet connection between the two Time Capsules, providing that the 4th Gen Time Capsule is running at least firmware version 7.6.3.
    A wired Ethernet connection between the two Time Capsules is highly recommended. If you plan to extend using wireless, the second Time Capsule will need to be located where it can receive a very good signal from the first.

  • Single WLC for Corporate and Guests

    Hi, We are looking into deploying Wirelss on our corporate network. There are a few branch office and a central office, we want to use a single WLC if possible which will allow both internal and guest user traffic whilst isolating guest traffic.
    I understand there is the option of placing an Anchor WLC in the DMZ for guest traffic and an internal one, but it's a bit of overkill given the limited access required for guests at this stage.
    Is the above possible to place the WLC in the DMZ or on the internal network whilst having the guest user traffic terminate in the DMZ and isolated from internal traffic.
    The WAN to branch offices are IP WAN and is it possible to somehow bridge them back to the central office WLC?
    Thanks

    There are a lot of variables that would go into this.  In my environment, I have a 6500 and a couple of WiSM controllers.  I also have a FWSM that is seated in a different 6500.  What I did was create a vlan and map that vlan to my FWSM as a DMZ.  Then I set up the approprate firewall rules to seperate that vlan from everything else.  Then I just trunked that vlan to the 6500 that my WLCs are seated in.  I then created a dynamic interface on my WLCs that pointed to this vlan and created an SSID that was meant to be a Guest SSID using Layer 3 security (Web Auth).  Works pretty well.

  • Can Airport Express extend the private and guest networks simultaneously?

    Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously, or can it only be an extension for one of the two at a given time?
    Joe

    Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously
    Yes, either by a wireless connection or Ethernet connection to the base station.....assuming that both the base station and extender are using firmware 7.6.3 or higher and AirPort Utility 6.3 is used to configure both AirPorts, which must be dual band models.

  • AP1231G and guest ssid

    standalone AP1231G running c1200-k9w7-mx.123-8.JEC2 setup with internal SSID (VLAN 24)and guest SSID (VLAN 124). Here's the problem
    Both SSID picks up the native VLAN 1 dhcp address and not it's respective VLAN. I verify that dhcp server is working on vlan 24 and 124 on the switch but on the AP it always stays with Vlan 1. The AP can ping all vlan interface on the router. DHCP server hangs off the router.
    topology is 3725(with NMD-36-ESW port 2/2) trunk to AP. Below is the relevant configs:
    *************3725***************
    interface FastEthernet2/2
    switchport trunk native vlan 9
    switchport mode trunk
    interface Vlan1
    description Data
    ip address 10.7.1.254 255.255.255.0
    interface Vlan9
    description MANAGEMENT
    ip address 10.7.9.1 255.255.255.0
    ip helper-address 10.7.1.10
    ip helper-address 10.7.1.11
    interface Vlan24
    description WIRELESS
    ip address 10.7.24.1 255.255.255.0
    ip helper-address 10.7.1.10
    ip helper-address 10.7.1.11
    interface Vlan124
    description *****WIRELESS GUEST*****
    ip address 10.7.124.1 255.255.255.0
    ip helper-address 10.7.1.10
    ip helper-address 10.7.1.11
    **************AP CONFIGS***********
    aaa group server radius rad_eap
    server 10.0.21.121 auth-port 1812 acct-port 1813
    aaa group server radius rad_acct
    server 10.0.21.121 auth-port 1812 acct-port 1813
    aaa authentication login eap_methods group rad_eap
    aaa accounting network acct_methods start-stop group rad_acct
    dot11 vlan-name rms-guest vlan 124
    dot11 vlan-name wavenet vlan 24
    dot11 ssid rms-guest
    vlan 124
    authentication open
    authentication key-management wpa
    guest-mode
    wpa-psk ascii 7 <removed>
    dot11 ssid wavenet
    vlan 24
    authentication open eap eap_methods
    authentication network-eap eap_methods
    accounting acct_methods
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 124 mode ciphers tkip
    encryption vlan 24 mode wep mandatory
    broadcast-key vlan 124 change 360
    ssid rms-guest
    ssid wavenet
    interface Dot11Radio0.1
    description MANAGEMENT AND NATIVE
    encapsulation dot1Q 9 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio0.24
    description WAVENET SSID
    encapsulation dot1Q 24
    no ip route-cache
    bridge-group 24
    bridge-group 24 subscriber-loop-control
    bridge-group 24 block-unknown-source
    no bridge-group 24 source-learning
    no bridge-group 24 unicast-flooding
    bridge-group 24 spanning-disabled
    interface Dot11Radio0.124
    description RMS-GUEST SSID
    encapsulation dot1Q 124
    no ip route-cache
    bridge-group 124
    bridge-group 124 subscriber-loop-control
    bridge-group 124 block-unknown-source
    no bridge-group 124 source-learning
    no bridge-group 124 unicast-flooding
    bridge-group 124 spanning-disabled
    interface FastEthernet0.1
    description MANAGEMENT AND NATIVE
    encapsulation dot1Q 9 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface FastEthernet0.24
    description WAVENET SSID
    encapsulation dot1Q 24
    no ip route-cache
    bridge-group 24
    no bridge-group 24 source-learning
    bridge-group 24 spanning-disabled
    interface FastEthernet0.124
    description RMS-GUEST SSID
    encapsulation dot1Q 124
    no ip route-cache
    bridge-group 124
    no bridge-group 124 source-learning
    bridge-group 124 spanning-disabled
    interface BVI1
    ip address 10.7.9.10 255.255.255.0
    no ip route-cache
    ip default-gateway 10.7.9.1
    ip radius source-interface BVI1
    radius-server host 10.0.21.121 auth-port 1812 acct-port 1813 key 7 <removed>
    bridge 1 route ip

    Is it possible that you're VLAN hopping? VLAN 1 is normally the native VLAN, and you have VLAN 9 configured. Check your config carefully and make sure that your native VLAN on all your uplinks is consistent, assuming there are any uplinks. What you posted appears correct, though.
    Honestly, I don't see a problem with the configuration your posted. You might want to reset the device to factory defaults or upgrade the IOS to ensure it's not a bug.
    You aren't using dynamic VLAN assignment, are you?
    Let us know if you figure it out, I'm curious what's going on here :D

  • RSVP and Guest Book

    Hi all,
    Can we add RSVP and guest book, if we create a website using iWeb. Are there any private application which we can use them in same iWeb. Can we interact with our friends by the site created by iWeb.
    Thanks

    myphone2009 wrote:
    Can we add RSVP and guest book, if we create a website using iWeb.
    This may help:
    http://iwebfaq.org/site/iWeb_Guestbook.html
    myphone2009 wrote:
    Can we interact with our friends by the site created by iWeb.
    For interacting with friends, it's probably better to create a free, web-based "social networking" site here:
    http://about.ning.com/product.php
    ...and hyperlink to it from your iWeb site.

  • RADIUS and Guest accounts

    I have a Mac Pro OSX server 10.6 (OD Master) and RADIUS enabled for my (older) Airport station.
    Macbooks login to the domain, no problems so far.
    Now and then a (Windows) Guest (not a member of our domain) walks in and wants to surf the web.
    Is something like that possible?
    I configured a GUEST computer and Guest account in WM and guests can surf the web when connected to our switch by cable.
    Allowed user for RADIUS Service = 'All users and groups' but I can't get wireless connection going

    What would be the best way to take care of guest access?
    If I were designing this with the budget for the gear, I'd have an external firewall, and with subnet capabilities established via the firewall/router, or via a managed switch and virtual LANs. Subnets for your stuff, and a subnet for the guests. The WiFi would be connected in the guest subnet.
    Some firewalls have DMZ capabilities (which are typically implemented as subnets), and that would be applicable here.
    Best case, you're looking to keep the IP traffic separate.
    Local preference is to avoid running servers as firewalls.
    Options can include commercial firewalls, and open-source options built on double-NIC x86 boxes and packages such as pfSense, M0n0wall or Smoothwall.
    If you have two public static IP addresses and a somewhat restricted budget, an unmanaged switch out front (between your firewall and your ISP connection) will give you a spot to connect your WiFi device. Otherwise, you need a firewall/router with three ports: ISP, private LAN, guest WiFi. And rules to keep the guest LAN from accessing the private LAN.
    Nothing precludes running two WiFi devices in proximity, so long as they're preferably three WiFi channels apart.
    You may (will?) want to have some baseline access controls, lest some malware start up a spamming run from your guest network, or some drive-by war-driver starts messing around with your open LAN.
    Higher-end WiFi devices (check Ruckus Wireless WiFi gear, and I'd be surprised if Cisco WiFi gear couldn't) can implement this for you, but those tend to be expensive.
    And FWIW, local preference is to run WiFi as access points; as APs. (Apple calls this Bridged Mode.) That way, the network services are acquired from servers "behind" the WiFi devices.

Maybe you are looking for