Authentication with Multiple SSIDs AP521G, using Autonomous

I have an AP521G access point that I am trying to setup authentication for multiple SSIDs. One SSID is for domain users with WPA/TKIP authentication to a radius server and the other SSID is for guest to have access to Internet with no authentication. Is there a way to setup both SSIDs on the AP for this configuration?

Security option for an SSID can be unique and can be configured when you configure a SSID or under VLAN . Note that each vlan is uniquely mapped to induvidual SSID.

Similar Messages

WAP200 and .1x/radius authentication with multiple SSIDs

Apparently it's not possible to define more than a single radius server when using multiple SSIDs with WAP200. Unfortunately WAP200 doesn't add the name of the SSID as a radius attribute, so it's not possible to make distinction whether the user is trying to log in to SSID A or B. Does anyone have any ideas or workarounds for this limitation? Of course the best solution would be if Cisco/Linksys fixed the firmware so that the SSID of the logging in user would be sent to the radius server as an extra attribute or appended to the client mac address.

Security option for an SSID can be unique and can be configured when you configure a SSID or under VLAN . Note that each vlan is uniquely mapped to induvidual SSID.

Single step workflow with multiple approvers (without using a group)

Hi,
is it possible to have a single step workflow with multiple approvers without using a group? This is for a contract document.
i want to add a number of users based on particular logic. The approvers are random and do not belong to any particular group.
DO let me know if it is possible or if any of you have done that.
thanks in advance.
regards,
rubio

Hi Rubio,
I believe the behavior would be, if individual users are added as approvers then the system would require each approver to approve the document. However, if you use the user group, you could set the role so that it would be either ALL or ANY.
Regards,
Vikram

Prioritize data on one SSID on an autonomous AP with multiple SSIDs

Hello,
I have a standalone AP(AP1261N) which is configured with 3 SSIDs.I would like to prioritize any data flow on SSID 1 for example so that users on SSID 1 are always functional independent on what is happening on the other SSIDS.
Then have the SSID 2 with a lower priority and SSID 3 lowest priority.
Each SSID is associated with a vlan.
I have seen some posts describing that this can be done using QOS associated with the different vlans.
Could someone please explain how I could configure the AP to do so?
I am using Command line.
Thank you

Hi Kavi,
Here are the few important points you need to understand when it comes to Autonomous AP QoS (this is extract from the link provided by Scot in above).
The QoS implementation for wireless LANs differs from QoS implementations on other Cisco devices. With QoS enabled, access points perform the following:
•They do not classify packets; they prioritize packets based on DSCP value, client type (such as a wireless phone), or the priority value in the 802.1q or 802.1p tag.
•They do not construct internal DSCP values; they only support mapping by assigning IP DSCP, Precedence, or Protocol values to Layer 2 COS values.
•They carry out EDCF like queuing on the radio egress port only.
•They do only FIFO queueing on the Ethernet egress port.
•They support only 802.1Q/P tagged packets. Access points do not support ISL.
•They support only MQC policy-map set cos action.
•They prioritize the traffic from voice clients (such as Symbol phones) over traffic from other clients when the QoS Element for Wireless Phones feature is enabled.
•They support Spectralink phones using the class-map IP protocol clause with the protocol value set to 119.
Also it is important to understand what type of traffic get impacted by AAP QoS. When you configure AAP for QoS it will primarily affect downstream traffic from AP to Client (No control over traffic coming from wireless client to AP - where priority will determine by WMM UP of clients traffic)
As you can see in the above, only FIFO available on ethernet egress (from AP to rest of your network) & then depend on how do you configure network switch ports connected to these AP (either trust DSCP or COS) it will determine how QoS maintain within your wired network.
In unified wireless enviroment you can classify each SSID with different QoS profile (Platinum, Gold, Silver & Bronze) & control what is the max level of QoS priority packets will get in each SSID. But in autonomous world it is not straightforward like that.
HTH
Rasika

Single access point with multiple ssids and single channel possible?

Hi everybody.
I have this silly question.
Let say we have three vlans, vlan1,2,3 and they are mapped to wlans as follows:
Vlan 1 ssid1
Vlan 2 ssid2
Vlan3 ssid 3
AP --------trunk------Switchted network.
Our Ap has mobile devices in three wlans, i.e ssid1ssid2 and ssid3
Since AP uses half duplex mode, mobile devices need positive ack from ap before they can send data, therefore once channel let say channel 3( assuming 802.11b is used) can be shared by all mobile devices in three wlans.
Is my understanding correct?
Thanks and have a great weekend.

Hii ,
Yes ,that is pretty much possible as suggested by other experts on board. Depending on your access point you will have 1 (2.4 GHz) or both 2.4 & 5GHz radios.
You can configure multiple SSIDs (up to 16 ) known as MBSSID mode in autonomous environment. In Controller based architecture you can configure up to 512 WLAN (SSID) and transmit any 16 of them per AP (using AP group feature). However , it is recommended to keep multiple SSID count below 8 as for each SSID separate beacon will be sent on air which consumes more air time.
Hope this helps
Thanks
Vinay

Wireless Network Management with Multiple SSIDs in one Wireless Profile

Could anybody explain me about how Multiple SSIDs in one Wireless Network Name (Network Profile) ? Configuration will be pushed to Windows 7 Pro from Wins Server 2008 R2.
Objective: Multiple office locations will have different SSIDs and when the laptop user travels one location to another, he/she could connect to wireless networks at any offices without any configuration change but utilizing "Automatically use my Windows
logon name and password (and domain if any.)" setting in EAP MSCHAPv2 properties.
Network Name: Enterprise
SSIDS: SFO-WIFI, LAX-WIFI,CHI-WIFI,NYC-WIFI,
Network Type:Access Point
Security Type: WPA2-Enterprise
Encryption Type: AES
Network Authentication Method: Microsoft:Protect EAP(PEAP)
My question is: (1) Will Windows try all the SSIDs in order to get connected to the Wireless Network at the office? (Let's say, user is in NYC, but will Windows try to find SFO-WIFI SSID first, wait until time out, retry?, and moves on to LAS-WIFI SSID,
wait until time out, retry?, and moves on to CHI-WIFI and finally tries NYC-WIFI SSID and found the SSID in the beacon from Access Point and authenticates through RADIUS?
(2) If the answer is YES, what is the waiting time/timeout setting for one SSID before moves on to another?
(3) If the answer is NO, what is the process to get user connected to NYC-WIFI SSID when he/she is in NYC office within the range of that SSID?

Hello Ninjago_2224,
About the multiple office location have different SSIDs, does the location A has the signal used in
location D?
Please go to Control Panel\Network and Internet\Network and Sharing Center
, and then click Manage wireless networks.
The windows will try to connect to these networks in the order listed.
Please check if the four SSID pushed by Windows Server 2008 is listed as mentioned above.
If the location A have the location D SSID and the location D SSID has higher priority, the Windows will connect to
location D SSID.
So about the question 1, the Windows will try the SSID in order.
About the question 2, I can’t find the accurate time that test one SSID and move to another. But based on my test, it is very fast.
For more information, please take a look at the following article.
http://www.howtogeek.com/howto/27067/change-wireless-network-priority-to-make-windows-7-choose-the-right-network-first/
Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Fangzhou CHEN
Fangzhou CHEN
TechNet Community Support

How can a family with multiple existing accounts use Home Sharing?

I'd like to use the new Home Sharing feature, but it appears to be restricted to families in which all of the family members share a single user account.
We already have separate accounts for each family member. Is there some way for us to use Home Sharing without abandoning most of our existing accounts, along with all of the purchases made by those accounts? I don't think anyone in this situation would be willing to do that.

Eh. I am not too sure since I have not messed with it much but I do have a great deal of experience with multiple accounts. Each computer can be authorized for multiple accounts. As can iPods. iPods can sync songs/videos/apps from multiple accounts as long as the computer is authorized with them. What I have set up here, is I buy my stuff I want, my parents buy what they want and so do my brothers. When my bro gets something I want I just move it to my computer. That way all our accounts are separate, but if there is something I want I can get it. Also, since the music no longer has DRM, it won't matter. It will play on any computer. What you should see is if you can just do the shared library with multiple accounts. Then if you don't have videos or such, you can get apps or music. Hope this helps!

Error while posting Customer with Multiple sales areas using DEBMAS05.

Dear experts,
We are generating IDOCS vis SAP DS for posting Customer master. The message type used is DEBMAS and basic type is DEBMAS05. we have a requirement to create 1 customer with multiple sales areas. However, we are ending up with a strange error: "Fill all required fields SAPMF02D 0111 ADDR1_DATA-NAME1". Despite the IDOC going into status 51, the customer gets created and the 1st sales area too. the 2nd sales area however is not created! The IDOC data definitely contains Name1, otherwise the customer would not have been created in the first place.
As the error message is related to the Address data, I also explored upon exploring this erorr further on the lines of Central Address management where in the ADRMAS and DEBMAS have to be passed together(IDOC Serialiization). OSS Note (384462) provides further details about this. One Important point from the note is:
"As you have to specify the logical name of the sending system among other things, SAP is not able to make any default settings in the standard systems. When you use the serialization groups delivered as a standard by SAP, the address objects are imported before the master objects.Thus the sequence address data before master objects must only be adhered to if one of the following points applies to your application:
Such fields are set as required entry fields that are only provided by the BAS in the Customizing of the customer or vendor master.
For your customers, contact persons exist to which a private address or a different business address is assigned.".
This is not the case in our situation, as we do not have required entry fields in customizing that are only provided by the BAS, so the error is all the more confusing and I am not too sure what the cause is.
If someone have experienced the same issue before and have found a solution to it, kindly help out.

I have found the cause and solution to this problem.
This error ”Fill all required fields SAPMF02D 0111 ADDR1_DATA-NAME1” and other similar errors like “Fill all required fields SAPMF02D 0111 ADDR1_DATA-SORT1“ which occurrs during the IDOC posting when there are more than one sales area or company code occurs when the customer number range is set up for Internal numbering. This means, that the number gets generated only at the time of save and upon debugging the IDOC, we found out that after creating the customer and the first sales area/company code record, the segment E1KNA1M is cleared completely! This is the reason, it throws an error which points to a mandatory KNA1 field as missing. (Like NAME1, SORT1 etc.)
This was resolved by splitting the IDOC into 2.
The solution is to First post only the KNA1 segment and create the customer.
In the second step, pass the IDOC with all other segments along with E1KNA1M, but pass only KUNNR in E1KNA1M and the rest of the fields in E1KNA1M as “/”: you would have got the KUNNR after the first step.
Important note: This requirement to split the IDOCs does not occur when the customer number is known upfront. (Meaning cases where the customer number is externally generated) I also tested this and created a customer with external numbering and I was able to post more than 1 sales area with the same IDOC.
I noticed multiple threads with the same issue, but none of it had a concrete answer. I hope this information will be useful for anyone facing similar problems.
Cheers
Venkat

How to create list items with multiple attachment files using rest api javascript

In one of user form I am using javascript rest api to create a list item with multiple attachment files. So far I am able to create list item and once created uploading an attachment file. But this is two step process first create an item and then upload
a file.
It create an additional version of the item which is not desired. Also I am not able find a way to attach multiple files in a go. Following is the code I am using.
createitem.executeAsync({
url: "/_api/web/lists/GetByTitle('UserForm')/items(1)/AttachmentFiles/add(FileName='" + aFile.name + "')",
method: "POST",
contentType: "application/json;odata=verbose",
headers: {
"Accept": "application/json;odata=verbose",
"X-RequestDigest": $("#__REQUESTDIGEST").val()
binaryStringRequestBody: true,
body: fileContent,
success: fnsuccess,
error: fnerror
So somehow I need to combine item attributes along with attachment files in body: param. I visited https://msdn.microsoft.com/en-us/library/office/dn531433.aspx#bk_ListItem but no success.
Appreciate any help.

Thanks Mahesh for the reply and post you share it was useful.
But this does not solve the core of the issue. You are uploading attachments after creation of item and multiple files are being attached in loop. This is kind of iterative update to an existing item with attachments. This will end up creating multiple versions.
What I am trying to achieve is to create an item along with multiple attachments in a go. No item updates further to attach a file.
Please suggest how this can be done in one go. SharePoint does it when one creates an item with multiple attachment.
Thanks for your reply.

Creating IPA file with Multiple SWF files using ADT

Iam successfully able to create ipa files using the ADT package but my next requirement is to create an IPA file with multiple swf files.I think it might be easy if your SWF files are regular the tough part is my swf file has lot of action script in it so the only option is to through the command prompt and using the ADT package of Adobe AIR.So now i have 10 SWF files like this and iam creating ipa file for each swf seperatly but now I want to put all of the swf files into one ipa file.Please let me know if i was not clear in my description

I think you are trying to explain how to load two swf's one with action
script and loading an other swf file which should be non action script.If
you read my requirement carefully.I have all the same type of swf's and
these swf are automatically created as a form of output for xcelsius dash
board software.Iam capable of creating individialu ipa files from these swf
files.So when I try to combine the same kind of swf files the first error
its giving is the file name which I have used in the xml.in the main file
name for the swf file its not considering the two swf file name in the
initial window.so the adt package in the command line is not understanding
the file name from the xml and the command prompt and giving error this swf
file does not exist.So please consider how to combine two swf files with AS3
into one ipa file.These swf files are not editable,Let me know if you find
any idea to achieve this

Prioritize date with multiple SSIDS?

Hi,
When running multiple SSIDs on an AP all SSIDs share the available bandwidth. Is there a way to prioritize the traffic?....ie...can I somehow give preference to traffic on SSID A over traffic on SSID B?
...thanks in advance.......J

Hi,
I was afraid of that...ie....a feature of light weight only? We are running autonomous 1100s (AIR-AP1121G-A-K9), I should have mentioned this is my first message. I presume I'm out of luck?
...thanks in advance......J

DataSocket fails intermittently with multiple NICs enabled using LV7.1

Using LV7.1 and Datasocket v4.2, I was intermittently (but quite often) having problems reading and writing to the datasocket server (primarily from the server side). My application should read the value in the item and upon finding a specific string it should immediately follow it with a write of a default string. However, it can find the same string multiple times and not complete the write. Logging the errors from the write shows that no error is occurring. The client is not at fault because it only writes the string once every few minutes. I was able to finally show that by disabling the extra NIC on my system running the datasocket server that the connection seems to operate reliably. Both NICs
were set to static IP addresses, but only one was connected. I do have the program writing to "dstp://localhost/UUT" as opposed to a specific IP address (not sure if it matters).
With Labview6.1 I did not have this problem. It was only after I re-compiled my application with LV7.1 that I started having issues.

Philip,
I do not feel I am running out of bandwidth since I have run it successfully on 1Gbit NIC connections on a P4 2.4GHz system as well as a 10/100Gbit NIC on an old 650MHz system with LV6.1. I only do two writes per variable (on up to 8 variables) once every few minutes. I did not seem to be a re-entrant VI issue.
I have created two VIs which should allow you to recreate the failing conditions with multiple NICs enabled. It responds very quickly with one NIC enabled, but when one or two more NICs is enabled, it gets very slow to respond and has some timeouts.
One VI is the writer, the other is the reader. Start both VIs and start all 8 reader loops. Then you can consecutive
ly click on all 8 sender loops. Doing this with and without multiple NICs enabled should show you the problem.
Note: I think the issue I was talking about in earlier posts about getting multiple strings back before it wrote out "Loop" was due to the fact that the writes were not occurring quickly enough and the reads were happening multiple times. Therefore, in these VIs, I revised the read and close timeouts to -1.
I think it would be best if you could call me so we can discuss this issue. If you can email me, I will send you my contact information if you don't already have access to it.
Attachments:
ReadSocket_Multiple_MSHv1.vi ‏360 KB
WriteSocket_Multiple_MSHv1.vi ‏216 KB

Having trouble with creation of a cloud service with multiple virtual machines using java sdk.

I am creating a cloud service on azure with 2 virtual machines using java sdk API. Service created successfully.
My input endpoint details are as follows.
INPUT ENDPOINTS
Head : 191.238.144.47:2400
Head : 191.238.144.47:22
Node0 : 191.238.144.47:43211
For Head instance port 2400 is for HTTPS and port 22 is for SSH and for Node0 instance port 43211 is for SSH.
But I am having problem with doing a ssh on Head instance. Sometimes it works sometimes doesn't. Same problem with HTTPS also.
I have some application running over there but when i try to access it thru browser sometimes it works but most of the time doesn't. When I restart the instances from azure portal, its works after
that(not always but most of the time).
Now I am confused what is going on there. I am creating cloud service and virtual machines using java sdk and setting input endpoints also. After creation of all instances i restart every instance programmatically .
I am not sure whether restart is required or not. It must be something to do with input endpoints only but not able to get the right thing i guess. When i do the same thing thru azure portal(creation of cloud service with virtual machines and setting up input
end points) everything works fine but not achieving the result when implementing it by java sdk API. Please help me.

HI Nithin,
Thanks for your reply. I am setting the endpoints after creating my instances using update call. Here's the code snippet.
AzureService aServ = new AzureService(session);
if(aServ.checkNameAvailability(clusterName)) {
aServ.createHostedService(clusterName, "dbX cluster");
// Creating head instance
aServ.createHead(clusterName, imgName, headType, userName, pswd);
// Setting end points for head node
String name = "ssh";
int port = 22;
aServ.updateVMInputEndpoint(clusterName, "Head", name, port);
// Restarting head instance
aServ.restartVM(clusterName, "Head");
String roleName = "Node";
String tmpRoleName = "";
for(int i=0; i<noi; i++) {
port = 43210+(i+1);
tmpRoleName = roleName + i;
// Creating node instance
aServ.createVM(clusterName, tmpRoleName, imgName, nodeType, userName, pswd);
// Setting end points for node instance
aServ.updateVMInputEndpoint(clusterName, tmpRoleName, name, port);
// Restarting node instance
aServ.restartVM(clusterName, tmpRoleName);
// Method to update the input endpoint details
public void updateVMInputEndpoint(String clusterName, String vmName, String name, int port)
throws Exception {
VirtualMachineGetResponse resp = computeManagementClient.getVirtualMachinesOperations().
get(clusterName, clusterName, vmName);
VirtualMachineUpdateParameters updateParameters = new VirtualMachineUpdateParameters();
//get the configuration list
ArrayList<ConfigurationSet> configlist = resp.getConfigurationSets();
//get inputendpoint list and update it
ArrayList<InputEndpoint> endpointlist = configlist.get(0).getInputEndpoints();
InputEndpoint inputEndpoint = new InputEndpoint();
inputEndpoint.setEnableDirectServerReturn(false);
inputEndpoint.setPort(port);
inputEndpoint.setLocalPort(port);
inputEndpoint.setName(name);
inputEndpoint.setProtocol(InputEndpointTransportProtocol.TCP);
endpointlist.add(inputEndpoint);
// Open port for https on head node
if(vmName.equals("Head")) {
inputEndpoint = new InputEndpoint();
inputEndpoint.setEnableDirectServerReturn(false);
inputEndpoint.setPort(2400);
inputEndpoint.setLocalPort(2400);
inputEndpoint.setName("https");
inputEndpoint.setProtocol(InputEndpointTransportProtocol.TCP);
endpointlist.add(inputEndpoint);
updateParameters.setConfigurationSets(configlist);
//required for update
OSVirtualHardDisk osVirtualHardDisk = resp.getOSVirtualHardDisk();
updateParameters.setOSVirtualHardDisk(osVirtualHardDisk);
updateParameters.setRoleName(resp.getRoleName());
OperationResponse updtResp = computeManagementClient.getVirtualMachinesOperations().update(clusterName, clusterName, resp.getRoleName(), updateParameters);
And every time i am creating a new cloud service along with head and node instances. Region is "South Central US".
I am setting ProvisionGuestAgent field to true at instance creation time. Thank you.

Multiple Vlans with multiple Internet connections using PBR

Hello all,
I'm trying to wrap my head around this configuration and not having a lot of success. I have several Vlans 3,6,71,72,160, and 180. I have two internet connections, Internet1 is connected to an ASA5510 and Internet2 is connected to a Meraki MX80. I'm using two 4506 switches on my backbone trunked to 3750 switches that my clients connect to. None of these switches have IP Services and my 4506 supervisor does not have an Enterprise license. However I do have one 3750 100Mbit switch with IP Services so I'm using that to do my PBR. All my routing is currently being done on the 4506 switches and all Internet traffic is going to the ASA. What I would like to do is force vlan160 and vlan180 through the Meraki as their Internet connection and the rest of the Vlans go through the ASA. I'm thinking about trunking my vlans from the 4506 to the 3750 (the one with IP Services) and use policy based routing from there to force vlan160 and vlan180 to the Meraki. But in order to do this I think I would have to move my routing onto the 3750 switch but since that is only 100Mbits I'm thinking this is going to choke my network down and defeat the purpose of the 4506 backbones. Any suggestions or alternate ways to achieve my goal?
Appreciate any help you guys can send my way.
Matt

Matthew
What is the speed of the connection from the 4500 to the ASA and what is the combined speeds of the internet connections ?
You definitely don't want to do all the inter vlan routing on the 3750. You could connect it up as shown in your diagram but leave all the routing between vlans on the 4500s. Then you -
1) connect the 3750 to the 4500 using a L3 point to point link
2) connect the 3750 to the ASA using a L3 point to point link
3) do PBR on the 3750 interface connected to the 4500 for traffic coming from the 4500.
If the 4500 supervisor/IOS version doesn't support routed links on that end just use an access port in a dedicated vlan ie. no other ports in the vlan and create a new SVI for it.
You would need to update your routing to reflect the next hop on the ASA, Meraki, 3750 and the 4500.
Disadvantages are -
1) you only have fast ethernet ports on the 3750 so if the combined internet speed is greater than that then it will be a bottleneck.
2) it is a single point of failure ie. if it is lost all internet via both connections is lost.
The alternative would be to not have the 3750 in the path but connected to the 4500 via a trunk link and then route just vlan 160 and 180 on the 3750 ie. move their SVI(s) onto the 3750. Then the 3750 could have a direct connection to the Meraki device and point the default route that way (no PBR needed). The trunk would only allow those specific vlans on it. This would mean a failure of the 3750 would not mean ASA internet lost but it would mean loss of connectivity for the two vlans routed on the 3750.
You would need to add routes to the Meraki for return traffic plus routes on the 3750 and 4500 for inter vlan routing.
The main disadvantages here are -
1) inter vlan routing between the vlans routed on the 4500s and the vlans on the 3750 will be limited by the 100Mbps connection. However you could use an etherchannel trunk so you could get greater overall throughput and some redundancy
2) more importantly though i suspect you are running HSRP between the 4500s for the client vlans and moving the SVIs onto the 3750 means a single point of failure for those vlans.
Personally i would tend towwards option 1) because of the SVI HSRP issue and perhaps because there may be a lot of inter vlan traffic and even with an etherchannel it would be too much.
But, single point of failure issues aside, a lot does depend on internet bandwidth in option 1) vs inter vlan traffic in option 2).
So it's a tradeoff and personally i don't think either are ideal so i'll have another think on this in the morning to see if there is anything more obvious that i have missed or maybe someone else will add to the post.
Jon

How do i videochat with multiple people when using my aim account in messages?

i am on messages and looking at my buddy list but it only shows that i can singular video chat, not with multiple people.

in the general tab of your messages preferences is it set to AIM or Messages?

Authentication with Multiple SSIDs AP521G, using Autonomous

Similar Messages

Maybe you are looking for