BarClayCard Instant Access!
I was approved for the BarClayCard yesterday. After being approved, I ordered a MacBook Air. Within that hour, I canceled the order because I found a better deal on the apple store since I am a Student. I reordered the MacBook Air from the apple education store. I got a emal saying that they are having troubling obtaining my payment. Keep in mind I have not recieved my BarClayCard im just using the Online Access until it arrives. Could it be because I didn't give the other order time to put the money or whatever back on the card? Please Help!!!
Eventually I was able to renumber a switch in an IA stack.
I tried the following at first (from the parent switch):
https://ciscoweirdness.wordpress.com/2014/10/02/how-to-renumber-a-switch-in-a-6800ia-stack/
Oddly, global config mode wasn't available so I tried "remote switch" commands to change the switch number - this didn't work.
Followed the following steps:
https://tools.cisco.com/quickview/bug/CSCuq11044
this worked fine for me although when trying to save the changes I got the message "NVRAM Verification Failed". On reload the switch's number had changed successfully.
Cheers
Andy
Similar Messages
-
Possible instant access security hole
When using instant access camera from the lock screen, then pressing home on iPhone 4 IOS 5, it goes straight into the home page without needing to enter a passcode. Anyone else seeing this?
No, if I open camera from lock and press the home button, it requires passcode. Do you have your passcode set to be required after 2 minutes?
Go to Settings > General > passcode lock (enter passcode) > Require Passcode (change to immediately)
and see if that works.
Cheers! -
WS-X6904-40G-2T Instant Access query
Hello
I'm having a look at Instant Access with the WS-X6904-40G-2T linecard. Instant Access can currently support 1000 ports with a maximum of 12 stacks. The document below seems to state that only 6 ports on a WS-X6904-40G-2T linecard can be used for IA parent-client links. Does this mean that a WS-X6904-40G-2T can only support 6 IA stacks? If so, is this number increase set to increase?
Thanks
Andy
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.pdf
The IA parent-client connection is supported on links between WS-X6904-40G-2T switching
module 10GE ports and Catalyst 6800ia access switch 10GE ports.
– You can use up to 6 IA client 10GE ports in the IA parent-client link. See this document for
information about WS-X6904-40G-2T switching module port configuration:
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-696669.htmlEvery major IOS release, the amount of stacked 6800IA increases. How many currently, I've lost touch.
The problem nowadays is some SEs don't seem to know how to sell them or they're not listening to their clients. It's like they are selling them to get "points".
You have to be one good network engineer to say "no" due to specific technical reasons. -
Once I turn on Match, how do I remove the songs form my iPhone, thus freeing up the memory, which is my initial purpose anywhy (while still having complete instant access to all my music) ?
Hello there dwflemming1,
I recommend turning off iTunes Match on the computer and the phone. Then connect the phone to the computer and uncheck the box to sync music, then click apply in the lower right corner of iTunes. When that completes, turn match back on on both devices.
iOS: Syncing with iTunes
http://support.apple.com/kb/HT1386
And just in case, iTunes: How to add a computer or iOS device to iTunes Match
http://support.apple.com/kb/ht4913.
Cheers,
Sterling -
Instant Access - static sharing of ACLs
Hello
I'm looking to deploy 802.1x/mab on an Instant Access 1000 interface deployment. PACLs/dACLs will be used for security. Many of these ACLs will be identical and I found the following document on static sharing of ACLs to keep tcam utilization down:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dot1x.html#wp1133455
Instant Access parent switch is a C6807-XL (151-2.SY4a) VSS pair using WS-X6904-40G for the IA FEX links
The 6807 doesn't have the commands below (referenced in above document)
mls acl tcam share-acl
platform hardware acl downloadable setup static
I have found the following command on the 6807:
platform feature-manager acl downloadable setup static
Is there an equivalent of "mls acl tcam share-acl" on the C6807-XL (151-2.SY4a) to enable static sharing of ACLs?
Thanks
AndyHello.
My understanding is traffic from the inside to lower security interfaces does not require the access-list and access-group command.
That said removing an entire acl removers the access-group command.
apply
access-group acl_inside in interface inside.
I'm not sure if the same applies for other interfaces wishing to access lower security interfaces.
You can consider yourself lucky :)
Tim -
ISE 1.3 and Instant Access "Limited support"
Hello
The Cisco 1.3 compatability matrix http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/compatibility/ise_sdt.pdf indicates that "Limited support, some functionalities are not supported" applies to ISE 1.3 Profiling when using Cat 6848ia switches.
Can anyone tell me which Profiling functionalities aren't supported when using ISE 1.3 Profiling and 6848ia switches?
Thanks
AndyHi Jim-
Version 1.3 offers a built-in PKI and vastly improved guest services experience. The internal PKI is nice if the customer doesn't have an PKI solution in place. Keep in mind though that the internal ISE PKI can only issue certificates to BYOD devices that were on-boarded via the ISE BYOD "flow" So you cannot use the ISE PKI to issue certs to domain computers.
With regards to NAC: You will have to clarify exactly what is needed here. If you needed to perform "posture assessment" then ISE can do it for Windows and OSX based machines. You can check for things like: A/V, A/S, Firewall Status, Windows Patches, etc. If you want to perform posture on mobile devices then you will need to integrate ISE with an MDM (Mobile Device Management) solution such as: Airwatch, Mobile Iron, Maas360, etc. ISE can query the MDM for things like: Is the device protected with a PIN, is the device rooted, is the device encrypted, etc.
I hope this helps!
Thank you for rating helpful posts! -
Catalyst Instant Access: EtherChannel distributed via parent and client?
Hello,
can we build a EtherChannel that has some ports on the parent switch (C6807XL-) and some on the client (C6800IA-48TD)?
Is that scenario supported now and if not will it be supported in the future?
Thanks in advance and kind regards
MatthiasNot according to the configuration guide:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.pdf
From page 2:
IA client ports do not support these features:
* Configuring EtherChannels with combination of FEX Ports from different FEX-IDs or
combination of FEX ports with IA parent switch linecard ports is not supported.
* FEX host port EtherChannel load balancing is not supported. -
firefox doesnt respond to my ing account when i click on continue or my ebay account when i type in my password. everything else in my system works well when using firefox. when i use IE i have no problems at all when i switch over to IE browser. i really like firefox and dont want to delete it, any suggestions on how to fix? thanks for your time, Joe
This can be caused by corrupted cookies or cookies that aren't send or otherwise blocked.
*https://support.mozilla.org/kb/fix-login-issues-on-websites-require-passwords
Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies" -
How do I quickly search a specific Instant AP or Mobility Access Switch on Aruba Central?
Q: How do I quickly search a specific Instant AP or Mobility Access Switch on Aruba Central?
A: Central provides a standard web-based interface that allows you to configure and monitor Instant Access Points (IAPs) and Mobility Access Switches. Integrated in this web interface is a Search tex box, which can be used by an administrator to search for an IAP, Mobility Access Switch, client, notification event, network or labels.
When you type a search string, the search function suggests matching keywords and allows you to automatically complete the search string entry. This option proves very handy when a user is not aware in which ap group, a client or IAP is part of.Ben,
Unfortunately I can't post any VIs that would demonstrate the problem
because the ActiveX components are confidential. I'll try to develop
my own ActiveX dll that will demonstrate it, but in the meantime, in
hopes that another picture will help, I've attached an image of a block
diagram (with some names changed to protect confidential information)
of one of the lower level VIs from the hierarchy I posted. In this
example, the "Automation Refnum IN" is an input with a type definition
linked to the strict typedef based on the ActiveX automation dll that
has changed. I updated that typedef, but as you can see the output to
the "Class1" indicator is broken. If I delete the "Class1" indicator
and select Create->Indicator from the Class1 property node, and then
wire the new "Class1" indicator to the connector pane, the VI is fixed
-- at least at compile time. In most cases there is also a runtime
problem where the reference obtained by one of the intermediate
property nodes is null, so the property or method node that uses it
fails (e.g. "_VNManager.Networks" property returned is 0, so the
"_Networks.Network1" property node fails). To fix this problem, I have
to delete the wires between the property nodes, and one by one select a
different property/method, then select the correct property/method and
re-wire. There seems to be a bit of "jiggling the handle" to get it to
work though.
I don't know if the ActiveX developer changed anything in this class,
but if he did, he didn't change the name of this class. I would like
to have to modify the VI only if a class, property or method has
changed name or been removed.
Does that all make sense? Thanks for any pointers or help!
Tom
Attachments:
Class1_Path.GIF 7 KB -
Trouble using 'instant credit' barclaycard after approval
I was approved for the barclaycard instant credit for use at apple.com, though after hours of trying, I simply cannot get the credit information to appear on the checkout page.
Anyone have similar issues?You didn't say if it was a major purchase (a computer, iPad etc.). If you are trying to buy from Apple on line there are various links here ... Apple - How to Contact Us
through which you can follow up orders placed or credit applications or even 'Help'.
Incidentally, where are you located?
I do hope this is not another link you have tried -
Good morning everybody,
I am writing on behalf of not being able to implement a desired outcome in our company network. In fact the situation is as follows:
What I want to do is to be able to authenticate users (802.1x authentication) in our company radius server and authorize them access by having a dynamic VLAN assignment in a multi-user environment on one and the same port of a Cisco 2960 switch. So far, the authentication and authorization has been working completely smoothly (there are no problems with itself). The concept involves the configuration of both DATA and VOICE VLANs as I there is also phone authentication implemented. In order to simulate this environment I introduce a Dumb switch connected to my Cisco 2960 Catalyst.
What I have successfully managed to get to work so far is this:
1) On one switch port I have tried the “authentication host-mode multi-domain” and it worked perfectly for a PC behind a telephone, or with one PC connected to a the dumb switch + the telephone connected to another port of the dumb switch. Logically it is the same situation as there is a separation in two domains – DATA and VOICE. Bellow is an output from show authentication sessions for this scenario.
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
2) On the other hand, when I try the same scenario with the “authentication host-mode multi-auth”, the switch still separates the traffic in two domains and is able to authenticate all users, AS LONG AS they are in the same VLAN.
show authentication sessions:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
However, I cannot succeed authentication of many users from DIFFERENT VLANs, neither in multi-auth nor in multi-domain modes.
What I want to get is an output like this:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
I want the switch to authenticate the users anytime they connect to itself and for them to have an instant access to the network. (I tell this because I tried scenario 1) with multi-domain mode and authentication violation replace, and it worked but, two users never had access to the “Internet” simultaneously!!!
The configuration of the interface connected to the Dumb switch is as follows.
interface FastEthernet0/x
description Connection to DUMBswitch
switchport mode access
switchport voice vlan XXX
switchport port-security maximum 10
switchport port-security
switchport port-security violation protect
authentication host-mode multi-auth
authentication priority dot1x
authentication port-control auto
authentication timer reauthenticate 4000
authentication violation replace
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
The way I see it is explained in the following steps:
- PC1 connects to the Dumb switch. This causes the Cisco switch to authenticate user1. This creates an auth. session with its MAC address linked to a domain DATA.
- When PC2 connects to the Dumb switch, this causes the violation replace which replaces the recent authenticated MAC address with the MAC of PC2. I would like it once authenticated to appear in the authentication sessions with a link to a new DATA domain linked to the VLAN assigned from the RADIUS server.
Is this possible? I think (in theory) this is the only way to provide authenticated access to multiple users connecting through Dumb switch to the network.
Has anybody ever succeeded in such a configuration example and if yes, I would be love to get some help in doing so?
Thank you
Stoimen HristovHi Stoimen,
I have done a setup similar to yours with the only exception being VLAN assignment. When I used dACLs only, it makes things somewhat easier as the VLAN no longer matters. Remember that the switchport is in access mode and will only allow a single VLAN across it (with the exception of the voice VLAN). I think that is the real cause of your problem.
From what I can see, you have 2 options available to you:
1) Use dACLs instead of VLAN assignment. This means that an access list will be downloaded from the radius server straight to the authenticated user's session. I have tested this and it works perfectly. Just Google Cisco IBNS quick reference guide and look for the section that deals with Low Impact mode.
2) Get rid of the dumb switches and use managed switches throughout your network. Dumb switches will always be a point of weakness in your network because they have no intelligence to do advanced security features like port security, 802.1x, DHCP snooping, etc.
Hopefully someone else will chime in with another option.
Xavier -
Is there something on the iMac that will slow down access to parts of a web site?
Hi,
I have a dedicated server with a few web sites that I manage. All of the sites but one are instantly access. The one site in question, we can get instant access all parts except one folder (a public folder located in root). Friends around the world can access this folder instantly (1-2 secs). Friends down the road from us on another IPS can access instantly. Even my ISP can access this folder instantly. For me on my iMac desktop OSX 10.5.6 , it takes anywhere from 15-30 secs to access the folder or pages within. My wife's macbook OSX10.5.6 takes 30-90 secs (and sometimes times out). This only started being an occasional problem about 2-3 weeks ago. Now its all the time.
So my question is, is there something in OSX that can cause a restriction?
Thanks,
JimHi Jim,
For a test, turn off IPv6:
System Preferences » Network » AirPort » TCP/IP tab » Configure IPv6
Or whatever interface you connect with. -
Instant USB after suspend-resume/hibernate-resume
Hello all,
I've got a decently old laptop, Acer 2310 if you want to search up the specs. No built-in wireless, though.
I also have a Sitecom USB Wireless N 300 key with Ralink RT3070 chipset, for which I've also installed the rt3070sta module directly from the manufacturer.
The setup works great with the WICD installed, but it's taken me a lot of work simply to make it compatible with the suspend/hibernate/resume functions.
It turns out that either the ehci-hcd or ohci-hcd module (I forget which one) had to be shut off before entering the sleep mode and restarted on resume in order to have all my usb functionality work after resuming. Otherwise, I'd be running without my USB hardware, or worse, I'd just have a black screen to greet me on wakeup. This module restart also means that it has to reconnect to the wireless network (...or does it?).
Well, it works, but here's my problem. We have a business laptop with Vista Home, with a PCI wireless device that works INSTANTLY on resume. No need to wait. Just one second to resume from standby and the thing is still connected to the network, easily verified by doing a quick new Google search on Internet Explorer.
I WANT THAT FUNCTIONALITY.
Now, if anyone's willing to just give me a little info:
1) Who of you are able to resume from standby on Arch and still have INSTANT wireless network access? By instant, I mean you don't have to wait for the thing to reconnect to the network, and WICD or network manager doesn't even tell you it's authenticating or anything. Heck, it probably hasn't even disconnected. If you have this kind of instant access, please let me know if the network adapter is USB, PCI or any other bus.
2) Who of you have that trouble with your usb ehci-hcd/ohci-hcd modules that need restarting after resume from standby in order to work? Have you found any other method of getting them to work coming out of standby, but WITHOUT doing some full module reload?Perhaps you need to disable autosuspend for the USB hub too. Try
echo -1 >/sys/module/usbcore/parameters/autosuspend
for i in /sys/bus/usb/devices/*/power/autosuspend; do echo -1 > $i; done
and see if that fixes the problem. -
6800 Host Ports, Access Clients and Stacking Limitations
In regards to the 6800 Instant Access Solution, it's my understanding that the current OS (Release 15.1(2)SY) will support 1008 host ports across 21 Instant Access clients and that the Instant Access clients will support stacking up to three clients.
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800ia-switch/white_paper_c11-728265.html
Is there a forecast as to when the client stack size will be increased?Vzambo,
If you have c6880 or sup 2T you can run newer version 15.2(1)SY. This suuport up to 2000 ports, fabric link 42 and stacking up to 5.
Tony -
Problem accessing just one web site. No other site...
I am having problems today connecting to just one website which I use daily.
I get the "internet explorer can not display the webpage" message and the dropdown gives the usual possibilities.
If I put the web address into "isitdownforeveryone or just me" then that reports the site up and running.
I cleared all temp files/cookies, ran a full disk clean and cleaned all in IE that was cleanable. I did the ipconfig /flush DNS command and netstop and net start DNS cache commands and still no joy.
While I kept trying I accidently clicked on the "diagnose problems" on IE failed to display page message and that said something like that "the host server at address 290.xxx.xxx etc had been found but fails to respond when pinged" and that resetting the network can fix problems. I then reset the BT Home Hub and low and behold I had instant access to the problem site. That was OK for the rest of the time the PC was on.
This evening it has done exactly the same (just this one particular site down) and yet resetting the router has again fixed the issue.
Why is this happening all of a sudden and why just seemingly one site affected ? Is it something I should contact BT over ?
I run Vista and IE9.
thanksThanks for all the replies folks...
I haven't tried another browser (I like IE and didn't want to install something I don't really want) but I could do to aid trobleshooting if needed (I use Acronis so can roll back).
Anyhow after all the trouble yesterday I unplugged the HH rather than doing a "soft" reset via the button. The site that was problematic is at the moment OK.
If a site is unobtainable for whatever reason why does a reset of the HH "find" a path to the site only for it to fail again.
I see others have had similar issues although Bing.com is one I do use and that has been fine for me.
Whether this is related or not I have no idea but after all the resetting of the HH i thought I would just try Speedtest.net to make sure my line profile hadn't suffered. The "ping" value was a little higher than normal but what was was odd was that the server automatically chosen to run the test was at the other end of the country rather than more local ones.
Maybe you are looking for
-
Mini dvi to HDMI no longer working to t.v.
Hello. For months I was able to use the mini dvi to HDMI to use my Samsung HD t.v. as a monitor from my Macbook Pro. Suddenly one day when I started it up, the t.v. said "No Signal" and then the Macbook Pro goes to sleep. If I take out the mini dvi i
-
Wipe hard drive data without access to screen
I want to permanently wipe out all data on my hard drive. The problem is that my video card has crashed/burned down, so I don't have access to the screen. Is there a way of wiping out all data without physically removing the hard drive?
-
I'm trying to transfer data from a datasource into a datastore in BW 7. Most of the data is character data and I'm trying to use the ToUpper function in the transformation rules. Although the data is transfered and one transformation rule which assi
-
64-bit or 32-bit for the 2011 (spring) Macbook Pro 8 RAM 500HD?
I wanted to know the differences between 64 bit and 32 bit OSx I am currently running the latest Lion 10.7.3 on a 2011 spring macbook pro with 8 gigs of ram 500 gigs HD. From what I can read in the info it looks like it defaults to 32 bit automatical
-
I can't download Mountain Lion I keep getting a message stating, "Re product distribution file could not be verified, it may be damaged or was not signed". I have tried re-downloading Lion combo 10.7.4 but no good, any more ideas please.