Basic AP1200 configuration

Hello,
I am looking for the simplest configuration on an AP without any vlan or sub-interfaces configuration. Really the basic configuration for an AP with :
- 1 IP adresse
- 1 Netmask
- 1 Default Gateway
Thx for any help.

en
#conf t
config)#ip default-gateway x.y.z.w
config)#int BVI1
fig-if)#ip address x.y.z.w 255.0.0.0
fig-if)#no shut
fig-if)#exit
config)#int dot11Radio0
fig-if)#ssid test
fig-if)#no ssid tsunami
fig-if)#exit
config)#exit
#copy run start
Then you can connect to it from the wireless side or wired side using a Web Browser and the x.y.z.w IP config for BVI and configure anything else you may want in there.
Cheers

Similar Messages

Basic WPA configuration AP 1142n

Hi All,
I'm looking for a basic WPA configuration for AP1142n. This should allow connections upto 300 Mbps. Best should be a script config.
Authentication should be local radius server.
Thanks for your help.
Regards,
Christian

Hi,
Here is the configuration example link..
https://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008054339e.shtml#ent
BTW , Scott covered everything...
Regards
Surendra

WLAN AP1200 configuration

Design Scenario
I have a project that requires 8 Access Points (AP1200) to be deployed in one single area (a 702sqm. Multi-purpose Training Room) using IEEE 802.11a standard. It requires maximum 300 wireless clients to be deployed during special events. All 8 APs are to be equally connected into two separate switches having the same subnet, and configured as Root. All 8 APs are to be mounted on the ceiling to operate in omni-directional instead of having a patch/directional radiation pattern.
Questions:
1. In configuring the Access Point to address clients seamless mobility, is it appropriate to have the same SSID to all 8 Access points or to assign a unique SSID to each AP? The design configuration calls for setting the Broadcast SSID in Beacon to No so that client devices must match exactly to the Access Points SSID. Should all APs have the same SSID so they could work seamlessly if the client moves (roaming) within a single area? What is the advantage of having a unique SSID assigned to each AP in terms of security and client seamless mobility? Please also note that the company does not want peer-to-peer roaming.
2. How many number of WLAN clients can AP1200 accommodate to maintain transmission bandwidth of 54Mbps?
3. What is the appropriate way to balance the data traffic load between 8 APs against 300 WLAN clients to minimize bottleneck while maintaining 54Mbps throughput over radio transmission?
4. In terms of data access security, is it appropriate to install the Cisco Secure Access Control Server locally, or in the main building where companys Enterprise Server is located? Please note that the Multi-purpose Training Hall is linked to the main building over ATM network using fiber optic cable.
5. Does 60 feet at 54Mbps data rate (indoor range) be attained by setting the antenna module to either Omni-directional or patch/directional?
6. Does Access Point attain the same range of 60 feet at 54Mbps (indoor range) while setting its power output to either 40 mW(16dBm) or 5 mW(7dBm)?
I am looking forward to have your answers soon. Thank you very much for your help.
Sincerely yours,
Sixto A. Mejia
[email protected]

These forums are a great place to get a quick tip or a highlevel summary of some part of the technology- they should not be considered a replacement for paying someone who knows what he's doing to come to your location for a survey and design. What you're asking leads me to suspect that what you need is the latter not the former.
With that said, see the following:
"1. In configuring the Access Point to address clients seamless mobility, is it appropriate to have the same SSID to all 8 Access points or to assign a unique SSID to each AP? .... Should all APs have the same SSID so they could work seamlessly if the client moves (roaming) within a single area? What is the advantage of having a unique SSID assigned to each AP in terms of security and client seamless mobility?"
If you want your clients to roam and loadbalance from one AP to another, your APs should be configured with the same SSID. Clients will try to stay with the same SSID if at all possible, but will roam freely between different APs on the same SSID.
"The design configuration calls for setting the Broadcast SSID in Beacon to No so that client devices must match exactly to the Access Points SSID."
This is bad design. Turning SSID broadcast off does nothing to improve security and decreases the efficiency of authorized communications- in much the same manner that taking the building numbers off of your house will not protect you from burglars but will make things more difficult for your guests. If you want to secure the WLAN, use security features like 802.1x. SSID name is not a security feature.
"Please also note that the company does not want peer-to-peer roaming."
If by this you mean that clients on the WLAN should not be able to communicate directly with other clients on the WLAN, you will want to enable PSPF on the access points.
"2. How many number of WLAN clients can AP1200 accommodate to maintain transmission bandwidth of 54Mbps?"
One.
The radio spectrum is shared medium, just like a 10base2 coax cable. Available bandwidth is divided among all clients on that frequency. If you want 54Mbps to a client, that must be the only client on that AP. (And he won't get 54 megs anyway, since some of that is used by overhead.)
"3. What is the appropriate way to balance the data traffic load between 8 APs against 300 WLAN clients to minimize bottleneck while maintaining 54Mbps throughput over radio transmission?"
Loadbalancing is handled internally to the 802.11 protocol suite; you don't need to worry about it. However, your 300 users will not all be getting 54 megs no matter what you do. If you require high guaranteed bandwidth to a dense and numerous user population, run Cat 5 and forget the wireless.
"4. In terms of data access security, is it appropriate to install the Cisco Secure Access Control Server locally, or in the main building where companys Enterprise Server is located? Please note that the Multi-purpose Training Hall is linked to the main building over ATM network using fiber optic cable."
Doesn't really matter. Radius traffic is not bandwidth-intensive; put it where it's most convenient.
"5. Does 60 feet at 54Mbps data rate (indoor range) be attained by setting the antenna module to either Omni-directional or patch/directional?"
No way to know without doing a survey. Every site's radio environment is different.
"6. Does Access Point attain the same range of 60 feet at 54Mbps (indoor range) while setting its power output to either 40 mW(16dBm) or 5 mW(7dBm)?"
As a rule of thumb, you can expect greater range at greater power levels, but see #5.
-Gabriel

WS-C2960S-24TS-S and WS-C2960S-24TS-S Basic Security configuration.

Greeting's, I would like to start by apologizing. I have absolutely no knowledge in switch security management but I've been tasked with it given the shortage of personnel. I have a WS-C2960S-24TS-S and a WS-C2960S-24TS-S switch that needs to be securely configured. I've done the basic of upgrading the firmware to the latest. Given my lack of any experience whatsoever, please include complete procedures (hand holding, I'm sorry).
I wanted step-by-step guidance of:
1. Locking down ports by MAC address.
2. DDoS protection.
3. Lock down login from all but 1 IP and only allow browser based SSL login. No TELNET, SSH or other method.
4. Shutting down any services on the switch.
5. Shutting down password recovery.
Any other recommended security steps to secure the switch.
Thanking in advance,
Parth

Hi Parth,
I'm not sure if you got this figured out or not but a lot of the stuff you need can be found here: Cisco Guide to Harden Cisco IOS Devices
Regarding the "locking down ports by MAC address", you should think about Port-security.

Basic ADSL configuration on 877W

I've just got hold of my 877W and I'm trying to configure it for home use. I've got the ADSL connection working but I'm unable to connect to the internet from the PC. The CD and PPP lights are solid and I see the RXD and TXD lights flicker. When I test the connection, everything works apart from the ping. I'm new to Cisco equipment so I'm guessing it is something fairly basic that I've missed. My config is attached. Many thanks for your help.

i think you are missing PPPoE Client command in ATM interface > ATM0.3
Refer this link for DSL congfiguration example:
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804fd93f.html#wp1047623

Basic tBridge configuration

Hi,
I need some help in configuring tBridge. we have WLS 8.1 in one machine and Tuxedo 8.1 server in other machine. We connect to Tuxido server from Weblogic through Jolt connection. We are planning to use tBridge with WTC for one of our requirements. Basically We want to pass messages from Tuxedo Q to JMS Q through tBridge(TuxQt2JmsQ) asynchronosly.
My first query is can we use WTC and JOLT connector both from the same Weblogic server to connect to Tuxedo?.
When I was trying config WTC from WLS Admin console it is asking for Local access point and Remote accee point where my remote accee point is Tuxedo listener port that I use for our jolt connection?? and My Local access point is t3://localhost:8001 ??. When I check at Tuxedo server side I can not fint any DMCONFIG or BDMCONFIG files(those are the main confiruble files I assume), where should I look for thease files exactly?
Any help would be greatly appriciated.
Thanks in advance
Madhav

Hi Madhav,
You can use WTC and Jolt at the same time, although they will obviously be different connections. Jolt clients connect to the JSL, whereas WTC connects to the Tuxedo Domain Gateway. So to use tBridge (a component of WTC) you will need to configure a domain gateware on your Tuxedo system. As well you will need to configure WTC. For detailed information on WTC and the meaning local local access points, etc., please consult the WLS and Tuxedo documentation. In particular, read a bit about setting up domains in the Tuxedo documentation to get some background.
If you want to try a canned set up to see how domains communication and WTC is configured, you could try the Tuxedo Control Jumpstart Kit located at:
http://dev2dev.bea.com/pub/a/2004/02/tuxedo_jumpstart.html
I believe it has some ant scripts that will automatically configure your WTC configuration and a simple Tuxedo application, at least on a single machine. You can then use that as a model for setting up your real environment.
Briefly, a domain in Tuxedo terms can have local access points and remote access points. A local access point basically describes a listening point. A given Tuxedo application can have multiple local access points, although only one is required. Remote access points then describe the remote Tuxedo domain this domain should connect to. So the simplest case is on your Tuxedo system:
Local Access Point: TUXDOM
Local Access Point ID: TUXDOM (it doesn't have to be the same, just for convenience)
Local Access Point Network address: //tuxhost:6010
Remote Access Point: WLSDOM
Remote Access Point ID: WLSDOM
Remote Access Point Network address: //wlshost:6030
And then basically the reverse on the WLS system in the WTC configuration:
Local Access Point: WLSDOM
Local Access Point ID: WLSDOM
Local Access Point Network address: //wlshost:6030
Remote Access Point: TUXDOM
Remote Acess Point ID: TUXDOM
Remote Access Point Network address: //tuxhost:6010
That's just a start, but it should get you going.
Regards,
Todd Little
BEA Tuxedo Engineering

Tomcat Basic Authentification configuration

Hi, i need to configure my Tomcat (running on Windows 2000 Server) in order to give security to my site.
I searched on the net i heard about HTTP Basic Auth conf for tomcat, so i think that sould be enough for my security. **
How can i configure it? I've never used Tomcat before, so please be very specific, very detailed... i need this as soon as posible!
Thnx! :)
**Question: Wich is best secure my site with HTTP Tomcat auth or creating login/pswd auth system using JSP ??? /THX AGAIN!/

Tomcat Basic Authentication has limited capabilities with the greatest restriction being that you have to statically list all of the users/groups/passwords in the deployment files. With customized security (building customized form based authentication) you are free to utilize a security database (relational, ldap, etc) which greatly eases administration as well as other benfits.

WS-C2960S-24TS-S and WS-C2960X-24TS-L Basic Security configuration.

Greeting's, I would like to start by apologizing as I would require hand-holding, given my lack of experience in Cisco (or any other switches). I have absolutely no knowledge in switch security management but I've been tasked with it given the shortage of personnel. I have a WS-C2960S-24TS-S and WS-C2960X-24TS-L switch that needs to be securely configured. I've done the basics of upgrading the firmware to the latest. Given my lack of any experience whatsoever, please include complete procedures
I wanted step-by-step guidance of:
1. Locking down ports by MAC address.
2. DDoS protection.
3. Lock down login from all but 1 IP and only allow browser based SSL login. No TELNET, SSH or other method.
4. Shutting down any services on the switch.
5. Shutting down password recovery.
6. Enabling highest supported encryption for sensitive (passwords). While I'm posting this I've just read that level 7 encryption can be cracked.
Any other recommended security steps to secure the switch.
Thanking in advance,
Parth

Hello, Parth Maniar.
1. look at the command "switchport port-security" inside interfaces (documentation: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/port_sec.pdf ).
2. There is not much you can do for DDoS protection. Also it depend on IOS version (is your IOS lite or base). You can use a command from 1 point, also use a commands of "storm-control" (inside interface), "switchport block [type]" (inside interface), and if your IOS is not lite you can also use arp-spoofing protection and dhcp-spoofing protection.
3. To turn off ssh and telnet:
line vty 0 4
transport input none
exit
line vty 5 15
transport input none
exit
For turning off http access: no ip http server
To limit access only from 1 IP address to HTTPS server:
access-list 1 remark ------- ACL for HTTPS access ------------------------
access-list 1 permit [permited IP]
access-list 1 deny any log
access-list 1 remark ------- END of ACL for HTTPS access -----------------
ip http access-class 1
And for configuration HTTPS server: http://www.cisco.com/c/en/us/td/docs/ios/termserv/command/reference/tsv_book/tsv_s1.pdf
4. Use the command "service ?" to see all possible services for your swith. And with "no" before the command you can turn off all service that is no need for you (for example "no service dhcp").
5. You can't shut it down because you can recover password only by rebooting switch and pushing "mode" button after this. Here is procedure for recovery password: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/12040-pswdrec-2900xl.html
After reading it you can undenstand why you can't turn it off.
6. Yes, level 7 encryption can be cracked. So you can store your passwords as md5. You can use commands:
enable secret [password]
username [name] secret [password]
After this cisco will encrypt your password by md5 hash and at configuration you'll see it as "username [name] secret 5 [md5 hash]"
What else you can use for securety matters:
- logging (command "login on-failure log every [numbers of fails]" must be!). Documentation: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swlog.html
Also you can use a configuration bellow to log all changes at configuration:
archive
log config
exit
exit
- turn off lldp and cdp protocols to the end users sides (you can google it).
- use SNMP for getting status of the switch and ports and analyse it for anomalies.
- use a command inside interfaces: "spanning-tree guard root" (don't use this connamd at the ports where is connected your another switches) and "spanning-tree bpduguard enable" (use a second command if you are not planing to connect another switch to this port).
- use a command " switchport nonegotiate" at the all ports.
- also you can use this commands:
no ip source-route
ip arp proxy disable
no ip icmp redirect

Basic 877 configuration for a beginner

Hi
I am a beginner in the field of Cisco, having decided I am tired of consumer products that regularly crash. So I bought a Cisco 877 router to connct to my broadband ADSL here in the UK.
I was led to believe the SDM would allow me to set up the firewall/router easily, but it's much more complex than the consumer devices!
So I have a number of basic beginners questions. Here's what I want to achieve, and if I can do it via SDM that would be great. If not, I'd need help to do it from scratch at the command line (a place I don't really want to go!).
1. Connect to my PPoA provider (who I believe uses MUX rather than SNAP).
2. Run a web server, Exchange server and FTP from inside my LAN
3. Collect POP3 mail from external email accounts into Exchange (with a POP3 connector)
4. Use Remote Desktop to get into my server from out of office
5. Access the LAN using a simple Microsoft VPN
6. Allow one of my LAN workstations to access streaming radio (I know the ports and protocols it uses)
All this is simple in, for example, a Netgear consumer box. Port forwarding and port range forwarding are easy and there's no trouble with NAT - it just works. But making any of this work with the Cisco 877 has been impossible for me.
HELP!!!
Please bear in mind that I don't understand all the terminology (thoughh I do understand basic networks, IP addressing etc). The number of interfaces on the Cisco are a bit confusing, whether the switch ports need me to assign them IP adresses etc, ACLs and inspection rules etc are a bit of a dark area!
Can anyone help?
Nick

hi
let me put some guidlines for you here
1. Connect to my PPoA provider (who I believe uses MUX rather than SNAP).
included device manager through the web interface is perfect for this. just click on the appropriate options and your connection will be established. of course you'll need some basic information regarding to the ip addressing and authentication from your provider
2. Run a web server, Exchange server and FTP from inside my LAN
first of all you need a permanent IP address on the wan side for this. also you can try to use some kind of dynamic dns service for this (dyndns)
also you'll need to set-up nat translation for this, so the packets destined to your external address will reach the server within your internal or dmz zone
3. Collect POP3 mail from external email accounts into Exchange (with a POP3 connector)
it is simple. established connections should be leave your internal zone w/o any problem
4. Use Remote Desktop to get into my server from out of office
another nat rule should play here
5. Access the LAN using a simple Microsoft VPN
this router has some internal vpn functionality both for client vpn and ssl vpn, but I never tried this
6. Allow one of my LAN workstations to access streaming radio (I know the ports and protocols it uses)
it is also established connection, so shouldn't be any problem
Another issue with this stuff. When I tried to use the modern stateful version of the FW included in this software it never worked, so I had to revert to the old fashioned nat/access-list based FW config. Maybe you'll have more luck with this, so just click next next finish :)
altought, Cisco FW is not a beginner level stuff, so if you need advanced config (even if you need server in a dmz), you should hire someone to configure it for your needs
regards
Laszlo

Basic Firewall configuration

Hello all,
I've been using Solaris 11 Express to host a server, and no matter what I do with the firewall gui utility, it won't open the ports I want to open. It clearly retains changes I made as root, but still I get connection refusals from my clients. I noticed also when I used the firewall utility, it never seemed to accept my role password for root, it just kept asking over and over again without giving me an error. I eventually made it so I could log in as root and force changes, which is how I got it to retain the changes I wanted without getting stuck in the role/credential loop. However, like I mentioned before, it's like the changes I made aren't active somehow. I've also tried disabling the firewall entirely, which seems to make no difference. Are there any good Solaris 11 Express / Firewall configuration guides out there?
Thanks.

There were some bugs in the area of root being a role and the Visual Panels client (and its back end RAD). I highly recommend
you upgrade to Solaris 11 or even better Solaris 11.1 (which was announced at Oracle OpenWorld 2012 and will be available soon).
If you can still reproduce this behaviour there we can investigate fixing it. Solaris 11 Express is no longer a supported release.

Basic switch configuration

hi
I need help about Cisco switch 2960 issue how i give IP address gateway in switch if there more than two vlan and how configure telnet command
plz help me

Hi,
Do you have Lan Lite or Lan Base license (check with "show version")? LAN LITE does not permit routing.
With LAN BASE:
sdm prefer lanbase-routing // save before your config, you may loose some configuration
reload the switch
Example for gateway configuration:
vlan 10
vlan 20
interface vlan 10
ip address 10.0.10.1 255.255.255.0
interface vlan 20
ip address 10.0.20.1 255.255.255.0
For telnet:
username name privilege 15 secret password
line vty 0 15
login local
transport input all
But, do not use telnet (all traffic passes on clear including passwords), use instead ssh if the switch permits:
hostname switch
ip domain name company.com
crypto key generate rsa general-keys modulus 2028
line vty 0 15
login local
transport input ssh
Hope this could help you!
Regards,
Pedro Lereno

Basic Recording Configuration

I plan to buy a Mac Pro and Logic Studio to record music. I’ve spent hours surfing discussions, but most have been too specific and not enough big picture, so apologies for any overlap. I want to use as few hardware and software components as possible, among other things on the K.I.S.S. principle that that will mean fewer things to go wrong.
What will I need besides the Mac and Logic?
To the extent possible, I want to do everything inside the Mac, using only Logic (including plug-ins), and a mic and MIDI controller. By everything, I mean MIDI tracks, recorded from a MIDI keyboard, controlling internal plug-in sound sources, and audio tracks recorded via microphone (vocals and possibly guitar). And likewise apply effects to audio and MIDI tracks with internal plug-ins. Then to burn the final mix to CD or DVD or make available via Internet. Most if not all recording would be done one part at a time. Pro quality sound (e.g. 24x96) is a must. Portability is not necessary. A priority for me is getting everything I need now, partly because I don’t want to interrupt my music making with more learning curves next year or the one after once I’ve got this much down, and partly because I’ll need to use files created now perhaps years down the road with no questions asked.
Is there anything unrealistic about this goal? Such basic info as to what inputs and outputs each piece of gear has can be hard to come by or use unfamiliar terms. Do I need a separate audio interface? A separate MIDI interface? If so, which ones would be most suited for this purpose?
Any comments as to which Mac Pro? The quad-core and eight-core versions are both candidates, but I’ve been mostly focusing on the eight core just because it appears my target 16 GB RAM is quite a bit less expensive that way (probably due to using smaller sticks). The 24 and 30 inch Apple displays are also both on the table. At this time, I am only getting one hard disk, with the idea of adding one or more solid state drives later on, the lone exception to my everything-now rule. Thanks for your thoughts.

audio tracks recorded via microphone (vocals and possibly guitar).
You'll need an audio interface - I'd suggest something like the Apogee Duet or One would suit, being reasonably priced and good-sounding, and having enough inputs to record one or two things at once.
Any Mac Pro will do you fine.
If you get a controller keyboard with a USB port, you will not need a separate MIDI interface.
Alternatively, many audio interfaces also come with MIDI ports and will act as a MIDI interface if you just get a MIDI keyboard. If you go down this road, that requirement is something to consider when choosing your audio interface (I don't think the APogee's listed above have MIDI ports.)
Go for the 24 display, the 30's are expensive and possibly a bit too big for general use... ymmv of course.

Basic setup configuration

Hi All,
Could some please send me a basic config for for two wireless points setup as a root and non-root.
Cheers

Here is a basic document on setting up a wireless connection with Autonomous APs.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008055c39a.shtml
You can get started with this document.

RV042 basic VPN configuration

Hello there. I'm just wondering on how to use his RB042 VPN ROUTER. Can anyone help on how to setup the VPN?I'm kinda confused. What is the first thing to do until the last?
Posted by WebUser Al Albiar Taposok

Did you try google 'RV042 VPN configuration'?. It popped up with lot of step-by-config docs. if still can't find, PM me your email, i will send you one.
Thx
MS

Very basic initial configuration question.

Hi.
I replaced a Catalyst 2960G for a C2960X-24-L in a network where there are already five switches.
I have no idea how to assign it an ip : is there anyone here willing to explain that in very simple way ?
I tried plug it in the existing network, but didn't work.
I'm not the one whom installed the network, and I'm doing that to help.
Thank you.
Pierre

Also if you are adding a new sw to the network i recommend you to reset the vtp in that sw (if your network has it.) if you are not sure just do "vtp mode transparent" "vtp mode client" assuming that you are replacing a client sw.
Then you should verify before connecting to the network:
- type of stp that your network is running
- if you have vtp check the config and use the same domain, version, password so the sw gets the vlans from the
- when you have all the vlans set in the sw then add the interfaces to the vlans
- be sure that you are not replacing the root sw.
Maybe there are others things to check but thats what comes to my mind now
Regards

Basic AP1200 configuration

Similar Messages

Maybe you are looking for