Can't get secure wlan to work with new guest wlan

Dear Support,
I'm having a nightmare! where I can seem to get either one wlan to work or the other but not both together.
I posted previously and reconfigured as per the suggestion, however the problem I get is that the secure wlan client associates, then de-associates after roughly 30 seconds with both a guest (no security) and secure (eap using ms ias as radius server)
my previous post is;
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddcfe12
and the log shows the following, obviously the client is set to connect automatically.
*Mar 1 00:04:35.105: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:04:51.391: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 000e.35f8
.5d13 Associated KEY_MGMT[NONE]
*Mar 1 00:04:51.506: %DOT11-4-MAXRETRIES: Packet to client 000e.35f8.5d13 reach
ed max retries, removing the client
*Mar 1 00:04:51.506: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 000e.35f8.5d13 Reason: Previous authentication no longer valid
*Mar 1 00:05:15.176: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:05:32.703: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:05:58.780: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:06:16.141: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:06:40.759: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:06:58.145: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:07:00.560: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:07:18.020: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:07:43.902: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:08:01.254: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:08:16.172: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:08:16.737: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:08:37.397: %DOT11-6-ASSOC: Interface Dot11Radio0, Station AP-CDC#2 00
13.cefd.48ca Associated KEY_MGMT[NONE]
*Mar 1 00:08:54.732: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating
Station 0013.cefd.48ca Reason: Sending station has left the BSS
*Mar 1 00:08:57.193: %DOT11-4-MAXRETRIES: Packet to client 0013.cefd.48ca reach
ed max retries, removing the client
Thanks in advance for your assistance.
Any prompt reply will be greatfully received. I also rate responses.
Thanks again, regards, Adrian

Hi Ben,
Please find attached AP config, I can access the switch at the moment, but the config is fairly basic, trunk port with two vlans and vlan 1 as the native.
here's the ap config.
AP-CDC#2#sh startup-config
Using 2989 out of 32768 bytes
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP-CDC#2
enable secret 5 $1$LQ1O$NKYZoYAeiahKw0805kLHg0
clock timezone GMT 0
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
ip subnet-zero
ip domain name wlan.internal
aaa new-model
aaa group server radius rad_eap
server 10.10.10.2 auth-port 1645 acct-port 1646
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 vlan-name dmz vlan 2
dot11 ssid Secure
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
dot11 ssid Guest
vlan 2
authentication open
guest-mode
username Cisco password 7 062506324F41
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 1 mode wep mandatory
ssid Secure
ssid Guest
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
54.0
no preamble-short
channel 2412
station-role root
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 160 in
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
interface BVI1
ip address 10.10.10.49 255.255.255.0
no ip route-cache
ip default-gateway 10.10.10.253
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.10.10.2 auth-port 1645 acct-port 1646 key 7 xyz
radius-server vsa send accounting
control-plane
bridge 1 route ip
line con 0
line vty 0 4
end
AP-CDC#2#
Thanks again, regards, Adrian

Similar Messages

  • Can't get airport express to work with new wireless router

    I just swapped out a linksys wrt54gl for a linksys E1200 wireless router on my home network. My PCs and iPads, and TV all made the switch to the new network fine, but the airport express isn't working. All I want to use it for is to transfer iPad audio to my home speakers. but my iPad  AirPlay shows the old Airport as an option, I can switch to the Airport, no sound comes out the home speakers, then the iPad reverts AirPlay back to iPad.  This model Airport just has power, USB, and LANA ports, so it doesn't seem like it would be complicated. A CAT 5 cable goes from the airport WAN port to one of the ports on the back of the new wireless router. What did I overlook?

    I thought I'd jump in here with you network experts for some help with a related networking problem.
    Equipment:  iMac 24-inch, Early 2009 2.93 GHz Intel Core 2 Duo; 2 MBP w/Retina Display; AirPort Express version 7.6.4 (Conncected Using: DHCP; Router Mode:  DHCP and NAT); Comcast/Xfinity Gateway 1 Modem w/2.4 GHz WiFi.
    #1.  Comcast forced me to change modems to their Gateway 1 saying mine was at “End of Life.”  Previously, my home network was set up with AP Express and worked fine using my iMac as a server.  After installing the Gateway 1, I could not get my network to work after repeated calls to their support, online chats, trial and error, reading community chats and articles, etc.  I put the Comcast modem in passive mode using the “Bridge” setting and re-established my network with my AP.  I’m using my iMac as a server for file sharing with my two MBP’s.  The network isn’t recognized in sleep mode and will not wake from sleep and I can’t find it or Connect to Server when the computer is asleep.  I’ve tried all combinations within the Energy Saver/Screen Saver/Security preferences.  I’ve reset the SMC and other like resetting to factory defaults. How can I fix this and what are the correct settings for my home network to function again with my AP Express?
    #2.  TimeMachine stops doing backups when the computer is in sleep mode, understandably because I’m not making any changes on the iMac that need to be backed up.  But using my laptops on the network, I am making changes in shared files that are hosted on the iMac that I would like backed up.  I cannot get the schedule feature to work to wake up the computer long enough to do a backup nightly because, as a security feature, I log out after 30 minutes of inactivity. I understand the schedule doesn’t work unless you’re logged in.  Is there a way for me to make this work?
    Thanks!

  • Can't get old scanner to work with new iMAC

    I have an old scanner, Epson Perfection 4870 Photo that I can't get my new iMAC to install in PSE6 like I've had in my older computers. I've installed all the software (plus I used my old laptop to transfer files/information when I initially started the new iMAC. When I go into PSE6 it is not under the import area that it used to be. Do I need to go manually drag the file in the hard drive to another folder? Thank you.

    Most likely the problem is with the driver. I have the same scanner at work and this is what I had to do to get it to work. Because you are running PSE6 which is a Universal Application on an Intel Mac, in order for the plugin to load within PSE it must also be a Universal plugin which it's not. Epson claims these drivers that were released in 2006 are Intel and 10.5 compatible. What you have to do to get it to work is Open up Epson Scan Utility in order to scan because the Scan Utility will run as a PPC Application. You can call Epson to confirm but if they try and tell you how to run PSE in Rosetta that is not a good solution.
    George

  • Can't get 4050n printer to work with new Desktop Computer: running XP

    I have a new Desktop Computer, dual processor, which is running XP and MS office 2007.  I had my 4050N HP Laserwriter hooked up to my old desktop (which failed in the last two weeks, blown capacitor, etc) and it worked fine with XP on that computer.
    So I downloaded the drivers I found for HP 4050N running XP, and can't even get a test page.  The connectors seem to be ok.  I had to buy a parallel port to USB cable and I have that plugged into the USB port at the back of my new desktop.
    Any ideas of what else I should try?  If I had a computer virus with the old machine, could it have affected my printer somehow?
    I'm at a loss.
    Thanks!

    Since you mention doing an upgrade I would be inclined to reset the printing system and then add the R2880 queue again.
    Open System Preferences > Print & Fax
    Move your mouse over the Printers list
    Hold down the Control button and click the mouse
    Click the "Reset printing system ..." popup
    Restart your Mac 
    This will remove your print queues but not your printer drivers. So you will only need to add your printer queues again.

  • Can't get Epson NX510 to work with new iMac

    I am new to Mac, and I apologize if this is the wrong forum to this question, but...
    Apple threw in an NX510 scanner/printer/copy/fax when I bought my new iMac a couple of months ago. Printer/copy functions works great. But I cannot get the scanner function to work.
    Can anyone help me figure this out? Thanks in advance.

    Try this from the Epson FAQs
    http://www.epson.com/cgi-bin/Store/support/supAdvice.jsp?BV_UseBVCookie=yes&type =highlights&noteoid=142167#can%27t%20scan
    For Drivers
    http://www.epson.com/cgi-bin/Store/support/SupportSnowLeopard.jsp?BV_UseBVCookie =yes
    Message was edited by: WZZZ

  • Old Apple ID disabled been hacked. Can't get iCloud email to work with new ID

    old Apple ID disabled
    please help

    Hey there Tamsin,
    If I understand correctly your Apple ID has been compromised. I recommend you reach out to our Account Security team immediately for additional assistance. Please note that you will be asked to verify your account information.
    Apple ID: Contacting Apple for help with Apple ID account security
    Thank you for using Apple Support Communities.
    Cheers,
    Sterling

  • Can't get my printer to work with new OSX 10,6?

    I upgraded to snow leopard 10.6.3 so I could use the new Touch 4th generation. Everything was great until I tried to use my epson R2880! I keep getting
    errors. It also says the printer is not registered. I have downloaded software updates, font updates, etc. no luck? Any ideas? thanks

    Since you mention doing an upgrade I would be inclined to reset the printing system and then add the R2880 queue again.
    Open System Preferences > Print & Fax
    Move your mouse over the Printers list
    Hold down the Control button and click the mouse
    Click the "Reset printing system ..." popup
    Restart your Mac 
    This will remove your print queues but not your printer drivers. So you will only need to add your printer queues again.

  • I have an Retina display MacBook Pro with HMDI out port. I also have an HDMI to Component cable with Audio Plugs. How can I get HDMI out to work with this cable when plugged into the Component and Audio ports on my TV?

    I have an Retina display MacBook Pro with HMDI out port. I also have an HDMI to Component cable with Audio Plugs. How can I get HDMI out to work with this cable when plugged into the MacBook Pro and connected to the TVs Component and Audio in ports.

    Will not work.  To my knowledge, dual converting like that isn't supported.  The Mac must detect the connected video output device and that sort of info cannot be done across an analog component uni-directional connection.

  • How can I get my ipod to work with itunes?

    When I connect my ipod classic into my new computer it seems that itunes does not recognize it. How can I get my ipod to work with itunes? I'm afraid to disconnect my ipod because the display is saying Do Not Disconnect.

    1. Update iTunes to the latest version. Plug in your iPod. If iTunes still can't recognize it, then in iTunes in the top left corner click help> run diagnostics. On the box that comes up, check the last two things. Click next and it should identify your iPod.
    2. Click on your windows start menu. Type in "services". Click on it and when it pops up, on the bottom of it click on "standard". Now Scroll down to find "Apple Mobile Device" Right click it when you see it and click on "Start". When it has started, close iTunes and replug in your iPod and it should show up.
    3. Check the USB cable
    4 Verify that Apple Mobile Device Support is installed
    5. Restart the Apple Mobile Device Service and verify that the Apple Mobile Device USB Driver is installed.
    6. If you just want to add some photos, songs and movies from computer to your devices, you can use an iTunes alternative to do the job
    7. Check for third-party software conflicts.
    <Link Edited By Host>

  • Can't get out.print to work with XML jsp tags

    <jsp:scriptlet>
    if(ErrorTrap == true) {
         out.println("<tr><td colspan=\"center\" align=\"center\">There was" an error while processing the form</td></tr>");
         ErrorTrap = false;
    </jsp:scriptlet>
    I can't get this script to work with the XML stype jsp tags. It keeps telling me the <jsp> tags are untermintaed. Is there a special trick to fix this or do I have to use the non-XML type tags?

    Sorry, I didn't mean to put the extra " in the out.println text string. :-/

  • Can't get Palm Zire to work with windows 7

    Can't get palm zire to work with windows
    Post relates to: Palm Pilot

    Please review the "stickied" threads near the top of this board, about syncing with Windows 7 and Vista.  It's all there. 
    After you've been through and tried everything there is to try, and still have problems, please post back with specific info about exactly what you've tried, what version of Windows 7 you have (32-bit or 64-bit), etc.
    smkranz
    I am a volunteer, and not an HP employee.
    Palm OS ∙ webOS ∙ Android

  • How can I get elements 11 to work with 16 bits photos?

    In the expert mode of Photoshop Elements 11, I can only work with 8 bits photos. How can I get Elements 11 to work with 16 bits photos?

    No, you can still buy photoshop cs6 (perpetual license) if one doesn't want to subscribe to the cloud version (photoshop cc version 14)
    Either way is expensive compared to photoshop elements.
    http://www.adobe.com/products/cs6.html?promoid=JOLIS

  • How can I get photoshop CS2 to work with Windows 8.1?

    how can I get photoshop CS2 to work with Windows 8.1?

    Have a look at
    http://forums.adobe.com/message/4976720
    Cheers
    John

  • How can i get ical invitations to work with outlook users?

    how can i get ical invitations to work with outlook users?
    I can send ical meeting invitations but outlook users are having problems having the meeting show up in their calendar….

    My Epson is able to do scans using Image Capture without any problems at all.
    Allan

  • How can I get Phillips Fidelio to work with ios7

    How can I get Phillips Fidelio to work with ios7. It worked with the previous operating system

    Not sure if this is the same problem others are having, but I used to play music on my Philips Fidelio by opening the Music app on my ipad and clicking on the box with the triangle (which has now disappeared in the new OS). However, if you have the philips dockstudio app, the box still appears there and I was able to get my speakers working again.

Maybe you are looking for