Cisco 1142 WAP Connection Help

We have a Cisco 1142 WAP connected to a Cisco Wireless Controller in a remote office area. For meetings we wanted to have more hard wired connections in addition to Wifi access for attendee's / presentors etc..My question is if we purchased a Cisco 8 port POE mini switch and put that in the middle between the WAP and Controller would that work? Or is there another business grade solution for a mix of Ethernet ports and Wifi?

Yes, sir. This will work. The only "problem" I see is your 8 port PoE switch. Let me explain:
The good part about Cisco's 8-port PoE switches, the WS-C3560-8PC, is that it is FANLESS. So even if you stick the switch right inside this conference or meeting room, no one will notice it's there (unless of course, one steps on the hot surface or gives the appliance a good kick).
This model has a 1Gig SFP or RJ45 port uplink.
Now the downside is not really that significant, unless you want to be pedantic about it. The access ports are all 10/100BaseTX only.
By the way, I have no way of testing the "compact" series of the 2960C and the 3560C. The Data Sheet itself is a bit "grey" so I won't make a comment about these two models.

Similar Messages

HP Wireless Printers cannot connect to WPA2-secured WiFi networks with Cisco/Meraki WAPs

In the last two months, I've had the displeasure of working with two very different HP printers and attempting to make them work on a WPA2-secured wireless network. All attempts to authenticate fail with "invalid phassphrase".
I'm not the first person to encounter this, it's a problem with many different HP wireless printers (I just happen to have physical access to the OfficeJet Pro 8610 & Deskjet 3511).
My equipment is a Cisco ASA 5505 Firewall running ASA 9.1x & Cisco Aironet 1142 running IOS 15.3.x.
What does work on the WPA2/AES SSID: Apple MacBook Air running OSX 10.10.2, Three Windows-Based laptops running Windows 8.1 Update 1, an iPhone 5s, Three Windows Phone 8.1 devices, Roku 2, PlayStation 4, PlayStation 3, Sharp Aquos TV, Amazon Streaming Stick, and an Android Tablet (Jellybean). Basically, everything.
What does not work on the WPA2 network: OfficeJet Pro 8610 & Deskjet 3511.
To test the theory there is a problem with HP's implementation of WPA2 with regard to Cisco Aironet IOS, I built out a second SSID that only works in WPA/TKIP mode. This solution works. Both HP printers will join the WPA/TKIP network.
So, I'm able to demonstrate there is a certain connectivity issue. When i look at AAA Debug on the WAP's console, I can observe the HPs attempt to authenticate "Bind I/F" on the WPA2 SSID, however they do not achieve authentication and do not pass the AAA phase. However, on the WPA SSID, they bind and authenticate successfully.
To help illustrate this, here is my WAP running config. It's about as simple as it can get. There is no relevant MAC filtering or ACLs bound to any interface. Noting that I have an ACL on remote access to the WAP (i.e. Locked down to SSH, disabling telnet). The main point being that the ASA firewall is not a factor in this problem as the issue is at the WAP before WPA2 authentication can complete, therefore the printers never reach the network / when the printers connect to the WPA network, the operate fully & correctly.
If anyone at HP can indicate why this particular config is somehow improper or broken, that would be fantastic. There should be no reason why Cisco / Meraki WAP owners have to lower wireless encryption standards just for a printer, be forced into wired, create separate SSIDs with lower encryption specifically for a device.
Building configuration...
Current configuration : 6064 bytes
! Last configuration change at 12:46:47 UTC Fri Aug 20 1993 by admin
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname 10-10-50-1
logging buffered 1024768
logging rate-limit console 9
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
no ip source-route
no ip cef
ip domain name freedom.local
dot11 syslog
dot11 vlan-name inside vlan 50
dot11 vlan-name inside-wpa-only vlan 70
dot11 ssid inside
   vlan 50
   band-select
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 xxxxxx
   information-element ssidl
dot11 ssid inside-wpa-only
   vlan 70
   band-select
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 xxxxxx
   information-element ssidl
dot11 band-select parameters
   cycle-count 3
   cycle-threshold 200
   expire-supression 20
   expire-dual-band 60
   client-rssi 75
dot11 wpa handshake timeout 500
dot11 network-map
username ADMIN privilege 15 secret 5 xxxxxx
ip ssh version 2
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 50 mode ciphers aes-ccm
encryption vlan 70 mode ciphers aes-ccm tkip
ssid inside
ssid inside-wpa-only
antenna gain 0
mbssid
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel 2412
station-role root
l2-filter bridge-group-acl
interface Dot11Radio0.50
encapsulation dot1Q 50 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 subscriber-loop-control
bridge-group 70 input-address-list 700
bridge-group 70 output-address-list 700
bridge-group 70 spanning-disabled
bridge-group 70 block-unknown-source
no bridge-group 70 source-learning
no bridge-group 70 unicast-flooding
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface GigabitEthernet0.50
encapsulation dot1Q 50 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
interface GigabitEthernet0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 spanning-disabled
no bridge-group 70 source-learning
interface BVI1
mac-address xxxx.xxxx.xxxx
ip address 10.10.50.1 255.255.255.0
no ip route-cache
ip forward-protocol nd
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip route 0.0.0.0 0.0.0.0 10.10.50.2
logging history size 100
access-list 111 permit tcp any any neq telnet
bridge 1 route ip
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
length 0
transport input ssh
line vty 5 15
access-class 111 in
transport input ssh
end

I get the same behavior with a laserjet m451nw. I need to enable tkip to get the printer working, it doesn't support pure aes-ccm (every other device here supports pure aes-ccm, even cheap ones), although it's advertised as working.
The following snippet of config works, but I still think it should work without the tkip "hack".
dot11 ssid whatever
vlan 1
band-select
authentication open
authentication key-management wpa version 2
interface Dot11Radio0
encryption vlan 1 mode ciphers aes-ccm tkip

1142 wireless connectivity issue

Hi,
A quick suggestion needed. I have 4 1142 WAP with me. They are connected to my layer 3- switch via a layer 2 switch. it was for office use. I have configured all the trunk ports properly and allowed all needed vlan.
The problem arises when my client tries to access the network . It shows SSID and connectivity but it nt getting an Internet Access. I have enabled DHCP and pool is activated. even when i tried using a static IP address , client could not connect to internet or intranet.
I could see client did not configure Ip Default-gateway. After enabling it , it could access the network
My question is when we are connecting via Laptop do we need to have the default-gateway of respective vlan (IP Address of layer vlan congifured on layer 3 switch)

You always need a default gateway. It's the only way to reach other subnets. If the post answered your question can you mark it answered as it helps when others run into the same question.
Sent from Cisco Technical Support iPhone App

RV-042G does not let WAP connected devices access the internet

I recently replaced our old Netgear router with the RV-042G. We have 2 wireless access points (Asus RT-N66U) that were both working before the change that now do not. I was able to ping various external sites from the access point web gui so I know that they are connected and working. WAP connected devices are able to pull an IP address from the router DHCP. Is there a setting on the RV-042G that I am missing?
Any help would be appreciated!
Thanks!

Try the following to rule out a software problem:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
If still problem make an appointment at the Genius Bar of an Apple store since it appears you have a hardware problem.
Apple Retail Store - Genius Bar
However, since it works with other networks that really suggests a problem with your network.

N97 mini: Automatic WAP connection during the nigh...

Only recently got the phone and I've noticed that, usually at around 11.50pm, there is an outwards WAP connection for about 3.30 mins.
This would be fine if I had free mobile internet on my contract but I don't. My network (Vodafone) charges 50p a day (counted from 12am to 12pm) for unlimited internet so I can see this getting unnecessarily costly.
Has anyone got any idea why it is connecting and how I can prevent it?
Thanks in advance

If you can find the app that's connecting you may be able to go into installed apps and select it, then select suite settings and set to always ask or One in internet access point. Also in browser settings set access point to ask when needed, then it won't connect unless you allow it ! You can of course , as suggested, remove all access points (or get a data bolt on from vodafone )
Good Luck
If I have helped at all, a click on the White Star is always appreciated :
you can also help others by marking 'accept as solution'

Cisco 1142 Wireless access point intermittently will not authenticate

Hi all,
We have a Cisco 1142 standalone access point, and from time to time I will come into the office and it will not authenticate any users to either our guest or corporate networks. I then have to go in and reboot the access point. After that, it begins to work. Any advice? Here's my configuration below:
Current configuration : 6450 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname cisco-chiap01
logging monitor errors
enable secret 5 $1$fsD8$CU42/3/Up5AAlL4hQWvvg0
aaa new-model
aaa group server radius rad_eap
server 172.17.16.12 auth-port 1645 acct-port 1646
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa group server radius rad_eap2
server 172.17.16.12 auth-port 1645 acct-port 1646
server 172.17.21.10 auth-port 1812 acct-port 1813
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods2 group rad_eap2
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
login on-failure log
login on-success log
dot11 syslog
dot11 vlan-name Admin vlan 100
dot11 vlan-name DevNetwork vlan 20
dot11 vlan-name Guest vlan 150
dot11 vlan-name Network vlan 16
dot11 ssid DevNetwork
vlan 20
authentication open eap eap_methods2
authentication network-eap eap_methods2
authentication key-management wpa version 2
dot11 ssid Guest
vlan 150
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
wpa-psk ascii 7 142407060101380B013A3A2670435642
information-element ssidl advertisement
dot11 ssid Network
vlan 16
authentication open eap eap_methods2
authentication network-eap eap_methods2
authentication key-management wpa version 2
username monkeyman privilege 15 secret 5 $1$ZZ7C$rqimu2FNONdfeacMNGAD/.
bridge irb
interface Dot11Radio0
no ip address
ip helper-address 172.17.19.10
no ip route-cache
encryption mode ciphers aes-ccm
encryption vlan 16 mode ciphers aes-ccm
encryption vlan 150 mode ciphers aes-ccm
encryption vlan 20 mode ciphers aes-ccm
ssid DevNetwork
ssid Guest
ssid Network
antenna gain 0
parent timeout 120
speed 5.5 11.0 basic-6.0 9.0 12.0 36.0 48.0 54.0
packet retries 128 drop-packet
channel 2462
station-role root
rts threshold 512
rts retries 128
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
interface Dot11Radio0.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio0.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
bridge-group 150 subscriber-loop-control
bridge-group 150 block-unknown-source
no bridge-group 150 source-learning
no bridge-group 150 unicast-flooding
bridge-group 150 spanning-disabled
interface Dot11Radio1
no ip address
ip helper-address 172.17.19.10
no ip route-cache
encryption vlan 16 mode ciphers aes-ccm
encryption vlan 150 mode ciphers aes-ccm
encryption vlan 20 mode ciphers aes-ccm
ssid DevNetwork
ssid Guest
ssid Network
antenna gain 0
traffic-metrics aggregate-report
dfs band 3 block
mbssid
parent timeout 120
speed 6.0 12.0 basic-24.0 36.0 48.0 54.0
channel width 40-above
channel dfs
station-role root access-point
interface Dot11Radio1.11
encapsulation dot1Q 11
no ip route-cache
interface Dot11Radio1.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 subscriber-loop-control
bridge-group 20 block-unknown-source
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
interface Dot11Radio1.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
bridge-group 150 subscriber-loop-control
bridge-group 150 block-unknown-source
no bridge-group 150 source-learning
no bridge-group 150 unicast-flooding
bridge-group 150 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
interface GigabitEthernet0.11
encapsulation dot1Q 11
no ip route-cache
interface GigabitEthernet0.16
encapsulation dot1Q 16 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface GigabitEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface GigabitEthernet0.100
encapsulation dot1Q 100
ip address 192.168.100.3 255.255.255.0
no ip route-cache
bridge-group 100
no bridge-group 100 source-learning
bridge-group 100 spanning-disabled
interface GigabitEthernet0.150
encapsulation dot1Q 150
no ip route-cache
bridge-group 150
no bridge-group 150 source-learning
bridge-group 150 spanning-disabled
interface BVI1
ip address 172.17.16.251 255.255.255.0
no ip route-cache
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface GigabitEthernet0
access-list 1 permit 172.17.16.1
access-list 1 remark Admin network access
access-list 1 permit 192.168.100.0 0.0.0.255
radius-server attribute 32 include-in-access-req format %h
radius-server host 172.17.21.10 auth-port 1812 acct-port 1813 key 7 047958071C3561410D4A44
radius-server host 172.17.16.12 auth-port 1645 acct-port 1646 key 7 08045E471A48574446
radius-server host 172.17.21.10 auth-port 1645 acct-port 1646 key 7 1320051B185D56797F
radius-server timeout 15
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
access-class 1 in
end

When the issue occurs does that affect both 2.4GHz & 5GHz devices ? I would see which band operating devices affected.
I noticed you have set CH11 under Radio 0 statically. I would prefer to configure it as below so AP can change the channel depend on the environment.
int d0
channel least-congested
HTH
Rasika
**** Pls rate all useful responses ****

WAPs connected ports are becoming err-disabled.

Hi All,
I'm facing a strange issue. WAPs connected ports are becomming err-disabled with an attached error message. Not only a single WAP, All the WAPs connected to the 3750 are having the same issue. I have tried to identify which WAP is sending the BPDU and that inturn causing other WAP connected ports to be down.
I have 5 WAPs in that site; if I enable any WAPs connected port below logs messages are coming and that port is becomming err-disable.
Can anyone shed some light to troubleshoot this issue. Any help would be appreciated.
Dec 1 03:32:59.397 UTC: %SPANTREE-2-BLOCK_BPDUGUARD: Received BPDU on port Gi1/0/12 with BPDU Guard enabled. Disabling port.
Dec 1 03:32:59.397 UTC: %PM-4-ERR_DISABLE: bpduguard error detected on Gi1/0/12, putting Gi1/0/12 in err-disable state
Dec 1 03:33:00.420 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/12, changed state to down
Dec 1 03:33:00.420 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan5, changed state to down
Dec 1 03:33:00.420 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan50, changed state to down
Dec 1 03:33:00.420 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan51, changed state to down
Dec 1 03:33:01.427 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/12, changed state to down
Regards,
T.K

Can you please furnish the command output of the following:
1. sh version
2. sh run int g 1/0/12
3. sh interface status err

E71 WAP Internet HELP!!

I just recieved a new unlocked E71 and am attempting to set up its Internet functionality. I have all the WAP settings inputted correctly, but when I go to the internet, I get an error that says "Web: Page Not Found. Check web address."
However, if I access the internet with the WLAN connection, the web pages load just fine. The issue is only with the WAP connection.
Any ideas to help me trouble shoot?
Thanks in advance!

Wap is a special protocol which is different from html, what most websites use. You need to contact your provider or check their website for internet connection settings (not wap).
‡Thank you for hitting the Blue/Green Star button‡
N8-00 RM 596 V:111.030.0609; E71-1(05) RM 346 V: 500.21.009

Wap connections by 5130. How??

Hello all.
I just bought a 5130 and I think to haveproperly sett it for the WAP connection, since my provider offers free connections to me.
The problem - for a newby like me - that I'm not able to surf by WAP. Infact in my options menu I can't see a "WAP connection menu" to start from.
The one way to surf the Net I found is by the "Internet menu". From that menu I can surf fine, but it's not free (as I learnt after my credit went down): I think that it makes me surf by "web connection", that is not *free* for me!
More informations:
I first created manually a "point of access" (as someone adviced to me) with the WAP-data of my provider; but I couldn't find the fields to fill with the home page, the DNS etc.;
there I found the way to receive a SMS from mi provider that should have set automatically my phone; but after received it, nothing has changed.
Can you help me?
Thanks a lot in advance.

"Do u mean in the "Internet > browser menu"? If yes, I'm not able to do it: Opera mini browser starts automatically and I can't change it."
Yes internet browser, Don't you have nokia's default browser there?
"Otherwise, as I told before, the WAP access point is the one I have, but I never found the fields with Proxy, port, home page, etc settings. So, I'm afraid WAP is not rightly set."
You don't need to set them yourself, the configuration SMS you received from operator, open it>options>save,
on exit it'll ask if you want to Set these settings as default, press "Yes".
"I've just had a suspicion: Could it be my old mobile card (16kb) to blame? I never changed it, since I bought it..."
you mean Sim card? if so i don't think so because you can browse internet fine with "Web Access point" as you said earlier.
Previous Phones: 6600, 7610, 6230, 6230i, 1100, 1112, N70, N73, N95, N95 8GB, 5800XM, 5230, C5, iPhone 3GS, SE Xperia X10, N900, N8, SE Xperia Arc
Current Phones: Nokia N9, iPhone 4

Can I run a cat5 cable to a 4 port hub from a cisco router then connect one of the hub's output ports to an airport express to 'extend' my wireless range?

Can I run a cat5 cable to a 4 port hub from a cisco router then connect one of the hub's output ports to an airport express to 'extend' my wireless range?
Flow would be
Cable modem---->cisco e2000 wifi router (This is broadcasting wifi but not strong enough)---->4 port hub ---->airport express (to extend the wifi in another part of house)
thanks!

Yes, you can do this as you stated. In essence you will want to configure both routers for roaming network. Please check out the following Apple Support article that describes this type of network. Although this article uses two or more AirPorts, it can be done with just about any manufacturer's router.

Hi, my iphone 4s is saying im not connected to the internet, my wifi is on and ive tried switching it off and on and nothing, still cant connect. help!

hi, my iphone 4s is saying im not connected to the internet, my wifi is on and ive tried switching it off and on and nothing, still cant connect. help! it was working perfectly fine earlier today.

Try a reset by pressing the home and sleep buttons until you see the Apple logo, ignoring the slider. Takes about 5-15 secs of button holding and you won't lose any data or settings.

HT5538 My facetime and imessage aint working now, when i try to turn it on, it says waiting for activation then when it finishes it says something to do with a network connection. help me!!!

My facetime and imessage aint working now, when i try to turn it on, it says waiting for activation then when it finishes it says something to do with a network connection. help me!!!

iOS: Troubleshooting FaceTime and iMessage activation

This morning I was able to access iTunes Store on my computer and iPod 5G - and now I cant access the store at all - something about my network connections - help? ive restarted rebooted

This morning I was able to access iTunes Store on my computer and iPod 5G - and now I cant access the store at all - something about my network connections - help? ive restarted rebooted

Thank you so much for replying. But resetting my apple I'd Password seems to have done the trick. I am able to download apps :). Got me worried I even uninstalled kaspersky 2012 :( got to reinstall back

All adobe products that I have will not connect help when I seek online help?

all adobe products that I have will not connect help when I seek online help?

Waht version of the software are you trying to use? And the error seems pretty self-explanatory...

Where to download Cisco Spectrum Expert Connect (4.0 or greater)?

I downloaded the Wireless CleanAir Deployment Guide and on step 7, it stated:
On a Supported Windows platform with Cisco Spectrum Expert Connect (4.0 or greater) installed.
Where can I download Cisco Spectrum Expert Connect (4.0 or greater)?
We need to use it on our Upgraded WLC v7.0. Please kindly advice.
Thank You.
Junhan

Hi,
it will only officially be available early 2011 with the new release of WLC 7.0
However, there is a pre-Beta release and it seems ok to share with customers willing to try it out early.
No need to mention that you should not be complaining about bugs or any explosion induced by the beta software :-)
I'm attaching it here if you want to try the current version.
Nicolas
===
Don't forget to rate answers that you find useful

Cisco 1142 WAP Connection Help

Similar Messages

Maybe you are looking for