Cisco 3548-XL supports 802.1x ?

please help with the above question. This product is EoS therefore I cannot find anything on Cisco website. Thank you very much.

No it does not support 802.1x. You will need 2950/35x0/3750

Similar Messages

Support 802.1q at WAE device?

Hi.
I'm sy jeon
I wonder if the cisco WAAS support 802.1q.
We are planing to attach the cisco wae to ethernet switch.
as you know, we should configure the two vlan to WAE, one for PBR, wccpv2, other to return the traffic to router.
if so,How can I configure 802.1q in WAE,
if our network configuration is incorrect, please give me advide about that.
Thank you.

Hello Sy,
Cisco WAAS does support 802.1Q. It depends on your deployment setup. If you are using WCCP, there will be no need to configure dot1q trunk as the traffic will be handled either by redirect/return method. For the return method, it can be either ip forwarding (WAAS will used configured default gateway) or GRE Return if using a configured egress method of negotiated return or Generic GRE.
If you are using inline interception, meaning you will be using an inline card to intercept the traffic, then you can configure dot1q trunk for the inline ports and define which VLANs you would like to intercept and optimize traffic on.
Let me know if this answers your question.
-Ramon

Does the 702W support 802.11AC

Does the new Cisco 702W AP support 802.11AC standard?? and also like we have site survey image for 3600-I AP, does the 702W also have a site survey image, or I can site-survey jsut with any autonomous firmware on it.
thanks

Hi lovleen.arora
from looking at the cisco documentation for the cisco 702w it does not support 802.11ac
but maximum of 802.11n
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/702W/quick/guide/ap702Wgetstart.html#pgfId-51225
hopefully this helps

PBR feature in cisco 3548 nexus switch

Hi All ,
Could you please tell me whether cisco 3548 switch will support PBR ? we do have license of Lan1k9 enterprise license switch. But we are not ableto use the PBR featutre. Any help on this..
Regards,
Vijay.

See table-5 in this link:
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/licensing/guide/b_Cisco_NX-OS_Licensing_Guide/b_Cisco_NX-OS_Licensing_Guide_chapter_01.html#fntarg_13
Note 19:
The LAN_BASE_SERVICES_PKG license needs to be installed in order to use the LAN_ENTERPRISE_SERVICES_PKG license.
HTH

Cisco ISE FlexAuth with 802.1X PCs and IP Phones as MAB multi-domain Q?

Cisco ISE FlexAuth with 802.1X PCs and IP Phones as MAB multi-domain Q?
Im trying to follow the trustsec 2.1 guide on IP Phones into LowImpact mode.
I can get a PC on its own to authenticate via dot1x/tls
I can get a Cisco IP Phone on its own to authenticate via MAB.
When the two are on the same switchport, the phone will authenticate but not the PC. ISE logs EAP timeouts.
The switchport has the LowImpact port ACL of
ip access-group ACL-DEFAULT in
The IP Phone gets a dACL that allows it ok.
I assume MAB phone and dot1x PC is supported? Any ideas?
Thanks in advance.

The ISE log detailed steps are as follows:
Steps
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
Evaluating Service Selection Policy
15048 Queried PIP
15048 Queried PIP
15004 Matched rule
11507 Extracted EAP-Response/Identity
12300 Prepared EAP-Request proposing PEAP with challenge
12625 Valid EAP-Key-Name attribute received
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12501 Extracted EAP-Response/NAK requesting to use EAP-TLS instead
12500 Prepared EAP-Request proposing EAP-TLS with challenge
12625 Valid EAP-Key-Name attribute received
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12502 Extracted EAP-Response containing EAP-TLS challenge-response and accepting EAP-TLS as negotiated
12800 Extracted first TLS record; TLS handshake started
12805 Extracted TLS ClientHello message
12806 Prepared TLS ServerHello message
12807 Prepared TLS Certificate message
12809 Prepared TLS CertificateRequest message
12505 Prepared EAP-Request with another EAP-TLS challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12504 Extracted EAP-Response containing EAP-TLS challenge-response
12505 Prepared EAP-Request with another EAP-TLS challenge
11006 Returned RADIUS Access-Challenge
11001 Received RADIUS Access-Request
11018 RADIUS is re-using an existing session
12504 Extracted EAP-Response containing EAP-TLS challenge-response
12505 Prepared EAP-Request with another EAP-TLS challenge
11006 Returned RADIUS Access-Challenge
5411 No response received during 120 seconds on last EAP message sent to the client

Cisco ACS 5.1 802.1x auth fails on LAN when WLAN connected

I am running Cisco ACS 5.1 802.1x with certificate based authentication for Wired and Wireless connections. The issue that I am having is that when a user comes in from home with their laptop the wireless connection works, they pass the authentication and have network access fine. But when the plug the laptop into a docking station the LAN connection fails and gets put in the Auth Failure Vlan.
A reboot of the phone/ shut/no shut fixes this, but I really need to find a resolution
This is an intermittent fault and only effects users with both LAN and WLAN enabled.
Running ACS 5.1.0.44, all Cisco 3750s - c3750-ipservicesk9-mz.122-55.SE.
Certificates are issues by group policy and only using computer authentication.
any help would be greatly appreciated
Thanks

After a long TAC case with Cisco we discovered that the Mitel phone was not sending the EAPoL-Logoff packet so the switch still thought that the device off the back of the phone was connected.
There are no EAPoL-Logoff messages seen on switch when laptop is disconnected/port is shut down.
http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_1.99/Dot1X_Deployment/Dot1x_Dep_Guide.html#wp386903
This feature is supported by most IP phones - I do not know if Mitel phones support that but we cannot see this message in the debugs you sent.
As a workaround we can configure inactivity timer (by default it is infinity):
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_55_se/commmand/reference/cli1.html#wp11888691
This did resolve all our issues,
Aaron

Access Point support 802.11a/g/b/r

can you suggest me the access point which support 802.11a/g/b/r ?
My problem is with 802.11 r. i am not getting clear idea about the wireless access point which will support 802.11r
kindly suggest me the product

There are no APs that support 802.11r yet. 802.11r is a standards extension to support fast secure roaming that was only ratified a month or so ago. It requires client device support and there are no clients that support it yet.
If you want fast secure roaming, Cisco offers CCKM on all our APs and CCKM and PKC on all our controllers.
I suspect though, that you may have meant, 802.11n, which is a higher data rate PHY/MAC standards extension. That is supported in the AP1250 series.

Is CE 500 Switch support 802.1q Trunk?

Dear All,
Is Cisco Express 500 switch support 802.1q trunk?
Also, all fastethernet port on CE500 will assign VLAN 10. I would like the switch to allow VLAN 20 and 30 to pass through the trunk? Is it possible?
Thanks.
C.K.

Yesh, set up the port role to switch to make it a trunk.
Unfortunately, the CE500 series switches cannot be managed through a CLI - you have to use CNA.
Hope that helps - pls rate the post if it does.
Paresh

Does the new ISR platform support 802.11ac APs

Hello,
Is there a Cisco WLAN controller that is compatible with the new 11ac 3700 APs that can be installed in a 3900 series ISR platform?
Thank you
James

Yes and no. And I don't know which is which.
The current way to stick a WLC into a router is using an SRE. This is basically a module which contains a hard drive and you create a VM in form of a WLC. Now the latest SRE firmware is 7.4.121.0 (release date 20 December 2013).
There are currently three models of APs with can support 802.11ac. They are the 3600*, 3700 and 2700.
Ok, here's where the "kicker" comes in.
The 3600 (notice the "*") can support 802.11ac if you purchase the 802.11ac Wave 1 Module. The 3600 is supported from firmware version 7.2.X.X but the 802.11ac Wave 1 Module requires a minimum firmware version 7.5.X.X (this version is now "deferred"). So this option doesn't work.
3700 requires a minmum of 7.6.X.X firmware and the newly-released 2700 requires a soon-to-be-released 7.6MR2 or 8.X.X.X firmware.
Now if what I've mentioned above doesn't confuse you, this next one will bewilder absolutely: Read the Release Notes for 7.6.X.X and scroll down to the Supported Cisco Wireless LAN Controller Platforms section and it's stated:
Cisco Virtual Wireless Controllers on Cisco Services-Ready Engine (SRE) or Cisco Wireless LAN Controller Module for Integrated Services Routers G2 (UCS-E)
Hence, my response of Yes and No.
I have two recommendations:
On the bottom of the Release Notes, there's a Feedback link. Use it. Put a low score (this guarantees someone will contact you quickly). When they contact you, ask them to do a proper QC on their documentation because, frankly, they've been "dropping the ball" lately.
Next, contact TAC.
Hope this helps.

What network adaptors support 802.11ac?

I want to purchase the new airport/time capsule mainly for it's 802.11ac capabilities. I have a mid-2009 macbook pro.
Wondering what network adaptors are out there that I can plug into my usb that can support 802.11ac? I found some but they only support Windows.

Newer AC wireless would need to support USB 3 standard but of course that is not available.
I want to purchase the new airport/time capsule mainly for it's 802.11ac capabilities. I have a mid-2009 macbook pro.
You only have one port that is near capable (actually more than capable if real numbers are used) and that is ethernet. So the best device for you is a second Airport Extreme working as bridge or extend wireless in apple terminology.. really it is not such a bad option since the cost of AC usb 3.0 will be over $100 anyway.

Cisco devices that support Multicast traffic?

Folks,
I am looking for list of Cisco devices that support Multicast traffic. Does anyone know how to get this information?
Thanks,
Nagesh

Cisco Feature Navigator

Does the iPhone support 802.11n?

After reading the tech specs via the link below, it looks like the iPhone does not support 802.11n, however, I remember reading somewhere that it did.
Can anyone confirm?
http://www.apple.com/iphone/specs.html

No and not necessary in respect to data transfer with the iPhone since no data can be transferred from a computer or hard drive to the iPhone or from an iPhone to a computer or hard drive available on an "N" network.
Connecting an iPhone to an "N" network where all computers are "N" compatible lowers the overall data transfer speed between computers connected to the network.
"N" has no effect on internet access speed for connected computers and the iPhone which is determined by the ISP with none offering Internet access upload and download speeds approaching data transfer speeds between connected conputers.

Does the 27" iMac wireless card support 802.11a and n

does the iMac support the 5 GHz wifi format? How about the N spec?

I'm sorry but I don't understand this:
the unit supports 802.11a channels but it doesn't pick up anything.
Are you saying the iMac cannot connect wirelessly? And why would you be concerned that the very old 'a' standard may not be picked up? The latest standard is 802.11n, not a.
http://en.wikipedia.org/wiki/IEEE_802.11
So, is the iMac working wirelessly or not?

Does CISCO C3560X VLAN support multiple Network segments which are further configured with HSRP function

Hi Cisco experts,
My name is Kumagai and I need your expert opinions below.
I am trying to configure one VLAN1 support multiple network segments as below.
(this should be a very straight forward configuration and should be OK, I think ? )
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
The only issue that is eating me is the above network segments are using HSRP too
and I am not sure is this possible with a combination of VLAN1 supporting multiples which are
further supported with HSRP settings in Cisco environment.
!example of HSRP:
interface Vlan4
ip address 172.30.4.253 255.255.255.0
no ip redirects
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
<<< what will happen if I add the HSRP configuration as below into the above VLAN1 with multiple Network segment ??)
I would like to summarize my "Combined" configurations as below but I need your expert opinions on
whether the configuration below is workable without any problem ??
Or it is a total flop because Cisco does not support the configuration below !!!
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
standby 30 ip 172.30.31.254
standby 30 priority 105
standby 30 preempt
standby 60 ip 172.30.61.254
standby 60 priority 105
standby 60 preempt
standby 70 ip 172.30.71.254
standby 70 priority 105
standby 70 preempt
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
Thanking you in advance !!!!!

Hi,
As far as i know we dont set the ip helper address on the radio interface. It should be on the L3 interface of corresposding VLANs i.e.
int vlan 20
ip helper-address 192.168.33.xxx
int vlan 60
ip helper-address 130.20.1.xxx
I'm assuming that your using SVI's (int Vlan 20 and int Vlan 60) rahter than physical interfaces. Also hope you have configured switch port as trunk where this AP is connected.
Modify the AP config as below since you are using data vlan as the native vlan
interface Dot11Radio0.20
encapsulation dot1Q 20 native
interface FastEthernet0.20
encapsulation dot1Q 20 native
Ideally your AP fastethernet configuration should looks like below and not sure how you missed this as this comes by default when you have multiple vlans for multiple ssids.
interface FastEthernet0.20
encapsulation dot1Q 20 native
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface FastEthernet0.60
encapsulation dot1Q 60
no ip route-cache
bridge-group 60
no bridge-group 60 source-learning
bridge-group 60 spanning-disabled
Hope this helps.
Regards
Najaf

Configure standalone 1250 AP to support 802.11n

Been searching this forum about 802.11n setup. So far, I learned (from this forum) that to support 802.11n, I must use WPA2/AES (or open auth), and I need to ensure WMM is enable.
Q-1. Besides the above two, are there any other requirement I need to address in my configuration?
Q-2. Do I have to enable both 2.4Mhz and 5Mhz radio for 802.11n performance?
Q-3. Is there WPA2/TKIP option? If so, would this option support 802.11n? Or, it has to be WPA2/AES?
Q-4. From the command line, how can I verify if I have WMM enable?
I have read the 1250 AP Configuration guide, but I don't see specific discussion/chapter about 802.11n. If there is any good reading I can do, please let me know.
Thanks.

I will try to answer your questions:)
Q-1. Besides the above two, are there any other requirement I need to address in my configuration?
You need to configure 40mhz channel width in the AP 802.11a radio
Q-2. Do I have to enable both 2.4Mhz and 5Mhz radio for 802.11n performance?
Only enable 'N' on the 5ghz side due to only having 3 non-overlapping channels on the 2.4ghz
Q-3. Is there WPA2/TKIP option? If so, would this option support 802.11n? Or, it has to be WPA2/AES?
AES is the supported encryption standard for 802.11N.... not TKIP. WPA2/AES or OPEN is your only option
Q-4. From the command line, how can I verify if I have WMM enable?
show wlan
Issue the config wlan wmm {disabled | allowed | required} wlan-id command in order to enable WMM mode

Cisco 3548-XL supports 802.1x ?

Similar Messages

Maybe you are looking for