Cisco 3600 and WSSI

Hi all,
I'm trying to find a config example detailing how AP sniffer mode and SE capability can be configured on a Cisco 3600 that is equpped with a WSSI. I came across the WSSI deployment guide which does not go into the detailed that I would like to know.I'm particularly after the flow details.
WLC config guide 7.4 only discusses the legacy AP sniffer and SE configuration.
Can anyone point me to a document that explains this info in detail pls?
Thanks very much.
cheers,
janesh

The WSSI module is only able to be used as a dedicated "monitor" mode module. The config guide:
http://www.cisco.com/en/US/products/ps11983/products_tech_note09186a0080bed15d.shtml#conf
states that...
"Note that the WSSI module is only active on AP3600s configured in either Local Mode or FlexConnect Mode. The WSSI module is disabled in all other modes."
There doesn't appear to be any way to configure the "mode" of the WSSI module itself and anything but Local or Flex on the 3600 would disable the module. The module is intended to provide a dedicated radio to offload all monitoring features normally part of Local mode off-channel scanning operation or ELM: CleanAir, RRM, Rogue Detection (not detector), Location/Context, WIPS, allowing the primary radio to service clients 100% of the time, while the WSSI performs all other tasks.
You may want to contact Cisco TAC or you SE for confirmation and perhaps request that a feature enhancement bug is created.

Similar Messages

Something similar to "isdn network-failure-cause" command on Cisco 3600

Hi
I have two Cisco 3600 with NM-HDV-2E1 on each chassis. The version of ios is Version 12.3(19)
Sometimes the Cisco sends the 27 (Destination out of order) or the 38 (Network out of order) cause code, which is generally not correct, because most of all the problem of the traffic not passing is that there's no No circuit/channel available.
So I'd like that Cisco would send the 34 (No circuit/channel available) cause code instead of 27 and 38 cause codes.
Can anyone tell me how to do that?
Thanks in Advance.

Hi,
when the router makes confusion about the ISDN channels, you should first upgrade to latest maintenance and then if it happens again produce debugs to show what exactly the condition is, all failing the is matter for TAC because the router is supposed to send the correct cause code when no channels available.

Capacity Planning me-3600 and me-3800 devices

Hi everyone,
Currently I´m looking for information about Capacity Planning in ME-3600 and ME-3800 devices. I need to know about hardware description in detail, thresholds used (cpu, memory, etc), interfaces, queuing, latency and all the related with capacity planning.
I was looking for this information in cisco.com, but I didn´t find nothing.
Thanks,
Jaime Soto.

Hi Jaime,
the data sheets may contain what you are looking for:
me3600x
http://www.cisco.com/en/US/partner/prod/collateral/switches/ps6568/ps10956/data_sheet_c78-601946.html
me3800x
http://www.cisco.com/en/US/partner/prod/collateral/switches/ps10905/ps10965/data_sheet_c78-601950.html
Riccardo

Cisco 3600 using windows authentication

I recently took over the network manager possition. The win2003 server that was set up to handle dialin authentication from our cisco 3600 crashed and had to be replaced. restoring from backup was not a good option , so I started completely over.
The cisco 3600 was set to authenticate to the windows server but I can not seem to get IAS to accept anyones login. can anyone point me to a setup guide that covers setting up a cisco 3600 to authinticate to a windows2003 server?
Thanks
JT

http://www.cisco.com/en/US/tech/tk827/tk369/technologies_configuration_example09186a0080094501.shtml

Routing issue between Cisco Nexus and Cisco 4510 R+E Chassis

We have configured Cisco Nexus 7K9 as core and Cisco 4510 R+E as access switches for Server connectivity.
We are experiencing problem in terms of ARP learning and Ping issues between Cisco Nexus and end hosts.

Hi,
So you have N7k acting as L3 with servers connected to 4510?.
Do you see the MAC associated with failing ARP in 4510?. Is it happening with all or few servers?. Just to verify if it is connectivity issue between N7k and 4510, you can configure an SVI on 4510 and assign address from same raneg (server/core range) and perform a ping.
This will help narrow down if issue is between server to 4510 or 4510 to N7k.
Thanks,
Nagendra

Communication problem between Cisco 3560 and Cisco SG300.

Dear Support,
I have a Cisco SG300 and Cisco 3560 switches.
3560 is my Core Switch and SG300 is access switch.
From 3560 VLAN information is not passed to SG300.
3560 Configuration:
interface GigabitEthernet0/23
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,10,11
switchport mode trunk
SG300 Configuration:
interface gigabitethernet49
spanning-tree link-type point-to-point
switchport mode general
switchport general allowed vlan add 2,10-11 tagged
macro description switch
Please suggest how this issue is resolve.
Regards,
JItesh Mahajan.

Dear Aleksandra,
Below Configuration is right or wrong for 3560 and SG300.
3560 Configuration:
interface GigabitEthernet0/23
switchport trunk encapsulation dot1q
switchport trunk allowed vlan remove VLAN 1
switchport native vlan 1
switchport trunk allowed vlan 1,2,10,11
switchport mode trunk
SG300 Configuration:
interface gigabitethernet49
spanning-tree link-type point-to-point
switchport mode general
switchport general allowed vlan add 2,10-11 tagged
macro description switch
Regards,
JItesh Mahajan.

How to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

how to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

Hi ,
Have you got any additional public IP Address from your service provider , If yes on router you can have static route for those additional IP Address pointing to your ASA outside interface .
Accordingly you can configure NAT
HTH
Sandy .

Cisco wireless and Apple Mac woes

Hello all,
I've been working with Cisco wireless and WLC's for a couple of years now but the recent onslaught of Apple Mac's is giving me heart burn. I've seen this at numerous sites now and need to throw it to eht community for guidance.
Basically we have had a number of instances where the Macs just fall off the wifi. Sometimes it's when they wake from sleep and other times when roaming between AP's (1131s with same SSID's). Our standard install is WPA2 and per ap local authentication. PC's work fine and never an issue.
We have completed a survey with a spectrum analyser and no RF interefence is present nor errors on the radio interface.
Questions:
- Is there a preferred Cisco config/setup for Mac's to work reliably? I've heard loads of rumors but nothing concrete and nor can I find anything specific.
- Should I be setting up WDS in case there is an authenticating issue.
- For those who are Mac gurus and happen to be reading. What Mac options we should look at?
This has all come to a head because the clients IT company who recommended the Macs (different from us doing the network infrastructure) are insisting that the problem is Cisco incompatibility and that we should rip out the Cisco kit and install airports (what tha!!!).
Thanks in advance for any pointers.
For those who like a config here it is .... Vanilla stuff really
Building configuration...
Current configuration : 2236 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP4
no logging console
enable secret xxxxxxxxxxxxxxxxx
no aaa new-model
dot11 syslog
dot11 ssid Home
   vlan 1
   authentication open
   authentication key-management wpa
   guest-mode
   mbssid guest-mode
   wpa-psk ascii xxxxxxxxxxxx
dot11 ssid avnet
   vlan 2
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii xxxxxxxxxxxxxxxx
username abcd password 1234
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 1 mode ciphers tkip
encryption vlan 2 mode ciphers tkip
ssid Home
mbssid
speed basic-1.0 basic-2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2412
station-role root
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 80 in
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
interface BVI1
ip address 192.168.10.54 255.255.255.0
no ip route-cache
ip default-gateway 192.168.10.1
no ip http server
no ip http secure-server
bridge 1 route ip
line con 0
line vty 0 4
login local
end

Yeah!! even i have come across multiple issue with MAC and Cisco.. these are the below settings which i normally do on the cisco gears and most of the times this solved the issue..
on the IOS AP disable Aironet Extentions and set the poer local and ofdm to max
no dot11 extension aironet
power local cck max
power local ofdm max
end
On the WLC, disable Aironet IE..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

The difference of the IEEE802.1x Auth between Cisco Routers and Catalyst switches

Hello
I am investigating the difference of the IEEE802.1x Auth between Routers and Switches.
Basically dot1x auth is availlable on Catalyst Switches. however if I want to check to
PortBased Multi-Auth , MAC address Auth and any certification Auth with this feature,
Is it possible to integrate into Cisco Router such as Cisco 891F ?
In my opinion Cisco891F is also available to use basic IEEE802.1x but if it compares with Catalyst switches such as Cat3560X
I think there might be any unsupported feature on Cisco 891F.
I appreciate any information. thank you very much in advance.
Best Regards,
Masanobu Hiyoshi

Many time in interviews asked comaprison between cisco routers and switches that i was answerless bcoz i dont have much knowledge about that.Can anyone provide me the compariosin sheet of the same.how are the cisco devices differ with each other how much Bandwidth each routres support and Etc...
Ummmm ... The most common question I get is "what is the difference between a router and a switch".
However, if you get a question like this, then my impression to this line of questioning are:
1. The candidate they are looking for has in-depth knowledge of routers and switches. And I mean IN-DEPTH!;
2. They are not looking for a candidate. They just want to stroke their ego. There is not alot of people who can give you the "names and numbers" of routers and switches at a snap of a finger. And if you do happen to know the answer, then and there, then expect a tougher follow-up question.

Urgent!!! Cisco ACE and asymetric routing assistance needed

I am wondering if someone can give me pointers on the cisco ACE
and asymetric routes. I've attached the diagram:
-Cisco IOS IP address is 192.168.15.4/24 and 4.1.1.4/24
-Firewall External interface is 192.168.15.1/24,
-Firewall Internal interface is 192.168.192.1/24,
-F5_BigIP External interface is 192.168.192.4/24,
-F5_BigIP Internal interface is 192.168.196.1/24 and 192.168.197.1/24,
-host_y has IP addresses of 192.168.196.10/24 and 192.168.197.10/24,
-Checkpoint has static route for 192.168.196.0/24 and 192.168.197.0/24
pointing to the F5_BigIP,
-host_y is dual-home to both VLAN_A and VLAN_B with the default
gateway on host_y pointing to VLAN_A which is 192.168.196.1,
-host_x CAN ssh/telnet/http/https to both of host_y IP addresses
of 192.168.196.10 and 192.168.197.10.
In other words, from host_x, when I try to connect to host_y
via IP address of 192.168.197.10, the traffics will go through VLAN_B
but the return traffics will go through VLAN_A. Everything
is working perfectly for me so far.
Now customer just replaces the F5_BigIP with Cisco ACE. Now,
I could not get it to work with Asymetric route with Cisco ACE. In
other words, from host_x, I can no longer ssh or telnet to host_y
via IP address of 192.168.197.10.
Anyone knows how to get asymetric route to work on Cisco ACE?
Thanks in advance.

That won't work because ACE uses the vlan id to distinguish between flows.
So when the response comes back on a different vlan, ACE can't find the flow it belongs to and it drops it.
Even if we could force it to accept the packet, ACE would then try to create a new flow for this packet and it will collide with the flow already existing on the frontend.
You would need to force your host to respond on the same vlan the traffic came in.
This could be done with client nat on ACE using different nat pool.
Gilles.

Cisco ISE and SecurID Integration Questions

I'm looking for some clarity trying to understand something conceptually. I want to integrate Cisco ISE with RSA SecurID, the idea being that if the user authenticates with RSA SecurID they end up on one VLAN, however, if they don't authenticate with (or don't use, or don't have) SecurID they'll end up on another VLAN. Note that I'm not using SecurID for wireless access...all PCs are wired to Ethernet.
We have been using RSA SecurID for a while and are currently on version 8.0. Our users are authenticating via the RSA Agent typically on Windows 8.1. Instead of the usual Windows login prompt, the RSA Agent first prompts for the username and passcode (they use an app on their smartphones to get the passcode), then after a moment or two, it prompts for their Windows domain password.
We have recently installed Cisco ISE version 1.3. With the help of a local Cisco engineer and going through the "Cisco Identity Services Engine User Guide", I have it set up and running along with a few 'test' ports on our Cisco 6809 switch, it basically works...as a test it's simply set up that if they authenticate they're on one VLAN, if not, they end up on another (this is currently without using RSA...just out-of-the-box Windows authentication).
The Cisco engineer was unable to help me with RSA SecurID, so pressing on without him, out of the same user guide I have followed the directions for "RSA Identity Sources" under the "Managing Users and External Identity Sources", and that went well as far as ISE is concerned; I am now ready to get serious about getting ISE and SecurID working together.
My mistake in this design so far was assuming that the RSA agent on the Windows client PCs would communicate with Cisco ISE...there doesn't seem to be a way to have them point to a non-RSA SecurID server for authentication. The concept I'm missing is what, or how, the end-user machine is supposed to authenticate taking advantage of both ISE and SecurID.
I have dug deeper into the Cisco ISE documentation but it seems heavily biased towards Wi-Fi and BYOD implementations and it's not clear to me what applies to wired vs wireless. Perhaps it's a case that I'm not seeing the forest for the trees, but I'm not understanding what the end-user authentication looks like. It apears that as I learn more about ISE, it should become the primary SSO source, that SecurID becomes just an identity source and the PC clients would no-longer directly communicate with the SecurID servers. That being the case, do I need to replace the SecurID client on the PCs and something else Cisco-ish fills this role? An agent for ISE? How do they continue to use their passcode without the RSA agent?
Thanks!

The external db not operation indicates that there is no communication between ACS and RSA. Did you fetch the package.cab file to analyse the auth.log file?
Have you already gone through the below listed link?
http://www.security-solutions.co.za/cisco-CSACS-1113-SE-4.2-RSA-Authentication-Manager-Integration-Configuration-Example.html
Regards,
Jatin Katyal
- Do rate helpful posts -

Uploading YouTube videos/urls into Cisco Show and Share

We've just purchased the DMM 5.2 and the Show and Share appliance to host internal company videos but there are some YouTube videos out there that we want to pull into our Show and Share system as well. How can we do this? I've tried every possible combination of youtube url and embedded url that is out there, at least nothing that I've tried has worked thus far. I'm able to pull in other internal URLs of different videos (wmv format) without any trouble. Is this an issue with YouTube or perhaps with flv formatted video that YouTube uses (which should work according to the manual).
I know this is a new product, but is there anyone that can help?
Thank you in advance,
Chris

Chris,
The YouTube videos are typically Flash content.
The key here is that you need to download the Flash content
yourself and then Upload to the Show and Share.
Use the DIRECT URL of the Flash Content on YouTube to download
the FLV to you Personal device. After file successfully download, simply
upload the file to Show and Share.
For example:
Cisco Show and Share Flash Demo
http://www.youtube.com/watch?v=ZzquCVvS0qQ
* this link is the actual Dashboard URL not the video link
http://v4.lscache8.c.youtube.com/videoplayback?ip=0.0.0.0&sparams=id%2Cexpire%2Cip%2Cipbits%2Citag%2Calgorithm%2Cburst%2Cfactor%2Coc%3AU0dWRlRRVF9FSkNNNl9MS1hB&fexp=904405%2C901902&algorithm=throttle-factor&itag=34&ipbits=0&burst=40&sver=3&expire=1271466000&key=yt1&signature=1E65C92607546EA03DE0D1082884574D3F58AD0F.93FF9FDB00B10B44BBB52F31AADF3EB50FCEB7CC&factor=1.25&id=673aae095bd2d2a4&
* Actual URL of Video Content
========================================================
FOR THOSE THAT ARE USING OSX & SAFARI:
======================================
If you need to download FLASH Content for TESTING in your DMS Solution, You
can download Flash Videos from YouTube.
Note: The Video Quality is NOT HD or even SD... it is ID (Internet Definition)
      Also, the downloaded file will be a .flv Flash File.
1. Open a Video on YouTube, Google Video etc.
2. Press "Alt+Cmd(Apple-Key)+A" - A window opens named "Activity".
3. Select the ".flv" file (looking on filesize helps) and press "Cmd(Apple-Key)+C" to copy.
   Paste with "Cmd(Apple-Key)+V" the URL to your Adress Bar and press Enter.
4. If you need a different video format such as MPEG, WMV, or SWF; you will need to convert
   the downloaded ".flv" file with VisualHub or VLC
If this answers your question, Please take time to mark this
discussion answered & rate the response.
Thank You!
T.

Cisco 891 and Vitek DVR via iPhone

Fellow Cisco Experts,
I have pretty much googled my brains out trying to figure out why we can't access our Vitek DVR on our iPhones. It seems as if the TCP ports for 554 and 8081 work, but UDP ports do not. The public IP is 70.175.15.103 and the private DVR ip is 192.168.43.96. I'm fairly new to Cisco CLI, and I've opened ports on normal routers with ease. This, however, has got me beat. Can someone please help me out? The config is attached.
Thanks
Kris

Hi kris
dont see any access list entries mentioning UDP.
test to see if access list is the issue , by removing the access list from fastEthernet 8
no ip access-group wan-in in
do this for a couple and see if you can then access the DVR.
regard Dave

Is there any documentation to deploy federation between Cisco IM and presence and Lync 2010 sister companies?

Hello All,
Company A – Using Cisco IM and Presence
Company B – Using Microsoft Lync 2010
We would like to establish federation between Company A and Company B and also looking for the documentation which has the step by step instruction.
Please let us know overall steps or provide us the documentation. Thank you in advance.
Thanks

For Federation between Lync and Cisco IM, you can check below link and this
document
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/9_0_1/CUP0_BK_IAAE17D8_00_integration-guide-interdomain-federation-90/CUP0_BK_IAAE17D8_00_integration-guide-interdomain-federation-90_chapter_01.html
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Uploading Youtube Vid. URL to Cisco Show and Share failed

Uploading Youtube Vid. URL to Cisco SnS failed. I get error msg. : Connection to video server failed

Chris,
The YouTube videos are typically Flash content.
The key here is that you need to download the Flash content
yourself and then Upload to the Show and Share.
Use the DIRECT URL of the Flash Content on YouTube to download
the FLV to you Personal device. After file successfully download, simply
upload the file to Show and Share.
For example:
Cisco Show and Share Flash Demo
http://www.youtube.com/watch?v=ZzquCVvS0qQ
* this link is the actual Dashboard URL not the video link
http://v4.lscache8.c.youtube.com/videoplayback?ip=0.0.0.0&sparams=id%2Cexpire%2Cip%2Cipbits%2Citag%2Calgorithm%2Cburst%2Cfactor%2Coc%3AU0dWRlRRVF9FSkNNNl9MS1hB&fexp=904405%2C901902&algorithm=throttle-factor&itag=34&ipbits=0&burst=40&sver=3&expire=1271466000&key=yt1&signature=1E65C92607546EA03DE0D1082884574D3F58AD0F.93FF9FDB00B10B44BBB52F31AADF3EB50FCEB7CC&factor=1.25&id=673aae095bd2d2a4&
* Actual URL of Video Content
========================================================
FOR THOSE THAT ARE USING OSX & SAFARI:
======================================
If you need to download FLASH Content for TESTING in your DMS Solution, You
can download Flash Videos from YouTube.
Note: The Video Quality is NOT HD or even SD... it is ID (Internet Definition)
      Also, the downloaded file will be a .flv Flash File.
1. Open a Video on YouTube, Google Video etc.
2. Press "Alt+Cmd(Apple-Key)+A" - A window opens named "Activity".
3. Select the ".flv" file (looking on filesize helps) and press "Cmd(Apple-Key)+C" to copy.
   Paste with "Cmd(Apple-Key)+V" the URL to your Adress Bar and press Enter.
4. If you need a different video format such as MPEG, WMV, or SWF; you will need to convert
   the downloaded ".flv" file with VisualHub or VLC
If this answers your question, Please take time to mark this
discussion answered & rate the response.
Thank You!
T.

Cisco 3600 and WSSI

Similar Messages

Maybe you are looking for