Cisco 871W wireless drops

I have a Cisco 871W that periodically will drop its signal. Any tips on how to configure this for maximum reliability? I set it to use chanel 2462.

I set it to use chanel 2462.
Sure, take this line away.
The problem could be the fact that you've specified to the WAP what channel to use.  Now if you have a neighbor wifi using this same channel ...
Another thing:  The 870W has two antennas.  How many have you installed?

Similar Messages

  • Help converting Cisco 871W Wireless configuration to Cisco 881W

    I am in the process of trying to convert my Wireless setings over from our existing 871W to the new 881W routers.  I have found some documentation http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns430/ns855/white_paper_c11-492842.html but after reading it seems a) a bit confusing and b) doesn't cover how to handle multiple SSID's on different VLAN's.
    My existing 871 configuration looks like this:
    interface Dot11Radio0
    no ip address
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    no ip route-cache cef
    no ip route-cache
    encryption vlan 1 mode ciphers aes-ccm
    encryption vlan 3 mode ciphers aes-ccm
    broadcast-key vlan 1 change 3600
    ssid <Home SSID>
    ssid <Corporate SSID>
    mbssid
    speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
    packet retries 32
    station-role root
    rts threshold 2312
    rts retries 50
    dot1x reauth-period 3600
    no cdp enable
    interface Dot11Radio0.1
    description Corporate Data and Voice
    encapsulation dot1Q 1 native
    no ip route-cache
    no cdp enable
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 spanning-disabled
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    interface Dot11Radio0.2
    description Untrusted  Home
    encapsulation dot1Q 3
    no ip route-cache
    no cdp enable
    bridge-group 3
    bridge-group 3 subscriber-loop-control
    bridge-group 3 spanning-disabled
    bridge-group 3 block-unknown-source
    no bridge-group 3 source-learning
    no bridge-group 3 unicast-flooding
    interface BVI1
    description Bridge Interface - Corporate Data
    ip address x.x.x.x x.x.x.x
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip nat inside
    ip virtual-reassembly
    zone-member security in-zone
    no ip route-cache cef
    no ip route-cache
    ip tcp adjust-mss 1260
    service-policy input QOS_POL_REMARK_CORPORATE
    interface BVI3
    description Bridge Interface - Home
    ip address 192.168.x.x 255.255.x.x
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip nat inside
    ip virtual-reassembly
    zone-member security home-zone
    no ip route-cache cef
    no ip route-cache
    ip tcp adjust-mss 1260
    service-policy input QOS_POL_REMARK_HOME
    Can anyone lend a hand on how my 881W configuration might look like?  You can't create multiple bridge groups and route IP (you can only do that over bridge group 1).  I need to make sure that I can have two logically separated wireless networks (one for corporate and one for home) and that they get the right IP addresses from their right VLAN's.
    Any input would be greatly appreciated.
    Matt

    Found a solution:
    dot11 ssid BLAH
       no vlan 1
    interface Dot11Radio0
    encryption mode ciphers aes-ccm tkip
    Boom!
    ap#sh ip int brief dot0
    Interface                  IP-Address      OK? Method Status                Protocol
    Dot11Radio0                unassigned      YES NVRAM  up                    up    

  • Cisco 871W Wireless Performance

    I have a newly configured 871W router that is giving me terrible performance via wifi.  Via ethernet I am getting normal 100Mbit speeds.  The router is configured for 54Mbit/sec, my computer thinks it is connected at 54Mbit/sec (see attached photo). 
    iperf client & server output:
    client:~ jsimon$ iperf -c 10.0.20.100
    Client connecting to 10.0.20.100, TCP port 5001
    TCP window size:  129 KByte (default)
    [  4] local 10.0.30.207 port 55307 connected with 10.0.20.100 port 5001
    [ ID] Interval       Transfer     Bandwidth
    [  4]  0.0-10.0 sec  20.5 MBytes  17.2 Mbits/sec
    jsimon@server:~$ iperf --server
    Server listening on TCP port 5001
    TCP window size: 85.3 KByte (default)
    [  4] local 10.0.20.100 port 5001 connected with 10.0.30.207 port 55307
    [ ID] Interval       Transfer     Bandwidth
    [  4]  0.0-10.3 sec  20.5 MBytes  16.8 Mbits/sec
    See my running config:
    wifi871a#show run
    Building configuration...
    Current configuration : 5145 bytes
    version 12.4
    service nagle
    no service pad
    service tcp-keepalives-in
    service tcp-keepalives-out
    service timestamps debug datetime msec localtime show-timezone
    service timestamps log datetime msec localtime show-timezone
    service password-encryption
    hostname wifi871a
    boot-start-marker
    boot-end-marker
    logging message-counter syslog
    logging buffered 51200 warnings
    enable secret 5 $1$NJNA$p4/81Kkji2yMuC8UE21td1
    no aaa new-model
    crypto pki trustpoint TP-self-signed-2242084313
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-2242084313
    revocation-check none
    rsakeypair TP-self-signed-2242084313
    crypto pki trustpoint TP-self-signed-2631278149
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-2631278149
    revocation-check none
    rsakeypair TP-self-signed-2631278149
    crypto pki certificate chain TP-self-signed-2631278149
    dot11 syslog
    dot11 ssid 10fir
    vlan 30
    authentication open
    authentication key-management wpa
    guest-mode
    wpa-psk ascii 7 xxxxxxxxxxxxxx
    ip source-route
    ip dhcp excluded-address 10.10.10.1
    ip dhcp excluded-address 10.0.30.1 10.0.30.199
    ip dhcp pool sdm-pool
       import all
       network 10.10.10.0 255.255.255.248
       default-router 10.10.10.1
       lease 0 2
    ip dhcp pool Users
       import all
       network 10.0.30.0 255.255.255.0
       default-router 10.0.30.1
       domain-name 10fir.com
       dns-server 4.2.2.2
       lease 0 3
    ip cef
    ip domain name 10fir.com
    ip name-server 8.8.8.8
    ip name-server 4.2.2.2
    no ipv6 cef
    multilink bundle-name authenticated
    archive
    log config
      hidekeys
    bridge irb
    interface FastEthernet0
    switchport access vlan 30
    spanning-tree portfast
    interface FastEthernet1
    switchport access vlan 30
    interface FastEthernet2
    switchport access vlan 30
    spanning-tree portfast
    Interface FastEthernet3
    switchport access vlan 30
    spanning-tree portfast
    interface FastEthernet4
    ip address 10.0.20.20 255.255.255.0
    duplex auto
    speed auto
    interface Dot11Radio0
    no ip address
    no dot11 extension aironet
    encryption mode ciphers aes-ccm
    encryption vlan 30 mode ciphers aes-ccm
    broadcast-key change 3600
    ssid SSID
    speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
    station-role root access-point
    no cdp enable
    interface Dot11Radio0.30
    encapsulation dot1Q 30
    no cdp enable
    bridge-group 30
    bridge-group 30 subscriber-loop-control
    bridge-group 30 spanning-disabled
    bridge-group 30 block-unknown-source
    no bridge-group 30 source-learning
    no bridge-group 30 unicast-flooding
    interface Vlan1
    description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
    no ip address
    ip tcp adjust-mss 1452
    shutdown
    interface Vlan30
    description Users Network
    no ip address
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip nat inside
    ip virtual-reassembly
    bridge-group 30
    bridge-group 30 spanning-disabled
    interface BVI30
    description Wifi Bridge
    ip address 10.0.30.1 255.255.255.0
    ip virtual-reassembly
    router eigrp 10
    network 10.0.0.0
    no auto-summary
    ip default-gateway 10.0.20.1
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 10.0.20.1
    no ip http server
    ip http authentication local
    no ip http secure-server
    ip http timeout-policy idle 5 life 86400 requests 10000
    ip dns server
    control-plane
    bridge 30 route ip
    line con 0
    privilege level 15
    login local
    no modem enable
    line aux 0
    line vty 0 4
    privilege level 15
    login local
    transport input telnet ssh
    scheduler max-task-time 5000
    end

    Also if I setup another router on the same frequencies I get perfect performance.
    Another 871W or something else.
    If it's another router model, I think you need to look at this.  I have a strange feeling you're hitting the limit of the hardware.  Not the wireless capabilities, but the router itself.

  • Linksys access point is better than cisco's wireless router !?

    I bought a Linksys WAP54G yesterday to
    see whether my 871w is faulty. (Constant signal drops).
    While I was testing, I noticed that WAP54G has a better signal strength than the 871w. What's interesting is, Linksys WAP54G only has a max power output of 15.5dbm, while the Cisco 871w has the max output of 17 dbm.
    I used the netstumbler to measure the signal strength. Linksys WAP54G can constantly stay at -60dbm, while the Cisco 871w (with the max power configured) goes up and down (between -70 and -60 dbm).
    They are both configured to use the same channel. I find this strange as to why a higher power output has a much lower efficiency compare to a lower power output.
    Any ideas?

    Do you see this happening with all the 870 ISRs? I am suspecting a hardware issue. Can you check with a different ISR and see if you are observing the same behaviour ?

  • Cisco 871W - VLAN-Interface = 'Up/Down'

    Hi,
    I have configured our company's Cisco 871W per suggested configs found on the cisco web site, however, VLAN1, VLAN10 and VLAN20 interfaces won't come up (e.g. up/down) and it's preventing communication. Guess I'm expecting this to behave like a multi-layer swt/rtr (i.e. 3560). Can anyone help me on this?
    Here is the config:
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname xxxxxxxxxxxxx
    boot-start-marker
    boot-end-marker
    enable secret xxx
    enable password xxxxxx
    aaa new-model
    aaa authentication login default local
    aaa authorization exec default local
    aaa session-id common
    resource policy
    ip subnet-zero
    ip cef
    no ip dhcp use vrf connected
    ip dhcp excluded-address 192.168.1.1 192.168.1.99
    ip dhcp excluded-address 192.168.2.1 192.168.2.99
    ip dhcp pool VLAN10
    import all
    network 192.168.1.0 255.255.255.0
    default-router 192.168.1.1
    domain-name xxxxxxxxxxxxxxxx
    lease 4
    ip dhcp pool VLAN20
    import all
    network 192.168.2.0 255.255.255.0
    default-router 192.168.2.1
    domain-name xxxxxxxxxxxx
    lease 4
    no ip domain lookup
    ip domain name xxxxxxxxx
    crypto pki trustpoint TP-self-signed-1485172728
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-1485172728
    revocation-check none
    rsakeypair TP-self-signed-1485172728
    crypto pki certificate chain TP-self-signed-1485172728
    certificate self-signed 01
    <--------some output omitted--------->
    interface FastEthernet0
    switchport access vlan 20
    spanning-tree portfast
    interface FastEthernet1
    switchport access vlan 10
    spanning-tree portfast
    interface FastEthernet2
    switchport access vlan 10
    spanning-tree portfast
    interface FastEthernet3
    switchport access vlan 10
    spanning-tree portfast
    interface FastEthernet4
    ip address 10.2.5.1 255.255.0.0
    ip nat outside
    ip virtual-reassembly
    ip tcp adjust-mss 1460
    duplex auto
    speed auto
    no cdp enable
    interface Dot11Radio0
    no ip address
    shutdown
    speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
    station-role root
    interface Vlan1
    no ip address
    interface Vlan10
    description Internal Network
    ip address 192.168.1.1 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    interface Vlan20
    description Guest Network
    ip address 192.168.2.1 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    ip classless
    ip route 0.0.0.0 0.0.0.0 FastEthernet4
    no ip http server
    no ip http secure-server
    ip nat inside source list 1 interface FastEthernet4 overload
    ip access-list extended Guest-ACL
    deny ip any 192.168.1.0 0.0.0.255
    permit ip any any
    access-list 1 permit 192.168.1.0 0.0.0.255
    access-list 1 permit 192.168.2.0 0.0.0.255
    <--------------output omitted---------->
    End
    Sample device-specific configs would help.
    We are not concerned with the wireless portion of the config at this point.
    Any insight is appreciated.
    Thanks!
    Chris
    News Corp.

    You may be hitting with a bug : check the details of this bug : CSCsc10989

  • Problems with connection between nintendo wii and cisco 871w.-

    Dears,
    I have a problem connecting my Nintendo Wii via wireless with a cisco 871w.
    I tested  with different encryption (WEP, WPA2 and open) to no avail.
    The console gives me errors when testing the connection  (number 51 330).
    Any other device I connected  to the wireless network works flawlessly (Notebook, iphone, nokia  phones)
    The network configuration to be open is:
    ip dhcp pool VLAN20
       import all
       network 192.168.2.0 255.255.255.0
       default-router 192.168.0.1
       dns-server XX YY
       lease infinite
    dot11 ssid Wii
    vlan 20
    authentication open
    ssid guest-mode
    interface Dot11Radio0
    no ip address
    ssid Wii
      speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
    54.0
    channel 2462
    station-role root
    I change the channel, the  encryption. Leave the console with  fixed ip, not works!
    Thanks for your help.

    Please show me what commands you used to make these changes.
    Thanks!
    Mi config:
    interface Dot11Radio0
    no ip address
    no dot11 extension aironet
    encryption vlan 10 mode ciphers tkip
    encryption vlan 20 mode ciphers tkip
    ssid Agrolate
    ssid Pamelie
    mbssid
    speed basic-1.0 basic-2.0 basic-5.5 basic-6.0 basic-9.0 basic-11.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
    channel 2462
    station-role root
    no cdp enable

  • Cisco Enterprise Wireless iPad Mini iOS 7.1.1

    Hi,
    I am experiencing issues with iPad Mini running iOS version 7.1.1  connecting to a Cisco Enterprise Wireless Network consisting of a Wireless LAN Controller.
    The Wireless LAN Controller is running 7.6.120.0.  All laptops, printers, iPad 2 & 3 models, iPhones, tablets, and other wireless devices work fine and do NOT experience connection drops.  However, iPad Mini running iOS verion 7.1.1 experiences randomly Wi-Fi connection drops.  Sometimes when this happens the iPad Minis will reconnect back to Wi-Fi, but most of the time, they do not reconnect.
    I have been working with Cisco TAC but they cannot find any reason for disconnect.
    I have changed the channel on the Wireless Access Points to Channel 6 and the SSID is open.
    I also have 1 iPad Mini running iOS version 6.1.3 that works fine and does not experience these issues.
    I also run a FileMaker 13 Database on these iPads using FileMaker Go 13.  The FileMaker database is set to never disconnect on idle nor to never re-authenticate.  But yet the iPads will disconnect from Wi-Fi which interrupts the connection between FileMaker Go and FileMaker Server.

    Try double -licking the Home button to bring up the recent apps display. Swipe up on the image of the App Store to terminate it. Restart the App Store to see if you get the proper operation.

  • I just set up an Optus Cisco DPQ3925 wireless router to access higher speed internet I signed up for. I have a 4th gen airport extreme I want to put in another room and use as a wifi extender the wifi but I get an error message each time I try. Help?

    Hello all.
    I have just set up a new cisco DPQ3925 wireless router that Optus sent me to be able to access the higher speed internet I have signed up for.
    I have a 4th gen apple extreme that I want to use to extend the wifi but when I try to update the settings via the airport utility I get a message that says it cannot do so, and to check it is in range and the wifi is set up correctly. I'm not experienced with these things but I can't think what I have done wrong.
    Is anybody able to help me please.

    You cannot use the AE to extend wireless from a non apple router such as your cisco modem router.. they are not compatible..
    You need to tie to the two devices together either with ethernet or something like EOP adapters.. They are about $120 and you can price match in officeworks.

  • Is there a fix for the MBP wireless dropping issue?

    I began to experience the Macbook Pro dropping wireless connectivity on my very 1st Apple in 2008.  At the end of the day my machine was replaced with a new Macbook Pro mid 2010.  It appeared to be working just fine until about 2-3 months ago when I started dropping my wireless printer connection.  I searched the internet hoping for a driver update from HP or something from Apple and each time I found something, the problem still existed.  I even thought that by upgrading to Lion would resolve any issues that I have with my MBP wireless connectivity issue.  After upgrading to buying a new router, new printer and upgrading to Lion; the wireless dropping issue still remains unresolved!  I know there are several hundred in not thousands of people who are having the same problem so what are we supposed to do?
    When my 1st MBP was replaced in 2010 I had to stop working because I was diagnosed with "Failed Back Surgical Syndrome" and was in the process of applying for disability.  Something in the back of my mind said that I needed to purchase Apple Care for this new replacement however I had used all of my savings & retirement to sustain life for me and my family that there was nothing for Apple Care.  If it weren't for my church and family I am not sure what I would do during the 18 months of no income while waiting for a decision only to receive an appeal until I findly stood in front of an Administrative Law Judge who heard my case and granted me disability.  Besides there was no way I could ask anyone for money to purchase a warranty for a top of the line laptop while the country was falling off an economical cliff.
    I broke down and called Apple Support and was told that I qualified for technical assistance regarding the upgrade to Lion a few weeks ago.  The tech on the phone had me run some disk utility tests and had me repair permissions which she said could be the cause of the problem.  I willingly went along with her in hopes that this was indeed the fix.  However, within 10 minutes of hanging up the phone my MBP began to drop it's wireless connection to my new HP printer and also the Internet.  Hence my question above is what I am really looking to have answered!  What is the fix to this problem that so many people are having issues with?  I couldn't afford to purchase Apple Care back in 2010 and I can't afford to purchase a new 2011 machine today if that truly is the fix!
    I will be disabled for the remainder of my life and I have grown dependent upon my computer to stay in touch with friends and colleges from work.  I worked for the IT Group at Wynn Resorts and I can say that the type of service Appple is providing it's customers is not what I learned over the past 25 years with Mr. Wynn.  Why can't Apple get the simple concept that it's customers are it's life line and keeps them in business.  I need help and I don't know what to do nor where to turn.  It would be different if Apple acknowledged the issue and said they were working on it however they aren't.  I plead to Apple to help me fix my notebook so I can stay connected to the outside world vs. couped up inside my home.
    Best Regards,
    Scott Leavitt

    I am simply lookig for some help not an argument.  I am not an RF specialist however have setup a few wireless networks in my tenure at Wynn Resorts.  I fully agree that wireless networking is an art and a science however the powers that be in Network Land have toughted wireless networking is the easiest and quickest way to get two computers to talk with one another.  As I previously said I have already turned one (1) MBP in for this problem and Apple decided to replace it because they could not fix the problem with my particular MBP.  This MBP was running Leopard when the problems started
    I am having a hard time believeing that there are several other devicces in my home that depend on a wireless network to operate and my MBP is the only one having an issue.  I took this a step further and decided to see what would happen if I tried to connect wirelessly via Fusion.  In Windows 7 I am able to print and scan to my hearts content without any issues.  I am able to browse the internet as much as I want.  I close Fusion and try to connect to my printer via wireless and nothing.
    In order to get Apple to help do I need to get a Network Analyzer and capture packets when I have these problems?  Out of the 1000 + posts is there a consolidation of which answer is the best?  BTW I am accessing the internet via a wireless connection using Fusion and Windows 7.
    In response to Linc's comments, I will look at the router specifications however I did not qualify that these devices are not using the wireless connection at the same time.  Right now I would guess there are maybe two (2) or three (3) at the most that are actively transmitting / receiving information. --  Thanks

  • Problem getting Airprint (Bonjour) to communicate to HP LaserJet CP1525nw printer across a Cisco 5508 Wireless Controller

    I cannot get my IPad2 to print (it cannot find the printer) using a Laserjet CP1525nw color printer across a wireless network using a Cisco 1508 Wireless Controller with 49 wireless access points. HELP!!!!
    What is the secret to getting Bonjour to work on it?
    I can get the IPad2 to locate the HP CP1525nw printer without a hitch using a low budget Netgear WAG102 stand alone wireless access point on the same network.

    If it helps somebody, here is what you need to do.
    It worked for me, but only in Multicast-Unicast mode.
    http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_tech_note09186a0 080bb1d7c.shtml

  • Ask the Expert: Cisco BYOD Wireless Solution: ISE and WLC Integration

    With Jacob Ideji, Richard Hamby  and Raphael Ohaemenyi   
    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about  the new Identity Solutions Engine (ISE) and Wireless LAN Controller (WLC) hardware/software, integration, features, specifications, client details, or just questions about  Cisco's Bring-your-own device (BYOD) solution with cisco Experts Richard Hamby, Jacob Ideji, and Raphael Ohaemenyi. The interest in BYOD (Bring You Own Device) solutions in the enterprise has grown exponentially as guests and company users increasingly desire to use personal devices to access .  Cisco BYOD enhances user experience and productivity while providing security, ease-of-administration, and performance. The heart of the Cisco wireless BYOD solution is Identity Solutions Engine (ISE) utilizing the Cisco Unified Wireless portfolio.  Starting with ISE v1.1.1MR and WLC (Wireless LAN Controller) code v7.2.110.0 and higher, end-to-end wireless BYOD integration is reality. 
    Jacob Ideji is the technical team lead in the Cisco authentication, authorization and accounting (AAA) security team in Richardson, Texas. During his four years of experience at Cisco he has worked with Cisco VPN products, Cisco Network Admission Control (NAC) Appliance, Cisco Secure Access Control Server, and Dot1x technology as well as the current Cisco Identity Services Engine. He has a total of more than 12 years experience in the networking industry. Ideji holds CCNA, CCNP, CCSP, CCDA, CCDP, and CISM certifications from Cisco plus other industry certifications.
    Richard Hamby  works on the Cisco BYOD Plan, Design, Implement (PDI) Help Desk for Borderless Networks, where he is the subject matter expert on wireless, supporting partners in the deployment of Cisco Unified Wireless and Identity Services Engine solutions. Prior to his current position, Hamby was a customer support engineer with the Cisco Technical Assistance Center for 3 years on the authentication, authorization, accounting (AAA) and wireless technology teams. 
    Raphael Ohaemenyi  Raphael Ohaemenyi is a customer support engineer with the authentication, authorization and accounting (AAA) team in the Technical Assistance Center in Richardson, Texas, where he supports Cisco customers in identity management technologies. His areas of expertise include Cisco Access Control Server, Cisco Network Admission Control (NAC) Appliance, Cisco Identity Services Engine, and IEEE 802.1X technologies. He has been at Cisco for more than 2 years and has worked in the networking industry for 8 years. He holds CCNP, CCDP, and CCSP certification.
    Remember to use the rating system to let Jacob, Richard and Raphael know if you have received an adequate response.  
    Jacob, Richard and Raphael might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the wireless mobility sub community forum shortly after the event. This event lasts through Oct 5th, 2012. Visit this forum often to view responses to your questions and the questions of other community members.

    OOPS !!
    I will repost the whole messaqge with the correct external URL's:
    In  general, the Trustsec design and deployment guides address the specific  support for the various features of the 'whole' Cisco TS (and other  security) solution frameworks.  And then a drill-down (usually the  proper links are embedded) to the specifc feature, and then that feature  on a given device.  TS 2.1 defines the use of ISE or ACS5 as the policy  server, and confiugration examples for the platforms will include and  refer to them.
    TrustSec Home Page
    http://www.cisco.com/en/US/netsol/ns1051/index.html
    http://www.cisco.com/en/US/solutions/collateral/ns170/ns896/ns1051/product_bulletin_c25-712066.html
    http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11637/ps11195/at_a_glance_c45-654884.pdf
    I find this page very helpful as a top-level start to what features and capabilities exist per device:
    http://www.cisco.com/en/US/solutions/ns170/ns896/ns1051/trustsec_matrix.html
    The TS 2.1 Design Guides
    http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns744/landing_DesignZone_TrustSec.html
    DesignZone has some updated docs as well
    http://www.cisco.com/en/US/netsol/ns982/networking_solutions_program_home.html#~bng
    As  the SGT functionality (at this point) is really more of a  router/LAN/client solution, the most detailed information will be in the  IOS TS guides like :
    http://www.cisco.com/en/US/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6.x.html
    http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_cts/configuration/xe-3s/asr1000/sec-usr-cts-xe-3s-asr1000-book.html
    http://www.cisco.com/en/US/docs/switches/lan/trustsec/configuration/guide/trustsec.html

  • Wireless drop of Macbook Air (mid2012)

    I have Macbook Air 13 inch- (mid 2012) with software OS X 10.8.4 (12E55) , i have problem with wireless connection which it drops always, i tried to install windows update 1.0 for (mid 2013) but it not work & gives me message that it isn't support on my system, so now please tell me what the solution to solve this wireless drop.

    Back up all data before making any changes.
    Step 1
    Take all the applicable steps in this support article.  
    Step 2
    If you're running OS X 10.8.4 or later, run Wireless Diagnostics and take the remedial steps suggested in the summary that appears, if any. The program also generates a large file of information about your system, which would be used by Apple Engineering in case of a support incident. Don't post the contents here.
    Step 3
    If you're not using a wireless keyboard or trackpad, disable Bluetooth by selecting Turn Bluetooth Off from the menu with the Bluetooth icon. If you don't have that menu, open the Bluetooth preference pane in System Preferences and check the box marked Show Bluetooth in menu bar. Test. Continue if you find that Wi-Fi is faster with Bluetooth disabled.
    From that same menu, select Open Bluetooth Preferences. If the box labeled Discoverable is checked, uncheck it. Click the Advanced button, and in the sheet that opens, uncheck the top three boxes, if any are checked. Click OK. Enable Bluetooth and test again.
    If the application called "Bluetooth Setup Assistant" is running, quit it.
    Step 4
    This step will erase all your settings in the Network preference pane. Make a note of them before you begin, and recreate them afterwards. It may be helpful to take screenshots of the preference pane.
    Triple-click the line below on this page to select it:
    /Library/Preferences/SystemConfiguration
    Right-click or control-click the highlighted line and select
    Services ▹ Reveal
    from the contextual menu.* A folder should open with an item named "SystemConfiguration" selected. Move the selected item to the Trash. You may be prompted for your administrator password.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). In the Finder, select
    Go ▹ Go to Folder...
    from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.
    Reset the System Management Controller.
    Step 5
    [See related.]

  • [SOLVED] Wireless drops out

    Hey there,
    I have been getting weird problems with my wireless dropping in and out every say 30 secs. I recently did a global update so I am thinking something may have broken.
    I also use wicd to manage my wireless connection. Also there is no problem with the wireless itself as another person using the connection is having no problem at all.
    Anyone got any ideas on the matter?
    Last edited by Rede (2009-12-07 12:14:47)

    Oh wow, is that a coincidence. My thread in this forum that says Samba disconnects my wifi, I use the same wifi driver, and also use Wicd, and when I try to connect to a Samba share, my wifi starts disconnecting and reconnecting every 10-20 seconds. These problems sound related IMO.

  • Cisco 871W as Radius Local Authenticator

    We are tring to configure an Cisco 871w as an access point and also as an local authenticator.The NAS would be the same server. The sample config is as below
    aaa group server radius rad_eap
    server 10.10.200.1 auth-port 1645 acct-port 1646
    aaa group server radius rad_mac
    aaa group server radius rad_acct
    aaa group server radius rad_admin
    aaa group server tacacs+ tac_admin
    aaa group server radius rad_pmip
    aaa group server radius dummy
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authorization ipmobile default group rad_pmip
    aaa accounting network acct_methods start-stop group rad_acct
    aaa session-id common
    ip dhcp excluded-address 10.10.200.1
    ip dhcp excluded-address 10.10.200.31 10.10.200.254
    ip dhcp pool <pool_name>
    import all
    network 10.10.200.0 255.255.255.0
    dns-server 141.x.x.6 141.198.136.12
    default-router 10.10.200.1
    lease 0 2
    interface Dot11Radio0
    ip address 10.10.200.1 255.255.255.0
    ssid <SSID Name>
    authentication network-eap eap_methods
    speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
    station-role root
    ip classless
    ip http server
    ip http secure-server
    radius-server local
    nas 10.10.200.1 key 0 <key>
    user test nthash xxx
    radius-server attribute 32 include-in-access-req format %h
    radius-server host 10.10.200.1 auth-port 1645 acct-port 1646 key <key>
    radius-server vsa send accounting
    By the above config, we are trying to make the clients to authenticate with username created in the RADIUS which is this router and get an ip address through DHCP pool configured for the same. Will the above config does the same. Kindly let me know.
    Thanking You
    Regards
    Anantha Subramanian Natarajan

    Hi,
    Thanks .
    Worked with cipher mode tkip and used WPA for key management.
    Once again,Thanks for the repsonse
    Regards
    Anantha Subramanian Natarajan

  • How to replace the certificate of Cisco 2106 wireless LAN controller for CAPWAP ?

    I have interested in CAPWAP feature and I download the open capwap project to make Access Controller (AC) and Wireless Terminal Point (WTP). I had built the AC which used PC and WTP which used Atheros AP. The CAPWAP feature work well when I enabled the CAPWAP that used my own AC  and WTP. When I got the Cisco 2106 wireless LAN controller (Cisco WLC), I configured the Cisco WLC to instead my own AC but I got the authorize fail in Cisco WLC side. It seem the Cisco WLC could not recognize the CAPWAP message which sent form my own WTP. I think this issue just need to synchronize the certificate between Cisco WLC and WTP.So I need to replace the Cisco WLC's certificate manually. Does anyone know how to replace the certificate manually with Cisco WLC ?
    Best Regards,
    Alan

    Unfortunately this Support Community is for Cisco Small Business & Small Business Pro product offerings.  The WLC2106 is a traditional Cisco product.  You can find this type of support on the Cisco NetPro Forum for all traditional Cisco products.
    Best Regards,
    Glenn

Maybe you are looking for