Cisco Leap & Windows 7

I've been able to login into a wireless network here using Cisco LEAP Module.
This Module works with all & any laptop I give it. the Authentication is windows domain id and password.
The problem I have is that the old windows xp Aironet Desktop Utility had a Security setting as:
EAP type = LEAP
802.11x EAP type = LEAP
Under Security Options
WPA/WPA2 Passphrase radio button is choose.
there we have a very long passphrase.
In the Windows & Cisco LEAP Module I don't see where I can input a passphrase.
Any help would be apprecated.
Jim

Well. I answered my own question.
the equivelent to the aironet setting is personal-wpa with the key
inserted.
thanks anyway.

Similar Messages

How do i connect my I-pad mini to cisco leap authentication

I have a new I pad mini and I want to connect it to my organization wireless network, the organization is using cisco leap for authentication.

It has a built-in Thunderbolt cable, see here: http://www.apple.com/displays/specs.html
So assuming your mini has a thunderbolt port (you said it's new so I assume it does), you'd just plug the display's thunderbolt cable into the mini's Thunderbolt port.

No longer using Linksys router. Should I uninstall Cisco LEAP, PEAP, and EAP?

Should I uninstall the Cisco LEAP, PEAP, and EAP programs if I am no longer using a Linksys router? I am replacing with an Asus router.
thanks,
KG

Hi! It's best to uninstall them all if you are not going to use them for the sake of freeing some memory on your computer. Should you change your mind and get a new Linksys router one of these days, I am sure it will come with its own installation software anyway.

Cisco works windows 2000 server (IDS)

I installed cisco works prepared for monitoring IDS Sensor, but i have some problem Access Apache windows folders
Error: The requested URL cannot be reached because client denied by server configuration: c:/program files/cscopx/htdocs/csconm
Description: 403 Forbidden is the HTTP status code returned by the Apache web server when either the user or the server itself has insufficient access rights to the URL.
You are not allowed access to this URL due to insufficient access rights. This may be due to an incorrect installation of the product. Please refer to your product's installation guide.

Please try the following:
Stop Daemon Manager. Type in "c:\net stop crmdmgtd " in the Windows command line
Then go to: NMSROOT\lib\web\conf\allow_files.conf (where NMSROOT is Progra~1\CSCOpx)
Please check if this file has the following entries
/index.html
/login.html
/mainPanel.html
/JSP/cmf/admin/index.jsp
/login1.html
Afterwards, restart Daemon Manager. Type in "c:\ net start crmdmgtd" in the CLI.
And try to access the server again.
HTH,
-J

Anyone successfully configured 802.1x Cisco LEAP wifi connection?

Till now I've tried couples of profile setting via iPhone configuration web utility, but finally I still didn't get there, the wifi connection of our office. Right account name and password, right protocol, but I didn't find the CKIP encryption option and domain name type-in frame. Anyone could help me? Thanks in advance!
office wifi security: Cisco 802.1x/LEAP/CKIP

Same problem here. Sometimes it says I'm connected with a 192.168.x.x address, and I can't get to the web, but other times it doesn't even pretend to connect, and has an IP address of 169.x.x.x.
Our normal internal company IP addresses are 10.125.x.x.
WEP encryption, CPIK.
Corporate laptop connects just fine with the same settings (as far as I can tell anyway), the only odd thing is that we use the intel proset utility to enable cisco extensions to the LEAP section of the security. Don't know if the iPhone supports that or not?

Cisco ISE windows workstation endpoint profiling

Hi all,
i am configuring cisco ISE to autenticate wireless clients using 802.1x . AP's are all lightweight managed by a cisco 5508 WLC . I would like to discriminate users accessing that wlan using mobile phones or tablet from users connecting using windows workstations. ISE profiles all mobile devices in the right way, iphones and ipad are profiled as apple devices and even MAC OSX devices are profiled correctly. The problem is that all windows workstation are profiled as unknown devices.In ISE i'm using windows workstation default profile configuration.
what can i check to make windows workstation profile working correctly?
Thanks in advance.
Regards

i noticed that default profile for microsoft workstations uses dhcp probe to profile devices, so i solved the issue adding in our core switch, to the vlan interface used to tag dot1x wireless lan, ise ip address as ip helper-address. I don't know if that is the best solution or there's something i can do on WLC to avoid adding ip helper-address on vlan interface but this worked for me.
Thanks to all for helping me.
Regards

Intel Pro 2100 And Cisco LEAP

We have currently purchased a test laptop with the new intel 2100 card that "supports LEAP" Intel Is telling me that drivers must be obtained from Cisco. I have tried teh ACU which obviously does not work being it is not an aironet card. Anyone try this yet or figure it out? TAC is confused I am hoping someone has seen this before.
(the intel client has no LEAP selection either just open or shared key).

LEAP is a Cisco proprietary protocol. So I think, in order to work with other cards you need to use other authentication protocols
such as PEAP,EAP-TLS or EAP-MD5.
Some useful information cane be found at :
http://www.cisco.com/warp/public/cc/pd/sqsw/sq/tech/acstl_wp.htm
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a008014626b

Cisco Jabber windows call option and user addition issue

Hi,
After uploading the jabber-config.xml (EDI-BDI) on the CUCM, the call option for new user contacts started appearing but the already existing contacts in Jabber client have still no call option. Also when we add new contacts to the Jabber client, it just disappears as such. Any one faced similar issue before. Below are the details and attached jabber-config.xml and LDAP profile snap.
We are using employeeNumber as attribute in LDAP configuration.
CUCM - 8.5.1.15900-4
UCCX - 8.6.3.10000-20
Jabber for windows - 9.7.0 (Tried with earlier version of jabber as well)

Hey
Just right click on the contacts which do not have the call option and select view profile, then see if those contacts that are added are they from the Outlook or the AD, if its AD then they will have a contact number and as such they will have the Call Option enabled.
If they are from outlook then delete the users and readd them by checking the view profile option to verify they are being pulled from AD.
Also if i assumed the issue differently then what it is please explain the whole scenario.
Note-: In case of J4W it will not connect to the directory using the LDAP profile info, it automatically verified and cnnects to the domain using your login creds.

How to get cisco provided window 2003 server?

when i tried to install CRS 5.0(2) FROM cd i have.cisco CRS 5.0(2) ORIGINAL.INSTALLATION is aborting with prompt that cisco provided hardware is needed for CRS. HOW to solve this issue?plz tell , i am new to this field.

Hello Ashish,
In this case that you need to get a copy of Cisco OS you will need to contact customer service deparment and request them the installation media.
You can contact Customer Service through one of the following ways.
PHONE : 1-800-553-6387
Email : [email protected]> [email protected] subject line put
in "Missing CD/DVD Request".
Customer service will need as much of the following information you can
provide.
1. Reason for Request
2. SO#
3. SAS/SASU (or any other Software Contract #)
HTH
Please rate this post if was helpful
Walter Solano

Cisco Leap with RSA SecurID (eap-securid) authentication???

Hi,
im wondering if i could somehow authenticate wireless users with securID OTP? is there any way of proxing the authentication to securid server?
have anyony heard of the internet draft for eap-securid?
http://www.globecom.net/ietf/draft/draft-josefsson-eap-securid-01.html

SecurID will nullify the great feature of LEAP: Dynamic Session Key rotation. The key rotation is generated as the client renews the authentication in given duration using the stored password. The SecurID password is dynamic consisting of a static PIN plus a random token string.
I tried integrating ACS RADIUS and ACE using non-changing session key, but the RADIUS keep giving out DLL error.
Audie

Cisco Aironet CB21AG, LEAP Software & ACS - No DHCP

We got our first CB21AG cards last week, and I've been playing with it to get it to work with the APs and ACS server that we have setup. I've installed the software and configured it exactly as the LEAP software for the older A cards is setup but the APs don't seem to want to assign a DHCP address to the computer. However, if I assign a static/alternative IP to the computer, and reauthentic, the wireless connection works great. Also, the Authentication window doesn't come up immediately after I hit Ctrl-Alt-Delete to login into the machine, as it did with the older software.
Steps I've tried: Removing and reinstalling the Cisco LEAP software, Reauthenticing the machine to the AD Domain, and Starting with a Static IP and then converting to DHCP.
Laptop: Panasonic ToughBook CF-29, WinXP, CB21AG Card.
APs: Aironet 1200s, A & G Radio equipped
Any help or ideas would be appreciated.

Thanks for the nudge in the right direction. My guess is that this will solve it, but I'll know sometime next week, once we get a chance to flash the APs.

Call/video not working between Cisco jabber for Windows and VCS control C40s

Hello,
I've been struggling with no luck how to make a call using Cisco Jabber for Windows 9.6.0 registered to CM 8.6.2 with intercluster ICT to another CM 8.6.2 where we have a VCS Control 7.0.2 via GK H225, and all C40s are registered as H.323.
The VCS has interworking between H323 and SIP, however not sure if there is any problem with that. Assuming it is ok, not sure either if I'm facing any interoperability issue because in my remote site I have C40 (H323 registered at VCS and SIP listening mode) and cisco jabber for windows which is SIP based.
If is not possible, would I be able to change my C40 from H323 to SIP at VCS, or have both H323/SIP registered at VCS? If so, will I need to change as well instead of GK I'll have to establish a SIP Trunk between the CM and VCS?
Another thing I do not believe either I would be able to have one VCS connected with two clusters, right?
I'm just trying to find a solution in case my current topology is not compatible, but feel free if you have any better idea to make it work.
Anyway here is what is happening:
When I make a call from my cisco jabber windows to C40 using alias number. The call is being redirected just fine to the C40 and it rings, however when someoene or the auto answer picks it up, the call dropped right away.
However, if I enabled the MTP in my CSF device, the call gets longer before dropping. I was even able to see my jabber " start video" turns green, before was grayed out all the time and the call dropped faster. I hear a fast busy tone.
I'm able to provide SDI traces, logs, diagnostic sip/h323 calls from VCS in order to know for sure if this is an incompatible issue or something I can workaround.
Let me know if someone of you are interested in read these logs or could point me on the right direction.
Thanks!

Ok,
I have looked at both logs. I have to mentinon though that you didnt
provide the log that shows the h323 setup between cucm and the VCS. This
is most likely because the call originated from a different cucm than
the ones you provided the logs from.
The call would have orginated from the first cucm in the cucm group of
this trunk: Name=RL_TRUNK_VIDEO
The cucm ip will be : 10.252.53.10.
This is the VCS log that confirms where the h323 request originated
from:
pr 10 22:50:29 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:29,187"
Module="network.h323" Level="DEBUG": Src-ip="10.252.53.10" Src-
port="54000"
Received RAS PDU:
Having said that here is my analysis of the logs that you sent..
Jabber sent an INVITE to CUCM and advertised all the codecs (audio and
video it can support)..
Observer that Jabber says it doesnt support G729 anexB
21:55:16.576 |//SIP/SIPTcp/wait_SdlReadRsp: Incoming SIP TCP message
from 10.223.20.73 on port 54677 index 90661 with 2220 bytes:
[862370,NET]
INVITE sip:[email protected];user=phone SIP/2.0
Via: SIP/2.0/TCP 10.223.20.73:54677;branch=z9hG4bK000029d3
From: "4122107" <sip:[email protected]>;tag=00059a3c78000011000070b0
-00000e65
To: <sip:[email protected]>
Call-ID: [email protected]
Max-Forwards: 70
Date: Fri, 11 Apr 2014 01:55:16 GMT
CSeq: 101 INVITE
User-Agent: Cisco-CSF/9.4.1
m=audio 19252 RTP/AVP 0 8 18 105 104 101
c=IN IP4 10.223.20.73
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:105 G7221/16000
a=fmtp:105 bitrate=24000
a=rtpmap:104 G7221/16000
a=fmtp:104 bitrate=32000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
m=video 28878 RTP/AVP 97
c=IN IP4 10.223.20.73
++++Now lets observer the capabilites exchange during h245 negotiation
between cucm and VCS++++
Here CUCM advertises its caps to VCS (afterreceiving caps from VCS)
Note that G729A, G729AB, G729 is all advertised..
Apr 10 22:50:31 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:31,017"
Module="network.h323" Level="DEBUG": Src-ip="10.252.53.10" Src-
port="45660"
Received H.245 PDU:
value MultimediaSystemControlMessage
::= request : terminalCapabilitySet
capabilityTableEntryNumber 2,
       capability receiveAudioCapability :
g729wAnnexB : 6
       capabilityTableEntryNumber 3,
   capability receiveAudioCapability : g729AnnexAwAnnexB : 6
       capabilityTableEntryNumber 4,
       capability
receiveAudioCapability : g729 : 6
capabilityTableEntryNumber 5,
       capability receiveAudioCapability :
g729AnnexA : 6
++++++
After doing MSD (master slave determination, we move to the OLC phas e..
Here we see that the far end..c40 wants to use G729AB for media++++
Apr 10 22:50:31 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:31,783"
Module="network.h323" Level="DEBUG": Src-ip="10.224.114.11" Src-
port="11163"
Received H.245 PDU:
value MultimediaSystemControlMessage
::= request : openLogicalChannel :
   forwardLogicalChannelNumber 1,
forwardLogicalChannelParameters
     dataType audioData :
g729AnnexAwAnnexB : 20,
     multiplexParameters
h2250LogicalChannelParameters :
+++Next VCS sends G729AB as the codec to use to CUCM+++
Apr 10 22:50:31 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:31,784"
Module="network.h323" Level="DEBUG": Dst-ip="10.252.53.10" Dst-
port="45660"
Sending H.245 PDU:
value MultimediaSystemControlMessage
::= request : openLogicalChannel :
   forwardLogicalChannelNumber 1,
forwardLogicalChannelParameters
     dataType audioData :
g729AnnexAwAnnexB : 20,
     multiplexParameters
h2250LogicalChannelParameters :
++++The next thing we get is an OLC reject from CUCM and this is where
th call drops++
Apr 10 22:50:31 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:31,790"
Module="network.h323" Level="DEBUG": Src-ip="10.252.53.10" Src-
port="45660"
Received H.245 PDU:
value MultimediaSystemControlMessage
::= response : openLogicalChannelReject :
forwardLogicalChannelNumber 1,
   cause dataTypeNotSupported : NULL
Apr 10 22:50:31 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:31,790"
Module="network.h323" Level="INFO": Dst-ip="10.224.114.11" Dst-
port="11163"
Detail="Sending H.245 OpenLogicalChannelRejResponse
+++We then receive a call release from cucm with cause code of 47:
resource unavailable++++
Apr 10 22:50:32 TWELDVCS01 tvcs: UTCTime="2014-04-11 01:50:32,365"
Module="network.h323" Level="DEBUG": Src-ip="10.252.53.10" Src-
port="50913"
Received H.225 PDU:
Q931
   Message Type: Release
Complete
   Call reference flag: Message sent from originating side
Call reference value: 0x7b
   Info Element : Cause
     Location: Usr
   Cause Value: Resource unavailable
   Info Element : User User
   Length = 22
Suggestions:
Change the region setting between the ICT trunk to VCS and Jabber to use
G711 and test again.

Windows 8.1 and Cisco Connect Incompatable

I've upgrades a couple of PC's to Windows 8.1. Upon discovering the printer attached to my E4200 v1 by its USB port was not showing after the upgrade, I re-ran Cisco Connect to re-install the printer.
----At this point I'd like to say up front that the E4200 is running the latest firmware, and I am using the latest Cisco Connect available - albeit 2 years old.-----
Cisco Connect gets as far as the USB Printer connect button before displaying an error page telling me "our customer support can help" and giving a link to a support page that doesn't work. Typical Cisco I fear.......
Digging deeper, the Windows Device Manager is showing the system device SXUPTP driver has been blocked from loading, quote:
"The software for this device has been blocked from starting because it is known to have problems with Windows. Contact the hardware vendor for a new driver. (Code 48)
Click 'Check for solutions' to send data about this device to Microsoft and to see if there is a solution available."
Clicking on "Check for solutions" doesn't find one (typical Microsoft), and letting Windows search for a newer driver doesn't find anything either.
Both PC's, a laptop and a desktop, are the behaving the same - so not a PC issue. Both worked with Windows 8.0.
So what's the story Cisco? We need a Connect update, or at least a fixed driver - when will we see this?
Thnx.

Ok - no thanks to Cisco, I seemed to have found an answer. This is unofficial, do at your own risk. Creating a system restore point first would be sensible.
The clue is the Cisco SXUPTP driver is copyright to Silex. The E4200 must have a Silex chip on board to talk to the USB port, and the SXUPTP driver on the PC is what talks to the chip. I visited the Europe Silex site (the US site is harder to get through - it wants you to know which Silex chip you've got as a starting point) at:
http://www.silexeurope.com/en/home/support/productgroups/common-downloads/
I downloaded SX-Virtual Link 3.12.0 dated 29.05.2013 (05/29/2013 in US speak). This downloaded a zip file called s-33a3120a.zip. I unzipped the contents and ran Cosetup.exe to install. After a restart I now have a functioning SXUPTP driver 3.7.1.0. (Forget what the original Cisco one was - 3.5.0.0?)
Ran Cisco Connect again, and all proceeded as normal. Printer re-installed.
The Silex setup program also installs a piece of software called SX Virtual Link, which seems to offer some low level control over the link to the E4200 USB port. I haven't had a play with this.
So why did I have to hack my way through this? Why didn't Cisco post Windows 8 updates BEFORE it was released, let alone 8.1? NOT impressed.

Windows 7 problem connecting to Aironet 1130AG AP

We currently have Windows XP Pro laptops that are configured to connect with our Cisco Aironet 1130AG Access Point and everything works fine. I am trying to configure new Windows 7 laptops using the same settings we used for the XP Pro laptops and they will not connect to the AP. Have any of you run into configuration issues with Windows 7 and Cisco wireless access point connectivity and found a solution? Is there any documenation on how to configure Windows 7 with Cisco Aironet 1130AG Access Points?

The wireless card is a Dell DW1501 wireless N WLAN Half Mini Card (Broadcom is the manufacturer).
I had the router setup to not broadcast. I changed it to broadcast and Windows 7 still will not connect. Do you have any other suggestions? Windows 7 is 32-bit on the laptops and I read somewhere online that mentioned they had the same problems with 32-bit but not 64-bit. The XP laptops wireless configuration is WPA-Enterprise with Cisco Leap along with user name and password.

Lenovo Thinkpad T61 8895WFJ Windows Vista

hello,
following problem:
Windows Vista
Hardware:
Lenovo Thinkpad T61 8895WFJ
WLAN Intel WiFiLink 4965AGN Driver: MS Ver 12.4.1.4
Software:
Lenovo Access Connections Version 5.33
On my Windows XP installation, I was in the "Access Connections" choose among authentification "Cisco LEAP."
Now I have installed Windows Vista, where there are "CISCO LEAP" no more.
thx

http://forums.lenovo.com/lnv/board/message?board.id=X_Series_Tablet_ThinkPads&message.id=3768#M3768
try the tips that is included in that link.
Regards,
Jin Li
May this year, be the year of 'DO'!
I am a volunteer, and not a paid staff of Lenovo or Microsoft

Cisco Leap & Windows 7

Similar Messages

Maybe you are looking for