Cisco MSE3310 integration with WCS configuration procedures

Dears,
Kindly I have a Cisco WCS configured now I brought Cisco MSE3310 and I need to configure it for IPS, so please can you support me with configuration procedures for the configuration specially for the IPS and how is it will work.
Thanks for your support,

http://www.cisco.com/en/US/docs/wireless/mse/3350/6.0/CAS/configuration/guide/msecg_ch2_CAS.html

Similar Messages

Cisco Works Integration with MARS

Can cisco works be integrated with MARS. I mean cisco works is acting as a syslog server for some switches. Can mars pull the records from Cisco Works and use it for its co-relation

As Michael pointed out, configuring two syslog destinations on your switch is possible, and allows the switch to send to both CiscoWorks and CS-MARS simultaneously. This affords the safety that should one system be down, the other system will continue to receive syslog events from the switches. Should you not wish to configure two logging destinations on your switch, you could configure your switches to send their syslogs to CS-MARS and configure CS-MARS to relay the received syslog messages to CiscoWorks. This options is outlined in the CS-MARS user guide:
http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/user/guide/combo/cfgOver.html#wpmkr181270
Scott

CISCO IVR integration with Phoenix

I have phoenix application which is based on ISO 8583.
I have to integrate Contact-Center IVR solution with it.
I wanted to know, if such an itnegration was ever developed earlier and is it provided by CISCO or by 3rd party?
You can get more information about Phoenix from http://www.phoenix-interactive.com/.
Thanks

I know this already.
The problem is specifically about integration with Phoenix.
If you have or anyone who has some knowledge on the Phoenix side of integration as well.
What CISCO is offering, I know that.
But I want to know, if any real work for this integration has already been done.

Cisco ISE integration with third-party firewalls

Can Cisco ISE be integrated with a third-party firewall (such as Checkpoint), to provide authentication/authorization services to remote VPN user devices (based on device MAC address)?
The remote user would establish a VPN connection to a third-party firewall, based on a username/password authentication, but the user would only be allowed to send/receive traffic to the internal network if the MAC address of the device being used was authorized by Cisco ISE.
Thank you in advance.

Rui,
I do not think the vpn client sends the ip address in a called-station-id, that might be the public ip address that the client is initiating the request from. If you have an existing radius server or can run a packet capture you should be able to verify that.
If the client does send the mac address in the radius packet then you can create a custom condition that can be used to check the mac address along with the username to allow it access to the session. However in VPN deployments there is no concept of profiling since 802.1x deployments usually include the client's mac address.
Thanks,
Tarik Admani
*Please rate helpful posts*

Cisco CME integration with NICE recorder

Hi Team,
Please let me know if we can integrate Cisco CME with NICE recorder. If yes, please share the steps involved in configuration on CME side and NICE.
Warm Regards,
Dinesh Rathi

Hi Anas,
If the panasonic prtocol is H323 will be no problem the CME dial peer will configure as below:-
dial-peer voice 121 voip
translation-profile outgoing prefix
destination-pattern x..
session target ipv4:192.x.x.x
dtmf-relay h245-alphanumeric h245-signal
but if the panasonic protocol is SIP the configuration on CME will be as below:-
voice service voip
ip address trusted list
ipv4 0.0.0.0 0.0.0.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
supplementary-service h450.12
no supplementary-service sip moved-temporarily
no supplementary-service sip refer
sip
registrar server expires max 250 min 200
no call service stop
dial-peer voice 2000 voip
destination-pattern y...
session protocol sipv2
session target ipv4:172.x.x.x
dtmf-relay sip-notify
codec g711ulaw
no vad
So please can you advise for the above if the two options are right or not??
Thanks

Cisco ISE integration with SMS passcode Device

HI Experts,
i have a scenario where the requirement is to integrate the ISE device with SMSpasscode device which will trigger the OTP to the mobile devices
Currently i have my authentication configured to work with the AD
When my VPN users connects its authenticates against AD and the users get the access .
Now as per the new requirement once the user is authenticate against AD , the user should be prompted for the OTP password send to the users using SMS passcode device
Anyone had worked on similar requirement please help me to resolve the issue .
Thanks in advance
Angus

Hi all
I am working exactly for a month on this topic with no success.
I need to integrate VASCO OTP solution. But VASCO do not support any external authentication backend for virtual/SMS token. Only passcode or local authentication.
I need to implement an external authentication against LDAP somewhere...
Gunnar, do CISCO clearly says it is not able to participate to such setup?
So, my need would be to be able to insert in the flow an authentication in ISE against the LDAP.
The flow is:
WebApplication send login+password (LDAP) to ISE
ISE checks the credentials and if it is OK forward the request to VASCO
VASCO does not check for password but generate the OTP and send it via SMS
VASCO replies with a access-challenge
ISE forward the challenge to Web Application
WebApplication send login+OTP response to ISE
ISE forward to VASCO
VASCO checks for OTP and replies to ISE with accept
ISE forward to Web Application
User is logged in...
All the flow is working if the user enters a passcode
I would like to implement a Identity source sequences where the user is checked again all the entries not the first match
First LDAP then VASCO...

Cisco ISG Integration with AAA & Policy Server

Hi,
We are integrating Cisco ISG (IOS XE - ASR1001) with AAA and Policy Server.   we have below to specific service provider requirement.
1. TAL - Transparent Automatic Subsriber for Range of IP or Pool of IP - how we add such identifier in Policy/Control Maps as attibute handshake with AAA
2. Different QoS Enforcement to Single User based on Day and Night Time.. what logic should be used??
Note: The Subscribers are from wired network and DHCP controlled.
Please help, Thanx in advance...
Bhavesh

Dear Bhavesh,
     Try with this it is working & tested policy for TAL & ISG ASR 1001.
QoS will be work with Radius request & will apply on online user with diffrent plan.
class-map type traffic match-any PPPOE
match access-group output name PPPOE-out
match access-group input name PPPOE-in
class-map type control match-any TAL
match source-ip-address 30.30.30.0 255.255.255.0
class-map type control match-all IP_UNAUTH_COND
match timer IP_UNAUTH_TIMER
match authen-status unauthenticated
class-map type control match-all PPPOE-CON
match media ether
match authen-status unauthenticated
match protocol ppp
policy-map type control PPPOE-USR
class type control always event timed-policy-expiry
10 service disconnect
class type control always event account-logoff
10 service disconnect delay 2
class type control always event quota-depleted
10 set-param drop-traffic TRUE
class type control always event session-start
10 authenticate aaa list PPP-USR
class type control always event service-start
20 service-policy type service identifier service-name
class type control always event service-stop
1 service-policy type service unapply identifier service-name
policy-map type control TAL_IP_POLICY_RULE
class type control IP_UNAUTH_COND event timed-policy-expiry
10 service disconnect
class type control TAL event account-logoff
10 service disconnect delay 5
class type control TAL event session-start
30 authorize aaa list AAA-STATIC password cisco identifier source-ip-address
50 set-timer IP_UNAUTH_TIMER 5
class type control TAL event session-restart
30 authorize aaa list AAA-STATIC password cisco identifier source-ip-address
50 set-timer IP_UNAUTH_TIMER 5
class type control TAL event quota-depleted
10 set-param drop-traffic TRUE
class type control TAL event service-start
10 service-policy type service identifier service-name
bba-group pppoe global
virtual-template 1
interface GigabitEthernet0/0/0
ip address 10.10.10.2 255.255.255.0
no ip proxy-arp
negotiation auto
interface GigabitEthernet0/0/1
ip address 30.30.30.1 255.255.255.0
negotiation auto
pppoe enable group global
service-policy type control TAL_IP_POLICY_RULE
ip subscriber routed
initiator unclassified ip-address
interface GigabitEthernet0/0/2
ip address 172.16.1.1 255.255.255.0
negotiation auto
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
interface GigabitEthernet0/2/0
no ip address
shutdown
negotiation auto
interface GigabitEthernet0/2/1
no ip address
shutdown
negotiation auto
interface GigabitEthernet0/2/2
no ip address
shutdown
negotiation auto
interface GigabitEthernet0/2/3
no ip address
shutdown
negotiation auto
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
interface Virtual-Template1
ip dhcp relay information trusted
ip unnumbered GigabitEthernet0/0/1
ip helper-address 10.10.10.1
timeout absolute 43200 0
peer default ip address dhcp
ppp mtu adaptive
ppp authentication pap
ppp authorization PPP-USR
service-policy type control PPPOE-USR
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 172.16.1.2
ip access-list extended DROP-in
deny   ip any any
ip access-list extended DROP-out
deny   ip any any
ip access-list extended PPPOE-in
permit ip any any
ip access-list extended PPPOE-out
permit ip any any
vishal lumbhani

Cisco ISE integration with AD fails

Cisco ISE Ver: 1.1.2.145
Windows : Win 2003 Server
I am attempting to integrate ISE with AD, but ISE won't join AD and joining attempts fails, though I am able to add same domain as external LDAP identity store ?
1.user used to join the domain has admin permission on AD
2. ISE resolved the domain correctly
3.There is a firewall inbetween ISE (192.168.100.10) & AD (172.16.100.1), but all the traffic are permited.
4. No NATing taking place, Firewall is forwarding all trafic between ISE & AD
Can't really understand why AD connection fails
From ISE Interface - Detailed Test Connection
Adinfo (CentrifyDC 4.5.0-357)
Host Diagnostics
Uname: Linux Iseadn 2.6.18-274.17.1.el5PAE #1 SMP Wed Jan 4 22:49:48 EST 2012 I686
OS: Linux
Version: 2.6.18-274.17.1.el5PAE
Number Of CPUs: 1
IP Diagnostics
Local Host Name: Iseadn
Local IP Address: 192.168.100.10
FQDN Host Name:iseadn.gnet.cp
Domain Diagnostics
Domain: Gnet.cp
Subnet Site: Default-first-site-name
    DNS Query For: _ldap._tcp.gnet.cp
    Found SRV Records:
      Gnet.cp:389
Testing Active Directory Connectivity:
    Domain Controller: Gnet.cp
      Ldap:      389/tcp - Good
      Ldap:      389/udp - Good
      Smb:       445/tcp - Good
      Kdc:        88/tcp - Good
      Kpasswd:   464/tcp - Good
      Ntp:       123/udp - Good
Domain Controller: Gnet.cp:389
    Domain Controller Type: Windows 2003
    Domain Name:            GNET.CP
    IsGlobalCatalogReady:   TRUE
    DomainFunctionality:           2 = (DS_BEHAVIOR_WIN2003)
    ForestFunctionality:           0 = (DS_BEHAVIOR_WIN2000)
    DomainControllerFunctionality: 2 = (DS_BEHAVIOR_WIN2003)
Forest Name: GNET.CP
    DNS Query For: _gc._tcp.GNET.CP
Testing Active Directory Connectivity:
Forest Name: GNET.CP
Kerberos Error: Rc=-1765328377 SASL Bind To Ldap/[email protected] - GSSAPI Mechanism With Kerberos Error : Server Not Found In Kerberos Database
Computer Account Diagnostics
Not Joined To Any Domain
System Diagnostic
Not Joined To Any Domain
Centrify DirectControl Status
Not Joined To Any Domain
Licensed Features: Enabled
SELinux Status:                 Disabled
Amavis1.1.0
Ccs1.0.0
Clamav1.1.0
Dcc1.1.0
Dnsmasq1.1.1
Evolution1.1.0
Ipsec1.4.0
Iscsid1.0.0
Milter1.0.0
Mozilla1.1.0
Mplayer1.1.0
Nagios1.1.0
Oddjob1.0.1
Pcscd1.0.0
Postgrey1.1.0
Prelude1.0.0
Pyzor1.1.0
Qemu1.1.2
Razor1.1.0
Ricci1.0.0
Smartmon1.1.0
Spamassassin1.9.0
Virt1.0.0
Zosremote1.0.0
From Ad-agent log

Hi Jallaluddin
I work for Centrify Support and saw your posting. Here our analysis on checking the adlogs.txt.zip:
Server not found in Kerberos database" (reference base/adbind.cpp:495 rc: -1765328377)
That error is likely coming from the KDC - meaning there is some problem with server side SPNs
We need the following:
1) A network trace.
2) adcheck output.
3) adinfo --support output
4) Run dcdiag or netdiag on the server side.
Also we partner with Cisco and so would it possible to work with your partners and I am pretty sure they have seen this before with DC issues etc. Can you please work with them and see?. TIA
Best Regards
Raghu Srinivasan

CISCO IPCC integration with TTY

Hi every one,
How can we integrate TTY devices to IPCC environment.
what are all the supported devices and softwares required
Thaks in advance
yugi.

if your TTY attaches to one of the IP phones currently
on the Cisco SW \ HW Compatibility Guide matrix, the IP phone and the
TTY should function fine. If it is utilizing a device that is not on
the Compatibility guide, then it is not supported. Here is the URL link to the Cisco SW \ HW Compatibility Guide, which
lists all the supported HW and SW. Just navigate to your current CRS
version for info.
http://www.cisco.com/en/US/products/sw/custcosw/ps1846/products_device_s
upport_tables_list.html
Thanks,
Karthik

Afaria 7 SP3 integration with Cisco ISE

Hi,
I am trying to find the configuration procedure that is needed for Afaria MDM to integrate with Cisco ISE 1.2.
1. What service should be installed/enabled?
2. Which port or service path (<IP:port/abc/xyz?>) it will listen for the communication from Cisco ISE?
3. Cisco ISE uses REST API to communicate with Afaria. Does this require REST API installation or service activation?
4. What type certificates are supported in Afaria for this integration.
5. Anything that related to this topic.
Appreciate if someone can provide the configuration procedure or any information possible.
Regards,
Mudasir Abbas

From the user guide it seems that LDAP only allows you to strip the prefix/suffix and can't add the suffix.
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_man_id_stores.html#wp1054421
Strip start of subject name up to the last occurrence of the separator
Strip end of subject name from the first occurrence of the separator
Regards,
Jatin
Do rate helpful posts-

Cisco ISE 1.2.x with Posture Configuration - Windows Patches

Hi, Anybody has any experience in integrating Cisco ISE Posture with Microsoft SCCM?
With WSUS this works fine, but with SCCM I don't have any idea how to proceed. Anybody knows what it's included in the predefined rules
pr_WSUSRule and pr_WSUSCheck? I can't find any information in ISE Console or Cisco documentation.
Thanks.

Once agent performs the posture checks containing the windows hotfix checks, if the administrator configured the Launch Program Posture Remediation , agent will launch the script file which will initiate the windows hotfix updates via SCCM client configuration manager pre-installed/pre-configured on the box.

CIN Configuration in FICO,integration with MM/SD

Hi Friends,
Can you pls help me out to get the details about CIN Configuration in FICO and integration with MM/SD.
I am new to this forum and I am not getting the details as mentioned above:
With Best Regards,
Vikrum Jaitly

Hello,
CIN Configuration
1.1 Maintain Excise Registration
Logistics general >> SAP Ref. IMG >> SPRO Maintain Excise >> Basic setting >> India >> tax on Goods Movements Registrations
1.2 Maintain Company Code Settings
SPRO Basic setting >> India >> tax on Goods Movements >> Logistics general >> SAP Ref. IMG Maintain Company Code Settings >>
1.3 Maintain Plant Settings
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Maintain Plant >> Basic setting >> India >> Movements Settings
1.4 Maintain Excise Groups
SAP Ref. IMG >> SPRO Maintain >> Basic setting >> India >> tax on Goods Movements >> Logistics general >> Excise Groups
1.5 Maintain Series Groups
SAP >> SPRO >> Basic setting >> India >> tax on Goods Movements >> Logistics general >> Ref. IMG Maintain Series Groups
1.6 Maintain Excise Duty Indicators
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Maintain Excise Duty >> Basic setting >> India >> Movements Indicators
1.7 Maintain Subtransaction Type with Text
India >> tax on Goods Movements >> Logistics general >> SAP Ref. IMG >> SPRO Maintain Subtransaction Type with Text >> Basic setting
1.8 Determination of Excise Duty
tax >> Logistics general >> SAP Ref. IMG >> SPRO Select Tax Calculation >> Determination of Excise Duty >> India >> on Goods Movements Procedure
1.9 Maintain Excise Defaults
SAP Ref. >> SPRO Determination of Excise >> India >> tax on Goods Movements >> Logistics general >> IMG Maintain Excise Defaults >> Duty
1.10 Condition-Based Excise Determination
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Define Tax Code for >> Condition-Based Excise Determination >> India >> Movements Purchasing Documents
1.11 Condition-Based Excise Determination
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Assign Tax Code to >> Condition-Based Excise Determination >> India >> Movements Company Codes
1.12 Classify Condition Types
SAP >> SPRO Condition-Based >> India >> tax on Goods Movements >> Logistics general >> Ref. IMG Classify Condition Types >> Excise Determination
1.13 Maintain Chapter IDs
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Maintain Chapter ids >> Master data >> India >> Movements
1.14 Assign Users to Material Master Screen Sequence for Excise Duty
SPRO >> Master data >> India >> tax on Goods Movements >> Logistics general >> SAP Ref. IMG Assign Users to Material Master Screen Sequence for Excise Duty
1.15 Specify Excise Accounts per Excise Transaction
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Specify Excise Accounts per Excise >> Account determination >> India >> Movements Transaction
1.16 Specify G/L Accounts per Excise Transaction
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Specify G/L Accounts per Excise >> Account determination >> India >> Movements Transaction
1.17 Incoming Excise Invoices
SAP >> SPRO Business >> India >> tax on Goods Movements >> Logistics general >> Ref. IMG Incoming Excise Invoices >> Transactions
1.18 Define Processing Modes Per Transaction
Logistics general >> SAP Ref. IMG >> SPRO Define Processing Modes >> Business Transactions >> India >> tax on Goods Movements Per Transaction
1.19 Define Reference Documents Per Transaction
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Define Reference Documents Per >> Business Transactions >> India >> Movements Transaction
1.20 Maintain Rejection Codes
SAP >> SPRO Business >> India >> tax on Goods Movements >> Logistics general >> Ref. IMG Maintain Rejection Codes >> Transactions
1.21 Specify Which Movement Types Involve Excise Invoices
Logistics >> SAP Ref. IMG >> SPRO Specify Which >> Business Transactions >> India >> tax on Goods Movements >> general Movement Types Involve Excise Invoices
1.22 Outgoing Excise Invoices
tax on Goods >> Logistics general >> SAP Ref. IMG >> SPRO Assign >> Outgoing Excise Invoices >> Business Transactions >> India >> Movements Billing Types to Delivery Types
1.23 Maintain Default Excise Groups and Series Groups
Logistics general >> SAP Ref. IMG >> SPRO >> Outgoing Excise Invoices >> Business Transactions >> India >> tax on Goods Movements Maintain Default Excise Groups and Series Groups
1.24 Subcontracting Attributes
tax on >> Logistics general >> SAP Ref. IMG >> SPRO Subcontrac >> Subcontracting >> Business Transactions >> India >> Goods Movementsting Attributes
1.25 Maintain Movement Type Groups
SPRO Business >> India >> tax on Goods Movements >> Logistics general >> SAP Ref. IMG Subcontracting >> Subcontracting >> Transactions Attributes
1.26 Utilization Determination
SAP >> SPRO Business >> India >> tax on Goods Movements >> Logistics general >> Ref. IMG Utilization Determination >> Utilization >> Transactions
1.27 Specify SAPscript Forms
tax on >> Logistics general >> SAP Ref. IMG >> SPRO Specify >> Excise Registers >> Business Transactions >> India >> Goods Movements SAPscript Forms
1.28 Number Ranges
SAP Ref. IMG >> SPRO Number >> Tools >> India >> tax on Goods Movements >> Logistics general >> Ranges
1.29 Message Control
SAP Ref. IMG >> SPRO Message >> Tools >> India >> tax on Goods Movements >> Logistics general Control
You also can find the details in search criteria in SDN
Regads
Ravi

Can WAE be integrated with non-cisco devices?

So far, all documentation that I read, WAE is used in conjunction with Cisco devices. Can WAE be integrated with non-cisco devices?
I guess, In-line mode should work ok, but how about off-path mode? An example or link will be appreciated.
Thanks!
Joe

Hi Joe,
It should be possible to use WAAS with non-cisco routers, as long as they support WCCP.
There are no documents on this because, the configuration from WAAS point of view would be the same, and the router configuration would depend on the vendor.
Regards
Daniel

WCS integration with other NMS Tool

Hello friends...We are going to upgrade our existing WCS v5.1.65.4 to v6.0.170.0 and after that planning to integrate it with a 3rd part NMS tool.for any critical alerts\traps. So if any critical event related to WLC\AP received in WCS, it will send those alerts to NMS and based on the severity of alerts, The NMS will open a remedy ticket in BMC remedy tool.
Can any one provide the document or configuration steps for WCS to make it as as trap sender for NMS

Really? I configured it with external NMS without problems. Did you heard about Notification Receiver in WCS configuration. All traps received from WLC are forwarded to external systems.
Notification Receiver
Server IP Address
Notification Type
SNMP
SNMP Parameters
Port Number
Community
I suggest to read the manuals http://www.cisco.com/en/US/docs/wireless/wcs/6.0/configuration/guide/6_0admin.html#wp1131316
http://www.cisco.com/en/US/docs/wireless/wcs/6.0/configuration/guide/6_0event.html

Cisco WAAS moibile integrated with Symantec Backup Exec 2010

Here customer requirement is to take backup of opened Database file .fdb
(Microsoft Dynamic Navision) integrated with WAN optimization (Cisco WAAS
mobile).
Problem is Cisco WAAS mobile is not optimizing Symantec backup process when backup job is running.
Please find attached files (WAAS mobile accleration status with symantec
backup process).
Customer is using Microsoft Dynamics Navision (ERP application).
WAAS mobile client is connecting and file copy is accelerating, but
symatec backup (beremote.exe) and Navision (fin.exe) processes are not
accelerating.
I added above processes in WAAS mobile server's acceleration list.
Please advise if any changes has to made in WAAS mobile server.
Regards
Prasad
Cell: 9000012355

Hi Prasad,
According to the screen shots provided the fin.exe process is bypassed due to Low Latency. From the admin guide this means:
Bypassed : Low Latency. The latency between the client and the application server is less than the latency threshold, which is 10 ms by default. This threshold may be modified on the Connection Settings tab on the Configure > Clients > Networking page.
Also, I see SERVER.exe process is going to the same server or subnet as fin.exe but is bypassed due to Pre-Existing connection.
Bypassed: Pre-existing Connection. When WAAS Mobile is started after other applications, the existing TCP connections associated with those applications will not be reset unless the “Auto Reset Connection” property has been selected for the process in the Accelerated Processes table, and hence, these pre-existing connections will be bypassed.
Lastly, I see bermote.exe is listed as Bypass Reason Unknown in one of the screen shots.
Bypassed : Reason Unknown. This message will occur when an attempt to reset a TCP connection associated with an application that has been configured to have these connections be automatically reset (via the Accelerated Processes table on the Configure > Clients > Acceleration page) fails.
Is this client actually accessing a server that is remote for these first two processes?
For the last process, did we try to first exit the application in question and all the associated processes (beremote, and any other processes that may get started with this application), then start the WAAS Mobile client, then finally start the associated process/application?
Cheers,
Mike Korenbaum
P.S. If this answers your question please mark it as such.

Cisco MSE3310 integration with WCS configuration procedures

Similar Messages

Maybe you are looking for