Cisco NAC Layer 3 OOB Support for Wireless

We are currently using NAC 4.7.2 and I am curious if Layer 3 OOB for Wireless users is on the roadmap. We have a WISM and 5500 controllers. Thanks.

Hello,
I know it's being worked on, but isn't in the near releases coming out soon. 4.8 is expected very soon and it's not in that release.
So long story short, don't know, but it will be there eventually.
HTH,
Faisal

Similar Messages

NAC Out-of-Band Deployment for wireless networks

I am evaluating the NAC appliance for my wired and wireless users. I have read that the only way to deply NAC for wireless is in-band mode but it looks like the following link says that it is possible to deply NAC for wireless networks in-band or out-of-band mode:
"NAC Appliance can be deployed for WLANs as an in-band deployment for full-time endpoint scanning or out-of-band within a central site for periodic scanning to confirm posture compliance. The NAC Appliance server performs authentication, posture assessment, and remediation. The server securely controls authenticated and unauthenticated user traffic by managing traffic policies based on protocol/port or subnet, providing bandwidth policy management based on shared, or per-user bandwidth, or using time-based sessions and heartbeat controls. (Figure 1)"
http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6521/prod_brochure0900aecd80355b2f_ps6128_Products_Brochure.html
Does anyone know if it is possible to use NAC out-of-band deployment for wireless networks? If you can point me to some documentation it will be appreciated.
Regards

Thanks Robert.
In my case I am planning to deploy a central NAC appliance at the main office to control some branch offices and local wired users at the main office. The NAC appliance will operate in out-of-band mode. But for wireless users at the main office I will need an aditional NAC appliance operating in in-band mode, is this correct?
Regards

Cisco Prime LMS 4.1 - Support for Cisco Catalyst 3560-C Series Switches

Hello together
I have a customer which uses the following switch. Last year I have installed LMS 4.1 for him to manage the switches. Unfortunatly the switch model is not supported. According to the information found on the following site the switch is supported for most of the modules in LMS:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/device_support/table/lms41sdt.html
The oid object of the device is the following: 1.3.6.1.4.1.9.1.1465
Supported Software: 12.2(55)EX (Customer has 12.2(55)EX3
Version Support Type: Device Update
So I updated all device updates I was able to find.
Step 1: For that I went to Admin > System > Software Center > Schedule Device Downloads and created a job where I have downloaded the latest versions of all packages.
Step 2: Installed the downloaded packages Admin > System > Software Center > Device Update and installed all the packages.
Unfortunatly I don't see the same result like described in the Supported Device Table for LMS 4.1.
- Cisco View -> works
- Inventory and Config Collection -> works
- Fault Monitor not working -> Error Code Unsupported
- Network Topology Layer 2 Services -> Device Type ciscoProducts.1465, Symbol Question Mark
- VLAN Management -> Doesn't work
- User Tracking > seems also not to work
When I open the report for supported devcies (Reports > System > Device Support) and search for C3560C... I find the following devices, but not mine which i need:
C3560C-8PC-S     .1.3.6.1.4.1.9.1.1466
C3560CG8PC         .1.3.6.1.4.1.9.1.1317
C3560CCG8TC     .1.3.6.1.4.1.9.1.1318
wsC3560CPD8ptS     .1.3.6.1.4.1.9.1.1368
Does anybody have experience with the same switch type / model? Am I doing something wrong or is this type of switch not implemented correctly till now? Further the docuemntation supported devices would be wrong.
Thanks for any feedback Erich

Thanks but I just heard back from my Cisco SE and he assures me that an AP will NOT use up a license.
I've asked him to verify his answer for me.
Is your answer based on real world expereince (the best there is)? That is, are you running Prime LMS 4.1 and does it indeed use up a license for each light-weight AP it discovers & manages?
Thanks for mentioning options 1-3 but I do not wish to employ any of them. I don't mind buying the additional licenses for APs ... I just need to know if I have to or not.
Ian.

Jaguar OS Support for Wireless

I'm not very familiar with the various Apple OS's so be patient. Does a laptop with Jaguar OS have support for 802.11b/g WPA TKIP security.

Jaguar is 10.2
Panther is 10.3
Tiger is 10.4
None of these are free upgrades.
Depending on your Apple laptop, I would suggest going for Tiger.
, "kmosx4: 10.4 Tiger Upgrade: Decision tree+Checklist" #1,

Cisco NAC 4.8.3 supports Windows Server 2008 R2 Standard?

I´m looking at this document: http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1301231 and I´m not clear if Windows Server 2008 R2 Standard with SP1 is supported. The documentation refers to Windows 2008 Server SP2 and Windows 2008 Server R2, but I see no specific mention to Windows Server 2008 R2 Standard with SP1.

Hi,
Do you remember making any changes to the computer prior to this issue? Please unplug
all external devices connected to the system and try booting in Normal mode.
Can you into safe mode, you may try startup repair using the Windows 7 installation DVD and check if it works.
More information:
What are the system recovery options in Windows?
http://windows.microsoft.com/en-us/windows/what-are-system-recovery-options#what-are-system-recovery-options=windows-7
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

What types of files do HP printers natively support for wireless/bluetooth printing?

I've been trying to find this information, but digging it out of the HP Support Pages is daunting...
What are all the file types that HP wireless-enabled printers can support, without having to have some sort of driver/rip? Since you can stick media cards directly into many printers, the printing driver/support must reside in the printer itself, so I'm assuming that simply transferring files to an HP wireless-enabled printer will cause them to print, ala the HP iPrint iPhone app. But, other than the native iPhone image format, what is the full list of types of images/files that can be printed directly to the printers?
Thanks,
Mark

Great question, Mark!
We support several formats in our printers. *Note, depending on the model, some formats may not be supported. If you want a model that supports ALL formats mentioned look for a PhotoSmart Premium branded model like our new line in hpshopping.com with Bluetooth and Wireless Networking capability.
Now for the formats:
For iPhone:
-Graphics Interchange Format (*.gif)
-JPEG File Interchange Format (*.jpg)
-Portable Network Graphics (*.png)
-Device Independent Bitmap (*.bmp)
-Tag Image File Format (*.tif)
-Windows Metafile (*.wmf)
-Enhanced Metafile (*.emf)
For Sybian OS models:
Graphics Interchange Format (*.gif)
-JPEG File Interchange Format (*.jpg)
-Portable Network Graphics (*.png)
-Device Independent Bitmap (*.bmp)
-Windows Metafile (*.wmf)
The above formats would be used when printing over wireless (wireless N, G, A - depending on radios in phone and access point)
For printing via Bluetooth, and UPnP/DLNA we use an xhtml-print standard to support the following:
Image Format:
-JPEG File Interchange Format (*.jpg) -Portable Network Graphics (*.png)
Document formats:
XHTML-Print.
Standard Text

Oracle9iAS WE Support for Wireless LAN Architecture?

Hi All,
Here is one basic question. Does Oracle9iAS Wireless supports Wireless LAN Applications? if so how it could be. can some body provide references to this topic..waiting for the positive response
thanks & regards
krishna

Hi
I have goen through the FAQ which we refereed, but it has little information. stating that yes, there is a support but there is no prrof of concept or some additional information. and one more thing, can i use my cell phone with Wireless LAN to connect ASWE. if so what would be the Application type. which sort of applications would be preferable. it might be looking out of this domain, but if it includes in ASWE then it would be a intresting point to think of.
hoping for the positive reponse and thanks in advance
thanks and regards
krishna

Cisco Cube Flow around mode supported for CVP 10

Hi Guys,
We are deploying CVP 10.5, our ingress gateway for the CVP is a CUBE. We know that in CVP 8.0 the media flow around is not supported, but we don't know if in the version 10 is supported. does anybody knows about it?

Hi,
Please refer to page no 75. Its mentioned --With flow-around mode, you lose the ability to do DTMF interworking,transcoding, and other key functions such as telephone and media capabilities.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/srnd/10_5/CCVP_BK_C17804D9_00_cisco-unified-customer-voice-portal.pdf
I hope this will help you.

Preview support for wireless keyboards

Hi . . . .
A simple question.
Is there a keyboard command to preview video and/or audio if you have one of the Apple wireless keyboards (that do not have a numeric keypad) ?
Or am I destined for a life time of sub menu slavery if I need to preview audio (which is 99% of what I do !).
Cheers for any help.
Lee

Help !
Ok, I went to the Sebastien Perier website . . . and found the keyboard shortcuts text file, it was straightforward enough to change 'Audio Preview' to the period button on my wireless keyboard (below: italicised and in bold) - after first making sure nothing else was using the period button.
I then tried the same with 'Preview' (below: italicised and in bold) - but regardless of what I assign the command to (currently in this example F5) it won't work ? I am also making sure what I try is not in use by anything else, and all the obvious stuff like relaunching AE after each edit of the text file . . . . but nothing will seem to work, whatever key (or combination of keys) I try AE does nothing when I relaunch AE and press the key/s ?
Anyone got any clues ?
Here's the section I am editing.
["CEggApp"]
"BrowseInBridge" = "(Cmd+Option+Shift+O)"
"New" = "(Cmd+N)"
"OpenComp" = "(Backslash)(Yen)"
"OpenMRUContext" = "(Shift+Esc)"
"Preview" = "(F5)"
"PreviewAlt" = "(Shift+Pad0)(Shift+PadInsert)"
"PreviewAudio" = "(.)"
"PreviewAudioWorkArea" = "(Option+PadDecimal)(Option+PadComma)(Option+PadDelete)"
"PreviewBlitTest" = "(Cmd+Option+Shift+Pad0)(Cmd+Option+Shift+PadInsert)"
"PreviewWire" = "(Option+Shift+Pad0)(Option+Shift+PadInsert)"
"PreviewWireClear" = "(Option+Pad0)(Option+PadInsert)"
"PreviewWireTrails" = "(Option+Shift+macControl+Pad0)(Option+Shift+macControl+PadInsert)"
"PreviewWireTrailsClear" = "(Option+macControl+Pad0)(Option+macControl+PadInsert)"
"ToggleVOutEnabled" = "(Cmd+PadSlash)"
"WriteKeybindingsFile" = "(Option+K)"
"WriteStringFile" = "(Cmd+Option+Shift+macControl+S)"
"WriteVersionFile" = "(Cmd+Shift+HELP)"
"WriteVersionFileExtra" = "(Cmd+Option+Shift+HELP)"
Cheers in advance !
Lee.

What to support for Cisco IP Phone 7912?

dear all. please help me!!!
I have a 7912 ip phone, and using Cisco CME in 1760, but I do not see this type 7912 ip phone telephony service there. whether it was true ip 7912 phone is not support for the Cisco 1760 CME. and whether support for the cisco 7912 ip phone? whether the telephony-service configuration is equal to the telephony-service configuration for the ip phone 7940?
please help me !!!

Hi to all
Please I ned some advice , I was try to reset to factory defaults a Cisco IP Phone 7912 and I was failed .
Please can you help me ?
Thanks a lot !
Hugo Baez

Which PI is better for Wireless, 1.4 or 2.0?

Simple question:- Which Prime Infrastructure is best for managing a Cisco wireless solution, Version 1.4 or 2.0?

Hi Simon,
Of course 2.0 version is new and hav many other features which PI 1.2 dont have.
Example:wts new in 2.0
Extended Device Support and Scalability (Wired / Wireless)
_With Prime Infrastructure 2.0, you can manage up to 13,000 wired devices, up to 1,000
controllers, up to 20,000 Unified Access Points, up to 3,000 autonomous Access Points, and up
to 1,000 Network Analysis Modules.
– Day-1 support of new Cisco devices and software releases helps ensure up-to-date coverage
with no manageability gaps, which is provided through monthly IDUs-Incremental Device
Updates.
Guided Workflow for Day1 Deployment
– Streamlined workflows facilitate design, deployment, and operational lifecycle tasks that align
with user roles.
Plug and Play for Wired/Wireless Devices
Out-of-the-Box Best Practice Configuration for Optimized Deployment of Cisco Features and
Technologies
– Model-based simplified workflow to assess the network for Cisco TrustSec 802.1x readiness
and facilitate the deployment of network technologies and solutions, such as one-click AVC
Configuration from device work center, Cisco TrustSec 802.1x and Zone-Based Firewall (ZBF),
all based on Cisco best practices.
Support for Wireless LAN Controller (WLC) Release 7.4
want to know more:
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/release/notes/cpi_rn.pdf
As per my exp....PI 2.0 is bit slow then PI 1.2.
Regards
Dont forget to rate helpful posts

Cisco Wifi AP able to support two authentications types?

A partner for cisco tells me that you can have two types of authentication methods on a single Wifi AP.
Is there any truth to this? And if so how is this achieved?
For Example, I would need domain users to authenticate to a radius server for access to the wifi, but i also need a BYOD network, and a open wifi network for customers, and a special network for confidential stuff that i can't mention in this forum.
My thought is that i need at least 4 access points to achieve this.

Hi Check these link:
Configuring Cisco Secure ACS for Windows v3.2 With PEAP-MS-CHAPv2 Machine Authentication
http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-server-windows/43486-acs-peap.html
Dynamic VLAN Assignment on autonomous AP using ACS 5
https://supportforums.cisco.com/document/74751/dynamic-vlan-assignment-autonomous-ap-using-acs-5
EAP Authentication with RADIUS Server
http://www.cisco.com/c/en/us/support/docs/wireless/aironet-1100-series/44844-leapserver.html
Regards
Dont forget to rate helpful posts

J2ME support for WLAN

Hi All,
J2ME is supported for Wireless Lan or not? I need to confirm. If it is supported how can i support? and which jar is supported.
Thanks&Regards,
Suresh A

Hi,
Searching encoding schemes for displaying different lanugae characters would help you.
Regards,
Omar Rehman

NAC for wireless layer 3 oob

Hi,
Anyone implemented nac for wireless layer 3 oob? This is using nac appliance not ise.
What I did is to configure wlc as per layer 2 oob setup. Configure svi 669 (authentication/quarantine vlan) on switches that’s with the wism. Pbr all vlan 669 traffic to test cas untrusted interface.
Problem now I’m not able to get an ip from dhcp after associating. DHCP works when tested on wired. Is there any additional config to be done on WLC or am i doing it right??
The test cas/cam are ugraded to ver 4.8.2.
Regards
Joachim

Everyone can do a mistake and it seems I did a big one :-)
l3 wireless OOB was not supported until last version :
§Wireless L3 OOB RIP has been introduced in 4.8.2.
§In order to support wireless in L3 OOB RIP deployment – DHCP release and renew values were propagated from CAS to the client so that client can perform IP refresh.
§The configuration of WLC and AP’s needs to be done like in Wireless L2 OOB VGW deployments.
§There are no ports in WLC hence Port profile is not required
§WLC allows only two VLAN’s namely Quarantine (Auth) and Access VLAN’s. Hence the support for User role Vlans is not there in Wireless deployments.
§iPhone/iPad support is also not present. Reason being IP address cannot be refreshed in iPhone/iPad due to lack of support for Java Applet/ActiveX.
§The authentication trap control needs to be checked in order for the WLC to send 599.0.4 trap.

Does Cisco NAC support Wireless LAN?

Hi There
I know Cisco NAC supports Wireless LAN. I have deployed this myself with various brands of Autonomous APs. These works fine only in in-band mode, not in out-of-band mode.
However, Cisco did mentioned for Cisco AP, with Cisco NAC and Cisco switches, out-of-band is supported. I tried this today, and it's either Cisco is wrong, which is highly unlikely, or I did not configure either the NAC portion or the Cisco AP correctly, which is most likely? I wonder where did I go wrong? Please somebody, advice me on this?
Regards,
Ram
+6012-2918870

Hi Ramraj,
You can do out-of-band with Wireless deployments now, however you must have a Wireless Lan Controller managing your APs. You cannot do it with standalone APs.
The guide below goes through most of the configuration:
http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080a138cc.shtml
Thanks,
Nate

Cisco NAC Layer 3 OOB Support for Wireless

Similar Messages

Maybe you are looking for