Client looking to segment traffic via SSID using 2504

I have a client with a WLC 2504 that wants to route "guest" users through a gateway appliance "radiusgateway.com" and all others through the network. It appears to me this would require the use of two fa ports on the WLC. One directly connected to the radiusgateway (which is connected to a switchport) and the other fa interface connected directly to a switchport bypassing the proxy server.
My issue is, "how do you segment the ssid traffic via the WLC". The interfaces cia the gui aren't that intelligent, there's an enable and logging drop down. Via the command line, I didn't see any methods of routing traffic.
Please assist, Thanks in advance.

The controller doesn't 'route' traffic, it will just send it out the VLAN/Port the interface is configured for.
So if you tell interface 'guest' to be linked to port 4, any WLAN that uses guest will be sent out port 4.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Similar Messages

Hi i am a teacher and am looking to buy an iPad - we use SIMS (this isnt compatable with an IPad) but i can log into it via a virtual desktop. What wold be the best iPad to buy?

hi there
im looking to buy an ipad- we use SIMS at school and i need to be able to log into it. I can via a virtual desktop via the college wireless netork. I also have work on the network. What would be the best IPAD to buy?

You have the choice of a full size iPad or the iPad Mini...both come as either WiFi only or WiFi+cellular data service. With the cellular data model you can see if there is a SIM available that is appropriate. Either model is capable of attaching to a wireless network to give you access. Neither is capable of a wired connection, must be wireless.
So, the question is which size is the best for your personal use, and do you want cellular data access - great thing to have. Then the decision is which storage capacity do you want...keep in mind that the iPad is not upgradable after purchase so get the storage you really want to start out.

How to segment traffic in a DMZ scenario

I had two customers looking for this. In other blades, they have the ability to hook up to 8 NIC's to a switch and then that switch(s) can be in DMZ1, DMZ2, internal etc. So basically they are able to do physical segmentation of their vhosts on ESX via physical NICS. Since UCS has only one NIC we have to trunk multiple vlans down and logically segment or use PALO but its still not a physical segementation. The only way i can think this would work is to use a UCS uplink port into say the DMZ as a access port. Then configure the vNICS on the server as access ports in the DMZ vlan. Finally pin the server to a FEX and traffic should enter the FI on the uplink in that vlan, hit the DMZ vlan on UCS and go down the pinned FEX to the server. Obviously there is a whole lot of issues such as ESX management traffic, vmotion traffic, and really only one link can be used so scaling is a huge issue. With a small customer with a couple of servers in a DMZ that could work.
The other way is using the 1000v in conjunction with the PALO and VN-link to tag traffic. Then you could use the 1000v to setup ACL's to segment traffic in a sort of SMT fashion or possibly use vShield. I really dont have any hands on with vShield or worked with VN-link wondering if anyone else has tried a similar scenario.

Hi
With the M81KR (VIC) adapter you could create multiple vNICs and assign it to different vSwitches/uplink port profiles etc to provide segmentation.
Going out of the UCS system, you could use pinning (as long as your upstream is not a disjoint Layer 2 in EHM) to deterministically route traffic.
When one looks at DMZ isolation etc, a lot of it comes depends on the environment one is looking at.
Nexus 1000v has a guide published at http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9902/dmz_virtualization_vsphere4_nexus1000V.pdf (not UCS specific) on hot to achieve this using diff portgroups (VLANs essentially) /uplink port profiles/ACLs/PVLANs etc and you could apply it to a UCS environment with the M81KR.
The various vNICs presented to the hypervisor or bare metal OS are distinct PCI entities but as you correctly mentioned they are not physically segmented going out to the fabric - for example you create 4 vNICs on Side A. They all will go on the same IOM-FI link as in UCS, HIF (the interfaces downwards from the IOM) and not vNIC to FI link pinning is followed. The full width blades (with 2 adapters) give you more choices though as the number of HIFs is more.
Hope it helps.
Thanks
--Manish

Possible to segment traffic between 2 interfaces? And other questions...

I would like to set my G5 up as a server utilizing a second connection and to keep traffic seperated between this server connection and my regular internet connection (would be wireless). I'm pretty sure this alone is fairly straightforward and can be accomplished by setting up the new interface and moving it down to the bottom of the connection list with wireless at the top. That should keep all non-specific traffic from flowing out the ethernet/server connection - I think.
If the above works the way I stated then I would also want to firewall ONLY the ethernet/server connection (the wireless has it's own hardware firewall). AND - this is the tricky part - I also want to add a fake interface that has a fake IP and bind that to the "real" ethernet/server connection. The reason for that is because I need a static IP to bind the service to. I know if the connection list thing works to flow the traffic that if I had an external router on the server connection, this wouldn't be needed. I'd already have a fake IP to bind to and I wouldn't have to run the firewall on the Mac. But I don't and I'd rather not have to buy one.
So can this be done through the network/sharing preferance panes? If so, are there any "gotchas" I should be aware of? If not, is there any software tool out there that would make setting this up easier/faster? I'm not opposed to doing it all via command line, but I'm a bit rusty with my linux/unix admin knowledge. Plus I'm not 100% certain how to set all that up command line wise without screwing up OS X!
Thanks.

I'm not sure I fully understand what you are attempting to accomplish. Lets see if I have the general idea.
You have a single G5, that you want to use as both your desktop machine and also to provided specific services, such as web, email, etc.
You have some type of hardware firewall/security appliance.
You have some type of wireless access point.
You don't seem to have any type of router or switch in your configuration.
You want all of your server based traffic to be sent and received on it's own Ethernet port. You want your personal Internet traffic to be sent and received on your wireless connection.
So my questions are:
Where is the server traffic going to, coming from? Who is accessing the server, is it users on the Internet, or just computers on your own LAN (which you didn't mention).
If your server is to allow data from or send to the Internet, then you need to have a way to route the traffic there. Do you have more then one method to access the Internet, or will all traffic, both personal and server being going though the same Internet access pipe?
If it is all going through the same pipe, and you only have the single computer, I don't understand why you wish to segment the traffic.
If on the other hand you have multiple computers on your LAN. then segmenting traffic may make sense. This would allow access to your server and keep your LAN well secure.
Anyway, to get to specifics, you'll need to use the terminal app to bind specific services to specific IP's and ports on your Mac. You will also need to manually configure the firewall to be able to select specific connection ports and bindings. However, while I think it can be done, I'm not sure it makes a great deal of sense.
I would be more inclined to suggest a router or switch that can provide VLAN support, or a router that provides true DMZ support, would be a good way to go.
Anyway, a little more info would be helpful.
Oh and if I have this totally worng in what I think your doing.. My mistake.
Tom N.

I upgraded to Mavericks from 10.6.8 and I no longer have any of my mail folders in macmail. If I look up an email via spotlight, I can find it, so it's in there. How do I restore my folders?

I upgraded to Mavericks from 10.6.8 and I no longer have any of my mail folders in macmail. If I look up an email via spotlight, I can find it, so it's in there. How do I restore my folders?

As an update: I was able to find my archived boxes and emails on my hard drive by doing this:
Open a Finder window.
Select Go | Go to Folder… from the menu.
Type "~/Library/Mail/V2".
Once I was able to get my macmail working properly, most of my mailboxes appeared, however not all and only a few recent emails are in a few of the boxes.
I really need to move the emails from the archive back into my macmail. When I try to import using the mbox method, it doesn't recognize the .mbox even though they are .mbox. Other than re-emailing each individually to myself, I don't know what to do. Does anyone out there have any suggestions as to some easier solution?

How to connect to R/3 via JCo using MYSAPSSO2?

Hello!
I'm developing a J2EE application who resides in an EP with Single Sign On. I have to retrieve some data from R/3, the way I want to connect is via JCo using MYSAPSSO.
I have read that is possible to connect passing MYSAPSSO2 as user and its value as password. The java code in the jsp is something like this:
javax.servlet.http.Cookie [] my_cookies = request.getCookies();
java.util.Hashtable cks = new Hashtable();
for(int i=0;i<my_cookies.length;i++){
 cks.put(my_cookies.getName(),java.net.URLDecoder.decode(my_cookies.getValue()));
String user = "$MYSAPSSO2$";
String pass = (String)cks.get("MYSAPSSO2");
JCO.Client conex;
JCO.Repository rep;
boolean ok=true;
conex = JCO.createClient("000",user,pass,"es","192.168.0.1","00","","");
try{
 conex.connect();
 rep = new JCO.Repository("mirep",conex);
} catch (Exception e){
 out.write(" "e" ");
 ok = false;
if (ok)
 conex.disconnect();
We are working with EP6 SP2, WAS 6.20.
The error is:
com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Se ha recibido un ticket SSP que no se puede interpretar
(I translate you:)
RFC_ERROR_LOGON_FAILURE: unable to interpret a retrieved SSP ticket
Thank you all!!

Ok!
I have solve the problem. So, I was trying to connect via SSO within an user that was not registered in R/3 and I forgot it.
Sorry for the inconvenience.

I have a small production client looking to run 1 workstation running Mac Lion 10.7.3 and two work stations running Windows7 64 bit. They will all be talking to the same storage array through 8Gb FC. What is there most cost effective way to do this?

I have a small production client looking to run 1 workstation running Mac Lion 10.7.3 and two work stations running Windows7 64 bit. They will all be talking to the same storage array through 8Gb FC. What is there most cost effective way to do this?

Thank you for your help.
The client has already made the jump to 8Gb including HBA's, switch and RAID Storage.
The other question will be if they need a seperate Mac Server to run the Meta Data or are they able to use the current Mac they are running to do this?
The Mac is a 201073 model they say with 12 Dual Core 2.66Mhz processors and 16 GB of Memory. This system is currently doing rendering. It has the XSAN Client but I understand for the solution to work they need to also run XSAN Server on a MDC.

I want to do communication via ethernet using TCP/IP

i want to do communication via ethernet using TCP/IP i did it but code is runing but im not getting any output

Look on this easy example: http://www.labviewtutorial.eu/viewtopic.php?f=14&t=328
You will find there two identical VIs (only port numbers are different). One is for PC1 and other for PC2. If you will get prodlems starting VIs, so look on your firewall settings, you have to unlock ports used in these VIs.
LabVIEW Portal

Dmvpn - all traffic via tunnel ?

Q: I have a dmvpn to a spoke connected via dsl.
presently I have route 0.0.0.0 0.0.0.0 via pppoe (dslam) This allows me to find the home end of the tunnel and bring the tunnel up.
How do I tell the spoke router to route all traffic via the tunnel?
I have eigrp up at the spoke and have advertised 20 or so networks, but i need to provide internet access via this tunnel.
Thanks

I think in this case you can use "vrf"
Just allocate all interfaces into VRF except one which is attached to the internet.

Faxing via SMTP using Faxination 5 as the Fax Server

Hi,
I need to setup faxing from a ECC6 server using a Faxination 5 server. Currently we have it setup OK using a 4.6C server but ECC6 doesn't work.....so I am looking for a work around.....this is were I hope you guys can help
I was thinking of setting up Faxing via SMTP (using MS Exchange) and the Faxination 5 server, has anyone done this? Or know if it can be done using Faxination?
Faxing is possible from Exchange using a Faxination Exchange connector and I have looked at the thread Extraneous "FAX=+" prefix when sending faxes via SMTP and it would appear that other people have set this up using different Fax software. Does anyone know what format the fax server will be looking for?
Many thanks
Rob

Hello,
Basically the RFC interface of SAPConnect has not been changed, so your FAXServer should be able to handle RFC Faxing also in ECC6 Server.
You can recheck the configuration. /* Or copy here the error message, so we can take a look at */
The output formats can be set-up in the SAP System also for SMTP Faxing.
I think the destionation format should only depend on your Fax server needs.
Best regards,
Dezso

Lrt224 direct traffic via wan ports by device

Hi , is it possible to have all traffic via wan1, but devices I select (by Mac address or other means) to go out on wan2
Solved!
Go to Solution.

Hi AppleBhoy,
You can use protocol binding to achieve it.
1.Create a rule (All traffice/all ip) binding to wan1.
2.Create rules (All traffice/your devices ip) binding to wan2.
Please be reminded the priority of rules.

Form2email - cgi2email question (client side only forms sent via email?)

I am being asked to design a standard questionnaire form.
They want
the answers to the form be emailed.
However, they host their own pages on a microsoft-based
server that
has no perl library, VB library, etc.
Is there a way to do a form and generate an email totally on
the
client side with no server based application needed
whatsoever?
Thanks,
-Dan

You can create a simple mailto: link on the form that will
invoke the client
mail program but it is not that reliable. However if they are
hosting using
IIS it does have built in mail capability via CDO using an
ASP page, or it
can be set up to run ASP.Net with its mail handling scripts.
Paul Whitham
Certified Dreamweaver MX2004 Professional
Adobe Community Expert - Dreamweaver
Valleybiz Internet Design
www.valleybiz.net
"Canned Heat" <[email protected]> wrote in message
news:[email protected]..
>I am being asked to design a standard questionnaire form.
They want
> the answers to the form be emailed.
>
> However, they host their own pages on a microsoft-based
server that
> has no perl library, VB library, etc.
>
> Is there a way to do a form and generate an email
totally on the
> client side with no server based application needed
whatsoever?
>
> Thanks,
> -Dan
>

How Secure is VPN Client on IPad That's Also Being Used As a Hotspot?

We are looking at allowing iPads to be used as personal hotspots for our field staff instead of MiFis. Our iPads have access to connect via a VPN connection. One of our tests was to connect to the VPN on the iPad and then connect a laptop to the hotspot. It appears that the VPN connection on the iPad is safe and isolated from the newly connected laptop but we would like confirmation as to how secure the VPN connection is on the iPad from the laptop?
Thanks.

Hi snowmizer ,
My recommendation , if you want to add extra-security to your VPN is to use certificate authentication with the IPAD.
Hope this helps,
Regards,

Where to look for all value mappings being used in ID

Hi All,
Where to look for all value mappings being used in ID?
XIer

Hi,
Let me re-frame it, Do u want to know where all the value mappings(created in ID) is used in Mapping Program of IR, isn't it?
If yes, then it's not possible( as far as I know).
raj.

Error while using '*'in the NTE (EDI 850) Segment where '*' is also used as Data Element

Hi All,
I am facing below mentioned error while using '*'in the NTE (EDI 850) Segment where '*' is also used as Data Element
Error: 1 (Field level error)
SegmentID: NTE
Position in TS: 70
Data Element ID: NTE02
Position in Segment: 2
Data Value:
3: Too many data elements
For Eg: NTE*GEN*My Text *goes here
Here, NTE02 should be My Text *goes here. So, how can I use "*" here without changing anything in the EDI message?
Can it be done?
Thanks.

Sorry, no.
X12 does not support an escape character so whatever is used for delimiters become reserved characters.
If you want to allow '*' in the data, you will have to chooser a different Element delimiter. The receiver should read the from this from the ISA Segment so it's supposed to be dynamic but that's not always the case in practice.

Client looking to segment traffic via SSID using 2504

Similar Messages

Maybe you are looking for