Corporate Wifi Design

Hi
Im looking to create a corporate wireless solution across my MPLS. I am using 5508s, flex connect and possibly 3650 switches.
i have implemented a guest environment and want to expand upon this.
Are there any practical guides on how to implement a coporate wifi?
i am particularly intested in how my users would tunnel back to their home sites to access resources.
Would I need to have a Ssid which is broadcast at all locations, which drops a user into a specific vlan on that site. I am authenticating via acs and radius. The user connects and can tunnel back to a home controller or something. I'd like a clearer understanding of how the components fit together and best practises
thanks

You can find all of Cisco's design guides here: http://www.cisco.com/go/srnd

Similar Messages

IOS 8.1.1 can no longer connect to corporate wifi

After updating a couple of corporate iPhone 5s' they now no longer connect to the corporate wifi. This happens whether updating OTA or a complete wipe and reload in iTunes. Wifi worked fine before the 8.1.1 update

We have 2 separate discussions going on here. You jumped into a thread about a problem connecting to a corporate WiFi network with a post about a different WiFi problem. You have been answering questions asked of the original poster, which kind of confuses the issue. Look at who a post is in response to before answering.
For your problem, does the phone fail to connect to all WiFi networks, or only one (e.g., your home network)? Do you see WiFi networks when you tap Settings/WiFi?

Bad corporate wifi connection issues

Hi,
I've experienced a corporate wifi connection issue.
Having the issue on two z3compacts (latest kitkat build) and also with a Z3 (also latest kitkat build).
connection details:
EAP-Method: PEAP
Phase 2-Auth: MSCHAPV2
CA-Certs: no
Identity: yes
Password: yes
Issue is the following if you roaming between APs it happens the the smartphones jumps to a next AP with better signal but it is not possible to connect to the wifi.
There are two workarounds:
1. re-enter the password for the connection again
2. turn on airplane mode and turn it off again
The state is very annoying.
We've tested various Samsung and Nexus smartphones and we couldn't experienced that issue.
Any of you experienced the same?
Br,
Michael

Hi Phy,
thanks for that hint!
Can't believe anymore that it is a network component issue...because,
We have 500 android devices integrated (LG, Samsung, Nexus) and also nearly 4300 iPhones (4s, 5c, 5s and 6 (IOS7-8))
Besides them three xperia Z3 devices for testing purpose.
We only experienced this issue with the xperia devices.
Actually we're observing this issue over a month now.
We checked also the wifi controler logs and we saw that the xperia devices quit connections and connections tries by themselves.
Br,
Michael

OS8 not connecting with Leap WIFI (corporate WIFI)

Hi,
I updated my iphone5s with iOS8 now its not connecting with Leap WIFI (corporate WIFI) .
It used to work with WPS2 enterprise option, but now not working with any options.
Tried to restore to factory default settings and tried different devices with Os8 non of the are working.
Any one can help me please

Turn your Home Wi-Fi Router OFF... wait for 30 Seconds... Turn it ON.
If no joy... On your iPhone...
Reset all settings
Settings > General > Reset > Reset all Settings.
This will return all iDevice settings to factory defaults... you will not lose any data.... But you will have to re-enter all of the device settings.

Corporate Website Design - Make a Static Custom Map or Google Maps

Could some one please kindly advise on the following:
What is considered more professional if you are designing a corporate Website.
1. To design a custom map that shows each rail road crossing and traffic light on the way to the company. But due to the fact that it is a still image suffer from usability issues e.i. not being able to zoom beyond the drawn bitmap.
2. To embed a well known tool such as Google Maps (that allows world wide zooming), marking the location of the company building with a custom photo pin.
3. A combination of both points above displayed on one contact us site.
The above needs to be corporate design conform.
Thank you in advance for your advice.
AZ.

Hi Marian,
Thank you for the reply,
1. The audience consists of a the following according to the polls:
27.5% - Government Official
9.4% - Network/Association
8.8% - Student
8.7% - Academia
5.8% - NGO Representative
4.8% - IO/IGO Representative
3.4% - Media
2. It is an International Institute so they are from all over the world.
3. Map interaction is not needed but it would be an advantage considering the town in which the institute is located has a common name and often gets mistaken for another in a totally different country.
4. Interactive maps on cell phones and GPS
A map on the webpage is needed because:
A. The audience is so widespread e.i. from Government Officials to Students from all over the world including the LDC countries, that it is near impossible to predict what technologies are available to them, it is assumed that they will be able to access the internet.
B. Requested by the management.
Thank you in advance for your advise

Wifi Design Help

Hi,
I have one branch,100m away from my HQ. Hq is equiped with cisco devices.
There is no cabling in brach office. How can i connect any 1 floor of my branch to my HQ using cisco wifi devices with maximum range???

You can connect your branch office to head office through outdoor access point. It Data rates of 54 Mbps in the 2.4-GHz band, Bridge range of 20 miles (32 kilometers [km]) at 11 Mbps, Aggregate throughput approaching 28 Mbps, Maximum transmit power of 100 milliwatts (mW) for 802.11b and 30 mW for 802.11g.
The Cisco Aironet 1300 Series supports 802.11i, Wi-Fi Protected Access 2 (WPA2), WPA, and numerous Extensible Authentication Protocol (EAP) types. WPA and WPA2 are the Wi-Fi Alliance certifications for interoperable, standards-based WLAN security.

Call for Comments on Free Airport Wifi Design

I'm involved in a wireless LAN project where we need to provide free Internet access to all passengers in a large airport. We are well on hour way deploying more access points and preparing controller configuration.
I would like to here from people with experience from similar cases or just hear what you think is important to support a high density high usage wireless design.
Pleas find some details about the design in attached pdf doc.
Best regards and thank for taking the time.
Rasmus Sindum

Hi, i hapen to be in TAC and not your best guy when it comes to design question but i can give one tip of advise: pay attention to RRM when APs are mounted high above the ground and where they can hear eachother very well but will not be the case for clients. rrm will push power levels on aps down but normally coverage hole algo should kick in. also outside of this valuable cisco support channel, try to get in touch with your cisco sales team they will be able to help you out on design questions as well.
good luck at the airport!
serge

TS2972 Cannot get home sharing and airplay to work over corporate wifi. Cisco WLC 5508 controllers. Home sharing and Airplay is turned on. Apple ID and account the same on each device. All software is at the latest version. Devices work individually.

All devices at latest software. Each device works individually ie. apple tv can play netflix and hulu videos, itunes works on both an iPad2 and a Pc with latest itunes version. Firewall disabled ports open. Devices on same vlan. Laptop can ping ipad and apple-tv, iPad can ping laptop and apple-tv. The deives just do not see each other ever. All cisco settings are set to recommended settings for home sharing to work. Any ideas?

I seem to have a similar problem. I have a Macbook and a PC, both running the current version of iTunes. On the APTV (also running the current software version), only my Macbook library shows up under "computers". Home Sharing is turned on for both and my Macbook library shows up under "Shared" on the PC, but the PC iTunes library doesn't show up on the Macbook or the APTV.
My question then is: How is it that my Macbook iTunes library can show up on the PC and on the APTV, but the PC iTunes library doesn't show up on either? If the PC can see the shared libraries, doesn't that mean it's on the same network? Along those same lines, "Shared" libraries do NOT show up on the Macbook. Again I ask, how is it that I can see the Macbook library on the PC, but the Macbook doesn't show any Shared libraries?
All of this worked just fine before the upgrade to iOS 5 by the way. I had no issues seeing any library on any devices and the APTV found both computers.
Please help. This is really annoying!

Using several Airport Extremes to create and extend corporate + guest wifi

hello all,
my office has purchased 6 airport extremes for our new office, AirPort Extreme 802.11ac (6th Generation), running version 7.73
the plan was to hard wire one extreme via the wan port and create both a corporate and guest network
then link to the others throughout the office by wirelessly extending to provide complete coverage
after moving around the location of one or two units my coverage is now complete across the office space
my setup is as follows:
my network is a windows active directory setup where one of my domain controllers is my DHCP server in the range 192.168.x.x
to enable the guest network on my extremes i need to have my first hard wired (wan port) extreme unit configured in DHCP mode
this airport extreme has pulled down an ip address from my windows server in the range 192.168.x.x
the extreme then uses its own dhcp range to provide connectivity to my clients, 172.16.x.x for corporate wifi and 10.0.x.x for guest wifi
my issue is
the dhcp range that the extreme uses for all my corporate wifi users is 172.16.x.x
i cannot access any servers on my windows network 192.168.x.x by drive maps/hostnames as they are challenged for authentication
I can only access by using ip addresses instead of hostnames
all of my shares and wired users are configured to use hostnames for file shares, printers etc on my servers
the first extreme gets its DNS info from my windows dhcp server correctly but these settings are not passed down to my wifi clients
is there a way to do this ?
I have tried using the 'domain name' field on the extreme dhcp config but this had made no difference
can anyone advise on this ?
do i need to use a different setup, maybe switch to wired config ?
what i'd like to have is the following:
2 wireless networks, one for corporate users and one for guests/visitors
my corporate users to have access to all my corporate servers as their permissions allow using hostnames for access
my guest users to have internet access only
my 6 access points to be connected to each other either wired or wirelessly to provide coverage throughout my office
i was told that the 6 airport extreme's would allow me to do this but now i'm not so sure
any help or suggestions would be gratefully accepted,
thanks

You are trying to use Apple domestic products in a business setup.. this is not what they were designed for.
Could you use 3 units to cover the offices.. please have a go as this simplifies things tremendously.. just use three units in bridge.. preferably all connected to your ethernet network and so operating as AP only.
If that works then use the other 3 units for your guest network.. these should then be placed on a different vlan via your main managed switch.. so they can get internet but have no connection at all to the office network.. but other ways around it could be found. As you have already discovered a simple double NAT might sufficiently block guest access.

Windows 8 pro and 8.1 pro WiFi connection issues

I hope to start a meaningful dialogue with Microsoft about the WiFi issues that Windows 8 and 8.1 have.
I've been deploying Windows 8 and 8.1 since the Surface Pro was released. Since then we've deployed about 50-75 Surface Pro, Surface Pro 2, Dell Latitude 7000 series, Lenovo Yoga 13 IdeaPad and Lenovo Yoga Thinkpad devices. Some have Windows
8 pro, some have been upgraded to 8.1 Pro, and some were purchased with native 8.1 Pro builds on them. All of these devices have difficulty with wireless in one form or another. We were able to reduce some of the problems (not eliminate) on our
corporate LAN over the last year by turning off Windows' ability to turn off the wireless adapter to save power, or turning off some of the offload or chimney or other advanced capabilities of the adapters. Problems were still present, but less so.
Many of our users were able to be on the wired LAN, so the issues were somewhat glossed over.
We were finally able to fix our Wireless LAN issue (we believe everything is working as expected after 2 weeks of testing and observation) by updating the controller and AP firmware for our Aruba wireless infrastructure (we have one controller and 11 ap's
across 5 well connected sites). This is great- sort of...
The problem is that while it's now very obvious that in our case, updating the firmware on our corporate WiFi is able to get the various 8 and 8.1 devices working on our LAN, this is not a true fix as it does not address our mobile and wireless capabilities
while:
1. traveling
2. working at a partner's or customer's location and connecting to their WiFi
3. Working from Home
4. Etc.
We obviously can't update everyone's AP/wireless router firmware. The solution, by necessity, must reside on the Windows 8/8.1 machine and it's inability to reliably connect and stay connected to existing Wifi networks. I want
to know the current state and thinking that Microsoft has regarding this persistent issue (searching for "Windows 8.1 wifi" in the "Windows 8.1 IT pro" forums on TechNet returned 4000+ results). Ignoring or not addressing this
problem head on is a huge mistake. Let us know the root cause (SOMETHING has changed in the Network/IP stack) and a solution to work around the cause.
I'll conclude like this: I KNOW that some Wifi issues can be resolved with firmware updates to WiFi routers/APs. I KNOW that some WiFi issues can be resolved with driver updates or, in some cases, downgrades. I KNOW some Wifi issues can be resolved
by uninstalling Intel ProSET, or getting manufacturer direct drivers. I KNOW some issues can be resolved by turning off Windows' ability to turn off the adapter when "not in use" to save power. I KNOW some owner's of Windows 8/8.1
machines have downgraded to Windows 7 or XP or abandoned Microsoft altogether and move to Linux or Mac. The ONLY common problem across all of these solutions, is Windows 8/8.1. Therein MUST lie the ultimate answer.
DLovitt

I hope to start a meaningful dialogue with Microsoft about the WiFi issues that Windows 8 and 8.1 have.
I've been deploying Windows 8 and 8.1 since the Surface Pro was released. Since then we've deployed about 50-75 Surface Pro, Surface Pro 2, Dell Latitude 7000 series, Lenovo Yoga 13 IdeaPad and Lenovo Yoga Thinkpad devices. Some have Windows
8 pro, some have been upgraded to 8.1 Pro, and some were purchased with native 8.1 Pro builds on them. All of these devices have difficulty with wireless in one form or another. We were able to reduce some of the problems (not eliminate) on our
corporate LAN over the last year by turning off Windows' ability to turn off the wireless adapter to save power, or turning off some of the offload or chimney or other advanced capabilities of the adapters. Problems were still present, but less so.
Many of our users were able to be on the wired LAN, so the issues were somewhat glossed over.
We were finally able to fix our Wireless LAN issue (we believe everything is working as expected after 2 weeks of testing and observation) by updating the controller and AP firmware for our Aruba wireless infrastructure (we have one controller and 11 ap's
across 5 well connected sites). This is great- sort of...
The problem is that while it's now very obvious that in our case, updating the firmware on our corporate WiFi is able to get the various 8 and 8.1 devices working on our LAN, this is not a true fix as it does not address our mobile and wireless capabilities
while:
1. traveling
2. working at a partner's or customer's location and connecting to their WiFi
3. Working from Home
4. Etc.
We obviously can't update everyone's AP/wireless router firmware. The solution, by necessity, must reside on the Windows 8/8.1 machine and it's inability to reliably connect and stay connected to existing Wifi networks. I want
to know the current state and thinking that Microsoft has regarding this persistent issue (searching for "Windows 8.1 wifi" in the "Windows 8.1 IT pro" forums on TechNet returned 4000+ results). Ignoring or not addressing this problem head on is a huge
mistake. Let us know the root cause (SOMETHING has changed in the Network/IP stack) and a solution to work around the cause.
I'll conclude like this: I KNOW that some Wifi issues can be resolved with firmware updates to WiFi routers/APs. I KNOW that some WiFi issues can be resolved with driver updates or, in some cases, downgrades. I KNOW some Wifi issues can be resolved
by uninstalling Intel ProSET, or getting manufacturer direct drivers. I KNOW some issues can be resolved by turning off Windows' ability to turn off the adapter when "not in use" to save power. I KNOW some owner's of Windows 8/8.1 machines
have downgraded to Windows 7 or XP or abandoned Microsoft altogether and move to Linux or Mac. The ONLY common problem across all of these solutions, is Windows 8/8.1. Therein MUST lie the ultimate answer.
DLovitt
THIS.
I have been going through the same efforts as DLovitt with no joy. I have ruled out all variables which leads directly to something with Win 8/8.1 being the problem. Very frustrating that I cannot find a fix anywhere.
Subscribing to this thread in the hopes an answer is forthcoming.

Ask the Expert: Hierarchical Network Design, Includes Core, Distribution, and Access

Welcome to the Cisco® Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about hierarchical network design.
Recommending a network topology is required for meeting a customer's corporate network design needs in their business and technical goals and often consists of many interrelated components. The hierarchical design made this easier like "divide and conquer" the job and develop the design in layers.
Network design experts have developed the hierarchical network design model to help to develop a topology in discrete layers. Each layer can be focused on specific functions, to select the right systems and features for the layer.
A typical hierarchical topology is
A core layer of high-end routers and switches that are optimized for availability and performance.
A distribution layer of routers and switches that implement policies.
An access layer that connects users via lower-end switches and wireless access points.
Ahmad Manzoor is a Senior Pre-Sales Engineer at AGCN, Pakistan. He has more than 10 years of experience in first-rate management, commercial and technical skills in the field of data communication and services lifecycle—from solution design through sales pitch, designing RFPs, architecture, and solution—all with the goal toward winning projects (creating win/win situations) of obsolete solutions. Ahmad also has vast experience in designing end-to-end data centers, from building infrastructure design to data communication and network Infrastructure design. He has worked for several large companies in Pakistan and United Arab Emirates markets; for example, National Engineer, WATEEN Telecom, Emircom, Infotech, Global Solutions, NETS International, Al-Aberah, and AGCN, also known as Getronics, Pakistan.
Remember to use the rating system to let Ahmad know if he has given you an adequate response.
Because of the volume expected during this event, Ahmad might not be able to answer every question. Remember that you can continue the conversation in the Solutions and Architectures under the sub-community Data Center & Virtualization, shortly after the event. This event lasts through August 15, 2014. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Dear Leo,
We are discussing the following without any product line, discussing the concept of hierarchical design, which will help you to take decision which model is better for you Two Layer or Three Layer hierarchical model.
Two-Layer Hierarchy
In many networks, you need only two layers to fulfill all of the layer functions—core and aggregation
Only one zone exists within the core, and many zones are in the aggregation layer. Examine each of the layer functions to see where it occurs in a two-layer design:
Traffic forwarding—Ideally, all interzone traffic forwarding occurs in the core. Traffic flows from each zone within the aggregation layer up the hierarchy into the network core and then back down the hierarchy into other aggregation zones.
Aggregation—Aggregation occurs along the core/aggregation layer border, allowing only interzone traffic to pass between the aggregation and core layers. This also provides an edge for traffic engineering services to be deployed along.
Routing policy—Routing policy is deployed along the edge of the core and the aggregation layers, generally as routes are advertised from the aggregation layer into the core.
User attachment—User devices and servers are attached to zones within the aggregation layer. This separation of end devices into the aggregation permits the separation of traffic between traffic through a link and traffic to a link, or device. Typically, it is best not to mix transit and destination traffic in the same area of the network.
Controlling traffic admittance—Traffic admittance control always occurs where user and server devices are attached to the network, which is in the aggregation layer. You can also place traffic admittance controls at the aggregation points exiting from the aggregation layer into the core of the network, but this is not common.
You can see, then, how dividing the network into layers enables you to make each layer specialized and to hide information between the layers. For instance, the traffic admittance policy implemented along the edge of the aggregation layer is entirely hidden from the network core.
You also use the core/aggregation layer edge to hide information about the topology of routing zones from each other, through summarization. Each zone within the aggregation layer should have minimal routing information, possibly just how to make it to the network core through a default route, and no information about the topology of the network core. At the same time, the zones within the aggregation layer should summarize their reachability information into as few routing advertisements as possible at their edge with the core and hide their topology information from the network core.
Three-Layer Hierarchy
A three-layer hierarchy divides these same responsibilities through zones in three vertical network layers,
Traffic Forwarding—As with a two-layer hierarchy, all interzone traffic within a three- layer hierarchy should flow up the hierarchy, through the layers, and back down the hierarchy.
Aggregation—A three-layer hierarchy has two aggregation points:
At the edge of the access layer going into the distribution layer
At the edge of the distribution layer going into the core
At the edge of the access layer, you aggregate traffic in two places: within each access zone and flowing into the distribution layer. In the same way, you aggregate interzone traffic at the distribution layer and traffic leaving the distribution layer toward the network core. The distribution layer and core are ideal places to deploy traffic engineering within a network.
Routing policy—The routing policy is deployed within the distribution layer in a three- layer design and along the distribution/core edge. You can also deploy routing policies along the access/distribution edge, particularly route and topology summarization, to hide information from other zones that are attached to the same distribution layer zone.
User attachment—User devices and servers are attached to zones within the access layer. This separation of end devices into the access layer permits the separation of traffic between traffic through a link and traffic to a link, or device. Typically, you do not want to mix transit and destination traffic in the same area of the network.
Controlling traffic admittance—Traffic admittance control always occurs where user and server devices are attached to the network, which is in the access layer. You can also place traffic admittance controls at the aggregation points along the aggregation/core edge.
As you can see, the concepts that are applied to two- and three-layer designs are similar, but you have more application points in a three-layer design.
Now the confusion takes place in our minds where do we use Two Layer and where the Three layer hierarchical model.
Now we are discussing that How Many Layers to Use in Network Design?
Which network design is better: two layers or three layers? As with almost all things in network design, it all depends. Examine some of the following factors involved in deciding whether to build a two- or three-layer network:
Network geography—Networks that cover a smaller geographic space, such as a single campus or a small number of interconnected campuses, tend to work well as two-layer designs. Networks spanning large geographic areas, such as a country, continent, or even the entire globe, often work better as three layer designs.
Network topology depth—Networks with a compressed, or flattened, topology tend to work better as two-layer hierarchies. For instance, service provider networks cover large geographic areas, but reducing number of hops through the network is critical in providing the services they sell; therefore, they are often built on a two-layer design. Networks with substantial depth in their topologies, however, tend to work better as three-layer designs.
Network topology design—Highly meshed networks, with many requirements for interzone traffic flows, tend to work better as two-layer designs. Simplifying the hierarchy to two levels tends to focus the design elements into meshier zones. Networks that focus traffic flows on well-placed distributed resources, or centralized resources, such as a network with a large number of remote sites connecting to a number of centralized Data Centers, tend to work better as three-layer designs.
Policy implementation—If policies of a network tend to focus on traffic engineering, two-layer designs tend to work better. Networks that attempt to limit access to resources attached to the network and other types of policies tend to work better as three-layer designs.
Again, however, these are simple rules of thumb. No definitive way exists to decide whether a network should have two or three layers. Likewise, you cannot point to a single factor and say, “Because of this, the network we are working on should have three layers instead of two.”
I hope that this helps you to understand the purposes of Two Layer & Three layer Hierarchical Model.
Best regards,
Ahmad Manzoor

Windows 7 -How to authenticate to WiFi (home or public) with AnyConnect NAM installed

Hello,
We are deploying ISE and connecting to the company's WiFi using a "machine" login (active directory laptop) works fine on Windows 7 or 8 - both wired and wireless. But, here is a scenario that I can't seem to find a good answer for. All my searches result in answers for corporate wifi; but not what I need.
So, an employee checks out a laptop to use on a trip. It has AnyConnect 4.0.x VPN and NAM installed (SBL - GINA needs to be added). Windows 8 allows a user who has never used a Win8 laptop to connect to WiFi and authenticate before attempting to login and get their desktop. If the Win 7 or 8 laptop is connecting to a corporate AP, ISE automatically authenticates the "machine" so when they enter their user credentials, they will be logging into the Windows domain (GPO's, drive mappings, etc.). Once a Windows 7 laptop has been authenticated with ISE, it doesn't matter which user logs in, the device will already have a connection. Essentially, the user does not have to log in while within the corporate network in order to get their profile created (locally cached credentials).
But, what if the user has no local profile and tries to use a Windows 7 laptop from their home? They need to be able to connect and authenticate to their home WiFi before AnyConnect can automatically bring up the VPN tunnel. The GINA module will do an SBL for a VPN connection but that's not going to work if they don't have a WiFi connection. This scenario is possible in my environment.
So, can AnyConnect GINA also manage a WiFi login before a user tries to get to a desktop for the first time?
The perfect scenario would be where we hand out emergency laptops to first time users, they connect to whatever WiFi they have access to (non-corporate), the VPN tunnel comes up and when they login, they login into the Windows domain, not locally.
Thanks!

Just so everyone knows...
Please take note of the specific processor which is included with your HP Pro 3130 MT.
HP Pro 3130 MT motherboards with specific processors do not have any onboard (integrated) graphics, although they still have the VGA and DVI connectors. This means that although you may remove the PCIe Graphics Card, you will not be able to be able to use a monitor with the onboard VGA or DVI (because there is no integrated graphics). This also means that you will not be able change your bios to onboard graphics (because there is no integrated graphics).
"NOTE: HP Pro 3130 with Intel Core i5 750 processor or any Intel i7 processor has no integrated
graphics."(1)
(1) Source: http://h18000.www1.hp.com/products/quickspecs/13640_ca/13640_ca.PDF
If you would like to know why, let me know. Thanks!
-Dave

Support for WPA-Enterprise, WPA2-Enterprise wifi s...

hi all
I try to connect my phone to corporate wifi but failed because the phones hangs. my company uses WPA2-Enterprise wifi. my phone clearly works with WPA2-Personal wifi security at home. will these profiles of security be supported in future update?

Although this is the right section for this question, let us continue with your original post …

Move wifi users to guest, if not authenticated by RADIUS

Hi
In our switched network, there is a feature that moves any device that is not authentified against RADIUS over to a guest LAN. I want to configure the same functionality on WLC. Currently, there is a corporate SSID and a guest SSID. If anyone tries to access corporate wifi, but fails RADIUS authentication, I want them to be automaticly moved to guest SSID. Is this possible ?
As an alternative, they may stay on the corporate SSID, if only they get piped over in the guest LAN in another way.

If anyone tries to access corporate wifi, but fails RADIUS authentication, I want them to be automaticly moved to guest SSID. Is this possible ?
I do not think this is possible. Also due to various reasons client authentication may fail (to your corporate SSID), still they may be valid users who require corporate SSID access. So if you forced them to Guest SSID, it make no sense to them.
HTH
Rasika
**** Pls rate all useful responses ***

Wifi w/WPA/WPA2 Enterprise

I have a strange issue. We are trying to connect iPhones to the corporate wifi network. This uses WPA/WPA2 Enterprise encryption with EAP-FAST authentication. I have created a Wifi Configuration Profile using the iPhone Config Utility v3.3. All settings look correct.
I install this config profile to an iPhone 4 and it cannot connect.
I install this same config profile to iPod Touch 2G and it does not connect.
I install this same config to iPad2 and it works perfectly fine. Connects every time no problem.
Apparently there is some difference in how the devices handle wifi security?!?
Does anyone have any insight into this?

Is the wireless network an "n" network?
If so, the iPhone 4 supports 802.11b/g/n Wi-Fi (802.11n 2.4GHz only).
No such 2.4GHz only requirement for an "n" network with the iPad.

Corporate Wifi Design

Similar Messages

Maybe you are looking for