E4200v2 - Guest Network Name: STRANGE behavior!

on a E4200v2, the Guest Network Name is not behaving rationally!
I have 2 E4200v2's, running 2.0.37, bought at same time and configured identically, including both in BRIDGE mode (access points only) and both with the 2.4ghz network name is "acme".
On one device the Guest Network Name is correct "acme-guest" but on the other device it is "cisco08996-guest".
(Also, the even wierder thing is that 08996 is not the correct serial number for this device, it's really 08273, so you'd expect it to default back to "cisco08273" but it never does)
I have tried many things to try to get it to revert to "acme-guest" but it just won't budge.  It seems like some sort of deep-seated bug in the configuration settings.
I've tried:
* reboot the device
* disable Guest Access then reboot then re-enable
* disable 2.4Ghz WiFi & Guest Access, then reboot, then re-enable both
Nothing works!
I don't really have time to reset & redo this devices config from scratch, and it's a very busy device anyway.  So I'd much rather there was a way to fix this problem without downtime to the users.
Anyone faced this same problem?  Any solutions or tricks??
Thanks in advance!

earthmyrll120288 wrote:
If the router is set to Bridge Mode, Guest Access is not going to work. Wireless devices would see the network broadcasting but it is not going to work.
Not true actually.  I find it has worked great.  And another user on these boards (Counsil?) has said likewise.
The article/point you refer to is talking about cascading routers, which we're NOT doing.  And it also talks about LAN-to-LAN access, which we're NOT doing. 
We are just using Guest Network to share the Internet securely which it seems to do fine.
So I'm back to my original question about the Guest Network Name... anybody have any experience with the behavior I reported in my opening post?

Similar Messages

  • E4200 Change Guest Network Name

    Is it possible to change the Guest Network Name on the E4200? And if so, is it possible to do so without having to do a complete reset of the router and without using the Cisco Connect software?

    Yes you need to download and install the Cisco connect Software.  That is the only way to manage the Guest account for the router (unless things have changed).   Be aware the new SSID will still have the -guest tagged to it.
    Linksys is the only vendor that does this.  Also the Guest account in NOT encrypted for security.  I would not use it in a public place at all.  This is for home use only.  All other manufacturers except Linksys, can use full WA2-AES for encrypted information on their Guest Networks.  You can also name your Guest SSID to anything you want.  Something to think about.

  • How to setup Guest Network Name in Cisco Router

    Hello everyone!
    The first. Sorry my english =)
    I want tald you how to change guest network name in cisco (what have different name)
    What we need.
    1. Cisco Connect for Mac OSX (i use snow leopard and Cisco Connect for E3000)
    2. Terminal
    Okay. Let's go.
    1. Install Cisco Connect for OSX
    2. After setup - slighty setup your cisco router (give something name and password), then, when cisco connect say you "You now connected the internet" and going to main screen - exit from cisco connect
    3. Open Terminal (Or you can use Finder (go to Application, show package content Cisco Connect))
    4. Go to /Application/Cisco Connect.app/Contents/Resources/lcid/<your setup language, for english - go 1033>/
    5. Edit resource_strings.pus (vi resource_strings.pus)
    6. Change "-guest" in string <LocalizableString RcFileId='10019' BaseTextHash='0xA65E286D' BaseText='-guest'/> for something what you want. For example, i changed for ' Guest Network'
    7. Save
    8. Open Cisco Setup
    9. Go to router configuration and change desired name. I changed to 'Grizlly Bear'
    10. After setup name - go to Guest Setting and Enable. As you can si, your guest network name set as 'Grizlly Bear Guest Network'
    11.Exit Cisco Setup
    12. Go to web interface setup
    13. Setup Wifi manual and change SSID for diferent names. I change 5Gh to 'Grizlly Bear Hi-Speed Network' and 2.4GHz to 'Grizlly Bear Main Network'
    14. Setup your hostname for all services (fileserver, media server, etc)
    Woala!
    We have three diferent names network!
    Questions?

    In order to enable Guest networking, the AirPort Extreme must be configured as your "main" Internet router. In this configuration, Connection Sharing = Share a Public IP address. The Extreme would be connected directly to the Internet modem and NOT downstream of another router with NAT enabled.
    In this configuration, the Guest network would provide access ONLY to the Internet and NOT to your LAN.

  • E3000 Changing guest network name

    When I first configured the E3000 I called the device CiscoRouter, and I had:
    a) CiscoRouter
    b) CiscoRouter-guest
    I then decided to change the name of the device to: Alberto-Network, and now I have:
    a) Alberto Network
    b) CiscoRouter-guest
    I have not foud a way to change the name of the guest conexion.
    Cisco COnnect lets me change the password for the guest netwok, but not the name.
    How do I change the name of the guest conexion??????
    Alberto Odor, MD
    Solved!
    Go to Solution.

    Like dalime said you have to set the Router name and then the guest account is generated based on that.  But it's a bit dumb.  If you've configured your router name from the web panel or after you setup your guest account it will generate a generic Cisco name.
    Solution:
    1) Turn off Guest
    2) Change the router name (Like dalime showed)
    3) (cancel) the silly usb key interchange request
    4) Change the router name back to what it should be
    5) (cancel) the silly usb key interchange request
    6) Turn on Guest and now it will recognize the correct router name to add "-guest" in the end of

  • Airport Extreme off a Router which provides DNS - Guest Networks

    I am sure that I am not alone here.
    I have a BTBroadband wireless ADSLModem/Router which provides DNS for the network.
    Off tyhe router is a Netgear switch which has connected to it an Airport Extreme. Also off this switch I have many other peripherals - such as Time Capsule, iMac etc.
    So the arrangement is simple in logical terms:
    BT Modem------->Wireless Router (which allocates DNS)---------->Switch----------->Airport Extreme  etc.
    IP Settings as follows
    192.168.0.1 for Wireless Router - which allocates DNS in range 192.168.0.2 to 0.150.
    I have allocated a fixed IP on the Airport Extreme of 192.168.0.151
    The devices thart run off this are all having DNS allocated by the router - not the Airport Extreme.
    So - how do I set up (or can I set up) the Guest Wireless Network?
    Let's assume Router Wireless Network is call MainWireless with a Password MainWord, The Airport Extreme is acting in Bridge Mode and has the exact same 'Create a wireless network' called MainWIreless and Password MainWord (as per best practices in using these to provide the best 'network hopping' capabilities for devices (I actually have 2 other wireless devices from TimeCapsules that operate the wireless in the same way).
    All of this works fine.
    However when I set up the Guest Network on the Airport Extreme - simply by enabling it - I provide a new Guest Network name of GuestWireless with a password GuetsPassword. In theory it should all work fine, however the devices connecting to the Guest Network cannot get to the internet (effectively I don't think that the 'iPhone for example' is being allocated a correct IP Address - in fact I know that it isn't as its a 169 range and a different subnet).
    So - the only way I can think of doing this is to go into the Network Settings on the Airport Extreme, Change Bridge Mode Wireless to DHCP and NAT and then go into Network Options. Here I am a bit lost and need help.
    To summarise - Main Router Address 192.168.0.1 allocates range 192.168.0.2 to 150, Airport Extreme Address (static) address 192.168.0.151.
    Airport Extreme DHCP and NAT Network Options has:
    IPv4 DHCP Range - I have set to 192.168.0.152 to 255
    Guest IPv4 DHCP Range 10.0.0 152 to 255
    NAT Port Mapping Protocol is switched Off
    - This won't even save.
    Should be simple I would have thought. Think again...
    Please help - mwhat should I / can I do to enable a guest wireless network?

    Thanks for all that - I suspected as much (and I did mean DHCP not DNS).
    So - if I disable DHCP on the HomeHub3 IP 192.168.0.1, and set the Airport Extreme IP Address at 192.168.0.2, what do I do with DHCP and NAT settings to have a Main and Guest Wireless Network?
    I can easily change the order of things if necessary to be :
    BT Modem (192.168.0.1 with DHCP disabled)--->Airport Extreme (192.168.0.2 (set to get DNS from 192.168.0.1) )--->Switch---->Various wired and wireless devices.

  • Strange behavior on my network... Has my home system been compromised?  A disgruntled employee (sysAdmin) could have full access...worried...

    I have been experiencing a lot of strange behavior on my home network ever since a disgruntled employee was let go.  He was a server admin and had root access to my home network - where I run my business.  I am getting a ton of span now, my websites were all infected with xss hacks, and many of my accounts are blacklisted.  I did a clean install and DoD erase pass on my hardware, but I still see a lot of errors and my hosts file and VMs look very odd.  not to mention the extremely odd loops in my ifconfig...  Any help? 
    Here is an output of 'ifconfig'
    (FYI, I am a software dev, so feel free to speak the jargon and ask for specific things)
    (I hid any identifying info with either xx or my:ma:ca:dd:re:ss or something like that)
    lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
        nd6 options=1<PERFORMNUD>
    gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
    stf0: flags=0<> mtu 1280
    en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
        ether th:is:ad:dr:es:s1
        inet6 fxxx::xx2a:xxff:fxxx:fxxx%en0 prefixlen 64 scopeid 0x4
        inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
        nd6 options=1<PERFORMNUD>
        media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
        status: active
    en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether th:is:ad:dr:es:n1
        inet6 fe80::e2f8:47ff:fe29:6ec2%en1 prefixlen 64 scopeid 0x5
        inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
        nd6 options=1<PERFORMNUD>
        media: autoselect
        status: active
    fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
        lladdr 70:cd:xx:ff:fe:xx:xx:xx
        nd6 options=1<PERFORMNUD>
        media: autoselect <full-duplex>
        status: inactive
    en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        options=60<TSO4,TSO6>
        ether my:wi:fi:ma:ca:dd
        media: autoselect <full-duplex>
        status: inactive
    bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=63<RXCSUM,TXCSUM,TSO4,TSO6>
        ether th:is:ad:dr:es:mtu
        Configuration:
            id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
            maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
            root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
            ipfilter disabled flags 0x2
        nd6 options=1<PERFORMNUD>
        media: <unknown type>
        status: inactive
    p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
        ether th:is:ad:dr:es:p2p0
        media: autoselect
        status: inactive
    vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 00:50:56:c0:00:01
        inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
    vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 00:50:56:c0:00:08
        inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255
    ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1396
        inet my.ded.vpn.xx --> 192.xxx.xxx.xxx netmask 0xffffff00
    nooooooo:~ cearnhart$ ifconfig
    lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
        nd6 options=1<PERFORMNUD>
    gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
    stf0: flags=0<> mtu 1280
    en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
        ether th:is:ad:dr:es:s1
        inet6 xxx::xxxx:xxff:xxxx:fxx2%en0 prefixlen 64 scopeid 0x4
        inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.x.x.xxx
        nd6 options=1<PERFORMNUD>
        media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
        status: active
    en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether th:is:ad:dr:es:n1
        inet6 fxxx::xxf8:47ff:fxx:6xx%en1 prefixlen 64 scopeid 0x5
        inet 10.x.x.x netmask 0xffffff00 broadcast 10.x.x.xxx
        nd6 options=1<PERFORMNUD>
        media: autoselect
        status: active
    fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
        lladdr xx:xx:xx:ff:fe:xx:5f:xx
        nd6 options=1<PERFORMNUD>
        media: autoselect <full-duplex>
        status: inactive
    en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        options=60<TSO4,TSO6>
        ether xx:00:1e:xx:xx:xx
        media: autoselect <full-duplex>
        status: inactive
    bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        options=63<RXCSUM,TXCSUM,TSO4,TSO6>
        ether th:is:ad:dr:es:mtu
        Configuration:
            id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
            maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
            root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
            ipfilter disabled flags 0x2
        nd6 options=1<PERFORMNUD>
        media: <unknown type>
        status: inactive
    p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
        ether th:is:ad:dr:es:p2p0
        media: autoselect
        status: inactive
    vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 00:50:56:c0:00:01
        inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
    vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        ether 00:50:56:c0:00:08
        inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255

    If you know or suspect that a hostile intruder has either had physical access to it, or has been able to log in remotely, then there are some steps you should take to make sure that the computer is safe to use.
    First, depending on the circumstances, computer tampering may be a crime, a civil wrong, or both. If there's any chance that the matter will be the subject of legal action, then you should do nothing at all without consulting a lawyer or the police. The computer would be the principal evidence in such a case, and you don't want to contaminate that evidence.
    Running any kind of "anti-virus" software is pointless. If I broke into a system and wanted to leave a back door, I could do it in a way that would be undetectable by those means—and I don't pretend to any special skill as a hacker. You have to assume that any intruder can do the same. Commercial keylogging software—which has legitimate as well as illegitimate uses—won't be recognized as malware, because it's not malware.
    The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
    If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
    When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
    Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
    Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated.
    Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
    That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this  after the system has been secured, not before.

  • How can I delete the guest network from my airport. It was fine until the last update. It says my whole name's guest network which I do not want everyone seeing. There is no guest network setting in my airport utility.

    How can I delete the guest network from my airport. It was not showing up until I recently upgraded the airport. It now says my name's guest network and I don't like my name showing on the available network list! I am using a Verizon wireless modem with the wireless feature off.

    Open AirPort Utility, go to the Wireless tab and remove the check from the guest network check box.

  • Anyone seen strange behavior with wired guest access on WLAN Controller?

    Cisco Doc ID 99470 spells out how to deploy wired guest access over wireless LAN Controllers.
    That said, everything has been up and working for almost a year.  Guest wireless uses anchor controller in DMZ - no issues.
    Recently configured two wired ports for wired guest networking.  The desktops get the correct IP address via DHCP.  A wireless client (on the table right next to the wired clients) on the guest wireless gets an IP address as expected as well.
    Open a continuous ping to the gateway 172.16.16.1 on all three machines.
    The two desktops will ping for a few minutes and then stop for 30 seconds or longer.  Wireless client will keep its connection.  (you might think it would be the other way around)
    I understand there is a 65,535 second inactivity timeout, but I am only sitting here for minutes, not 18 hours when this happens.
    On the wired desktops, you have to bring up a browser and log back in just as you do on a wireless client ever few minutes.  After debugging the client, I found a "failed to find scb" message in the output.
    The other trick here is that the wired clients are miles away from where I can actually get on the CLI of the controller.  This makes it difficult to run a debug and bring up a browser since I am not local to the machines when running debugs.
    Has anyone ever see this behavior?  Has anyone see the "failed to find scb" message?
    Thanks in advance!
    Succ
    essfully plumbed mobile rule (ACL ID 255)
    *pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef 0.0.0.0 tokenID = 5
    *pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef Set bi-dir guest tunn
    el for 00:25:b3:ce:cb:ef as in Export Foreign role
    *pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef 0.0.0.0 Added NPU ent
    ry of type 1, dtlFlags 0x4
    *spamReceiveTask: Dec 30 11:34:54.569: CCKM: Send CCKM cache entry
    FP08:(33207772)[cmdSendNodeInfo:3787]failed to find scb 0023.2422.c6eb
    *mmListen: Dec 30 11:35:58.539: 00:25:b3:ce:cb:ef Scheduling deletion of Mobi
    le Station: (callerId: 73) in 1 seconds
    *mmListen: Dec 30 11:35:59.471: 00:25:b3:ce:cb:ef Scheduling deletion of Mobi

    I found it in the document
    B.1 How Logout Works
    The WebGate logs a user out when it receives a URL containing "logout." (including the "."), with the exceptions of logout.gif and logout.jpg, for example, logout.html or logout.pl. When the WebGate receives a URL with this string, the value of the ObSSOCookie is set to "logout."
    The Access System sets an obSSOCookie for each user or application that accesses a resource protected by a WebGate. The obSSOCookie enables users to access resources that are protected by the Access System that have the same or a lower authentication level. Removing the ObSSOcookie causes the WebGate to log the user out and requires the user to re-authenticate the next time he or she requests a resource that is protected by the Access System.
    Well, I havn't got that far in the document:)
    Thanks a lot for your help.
    -Wei

  • WRT1900AC - WPA2 on Guest Network and Setting Domain Name

    I'm configuring a new WRT1900AC (version 1) and have a couple of questions.  The first should be easy, on the Connectivity -> Internet Settings page on the right side under the heading Optional the Domain Name (provided via the DHCP server, Comcast in this case) is displayed, but I cannot change it.  How do I set the Domain Name to reflect my local domain? The second question is a bit more daunting.  I have two main wifi segments (one each on 2.4Ghz and 5Ghz) that are each secured by WPA2.  They work great so far.  I also have two Guest wifi segments (one each on 2.4Ghz and 5Ghz), I cannot figure out how to secure these with WPA2.  You can set a passwword for each of the Guest wifi segments, and instruct users to open a web browser after connecting and enter this password, but that's not a secure connection.  Please tell me there is a way to secure the Guest network via WPA2, nobody wants to use an insecure internet connection in this day and age...... -MC

    That's exactly why you want the connection encrypted, so EVERYTHING you send is encrypted and not sniffable.  The intended use of this Guest network is for renters at a condo resort, who will likely be doing banking and the like while on vacation.  If we only provide an open/unencrypted network for them they can't (or at least shouldn't) use it. I have a Netgear R7500 in place right now, it doesn't have any of these problems (e.g. you can specify the domain name even on with a dynamic WAN IP, and all 4 network segments are WPA2 encrypted).  Unfortunately, it's totally unreliable - the 4 network segments randomely disappear and stop working all the time, and the signal range is poor.  I "downgraded" to this 1900AC because this router has a better reputation for stability and range (and indeed, I've been testing it for several days now and stability and range seem to be its strong points, not a single problem so far), but these firmware decisions by Linksys are forcing me to reconsider this router.  -MC

  • Outlook strange behavior with error 0x800CCC13 Cannot connect to the network. Verify your network connection or modem

    Hi guys,
    I am having a strange behavior in my environment. We are running Exchange 2010 with Outlook 2007 for client access. Some of these clients needs to access some pop3 accounts from diferent vendors.
    About 2 weeks ago, we start getting error Ox800CCC13 (as described above) when users try to send email through their pop3 accounts in Outlook. This only happens to about 5 out of 100 users. I have removed the pop3 account and readded it. I was able to send
    just one email out then issue was back.
    Next, I tried sending out simple text message with no attachment. No luck. However, I noticed when I remove the signature (10 kb gif image) I was able to send out a few emails. However, issue is back with or without signature.
    For more testing, I added Mozilla Thunderbird client for the pop3 account with no exchange account and so far no error. Emails are sending out fine. I would appreciate any insight please.

    Hi, 
    This problem may occur if the Outlook 2007 client computer does not have a default gateway configured. 
    For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.To
    add this DWORD value yourself, follow these steps.
    Outlook 2007
    1.      
     Click Start, click Run, type regedit in the Open box, and then click OK.
    2.      
     Locate and then click the following subkey:
    HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\RPC
    3.      
     On the Edit menu, point to New, and then click DWORD Value.
    4.      
     Type DefConnectOpts, and then press ENTER.
    5.      
     Right-click DefConnectOpts, and then click Modify.
    6.      
     In the Value data box, type 0, and then click OK.
    7.      
     Exit Registry Editor.
    Sincerely
    Harry

  • Guest network and multiple VLANs

    Hello all,
    I have installed a pair of 5508 controllers in our network. One controller sits inside the network and APs are configured to associate with that controller. The second controller sits on a DMZ interface off the ASA. I have a guest network configured and it works great. I would like to configure additional guest networks at remote locations. Each guest WLAN will have it's own SSID. Is it possible to map all of these to the same VLAN? Or do I need a seperate VLAN and subnet for each SSID.
    Thanks

    Scott,
    Thanks for the reply. I have created different SSIDs and mapped them to the same VLAN. Everything looks good but I'm getting some strange behaviors on the new SSIDs. It appears that users don't authenticate but I've verified the credentials quite a few times. I wanted to make sure that you could map multiple SSIDs to the same VLAN before I continued troubleshooting.

  • Report FP_TEST_00 - Strange behavior

    Hello Gurus,
    A strange behavior with report FP_TEST_00 occurs:
    SA38 --> FP_TEST_00 --> select a device --> execute --> print preview then and error or popup is show:
    Adobe Reader
    Error initializing the font server module
    Then the SAP GUI is closed, I check the ST22 and no dump is generated and in transaction SM21 only appear:
    DP  Q0  4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    DP  Q0  I Operating system call recv failed (error no. 232 )
    The #1 log entry: *
    Details Page 2 Line 28 System Log: Local Analysis of sapdev                   1
    Time     Type Nr Clt User TCode Grp N Text
    11:37:20 DP                     Q0  4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
    Details
    Recording at local and central time........................ 25.02.2010 11:37:20
    Task...... Process    User...... Terminal Session TCode Program Cl Problem cl         Package
    11092      Dispatcher                                           K  SAP Web AS Problem STSK
    Further details for this message type
    Module nam Line Error text..........              Caller.... Reason/cal
    dpxxdisp   1223 551  ADMIN       86  HUSVP-SAP-BA DpRTmPr    NiBufRe
    Documentation for system log message Q0 4 :
    The SAP Dispatcher (part of the application server) has lost the
    connection to a terminal process.  For example, this happens when the
    terminal program (GUI) terminates without correctly logging off the
    application server.  More detailed information about the error
    context is not available here.
    Technical details
    File Offset RecFm System log type             Grp N variable message data
       21 254340 m     Error (Function,Module,Row) Q0  4 551  ADMIN       86  HUSVP-SAP-BA     DpRTmPrNiBufRedpxxdisp1223
    The #2 Log show: *
    Details Page 2 Line 29 System Log: Local Analysis of sapdev                   1
    Time     Type Nr Clt User TCode Grp N Text
    11:37:20 DP                     Q0  I Operating system call recv failed (error no. 232 )
    Operating system call recv failed (error no. 232 )
    Details
    Recording at local and central time........................ 25.02.2010 11:37:20
    Task...... Process    User...... Terminal Session TCode Program Cl Problem cl         Package
    11092      Dispatcher                                           K  SAP Web AS Problem STSK
    Further details for this message type
    Module nam Line Error text        Caller.... Reason/cal
    nixxi.cp   4435           recv232 NiIRead    recv
    Documentation for system log message Q0 I :
    The specified operating system call was returned with an error.
    For communication calls (receive, send, etc) often the cause of errors
    are network problems.
    It could also be a configuration problem at operating system level.
    (file cannot be opened, no space in the file system etc.).
    Additional specifications for error number 232
    Name for errno number ECONNRESET
    No documentation available for error ECONNRESET
    Technical details
    File Offset RecFm System log type             Grp N variable message data
      21 254520 m     Error (Function,Module,Row) Q0  I           recv232                     NiIReadrecv   nixxi.cp4435
    Edited by: Hernando Polania Cadena on Feb 25, 2010 8:36 PM

    Hello All,
    I applied the solution in page
    http://wiki.sdn.sap.com/wiki/display/PLM/Adobe%209%20-%20SAPGUI%20crash
    Works OK
    Thanks
    Hernando

  • Multiple guest users plus wierd behavior

    Hello,
    I'm having strange behavior in my afp logins - home folder house icon disappears, some users launch a file - it bounces and then it never launches, some share-points come up without mounting (only alias shows), sometimes a user takes 10 minutes to log-in, very long beachballs when opening a folder, etc. These behaviors are intermittent...
    I see that in my AFP connections the following:
    Name Status Address Connected Idle For
    <Guest> Normal machine.name.private 04:57 00:15
    <Guest> Normal machine.name.private 03:21 00:15
    username Normal machine.name.private 00:15 00.00
    The number of <Guest> users from the same machine varies. when I log out of the machine, the <Guest> users are still in the AFP list on the server as being logged in from that machine.
    I don't know whether the behavior is related to the <Guest> issue or not, so I have the following questions: is the above status for APF normal? If not, how do I correct? If not, what else may be causing my unreliable behavior?
    The server is 10.4.7 and the database is fully kerberized. Services running include: AFP DHCP, DNS, FTP, NFS, Open Directory, and Web.
    Thanks,
    Dave

    I just noticed the same behavior on a client's new dual 2ghz G5 Xserve.
    The AFP process spikes the CPU near 80% or so from time to time, though the server's not swapping out too much at all. It has 2 gb of RAM.
    AFP looks like it hangs out at a reasonable load most of the time, but it does show a high number of threads in use. I tried setting the maxThreads key from 200 to 300 in /Library/Preferences/com.apple.AppleFileServer.plist. My client is going to restart AFP to see if that helps at all.
    Regardless, what might cause the multiple authenticated/guest logins per IP? Has anyone else seen this?
    Thanks for any tips you may have.

  • Strange behavior of system with enabled FileVault2, Roaming profile

    Hello,
    I have encountered strange behavor of my Macbook Air after some testing.
    Macbook Air 2012 was newly installed with 10.8.4 and joined network account server on 10.8.4 server with Roaming profile (synced with server home directory). After installing some basic apps like iWork I turned on FileVault.
    Then I start to have the strange behavior - iWorks are not displaying content of document - it seams blank - just white screen without any borders where should be at least lines in numbers or empty cells.
    Another display problem is in Safari. On same pages (even default Top SItes) it`s flashing and especially when scrolling.
    Did you encountered something similar? I`m not able to get rid of it.
    Computers was used for some time before turining on FIle Vault and problem started to occur after this action. Disabling of FileVault didn`t helped (properly restarted between steps).
    I didn`t found anything strange in Console or elsewhere..

    Please read this whole message before doing anything.
    This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
    Step 1
    The purpose of this step is to determine whether the problem is localized to your user account.
    Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
    While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
    Test while logged in as Guest. Same problem?
    After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
    *Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
    Step 2
    The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain iMacs.  The next normal boot may also be somewhat slow.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2.

  • Remote Access VPN strange behavior

    Hello all,
    I have a problem with remote access VPN on a ASA5505 (8.2).
    I can establish a VPN connection and can ping the ASA, but nothing else on the network! Not only ping isn't working, I've also tried RDP, HTTP, and file access.
    Additionally there is a site-to-site VPN to this ASA, which is working perfectly.
    I have another ASA5505 which is almost configured the same and there it's working, so I really don't know where the problem is.
    I hope you guys can help me!
    Many thanks in advance!
    Here's my config:
    Result of the command: "show running-config"
    : Saved
    ASA Version 8.2(1)
    hostname Shanghai
    domain-name *******.local
    enable password 8Ry2YjIyt7RRXU24 encrypted
    passwd 2KFQnbNIdI.2KYOU encrypted
    names
    name 172.20.18.0 network-vpnclient
    name 172.20.16.8 SHDC01
    interface Vlan1
     nameif inside
     security-level 100
     ip address 172.20.16.1 255.255.248.0
    interface Vlan2
     nameif outside
     security-level 0
     ip address ***.***.***.62 255.255.255.252
    interface Ethernet0/0
     switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    ftp mode passive
    clock timezone SGT 8
    dns domain-lookup inside
    dns server-group DefaultDNS
     name-server 172.20.16.1
     domain-name *****.local
    same-security-traffic permit inter-interface
    access-list nonat extended permit ip 172.20.16.0 255.255.248.0 network-vpnclient 255.255.255.0
    access-list nonat extended permit ip 172.20.16.0 255.255.248.0 172.20.0.0 255.255.248.0
    access-list split_tunnel standard permit 172.20.16.0 255.255.248.0
    access-list acl-in extended permit icmp any any
    access-list acl-in extended permit tcp any host ***.***.***.190 eq h323
    access-list VPN_acl extended permit ip 172.20.16.0 255.255.248.0 network-vpnclient 255.255.255.0
    access-list outside_cryptomap extended permit ip 172.20.16.0 255.255.248.0 172.20.0.0 255.255.248.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu inside 1500
    mtu outside 1500
    ip local pool client-vpn 172.20.18.1-172.20.18.254 mask 255.255.248.0
    icmp unreachable rate-limit 1 burst-size 1
    no asdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (inside) 0 access-list nonat
    nat (inside) 1 172.20.16.0 255.255.248.0
    static (inside,outside) tcp interface h323 192.168.0.250 h323 netmask 255.255.255.255
    access-group acl-in in interface outside
    route outside 0.0.0.0 0.0.0.0 ***.***.***.61 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    dynamic-access-policy-record DfltAccessPolicy
    aaa-server ActiveDirectory protocol ldap
    aaa-server ActiveDirectory (inside) host SHDC01
     server-port 3268
     ldap-base-dn DC=*****,DC=local
     ldap-scope subtree
     ldap-login-password *
     ldap-login-dn CN=Administrator,CN=Users,DC=lap-laser,DC=local
     server-type microsoft
    aaa authentication enable console LOCAL
    aaa authentication ssh console LOCAL
    aaa authentication http console LOCAL
    http server enable
    http 172.20.0.0 255.255.248.0 inside
    http 172.20.16.0 255.255.248.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server community *****
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    sysopt noproxyarp inside
    crypto ipsec transform-set laplaserset esp-3des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto ipsec security-association lifetime seconds 28800
    crypto ipsec security-association lifetime kilobytes 4608000
    crypto dynamic-map dynmap 20 set transform-set laplaserset
    crypto map laplasermap 1 match address outside_cryptomap
    crypto map laplasermap 1 set pfs group5
    crypto map laplasermap 1 set peer **.***.***.51
    crypto map laplasermap 1 set transform-set ESP-AES-256-SHA
    crypto map laplasermap 65535 ipsec-isakmp dynamic dynmap
    crypto map laplasermap interface outside
    crypto isakmp identity address
    crypto isakmp enable outside
    crypto isakmp policy 5
     authentication pre-share
     encryption 3des
     hash sha
     group 2
     lifetime 86400
    crypto isakmp policy 10
     authentication pre-share
     encryption 3des
     hash md5
     group 2
     lifetime 86400
    crypto isakmp policy 11
     authentication pre-share
     encryption aes-256
     hash sha
     group 5
     lifetime 86400
    crypto isakmp policy 30
     authentication pre-share
     encryption des
     hash sha
     group 2
     lifetime 86400
    telnet timeout 5
    ssh timeout 5
    console timeout 0
    management-access inside
    dhcpd ping_timeout 750
    dhcpd auto_config outside
    dhcpd address 172.20.16.50-172.20.17.1 inside
    dhcpd dns SHDC01 interface inside
    dhcpd option 3 ip 172.20.16.1 interface inside
    dhcpd enable inside
    vpnclient vpngroup lapserver password ********
    threat-detection basic-threat
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    webvpn
    group-policy DfltGrpPolicy attributes
    group-policy user-vpn internal
    group-policy user-vpn attributes
     wins-server value 172.20.16.8
     dns-server value 172.20.16.8
     vpn-tunnel-protocol IPSec webvpn
     split-tunnel-policy tunnelspecified
     split-tunnel-network-list value split_tunnel
     default-domain value *****.local
    username admin password VQiqjZZuUSQOWz6. encrypted
    username adminlogin password qZwgnR/XebVbOZxI encrypted
    tunnel-group connection2 type ipsec-l2l
    tunnel-group connection2 ipsec-attributes
     pre-shared-key *
    tunnel-group **.***.***.51 type ipsec-l2l
    tunnel-group **.***.***.51 ipsec-attributes
     pre-shared-key *
    tunnel-group user-vpn type remote-access
    tunnel-group user-vpn general-attributes
     address-pool client-vpn
     authentication-server-group ActiveDirectory
     default-group-policy user-vpn
     dhcp-server 172.20.16.1
    tunnel-group user-vpn ipsec-attributes
     pre-shared-key *
    class-map inspection_default
     match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
     parameters
      message-length maximum 512
    policy-map global_policy
     class inspection_default
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny  
      inspect sunrpc
      inspect xdmcp
      inspect sip  
      inspect netbios
      inspect tftp
      inspect dns preset_dns_map
      inspect http
    service-policy global_policy global
    prompt hostname context
    Cryptochecksum:bc5e7b4ca01a2227885487ab3520ea9c
    : end

    I note in your config that the pool of addresses for remote access VPN is a group of addresses included within the range of addresses on the inside interface. I have seen situations where this caused problems and so have a couple of suggestions:
    - do the devices connected on the inside network have routes to the vpn pool of addresses?
    - if you change the vpn address pool to use addresses that do not overlap with your inside network, does the behavior change?
    HTH
    Rick

Maybe you are looking for

  • The meaning of 'User by Activity' in t-code st03n

    Hi Experts, I've searched the resources mentioned at the end of my message, and still haven't got my answer, so allow me to ask. In the below screen st03n --> Expert Mode --> Workload --> Total --> Day --> <some day> --> User tab There is certain num

  • Its urgent regarding Blob field

    I have a stored proc trying to retrieve blob field(a binary file) from a View(in schema1) in oracle10g. After retrieving I am sending it to another databsase(schema2) through a dblink which is in oracle9i. I am using TOAD for this. My code is Insert

  • NavigationBar in "Maps" app

    hello. I'm a newbie for developping iPhone app. Following is my question: When I push "direction" button which is located at the bottom of "Maps" app, a navigation bar is shown (this bar has 2 textFields). How can I custom navigationBar like this ? p

  • How to understand Workforce planning

    Hi, I'm going to implement Hyperion Workforce planning 11.1.2 (out of the box). Is there any document explains workforce planning account members in a simple way. Thanks in advance.

  • Just tell us how to get rid of Firefox and return to IE

    I want to un-install Firefox and return to IE. DO NOT LIKE FIREFOX! DON"T WANT TO FIX IT! I just want to get rid of it and be done with it! Do not want to have to re-format and re-install everything but if that's what it takes I will do it!