Easiest way to isolate a guest SSID

Is the easiest way to use a Guest SSID with Public Secure Packet Forwarding and VLAN?  I am unsure how to tie the PSPF and VLAN together on the AP and the Switch.  I just want the Guest network to have isolated IP's and access to the Internet, while the Work SSID has full intranet and internet access.  Could someone give me an example of both the AP and Switches config's?  Do I need to create a seperate bridge group?
Site Layout
Cisco 2602i AP's
Catalyst 3560 Switches
No WLC
SSID#1  Guest
SSID#2  Work
2602 Config:
dot11 ssid Work
   authentication open
   authentication key-management wpa version 2
   wpa-psk ascii 0 Passkey
dot11 ssid Guest
   vlan 10
   authentication open
   authentication key-management wpa version 2
   wpa-psk ascii 0 Passkey
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm
ssid Guest
ssid Work
antenna gain 0
stbc
channel least-congested 2412 2437 2462
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding

Ok so I will add under interface Dot11Radio 0:
encryption mode ciphers aes-ccm
encryption vlan 10 mode ciphers aes-ccm
Then add from the Configure Terminal prompt:
interface dot11radio0.10
encapsulation dot1q 10
bridge-group 10
interface < ethernet > 0.10
encapsulation dot1q 10
bridge-group 10
"Now for PSPF, are you looking to not let the 'guest' talk to each other, or do you not want them to talk to your 'work' ssid?"
I would like the guests not talk to each other but have access to the internet while the Work SSID members have full access to their SSID members/internet/intranet.
Can you give CLI examples for where the bridge-group group port-protected command goes and an example for the switch?  I am having a hard time visualizing what goes where.
Also just verifying that this switch port configuration should be on each port going out to each AP and that there would be no further configuration needed.
Thank you for your help!

Similar Messages

  • WAP321 - Guest SSID not working

                       I have a WAP321 with 2 SSID's.  One is for local access and another for guest.  The WAP connects to a 3550 and it's port is set to
    description Cisco Wireless
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,20
    switchport mode trunk
    no ip address
    spanning-tree portfast
         My ASA 5505 is set with both VLANs and I'm using DHCP to dishout the guest IP.  MyWAP has both networks setup. VAP 0 is setup for VLAN 1 and VAP 1 is for VLAN 20.  Both are enabled.
    When connecting to my local wireless, I have no problem getting local access and Internet connection.  When I connect to Guest I get an IP from my ASA's DHCP, but I cannot ping my gateway, which is my ASA.  I know my guest VLAN is ok, because if I put a port on that VLAN, I can connect to the Internet.
    When I do packet captures from the WAP (Administration-Packet Capture), I can't see any ICMP attempts either from the eth0 or VAP 1.  When I capture my machines wireless interface I see ICMP attempts with no reposnds.  It makes me think I missed something in the WAP321 setup.
    Any ideas where to check?

    Hi, My name is Eric Moyers. I am a Network Support Engineer in the Cisco Small Business Support Center. Thank you for using the Cisco Community Post Forums.
    While what I am fixing to share is not in any way a great solution, It can be utilized as a workaround.
    With the WAP321, after trying a few different scenarios that didn’t work. I simply created two vlans, left the Untagged vlan as main vlan and changed the Management vlan to the second. I then attached the guest SSID to the Management VLAN. This allowed me to authenticate to my guest captive portal and get an IP and get out to the internet. The Main SSID still worked normally.
    Now for some caveats:
    Problem: If a wireless client knows the IP of the WAP and the username and password they could get into the WAP.
    Solution: Setup Management Access Control to an IP outside the DHCP scope for that VLAN and have a Strong Password.
    Problem: Management of the WAP321 can only be from an IP on the Management VLAN. (In my case 2)
    Solution: Setup Management Access Control to an IP outside the DHCP scope for that VLAN and have a Strong Password.
    Not the very best solution, but the only workaround I can come up with for now.
    Thanks
    Eric Moyers    .:|:.:|:.
    Cisco Small Business US STAC Advanced Support Engineer
    Wireless Subject Matter Expert
    CCNA, CCNA-Wireless
    866-606-1866
    Mon - Fri 09:30 - 18:30 (UTC - 05:00)
    *Please rate the Post so other will know when an answer has been found.

  • E4200 Guest SSID Login page fails

    Config:
    Netgear ProSafe Gigabit Router is my DHCP Server -- The entire home net work is on the same subnet (192.168.15.xxx)
    Linksys E4200 configured as an access point ONLY -- wired connection -- static IP assigned -- DHCP server turned off
    Linksys WRT610N configured as an access point ONLY  -- wired connection -- static IP assigned -- DHCP server turned off
    3 -- 5 port gigabit switches
    1 -- 8 port gigabit switch
    No more than two switches between any two wired devices
    Both Linksys access points have the same SSID and WPA2 security phrase -- total of 4 radios
    Nonoverlapping channels are selected on both the 2.4Ghz and 5.0Ghz radio to minimize interference
    All computers are running Windows 7 Professional 64bit with all the latest updates
    Two iPhones and one iPad also access the network
    All LAN and WAN connectivity is working as designed
    Problem:
    guest SSID is turned on
    password is established
    All devices will connect to the guest SSID and the E4200 is assigning an ip address to the device in the 192.168.33.xxx range which is what it's supposed to do.
    When I open a web browser, I am not automatically redirected to the Cisco Login Page. If I enter 192.168.33.1 as the URL, the login screen is presented. I enter the password I have created in the guest admin page on the wireless guest tab.  I then see a blank page and a URL of 192.168.33.1/guestnetwork.asp. THIS IS WHERE I GET STUCK. THE ONLY WAY TO EVER SEE THE LOGIN PAGE AGAIN IS TO REBOOT THE E4200, otherwise you just get unable to connect messages when opening web browsers and the wireless status icon in the system tray shows a yellow exclamation mark.
    I successfully connect to the guest SSID but I do not get access to the internet. When I type ipconfig, I see that the DNS is set to 192.168.33.1 which does not exist on my network. I assume there's some internal NAT magic that is supposed to happen in the E4200 to bridge me over to my 192.168.15.xxx network but it doesn't seem to be happening.
    At the beginning of the call I specifically asked them if the E4200 must be the DHCP server in order for the guest SSID feature to work and they said no. 1.5 hours later they had no answers so they told me that it wasn't working because the E4200 was not the DHCP server. The documentation says nothing about a DHCP requirement for guest AP service. Linksys support further could not answer what you would do if you needed more than one AP with guest service enabled.
    It seems like this is a firmware issue but it may be the guest SSID service requires the E4200 to also act as the DHCP server. Can anyone shed any light on whether this is a bug or if the router/AP is working as designed?
    Thanks,
    (Mod note: Edited for guideline compliance.)

    Yes the E4200 must have DHCP turned on in order to pass out IP's to your Guest Network.  No DHCP, no Guest Network.

  • Easiest way to guide people to submit review

    From what I can tell, the only way to submit a review for a podcast is through the GUI client (be it OSX or iOS). From what I can tell, there does not seem to be a web-based option for submitting a review (or am I wrong on this). Given the first statement, in your collective opinion, what would be the easiest way to instruct someone on the steps to submit a review. It seems to me that they have to navigate the iTunes Store itself to do it vs. say doing it directly from the podcast they are listening to.

    Yeah, sadly, that is what I was thinking was the case. What I am likely going to do is do a screen capture video of the process and put it in the newsletter. I have had quite a few guests on the podcasts and want to reach out and get some posted reviews to help with the ranking. Want to make it as easy as possible for them to understand how to do it.
    Thanks again Roger.
    Rob

  • Easiest way to remove background from an image

    Hello-
    I am using Adobe Photoshop CS3 Extended and I am working on trying to select a portion of a photo to use as a watermark. The photo is of a racecar in the foreground and I want to exclude the background (which is the road). Of the selection tools I really like the Magnetic Lasso tool to get in close on the objects edges but sometimes it selects areas I don't want. Does anyone know how to adjust the magnetic lasso tool once you have it all the way around an object? I've also tried the Magic Wand tool but found I couldn't drag it into a new document so that didn't work. I just need to find the easiest way to accomplish this task. Any help would be greatly appreciated. Thanks in advance for your help!

    &gt;I just need to find the easiest way to accomplish this task.
    <br />
    <br />The pen tool is not likely the fastest way to isolate the car from the background but it is certainly the most accurate. Learn to use the pen tool; you will not be disappointed.
    <br />
    <br />
    <a href="http://www.pixentral.com/show.php?picture=1x5OZ6N5ZxMk2qJW3uG43AhJSxnCLT" /></a>
    <img alt="Picture hosted by Pixentral" src="http://www.pixentral.com/hosted/1x5OZ6N5ZxMk2qJW3uG43AhJSxnCLT_thumb.jpg" border="0" />

  • Easiest way to transfer files between two PCs?

    There's a lot of stuff I'd like to transfer from my desktop to my laptop, but unfortunately sneakernet is out, as my pen drive is too small and the desktop can't burn CDs. However, the machines are currently on the same 100 Mbps LAN, and I've got a couple yards of USB cable if that proves necessary.
    What I'd like to know is: what's the fastest and easiest way of transferring the files? Should I use SSH? Should I create an NFS volume and put everything on that?

    Don't tell me you've never even tried using samba?!
    Easy as pie, if you go with "security = share" insetead of "security = user". Less secure of course.
    Look at this samba stanza (my misc share...);
    [misc]
    comment = read and write
    path = /home/pelle/share
    public = yes
    writable = yes
    force group = users
    force user = pelle
    complicated!? I think not.
    [edit]you would of course have to mount this in the client fstab like this;
    //xxx.xxx.xxx.xxx/misc /mnt/whatever cifs guest,ro
    (or just use the kio/gnome-vfs smb:/xxx.xxx.xxx.xxx)[/edit]
    Last edited by pelle.k (2007-06-03 15:33:44)

  • Easiest way to disable WEP password

    What's the easiest way to disable my Airport Express password so that a house guest with Windows XP on a Toshiba personal computer can access my Airport Express signal?

    This would not disable your password generally, but it would allow your guest to access the network without the password:
    \[Apple's Help\]
    Adding a wireless client to your network
    You can provide access to your network for clients by adding them to the client list in AirPort Utility. You can provide access for as long as the client is in the list, or you can provide 24 hours of access, after which the client will no longer have access to your network.
    When you provide access to your wireless network, the client does not need to enter the network password if you have set one up.
    Allowing client access to your network:
    Open AirPort Utility, located in the Utilities folder in the Applications folder on a computer using Mac OS X, and in Start > All Programs > AirPort on a computer using Windows.
    Select the device you’re setting up, and then click Manual Setup. Enter the password if necessary.
    Choose “Add a client” from the Base Station menu, and then type a name for the wireless client.
    Select “One day access only” if you want to provide only one day of access to your network. If you don’t select this option, the client will have access to your network until you remove the client’s name from the list.
    To remove the client, click Advanced in the AirPort Utility toolbar, click Accounts, select the name of the client, and then click Delete .
    That would save having to reconfigure the other machines on the network etc.
    What I'm not sure about is whether this will work with the Express as well.
    - cfr

  • Guest SSID broadcasting option

    Hi,
    In my network design, I have two WLCs. I have kept one WLC in the LAN and one in DMZ. The WLC in Lan has 90 access points associated to it. These access points are in different locations and is configured HREAP.
    I have created Guest SSID and i want this SSID to be broadcasted and used only for one location.
    Is there any way to do so that Guest SSID will be used in one location only and remaining locations will not use guest feature;.
    Please reply. Thanks in advance

    Hi,
    Yes you can do this.. This feature is called AP  Grouping if we are using 4.2 and above WLC software.. if we are using  4.2 and below, then its called WLAN Override..
    here is the link to configure the same
    http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42wlan.html#wp1127323
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008073c723.shtml
    http://www.cisco.com/en/US/products/ps6366/products_qanda_item09186a00808b4c61.shtml
    Lemme know if this answered your question!!
    Regards
    Surendra

  • Web - What is easiest way to implement User Security and User Profiles

    Hi, I am new to these forums and kind of new to Java. Sorry if this is in the wrong forum!
    Bit of background to my experience with java
    I have been playing about with java for a number of years and have created a few basic programs such as a screen shot tool that allows you to capture to default locations and look at previews first etc. I am now venturing into web related stuff. I work in IT doing systems testing and have done bits of basic development on various things.
    What I've done so far
    I am using Netbeans IDE 6.7 and MySQL 5.0
    I am trying to learn more complex java and have decided to try build a basic web / database system that basically implements adding / amending / deleting data from a MySQL database through web pages. I am now trying to implement basic user access and profiles. I have so far got the following:
    - MySQL table with user info - username / password
    - JSP page with usual login stuff
    - Servlet that validates the username and password - if correct forwards to main menu page.
    Its as simple as that - there is nothing stopping you just typing in the URL of the main menu page and going from there.
    What I want
    I am wanting to eventually get the following:
    - User authentication so that you have to logon before you can access anything else
    - User profiles that determine what each user can or can't do, restricting the pages / services / options available (i.e. normal user can't delete etc)
    - Would it need some sort of session manager to allow multiple users etc?
    I appreciate this is a fairly open question but what is the easiest way to start implementing this? Not after specific code as I would prefer to try figger things out myself, but a point in the right direction would be great. It doesn't have to be extremely secure as this is just for me at the minute.
    I have spent all day looking at things like session data / url rewriting / security settings in web.xml / bespoke servlets and am now in java overload!

    Hi everyone,
    I've now actually gone back to the tutorial that I linked to above and implemented that using form login and j_security_check.
    Agree with Saish, and although I don't know enough about the other options to give a good reason, using realms and j_security_check just seems to be a bit cluncky and messy. I would also prefer something a bit more generic, that doesn't rely on setting users in glassfish, hence why I started with my own user table.
    Anyway, I will leave it as is for now and maybe come back and try one of the other options.
    The only problem I can see now is that to add users i will need to go through all the steps of adding users in glassfish and web.xml... Is there a way to do this through a servlet or something so I can have a jsp page to add users that also creats all the other bits for it to work?
    Thanks everyone for your help

  • I am using Iphoto 11 ver 9.4.3 on mac using oxs 10.8.5 i want to export calendar projects to an external hard drive. what is the easiest way to do this? i have tried export and import but it didn't seem to work.

    I am using Iphoto 11 ver 9.4.3 on mac using oxs 10.8.5 i want to export calendar projects to an external hard drive. my goal is to store them in an external hard drive so it doesn't use up memory on the mac hard drive. is it possible to copy the specific projects without copying the entire library? what is the easiest way to do this? i have tried export and import but it didn't seem to work.

    What do you not understand?
    You can duplicate the iPhoto library (command - D ) and delete everything except the project and its photos from the copy and move that
    Or
    However the calendar takes very little space - it is simpy database entries - it is the photos in the calendar that take space - and for most people you would wnat to keep those photos in your library
    you can use a photo in 50 calendars and it still is only one photo in your library - as I explained calenders do not exist as such - they are simply database entries telling iPhotop how to display the calendar - they take almost no space at all
    LN

  • AIR-AP1142N-A-K9 configuration issue for guest ssid

    I'm trying to get the guest ssid working.  I was frustrated so saved my old config and wiped out everything on this AP.  Now my bvi1 does not come online.
    ap#sh ip int bri
    Interface                  IP-Address      OK? Method Status                Protocol
    BVI1                       192.168.2.249   YES NVRAM  down                  down    
    Dot11Radio0                unassigned      YES NVRAM  up                    up      
    Dot11Radio0.50             unassigned      YES unset  up                    up      
    Dot11Radio0.51             unassigned      YES unset  up                    up      
    Dot11Radio1                unassigned      YES NVRAM  administratively down down    
    GigabitEthernet0           unassigned      YES NVRAM  up                    up      
    GigabitEthernet0.50        unassigned      YES unset  up                    up      
    GigabitEthernet0.51        unassigned      YES unset  up                    up      
    ap#
    ap#sh int bvi
    *May  6 15:05:24.611: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  847a.8835.4f22 Associated KEY_MGMT[WPAv2 PSK]1
    BVI1 is down, line protocol is down
      Hardware is BVI, address is 003a.99eb.8d00 (bia b862.1fe9.9af0)
      Internet address is 192.168.2.249/24
      MTU 1500 bytes, BW 54000 Kbit, DLY 5000 usec,
         reliability 255/255, txload 1/255, rxload 1/255
      Encapsulation ARPA, loopback not set
      ARP type: ARPA, ARP Timeout 04:00:00
      Last input never, output never, output hang never
      Last clearing of "show interface" counters never
      Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
      5 minute input rate 0 bits/sec, 0 packets/sec
      5 minute output rate 0 bits/sec, 0 packets/sec
         0 packets input, 0 bytes, 0 no buffer
         Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
         3 packets output, 180 bytes, 0 underruns
         0 output errors, 0 collisions, 0 interface resets
         0 unknown protocol drops
         0 output buffer failures, 0 output buffers swapped out
    ap#
    I have a private vlan 50 and the public vlan 51.  The private ssid seems to work and allow connectivity to the internet but I don't understand with the same configuration the Public ssid doesn't seem to work.
    I get this output when trying to connect with my cell phone. 
    *May  6 15:00:37.288: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.8835.4f22 Reason: Sending station has left the BSS
    *May  6 15:00:38.432: %DOT11-6-ASSOC: Interface Dot11Radio0, Station TYLOR-NB 9c4e.3617.483c Reassociated KEY_MGMT[WPAv2 PSK]
    *May  6 15:00:42.935: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  847a.8835.4f22 Associated KEY_MGMT[WPAv2 PSK]
    *May  6 15:00:54.320: %DOT11-6-ASSOC: Interface Dot11Radio0, Station   2c44.01c3.70a6 Associated KEY_MGMT[WPAv2 PSK]
    *May  6 15:01:13.913: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.8835.4f22 Reason: Sending station has left the BSS
    *May  6 15:01:17.281: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  847a.8835.4f22 Associated KEY_MGMT[WPAv2 PSK]
    *May  6 15:01:48.181: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.8835.4f22 Reason: Sending station has left the BSS
    *May  6 15:01:51.583: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  847a.8835.4f22 Associated KEY_MGMT[WPAv2 PSK]
    *May  6 15:02:22.500: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 847a.8835.4f22 Reason: Sending station has left the BSS
    *May  6 15:03:41.852: %DOT11-6-ASSOC: Interface Dot11Radio0, Station  847a.8835.4f22 Associated KEY_MGMT[WPAv2 PSK]
    SSID [PUBLIC] :
    MAC Address    IP address      Device        Name            Parent         State     
    847a.8835.4f22 0.0.0.0         ccx-client    -               self           Assoc    
    ap#
    ap#show run
    Building configuration...
    Current configuration : 2746 bytes
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname ap
    enable secret 5 $1$4jEJ$ajpjBvSx3DUhxyvLADj.91
    aaa new-model
    aaa authentication login default local
    aaa authorization exec default local
    aaa session-id common
    dot11 syslog
    dot11 ssid PRIVATE
       vlan 50
       authentication open
       authentication key-management wpa version 2
       mbssid guest-mode
       wpa-psk ascii 7 01150F035E050E0A2D
    dot11 ssid PUBLIC
       vlan 51
       authentication open
       authentication key-management wpa version 2
       mbssid guest-mode
       wpa-psk ascii 7 045D02010A2F444B05
    username Admin privilege 15 password 7 0526071D3545175840
    bridge irb
    interface Dot11Radio0
     no ip address
     no ip route-cache
     encryption vlan 50 mode ciphers aes-ccm
     encryption vlan 51 mode ciphers aes-ccm
     encryption mode ciphers aes-ccm tkip
     ssid PRIVATE
     ssid PUBLIC
     antenna gain 0
     mbssid
     station-role root
    interface Dot11Radio0.50
     encapsulation dot1Q 50 native
     no ip route-cache
     bridge-group 50
     bridge-group 50 subscriber-loop-control
     bridge-group 50 block-unknown-source
     no bridge-group 50 source-learning
     no bridge-group 50 unicast-flooding
     bridge-group 50 spanning-disabled
    interface Dot11Radio0.51
     encapsulation dot1Q 51
     no ip route-cache
     bridge-group 51
     bridge-group 51 subscriber-loop-control
     bridge-group 51 block-unknown-source
     no bridge-group 51 source-learning
     no bridge-group 51 unicast-flooding
     bridge-group 51 spanning-disabled
    interface Dot11Radio1
     no ip address
     no ip route-cache
     shutdown
     antenna gain 0
     dfs band 3 block
     channel dfs
     station-role root
     bridge-group 1
     bridge-group 1 subscriber-loop-control
     bridge-group 1 block-unknown-source
     no bridge-group 1 source-learning
     no bridge-group 1 unicast-flooding
     bridge-group 1 spanning-disabled
    interface GigabitEthernet0
     no ip address
     no ip route-cache
     duplex auto
     speed auto
     no keepalive
    interface GigabitEthernet0.50
     encapsulation dot1Q 50 native
     no ip route-cache
     bridge-group 50
     no bridge-group 50 source-learning
     bridge-group 50 spanning-disabled
    interface GigabitEthernet0.51
     encapsulation dot1Q 51
     no ip route-cache
     bridge-group 51
     no bridge-group 51 source-learning
     bridge-group 51 spanning-disabled
    interface BVI1
     ip address 192.168.2.249 255.255.255.0
     no ip route-cache
    ip default-gateway 192.168.2.1
    ip http server
    ip http authentication aaa
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    bridge 1 route ip
    line con 0
    line vty 0 4
    end      
    switch config:
    interface FastEthernet1/0/46
     switchport trunk encapsulation dot1q
     switchport trunk native vlan 50
     switchport trunk allowed vlan 50,51
     switchport mode trunk

    Hi
    I know the bridge-group have to be identical to the sub interface number and vlan number
    This is true for all other vlans except for native vlan. For native vlan sub-interfaces bridge group number always should be 1. In your case, if vlan 50 is the native vlan (192.168.2.x/24 belong vlan) then configure bridge-group 1 under those .50 sub-interfaces. Then everything should work :)
    It is ideal if you could put AP management (BVI IP) into separate vlan & two user groups put vlan 50 & 51. Here is a sample configuration where vlan 110 is Mgmt & vlan 12,13 for user vlans.
    http://mrncciew.com/2012/10/24/multiple-ssid-config-on-autonomous-ap/
    HTH
    Rasika
    **** Pls rate all useful responses ****

  • What is the easiest way to check for internet connection in C#?

    Hi!
    I searched a lot but I didn't get my answer. I'm looking for the easiest way to check for internet connection. Can you help me?
    Thanks a lot.

    Hi Pouya Ebrahimzadeh,
    I suggest you could connect a site to check if it can be opened.
    Public Shared Function CheckForInternetConnection() As Boolean
    Try
    Using client = New WebClient()
    Using stream = client.OpenRead("https://msdn.microsoft.com/")
    Return True
    End Using
    End Using
    Catch
    Return False
    End Try
    End Function
    If you have any other concern regarding this issue, please feel free to let me know.
    Best regards,
    Youjun Tang
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • What is the easiest way to create and manage very big forms?

    I need to create a form that will contain few hundred questions. Could you please give me some advise on what is the easiest way to do that? I mean for example is it easier to create everything in Word (since it is easier to manage) and than create a form based on that?
    My concern is that when I will have a very big form, containing different kinds of questions and with many scripts, managing it during work will be slow and difficult, for example adding a question in the middle of the form which would require moving half of the questions down which could smash the layout etc.
    What is the best practise for that?
    Thanks in advance

    Try using Table and Rows for this kind of forms. These forms will have the same look throught with a question and and answer section..
    In the future if you want to add a new section, you can simply add rows in between..
    Thanks
    Srini

  • What is the easiest way to open an application from Labview?

    I need to open an application from labview and depending on a user's selection, load one out of a group of files for the application that is opened. I need to know what is the best or easiest way to open an application and load a file that is used by the application based on a selection.

    Here is the response that I got from Cognex when I asked them about how to do this. Do you understand what they are talking about?
    In order to do something like this you will probably want to look into the Display Control/SDK for In-Sight. The Display Control gets installed along with In-Sight Explorer and includes a control that can be used in an environment like Labview to communicate with In-Sight sensors while the SDK is an enhanced version of the Display Control that gives you more control and functionality. I am not very familiar with the Labview environment so I will give some code snippets in VB.Net and hopefully you can adjust them as necessary. Specifically I see 3 possible avenues to do this:
     1) Using the Display Control you have access to many of the dialog boxes that are used in In-Sight Explorer including the Load Job dialog box. You can spawn this dialog box through a line of code similar to cvsInSightDisplay1.Edit.OpenJob.Execute(). I am not certain if the Labview environment will be able to spawn and display this dialog though. 2) With the addition of the SDK (additional purchase) you can directly access sensor properties including the job. There is a method called LoadJobFile to load jobs from on the sensor and LoadJobFileLocally to load jobs from the host machine. A typical line of code might be cvsInSightDisplay1.InSight.File.LoadJobFile("myjob1.job").3) If Labview cannot handle the dialogs and the SDK is not an option for you then you may still be able to do this using Native Mode commands. Native Mode commands are sent through a socket on the telnet port (typically port 23). Keep in mind that you will need to handle the username/password prompt and response when you first open the socket before issuing any Native Mode commands. The command to load a job file from the sensor would be the Load File command which would be a string similar to "LF myjob1.job". The Native Mode commands are documented in the In-Sight Explorer help file. 

  • I want to use 1 itunes account but with 3 different iphones 2 for the kids and one for me, what is the easiest way to do that?

    I want to use 1 itunes account but sync 3 different iphones, 2 for the kids and 1 for me.  So I would like to have different programs, songs, apps etc for each phone.  What is the easiest way to do that

    Agreed heather. Also, if you have three users on the same account how do you keep phone calls and messages from going to all three phones?

Maybe you are looking for

  • IS-IS not working on ASR903.

    Hey you all I have a very strange problem regarding IS-IS routing process on an ASR903 router, that I hope someone can help me with. I am trying to get IS-IS up and running between an ASR903 router and a ME3600X switch. Between the two boxes is a ser

  • How can I add music to my iPhone 3 from a new iTunes?  My old laptop crashed and I don't want to lose my music by syncing my iPhone with the new iTunes

    I have an iPhone 3, and it was synced to iTunes on my old laptop.  My laptop recently crashed, and now I have a new laptop.  I just dowloaded iTunes and imported a few CDs that I want to add to my iPhone. Unfortunately, I can't add them to my iPhone

  • System Login Window

    Hi, I have a VBA code that connects to an Essbase cube but whenever the login fails, it automatically opens u a system login wndow. I want to control this from the back end. Is there a way I can do this in VBA? So, basically I want to know how to sup

  • How to hide messages in Excel Planning

    Hi, We are implementing SAP IP and as part of this we are creating planning queries in workbook for excel based planning applications. Here whenever user opens workbook, we are getting popup for some system message. Also each save, value check comman

  • On using RH_INSERT_INFTY to change HRP1000 status

    Dear Gurus, I'm using RH_INSERT_INFTY to change the status(ISTAT) of HRP1000. According to the FM documentation: In the case of a status change, however, note the following: The fact that  the record is deleted with the old status (except PLVO). But