Enterprise Wireless

Has anyone had any luck pushing a a WPA enterprise profile to a AppleTV and it actually work? I have a profile in Apple Configurator that only sets the WIFI settings and pushes the necessary cert, the device fails to connect to the wireless network. Which im assuming is a kerberose issue since we cant manually set the date and time on the ATV. And if i restart the ATV either through the menus or by pulling the power cable I am greated my a connect to itunes graphic when it powers up.

Simple answer is to implement QoS in your wireless for voice/video.
There are lots of work to do. Refer this design document as a guide.
Real-Time Traffic over Wireless LAN Solution Reference Network Design Guide
In high level here are some task you can independantly check & configure if it is not align to recommended design guides.
1. end to end QoS configured on your wired switch network. Below blog post may give some help
http://mrncciew.com/2012/11/26/375035602960-wired-qos/
2. WLC management to be on tagged vlan.(see this TechNote)
3. If all AP are local mode, then trust DSCP on switchports where AP connected.
http://mrncciew.com/2013/02/24/best-practice-qos-config/
4. Trust CoS on WLC connected switchports
5. Video traffic to be classified (AF41) and allocate bandwidth across your network.
6. WLAN QoS profile to be configured as Gold or Platinum
http://mrncciew.com/2012/12/02/understanding-wireless-qos-part-3/
7. Plan your wireless to have around 10 clients per AP if they are using Video.
8. If you are using Multicast for video streaming, then you need to enable video stream feature as well.
http://mrncciew.com/2012/12/24/understanding-videostream-feature/
HTH
Rasika
**** Pls rate all useful responses ****

Similar Messages

Annoying behaviour on WPA Enterprise wireless LAN

I have a PB 1.67 running OS X 10.3.9 (all patches installed)
When I connect it to our WPA Enterprise wireless LAN, I experience the following annoying behaviour.
Authentication may be slow (sometimes 10 to 15 minutes), but connection usually succeeds.
Then while I am actively web browsing or retrieving email, things are ok. However if I have to leave the computer for about 3 or more minutes, it seems to decide that it should no longer be on the network and I have to disconnect and then reconnect.
No send/rec errors show up in the info tab of network utility. IP address is there, status is active and the link is reported as 54Mb. It appears that my machine is not interested in participating on the network until it has been reconnected.
Does anybody have any ideas on how to track down what might be happening?
Thanks in advance.

A follow up:
I have observed that when I am this non-working state, my 802.1x authentication status shows idle.
Is there a way that I can trace what is happening at the 802.1x layer?

Enterprise Wireless Mesh License needed for controller and AP's?

If I have a 2112 WLAN Controller and 7 1240AG AP's what licensing do I need to purchase to enable enterprise wireless mesh? Do I need to get the license for the controller (AIR-AP-LIC-M-12)? A license for each AP? Both? Thanks for any replies!

Hi Andy,
You only require the Mesh license for the Controller not for the individual AP's :)
Solution
The Cisco EWM license is required for wireless mesh deployments for the indoor access point platforms, including the Cisco Aironet 1130 and 1240 Series. For the Cisco Aironet 1500 Series, these licenses are not required. These EWM licenses are required for all the WLAN controllers when mesh indoor acess points are associated with the controller. Each WLAN controller has a corresponding EWM license. The license entitles the user to configure as many mesh indoor access points as the controller allows.
The license SKUs are as follows:
â¢ AIR-AP-LIC-RTU=, Cisco Advanced Feature License
â¢ AIR-AP-LIC-M-6, Cisco Advanced Enterprise Wireless Mesh, 6-AP Controller
â¢ ***AIR-AP-LIC-M-12, Cisco Advanced Enterprise Wireless Mesh, 12-AP Controller
â¢ AIR-AP-LIC-M-25, Cisco Advanced Enterprise Wireless Mesh, 25-AP Controller
â¢ AIR-AP-LIC-M-50, Cisco Advanced Enterprise Wireless Mesh, 50-AP Controller
â¢ AIR-AP-LIC-M-100, Cisco Advanced Enterprise Wireless Mesh, 100-AP Controller
â¢ AIR-AP-LIC-M-300, Cisco Advanced Enterprise Wireless Mesh, 300-AP Controller
Cisco Enterprise Wireless Mesh Licensing and Ordering Guide
http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns767/ordering_guide_c07-482365_ps6521_Products_Brochure.html
Hope this helps!
Rob

Iphone connection to Enterprise wireless

Hi,
We currently have an Enterprise wireless network that uses WPA-TKIP and MS-PEAP for authentication.
We are now investigating how to allow iPhone users to connect securely to the network. I would be interested to hear how other organizations are achieving this currently.
Ideally, we are looking for a method that does not require any user interaction, i.e. requires a user to click on a button or enter a password.
Thanks

Hello,
We have iPhones and iPads on our network. You can treat these like any other device. They will do PEAP just a normal client. You may alreasy know this but Apple has a free deployment tool which allows you to config packages. Its called the iPhone config util... But its for the iPad as well.
http://www.apple.com/support/iphone/enterprise/
hey if you find this helpful please rate the post !
thanks!

IPad's connecting to enterprise wireless

I support an enterprise wireless network. I utilize 98 Cisco 1242AG LAP's across my campuses, all controlled by 3 Cisco WLAN controllers governed by Cisco WCS. I manage and make a change in WCS, and it flows out to all access points.
I push out multiple SSID's over the AP's, one being "public" which is VLAN's off and goes out a dedicated ISP connection. Every device I have touched can connect to public, except iPad's. I have touched an iPad once, for about 2 minutes, outside of work, but that's it. I'm getting reports about users who from anywhere on my network, can't get to their webmail or even connect using their iPad. My setup is not blocking anything, I have dense wireless coverage, why can't iPad's connect? I'm supporting A/G but not B or N.
The entire Apple thing is new to me, I've never had to support it, so I'm breaking new ground in personal development.

If you can't get an iPad an iPod with wireless and IOS 5 or above has pretty much the same wifi network mechanics. Again, the iPhones aren't much different in the wi fi area either. Refer to http://support.apple.com/specs/ for the specific technical specs of the device you are using to test. The biggest difference is that the iphone and ipod do not support the "a" spectrum and are b g n only, whereas the iPad is a/b/g/n. Perhaps the problem has something to do with 802.11a. Make sure your wifi gear has all the latest firmware. You could also turn off the the "a" radio beacon, I don't use it anymore as it created too many problems and g and n are really all you need anymore.

Cisco Enterprise Wireless iPad Mini iOS 7.1.1

Hi,
I am experiencing issues with iPad Mini running iOS version 7.1.1 connecting to a Cisco Enterprise Wireless Network consisting of a Wireless LAN Controller.
The Wireless LAN Controller is running 7.6.120.0. All laptops, printers, iPad 2 & 3 models, iPhones, tablets, and other wireless devices work fine and do NOT experience connection drops. However, iPad Mini running iOS verion 7.1.1 experiences randomly Wi-Fi connection drops. Sometimes when this happens the iPad Minis will reconnect back to Wi-Fi, but most of the time, they do not reconnect.
I have been working with Cisco TAC but they cannot find any reason for disconnect.
I have changed the channel on the Wireless Access Points to Channel 6 and the SSID is open.
I also have 1 iPad Mini running iOS version 6.1.3 that works fine and does not experience these issues.
I also run a FileMaker 13 Database on these iPads using FileMaker Go 13. The FileMaker database is set to never disconnect on idle nor to never re-authenticate. But yet the iPads will disconnect from Wi-Fi which interrupts the connection between FileMaker Go and FileMaker Server.

Try double -licking the Home button to bring up the recent apps display. Swipe up on the image of the App Store to terminate it. Restart the App Store to see if you get the proper operation.

I have two facetime users, both connecting to our enterprise wireless network (Cisco WCS) and they can't make a facetime connection from IPAD to IPAD. Are there any apple protocols or other settings that need to be enabled on WCS? No firewall involved.

I have two facetime users, both connecting to our enterprise wireless network (Cisco WCS) and they can't make a facetime connection from IPAD to IPAD. Are there any apple protocols or other settings that need to be enabled on WCS? There is no firewall inbetween the two connections, as this is all on our internal network.
Both devices can connect to the network, but when they try to talk to each other they can't make the connection.
Thanks.

If anyone ever comes across this and has the same issue, here's what I did to fix it:
My Linksys router has a Network Mode setting, and I had to change it from "Mixed" to "Wireless-G only". (I would've used N but one of the NICs in my house is too old to support it.) Anyway, after making this change, Facetime works fine on the phone. Hope this helps someone else!

Connecting iPads to an Enterprise Wireless 802.1x (EAP-TLS) Network Using Windows Server 2003 IAS

Hi there,
I am asked to deploy iPads on an 802.1x EAP-TLS WiFi network. The customer has a Windows Server 2003 IAS server providing RADIUS. There also is a Windows based CA infrastructure in place. This solution is in production and is already being used by other wireless devices. Could someone please highlight the configuration steps for the iPad deployment? The customer whishes to automate the initial deployment and the renewal of the certificates. I have a basic understanding of 802.1x, RADIUS, Certificates etc. in a Windows infrastructure but I am new to enterprise deployment of iPads. There is no MDM tool in place by the way...
I did find a Microsoft article which I think describes what needs to be done: http://blogs.technet.com/b/pki/archive/2012/02/27/ndes-and-ipads.aspx. This article basically states the following steps:
1. Create a placeholder computer account in Active Directory Domain Services (AD DS)
2. Configure a Service Principal Name (SPN) for the new computer object.
3. Enroll a computer certificate passing the FQDN of the placeholder computer object as a Subject Name, using Web Enrollment Pages or Certificates MMC snap-in directly from the computer (Skip step 4 if you are using the Certificates MMC snap-in)
4. Export the certificate created for the non-domain joined machine and install it.
5. Associate the newly created certificate to the placeholder AD DS domain computer account manually created through Name Mappings
The article then elaborates on specific steps needed for the iPad because it treats all certificates as user certificates. Can someone confirm this behavior??
Regards,
Jeffrey

Use VPP. Select an MDM. Read the google doc below.
IT Resources -- ios & OS X -- This is a fantastic web page. I like the education site over the business site.
View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
http://www.apple.com/education/resources/information-technology.html
business site is:
http://www.apple.com/lae/ipad/business/resources/
Excellent guide. See announcment post -- https://discussions.apple.com/thread/4256735?tstart=0
https://docs.google.com/document/d/1SMBgyzONxcx6_FswgkW9XYLpA4oCt_2y1uw9ceMZ9F4/ edit?pli=1
good tips for initial deployment:
https://discussions.apple.com/message/18942350#18942350
https://discussions.apple.com/thread/3804209?tstart=0

Can't create a WPA2-Enterprise wireless connection; missing Microsoft: PEAP

OS: Windows 7 64-bit Enterprise
Hardware: Lenovo T410S w/Intel 5300 ABGN Wireless
If I try to build the wireless connection manually and choose WPA2-Enterprise, then click next, I get 'An unexpected error occurred.' and no options to configure; just close.
I then tried to create a Preshared Key WPA2 connection. This worked fine. When I go to edit the connection, I have the ability to select the WPA2-Enterprise options, however in the list of Network Authentication methods (under Security Tab), I don't have
the Microsoft: PEAP or SmartCard options. I only have Cisco: LEAP,PEAP,EAP-FAST and Intel: EAP-SIM,EAP-TTLS,EAP-AKA (6 entries).
It's my theory that because the Microsoft options are missing, the wizard gets the unexpected error. I'm wondering how I get the MS ones back.

Hi,
Thanks for posting in Microsoft TechNet forums.
Do you have Symantec installed? It is said the issue could be due to conflict with Symantec Endpoint Protection. Please uninstall\reinstall Symantec
if it is there.
Best Regards
Magon Liu
TechNet Subscriber Support
in forum. If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Enterprise Wireless Guest IP Address Management

Hi
We have requirement to deploy wireless guest access for the Enterprise.
Would appreciate feedback as to wether to use internal DHCP which is centrally managed or using WLC DHCP.
Some Considerations
1.     IP Address reporting historical on number of addresses used, this could be provided by the guest access server on users logged or can WLC
         provide historical IP address reporting
2.     Centralised address configuration versus distributed on each controller.
3.    Correlating guest user to IP address allocated, we need to use this for forensic identification of the IP address to the user as guest access will be authenticated via the Radius server and from there access the Internet via a transparent proxy. No requirement for second authentication when accessing the Internet.
Any feedback on real world experiences would be greatly appreciated.
Regards
Bill

Hi,
The below doc is the design and deployment Guide for Guest access.. This is just like a bible!!
http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html
Lemme know if this helps.. and please dont forget to rate the usefull posts!!
Regards
Surendra

IOS 5 can't connect to WPA/WPA2 Enterprise Wireless Network

After upgrading multiple iPhone 4 (CDMA versions) to IOS 5.0, I have not been able to get them to connect to our WPA/WPA2 Enterprise wirless network. We use a Cisco Wireless LAN Controller. The wireless network is capable of doing WPA or WPA2 Enterprise with PEAP. These phones all connected to this network fine before the upgrade.
When connecteding to the network, it prompts me for the username and password and when I tap join it sits for about 10-15 seconds then says "Unable to join the network" with a Dismiss button.
It connects to non-Enterprise networks just fine. I have tested it on WPA Personal and WPA2 Personal networks and it has worked on several without issue.
I have tried "forget this network" with no success.
Is anyone else having this problem? I know of at least three Verizon iPhone 4's that have this exact same problem. I haven't seen one working with this configuration yet.

I have the same problem:
Cisco WLC's -> WPA2 Enterprise AES + EAP-PEAP 802.1x with CCKM
Pre 5.0 - all worked fine
Post 5.0 - it tries to connect and after few moments i get error - couldn't connect.
Info from controller:
10/17/2011 12:16:37 CEST           INFO           172.16.16.X           Sending EAP request to client from radius server. 6.f. ..l
10/17/2011 12:16:38 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:39 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           Authentication failed for client as EAP ID request from AP reached maxmium retransmissions. 5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           De-authentication sent to client. 5.oP ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           EAPOL-key is invalid, scheduling client for deletion. 5.yp ..l
On the Radius server i don't see any activity regarding this device.
I had this network configured on my iPhone - after upgrade and restore it remembered it. Every time i was in vicinity of my Enterprise WLAN it tried to connect - resulting int express battery drain - 6-7 hrs and battery was empty from 100%

Issues connecting to 802.1X Enterprise Wireless on OS X Maverick

Hi,
I am trying to connect my Macbook Air to the office wireless. The office Wireless uses 802.1X authentication using certificates WPA2 Enterprise. We have deployed Microsoft AD-NPS as the RADIUS Server with certificates being issued by Microsoft AD-CS infrastructure.
I tried the following steps to connect my Macbook to the environment.
1. Exported an 802.1X certificate from a windows machine with the key's .
2. Clicked "Join Other Network" link on the WiFi symbol.
3. Added the network SSID
4. Selected WPA2 Enterprise in the Security Options drop down.
5. Selected EAP-TLS mode in the Mode drop down.
6. In Username added the windows machine name
I get the following error in the console windows
"3/07/2014 11:46:10.864 am eapolclient[5997]: [EAPCertificateUtil.c:325] EAPSecIdentityCreateCertificateTrustChain(): SecTrustGetCertificateCount returned 0"
The same certificate has successfully been used with the same network settings to connect an iPhone, Android Samsung Note to the network without any issues.
I have also added the Root Certificate and the RADIUS server certificates to the Systems Keychain on the Mac.
Any suggestions on how I can fix this ?
- Ashish

Call on Microsoft, see if they have any troubleshooting tips.
Have you deleted the wifi networks and certificates and tried to create the connection again?
What happens if you load the pre-configured wifi profile? (use your favorite MDM or profile manager to install)
I've modeled the configuration option set to what you've mentioned using Meraki's MDM.

Apple Airport in Cisco Enterprise wireless

Our wireless enterprise consists of Cisco Aironet 1200 series AP running ios 12.2(13)JA4. We are using LEAP with MIC, key-hash, and broadcast key rotation turned on. Airport seems to be working fine, but apparently it's a bug in this code that is allowing Airport user to authenticate. Newer codes break this authentication for Airports. Cisco is saying we are SOL. Airport is not on the CCX list, so go and talk to Apple guys. No word from Apple yet.
So, we can't be the only shop in this situation.
Any one out there are/were in same water and found a solution or way around it.
I would really appreciate any feed back.
Best regards,

I think that we close the loophole in CKIP and CMIC. In the earlier version of IOS, we allow wireless clients which do not support CKIP or CMIC to associate. The newer software does not allow these wireless clients anymore. I see the following workaround:
1. disable CMIC and CKIP on all Cisco APs
2. ask Apple to support CMIC and CKIP
3. purchase Aironet 350 wireless clients (do not flame me on this option. I add this option for the seek of completness)

Iphone/IOS 6 and Enterprise Wireless Networks Issue

Hi there,
Our company runs Cisco wireless using WPA2 Enterprise and AD Authentication. Now we currently have multiple vendor phones/laptops working fine including Apple Macbook Pro's, Apple Iphone 4s, Samsung Galaxy S2/S3 working on the wireless without issue.
However Ive been seeing issues with Iphone 5s and an Ipad now as well running IOS 6 where it just wont connect to the network. I am using Iphone configuration utility to install a Wireless profile with the certificate/AD credentials onto the Apple device.
I just loaded the profile on an Iphone 5 and it worked straight away.
However on ipad and other iphone 5's this is what happened, it associated to the Wireless but never got an IP address so never finishes connecting. just sits on spinning wheel.
Here is some output from the Iphone configuration utility console:
Nov 13 14:45:47 Sam-iPad eapolclient[2548] <Notice>: eapmschapv2_success_request: successfully authenticated
Nov 13 14:45:48 Sam-iPad kernel[0] <Debug>: 285568.132121 wlan.N[12106] AppleBCMWLANCore::setCIPHER_KEY(): [eapolclient]: type = CIPHER_MSK, index = 0, flags = 0x0, key lenght 64, key rsc lenght 0
Nov 13 14:45:48 Sam-iPad kernel[0] <Debug>: 285568.185043 wlan.N[12107] AppleBCMWLANCore:startRoamScan(): 3365 Delaying RoamScan; because Join Mgr Busy 0 isWaitingforIP 1
Nov 13 14:45:49 Sam-iPad kernel[0] <Debug>: IO80211AWDLMulticastPeer::queuePacket ff:ff:ff:ff:ff:ff alllocate queue for ac 0
Nov 13 14:45:58 Sam-iPad kernel[0] <Debug>: 285578.034874 wlan.N[12108] AppleBCMWLANCore:startRoamScan(): 3365 Delaying RoamScan; because Join Mgr Busy 0 isWaitingforIP 1
Nov 13 14:45:58 Sam-iPad kernel[0] <Debug>: 285578.060369 wlan.A[12109] AppleBCMWLANNetManager::handleDelayedPowerManagementTimeout(): Timed out waiting for IP address, entering powersave mode: 2
Nov 13 14:45:58 Sam-iPad kernel[0] <Debug>: 285578.075638 wlan.A[12110] AppleBCMWLANNetManager::checkRealTimeTraffic(): now 285578.075633250 num entries 4
Nov 13 14:46:06 Sam-iPad kernel[0] <Debug>: 285586.747324 wlan.N[12111] AppleBCMWLANCore:startRoamScan(): 3379 starting RoamScan; MultiAPEnv:0 isdualBand:1 isOn5G:0
Is anyone else aware of this problem?

iPhone 4s: iOS 6
iPad 2 iOS 6
iTunes 10.7.0.21
Windows 7 Ultimate i5 / 8G RAM
my iDevices will not sync anymore unless it is plugged in USB and turn it off and back on again while connected. is there going to be a fix for this? btw good job apple...-.-

HT1595 how can i connect using enterprise wireless

How can I using my dorm wireless internet to connect apple tv?

Welcome to the Apple Support Communities
To mirror the iPad onto your Apple TV, you have to use AirPlay Mirroring > http://support.apple.com/kb/ht5209

Enterprise Wireless

Similar Messages

Maybe you are looking for