Grocery List Needed for WLAN Guest NAC

Hello - what I want to do is put a solution in place that will control any guest wireless that is out of bounds. What i mean by that for locations that have a DSL line along side the corporate network to be controlled through a NAC guest server.
Scope of the enterprise is:
* 2k8 domain.
* cisco 1200 and 1240 AP's
* 1 cisco NAC guest server
* 1 acs
* sites are all connected via MPLS
What else do I need? Of course I am trying to be mindful regarding budgetary numbers.
From reading the configuration guise for the clean access server I assume I need the Client Access manager NAC appliace as well, to have this all tie together?
Please advise on any other things, tips or tricks. :)
thank you kindly in advance.

NAC Out-Of-Band (OOB) Wireless Configuration Example
http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080a138cc.shtml

Similar Messages

  • BBSM and ISA for WLAN Guest Access

    We are considering the purchase of a BBSM to help provide wlan guest access to the Internet.
    I know that Micrsoft's ISA server is one component of the BBSM, but can anyone tell me:
    1) what version of ISA is implemented in BBSM?
    2) is the ISA compoenent at all customizable? That is, can I add poilicies to BBSM's ISA to restrict the Internet sites users can go to?
    Thanks very much.
    John

    I am not sure what version of ISA it is but from our experience you can not filter what addresses the user can go to. we have customised it some in that we forward all of the web traffic comming in to a web filter box and allow the filter box to block sites.

  • AutoSuggest List Needed for  Department Id?

    Hi,
    I am using Jdev 11.1.1.4
    I have droppped DepartmentVO on to the form and added <af:autoSuggestBehavior> for Department Id.
    My Use Case:
    User can enter either Department Id / Name in the Department Id InputTextBox( <af:autoSuggestBehavior> )
    For this i need to display related Department Id's in AutoSuggest List
    How to achieve this?

    Hi,
    This might help
    <http://www.gebs.ro/blog/oracle/oracle-adf-form-autocomplete-using-autosuggest-behavior-search-view-add-edit/>
    Regards,
    santosh

  • Access-list needed for vpn

    Hi,
    if we have a LAN to LAN vpn between to two cisco firewalls and allowed the service as IP (ipsec tunnel) do we need indivugial access-list in the security policy ? (i had a similar case where i had to put in a entry on the security policy for port 16000 between the two subnets used onthe LAN to LAN firewalls)
    i was under the impression the security policy applies only for non vpn and for vpn traffic we need to specify on the ipsec tunnel (under the tab service)
    Thanks

    There are two way you can filter traffic which is moving over VPN.
    1) Filter at source ofcourse ACLs are required.
      For example Crypto acl allows - Site A 10.0.0.0/24 to Site-B 20.0.0.0/24 but traffic can be filtered at interface where  10.0.0.0/24  is configured .Lets assume port 80 we want to deny.
    ACL would be -- access-list XXX extended deny tcp 10.0.0.0 255.255.255.0 20.0.0.0 255.255.255.0 eq 80
                                                                                permit any any
                                  acess-group xxxx in inside
    So this will deny port 80 and permit rest of the traffic.
    2) You can configure VPN filter which is called under group policy .
    Thanks
    Ajay

  • Regex list need for speed

    Hi,
    I'm facing the problem to classify a continuous stream of long strings using a list of regex, if a regex matches the system assigns a class to the string; all the regex (>200) have to be evaluated, hence many classes could be assigned to the string.
    Obviously the speed is crucial requirement.
    Any suggestion ? Are regex the best choice?
    Thanks
    n.

    To demonstrate what prometheuzz was talking about, here's a much more efficient version of your regex: "\\bhttps?+://[-a-zA-Z0-9]++.abcdefg.com" +  // domain
    "(?>:[0-9]++)?+" +                           // optional port
    "(?>/[-a-zA-Z0-9+&@#/%=~_|!:,.;]*+)?+" +     // optional path
    "(?>\\?[-a-zA-Z0-9+&@#/%=~_|!:,.;]*+)?+"     // optional parameters All the quantifiers are now possessive, most of the groups are gone, and those that remain are not just non-capturing, they're atomic, for even greater efficiency.
    If you need to test several regexes against the same string, you can cycle through them efficiently with Matcher's usePattern() method: for (Pattern p : patternList)
      if (matcher.usePattern(p).matches())
        // bingo!
    } You can even apply the regexes within a larger string (or preferably a CharBuffer, if you're reading the text from a stream) by using the lookingAt() method instead of matches(). That's a bit more involved; I'll elaborate if you're interested.

  • Shipping Papers (BOL, Packing List) needed for 3rd Party Sales Order

    The Process followed is as follows:
    Plant "A" enters Sales Orders for a Customer.
    Sales Orders generate the material requirement on Plant "A"
    The material req gets turned into a Purchase order on External Vendor.
    Vendor provides the shipment information and a goods receipt is done on Plant "A"
    Once the goods receipt is entered, it closes the Sales Order and the customer invoice prints.
    The goods receipt, however, does NOT produce inventory, it basically passes through directly to the Sales Order. 
    Now incase of a export order, need to find a way to configure so that Export Documentation can be trigeered in the form of an Output Type, in short a Delivery needs to be created.

    Hi Kaustubh
    The answer lies in how the sales order is closed and invoice is printed when the GR is done.
    Please check if it is possible to update the invoice  with the information you want to be printed on the Export doc and Packing slip.If this can be acheived then you print the information out of the invoice without using the delivery.
    Hope this helps.
    Thanks

  • Testers needed for wlan-ng

    Due to the recent death of my prism2 USB wifi dongle, I am no longer
    able to test the wlan-ng packages before they are released. I am quite
    happy to continue maintaining them, but I'm looking for others who use
    this driver, and who would be willing to test future releases for me.
    Anyone who is interested in helping out with this should add their
    details to this wiki page:
    http://wiki.archlinux.org/index.php/Driver_Testing
    The module and -utils packages are updated with every upstream release
    from linux-wlan-ng, and the module package is also updated with every
    kernel upgrade.
    Thanks
    Tom K.

    Did you get any takers?  I use this for my MA401 pcmcia wireless card.  I just don't use the card that often

  • Info needed on how to get list price for a given MATNR and pricing Conditio

    Hi All,
    Can some one help me in finding List price for a given MATNR and pricing condition type.
    Basically, i need info regarding the tables that i need to use for this purpose.
    Thanks in advance.
    Regards,
    Udaya.
    PS: All helpful answers will be rewarded.

    Hi Udaya,
    A simple solution to all these kind of problems:
    Goto  Transation SE16
    Table :TSTC
    in Tcode :Give A* or V*  or anything...and find the relevant transctions and data.
    if found useful...reward points.
    Regards,
    Nisha

  • Info needed on how to get list price for a given MATNR and pricing Conditi

    Hi All,
    Can some one help me in finding List price for a given MATNR and pricing condition type.
    Basically, i need info regarding the tables that i need to use for this purpose.
    Thanks in advance.
    Regards,
    Udaya.
    PS: All helpful answers will be rewarded.

    Hi,
    I moved your topic to this forum
    Mario

  • [svn:fx-trunk] 11641: A simple fix - we need to keep track of the display list index for non-clipping masks such as luminosity masks , not just alpha masks.

    Revision: 11641
    Author:   [email protected]
    Date:     2009-11-10 18:29:57 -0800 (Tue, 10 Nov 2009)
    Log Message:
    A simple fix - we need to keep track of the display list index for non-clipping masks such as luminosity masks, not just alpha masks.
    QE notes: Please include tests for multiple graphic content nodes with masks under a .
    Doc notes: N/A
    Bugs:
    SDK-24133 - Multiple non-Group maskees don't work when using maskType="luminosity"
    Reviewer: Deepa
    Tests run: Checkintests, Bug test case
    Is noteworthy for integration: No
    Ticket Links:
        http://bugs.adobe.com/jira/browse/SDK-24133
    Modified Paths:
        flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/fxg/FlexFXG2SWFTranscoder.java

    Revision: 11641
    Author:   [email protected]
    Date:     2009-11-10 18:29:57 -0800 (Tue, 10 Nov 2009)
    Log Message:
    A simple fix - we need to keep track of the display list index for non-clipping masks such as luminosity masks, not just alpha masks.
    QE notes: Please include tests for multiple graphic content nodes with masks under a .
    Doc notes: N/A
    Bugs:
    SDK-24133 - Multiple non-Group maskees don't work when using maskType="luminosity"
    Reviewer: Deepa
    Tests run: Checkintests, Bug test case
    Is noteworthy for integration: No
    Ticket Links:
        http://bugs.adobe.com/jira/browse/SDK-24133
    Modified Paths:
        flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/fxg/FlexFXG2SWFTranscoder.java

  • I need the password for BronzeZebra-guest. Please help asap

    I need the password for BronzeZebra-guest. I don't know how you find this or get it but I need it now. Please reply to [email protected]

    If you have Cisco Connect open it up & look around & it should show the passwords for both main & guest. At least mine did when I could access it.
    Kathi

  • How do you print ingredients for a grocery list from Recipe Box

    How do you print ingredients for a grocery list from Recipe Box?
    I would think that this basic functionality would be there to semi-automate the process.
    Thanks!

    Hi Mark,
    You'd have to do something like this;
    - Create a Rule in XPRESS that iterated over each of the Roles assigned to the user and invoke the java method available on the com.waveset.object.Role object
    java.util.List      getSubRoleList()
              Return the current list of roles assigned to this role
    <dolist name='currentRole'>
              <ref>user.waveset.roles</ref>
              <set name='roleObj'>
                <invoke name='getObject'>
                  <ref>theSession</ref>
                  <invoke name='findType' class='com.waveset.object.Type'>
                    <s>Role</s>
                  </invoke>
                  <ref>currentRole</ref>
                </invoke>
              </set>
    <block trace='true'>
              <set name='subRoles'>
                <invoke name='getSubRoleList'>
                  <ref>roleObj</ref>
                </invoke>
              </set>
             <ref>subRoles</ref>
    </block>
       </dolist>HTH,
    Paul

  • Does my desktop come with wireless capability with no need for a separate router needed to be purchased, when airport is opened up belkin wireless is checked and other locations are listed but locked? Does my xfinity unit have one or just a modem? TIA

    Does my desktop come with wireless capability with no need for a separate router needed to be purchased, when airport is opened up belkin wireless is checked and other locations are listed but locked? Does my xfinity unit have one or just a modem? TIA

    Your iMac does have wireless capability. It does need, however, some wireless network in order to connect to the Internet. It sounds like there are several networks in your area, including one Belkin router that is not encrypted and several other networks that are. I presume that you would know if the Belkin one is yours, and you would have mentioned it. Do not use someone else's network without their permission. In some jurisdictions it is illegal, in others it is merely foolish.
    It is impossible to know what Xfinity has given you. Possibly it is only a cable modem, or perhaps it has a router built in. Call them and ask them. If it has a router built in, get them to help you set it up. Note that some tech support people for Internet service providers will resist working with Macs. Be persistent, it is not that different.
    If they did not provide a router, you will need to get one. Apple makes the AirPort Extreme base station, the AirPort Express base station and the Time Capsule. Other companies have their own. Be sure you get one that is up to date and has 802.11n capabilities (for the highest speed) and go on from there.
    Best of luck.

  • What are the features supported in Cisco Prime Infrastructure for WLAN for autonomous AP's?

    What are the features supported in Cisco Prime Infrastructure for WLAN for autonomous AP’s?

    • PI provides visibility for autonomous  clients within the same list view as lightweight and wired clients (client list  page).
    • Rogue AP detection for autonomous AP's is not supported (it's  supported in CUWN). 
    • Alarms/events for client authentication issues (e.g.  authentication failure) are displayed in PI.
    • Config management for  autonomous AP's is via CLI template.  Config comparison and archiving  functionality in PI leverages these same features that were brought in from LMS,  so need to defer to others in terms of whether this is a cross-platform feature  in PI or is only supported on a subset of platforms.  Config comparison/archive  is supported in CUWN.PI supports both infrastructure (e.g. AP Tx Power and  Channel, busiest AP, AP utilization, etc.) and client (e.g. client count, client  sessions, etc.) reports, and there are extensive reports for CUWN

  • 4400 WLC Layer 3 Authentication Status for WLAN Clients

    We have 3 4400 series WLC's(wireless LAN controllers). Two 4404 WLC's are on the "inside" of our network and all AP's (access points) on our network use these two WLC's as the primary or secondary controller.  The 4402 WLC Anchor controller resides in our DMZ and is used for WLANs that are more oriented for guest usage.  These guest WLANs are configured on the inside controllers also, but are "anchored" to the 4402.  On the anchor controller we are using layer 3 Web Authentication for the WLAN "Guest".  This WLAN uses the internal web-auth page within the anchor controller and a username/password combo that is locally defined on the anchor controller.
    Functionally there is no issue.  Users connecting to the WLAN are presented with the web-auth page upon connecting to the WLAN and opening a web browser.  The issue is how the layer 3 authentication information is presented on the Monitor Clients page of the "inside" WLC's management screen as compared to the "anchor" WLC.
    For example, if we log in to the anchor controller and then click Monitor, then Client, then Change Filter and choose any WLAN requiring layer 3 authentication on the Anchor controller, there will be a list of all clients currently associated.  In the Column with the "Auth" heading it shows the Layer 3 Authentication status of the clients.  For example, if there are 15 clients associated to WLAN SSID "Guest", but only 5 of them have opened their web browsers and correctly logged in, then this will be correctly displayed.  The 5 who have logged in will show "Yes" and the other 10 will show "No" in the Auth column.
    Now...the problem...on the inside controllers...if we do the same thing (monitor, clients, filter for WLAN SSID "Guest"), all 15 will show "Yes" under the Auth column. In most cases the 15 clients will be distributed accross both controllers (maybe 6 on one, and 9 on the other WLC), but both inside controllers will display all clients as having a layer 3 authentication status of "Yes".  We have proven over and over that this is not accurate.  This is very inconvenient because the "Client Count" reports we run on the WCS server reflect the same information as the "inside" controllers.  The WSC reports will show all 15 as Authenticated and they are not.  We have proven many times that the anchor WLC is the only controller accuratly conveying this info.
    Also, the engineers who helped with our network install have reproduced the same behavior in a lab with an anchor and inside controller directly connected.  They suggested it may be a code bug with the 4400 series WLC.  We are running controller Software Version 6.0.188.0 on all 3 controllers.
    Please let me know what you think may be causing this issue.  Any help or advice is greatly appreciated!

    Hi,
    We run version 7.0 on the WCS and WLCs but I thought I'd try the report and see what I got. The result is a line graph with the number of associated and authenticated clients superimposed. I'm not sure how useful a report of this nature is.
    It doesn't inspire confidence: when I specifiy the guest wireless SSID I get zero clients! I know there have been guest clients authenticated during the report period I spec'd.
    Scott

Maybe you are looking for