Guest network Anchor problem

Has anyone seen this message before?
Mon Oct 16 16:48:24 2006: Received Anchor Export request: 00:0b:7d:15:46:5a
from Switch IP: 150.123.150.251
Mon Oct 16 16:48:24 2006: WLAN Security Policy Mismatch for WLAN 5
client: 2050, wlan 50,
Anchor Export Request from Switch IP: 150.123.150.251 Ignored
I have two 4402 controller, one is served as Guest network Anchor. It worked for a couple of weeks and stopped working now. The sympton is from the internal controller user is not able to get a DHCP ip address, turned on debug for mobile handoff, this message comes on when the user tries to connect. I have checked and made sure WLAN 5 (Guest network) is configured exactly the same on both controller, still not working.
Let me know if anyone has any idea.
Thanks,
Yatao

Hi!
I had exactly the same happen to me, only with a 2006 controller initiating the anchor request. Worked fine for a week or two, then just stopped working without any changes.
I've had do delete the members in the mobility group on the anchor controller, and then add it again before it started working.
Best regards
- Oyvind

Similar Messages

E3000 guest network access problems

Hi,
I have the E3000 router and am using an Engenious repeater. I only turn on the repeater when I'm playing PS3 because it boosts the signal dramatically. However, if someone in my house is connected to the boosted network when I'm using the PS3 I get horrible lag on my PS3. Yesterday I tried connecting the laptop to my guest network while my PS3 was connected to the boosted network, and it worked great. Now, however, I'm unable to connect to the guest network on my laptop. It takes 2 minutes to identify the network and then when it connects it says no internet access. I have the Cisco connect software installed on the laptop. When i run the windows 7 network troubleshoot it detects a problem with the network adapter and says it resolved the problem, but really it just connects me to my main wireless signal and not the guest one.
Thanks in advance for any help

Guest network is unsecured wireless network and it works on 2.4 GHz wireless band.
If you are able to connect to the main network then I think there should not be any problem to connect to the guest network.
The main network has the IP address in the range of 192.168.1.xxx whereas guest network works on 192.168.33.xxx IP address. You have installed the Cisco connect software on your laptop. I think your laptop might be trying to connect to the main wireless network automatically.
You can try upgrading the firmware on your router and see if that makes any difference.

Performance issue in guest access anchored in DMZ

Hello,
I've been having performance issue in our wifi guest network anchored in the DMZ.
I have 3-5508 anchor controllers behind the Checkpoint gaia firewall and have 24 guest SSIDs in here.
Right now, only 14 guest SSIDs are enabled and tunnelled out in this anchor DMZ setup, whenever I try to add few more SSIDs I run into performance issue.
It seems to me that the problem is not about these additional SSIDs that I add because the performance issue starts to appear only when the traffic peaks or associated clients reached to certain number which is in my case 4000 users.
The firewall serves as the NAT device and gateway for all these guest SSIDs. The cpu, memory, number of connections have been checked and verified low.
Has anyone seen a problem like this? or has a setup like mine?
thanks!

Presuming you're not exceeding client count maximums on the individual WLCs I can't say I've seen anything in line with this "specific problem", but anything is possible.
What are the specific "performance issues" the clients are experiencing? Is it just general poor performance (slow web browsing/etc) or do you see other issues like no internet connectivity at all or something else?
May I ask, what is the use-case behind having 24 SSIDs on your anchors?

Wireless Guest Network using Cisco 4402 as an Anchor Controller

Hello,
We have recently redesigned our wireless guest network in accordance to Cisco's recommended deployment using the anchor controller in the DMZ. We have created two mobility groups (enterprise and anchor). The anchor controller and DMZ has two subnets (guest managment and guest clients). The guest management subnet is connected to the controller and firewall allowing the mobility groups and EOIP tunnels while the guest client network is also connected to the controller and firewall to push the client traffic directly out the firewall. The setup works well but the one part that I'm not happy with is the DHCP. Currently DHCP is being handled on the firewall because of issues we had with dhcp relay and the controllers internal dhcp service.
Does anyone have any information on getting DHCP relay working or the internal dhcp service on the controllers when using as a anchor?
This is basically the setup guide that we followed.
http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html
Thanks!

Hi,
Make sure you have the IP helper address configured under the VLAN interface on the L3 and also make sure to disable DHCP proxy on both the WLC (Anchor and Foreign).
This will help us as well..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

I installed a new router from my ISP provider and now I can't find my Time Capsule or "Guest" network. What do I need to do to correct this problem?

I installed a new (and supposedly better & stronger) router from my ISP provider (Verizon) and now I can't find my Time Capsule or "Guest" network.
My Mac is not backing up because it can't find my Time Capsule network & my "Guest" network has also disappeared.
What do I need to do to correct this problem?

You must reset the TC to factory and start over. The TC simply remembers too much from the previous setup to work in the new one.
If your new router is going to take the router role, then the TC will have to be bridged and you will lose your Guest wireless.. the way around this is to use the Verizon router as your guest wireless and the TC as your main wireless.
The Factory Reset Gen1-4.
Unplug your TC. Hold in reset. and power the TC back on.. without releasing reset for about 10sec. When the status light flashes rapidly; release it.
Be Gentle! Feel the switch click on. It has a positive feel.. add no more pressure after that.
TC will reboot after a couple of minutes with default factory settings and will wipe out previous configurations.
No files are deleted on the hard disk.. No reset of the TC deletes files.. to do that you use erase from the airport utility.
Factory reset Gen 5
Hold in reset for about 5sec until the status light flashes quickly.
If your AirPort Time Capsule still doesn’t respond, do a similar reset to the Gen1-4.
Unplug your AirPort Time Capsule .. hold in reset and power the TC back on.. without releasing the reset.. wait until status led flashes rapidly.

EA6350: primary network problems, guest network ok

Been scratching my head with this one. I have 2 AC1200's, aka EA6350's running 2.4ghZ mode for now.
In a nutshell the following has been done:
Primary 192.168.1.1
Secondary (bridged)
Primary office network and guest network is set up. Bridge mode turns off guest access, of course, on the second router.
The guest network functions just fine, no drops, nothing...the primary network however experiences constant speed reductions, drops and when attempting to do a speed test cannot ping the test host. It recovers and then slows back down again.
I've tried disabling the second router, moved them farther apart, had them on different channels: 1 and 11, etc...I'm at a loss as to what to do but the biggest issue is I can't customize my configuration much with these routers. I really want to extend this network seamlessly, and have done so in the past with other routers but I suspect two AC1200's on the same network are just not happy. Problem is I can't keep spending $$ on routers to test my theories.
As our primary network is the secure one I can't combine anything, the guest network must stay isolated from our internal network.
Any suggestions?
Thanks
(side note) I have done full factory resets a couple of times on each one and checked the firmware rev, both are up to date.

Hi Odd-Ball. I believe you can have your non working Linksys router returned for replacement. Who knows the new one may not give you the same problem anymore.

Guest Network on E3000 / Password problem

Hi,
I have the E3000, I want to use the Guest Network for wireless access. Using Cisco Connect I add a password to the Guest Network. The Guest network then shows up as open or unsecure on laptop and phone. I have renamed my network and changed the main password and nothing seems to help, Guest always shows up as unsecure or open. I tried Cisco chat and they were no help.
Any ideas on how I can get the password to work on the Guest Network?
OS Windows Vista SP2
Using Cisco Connect
Firmware: 1.0.04 build 6
Thanks for your help.
Jay
Solved!
Go to Solution.

How to get Guest password on E3000

Time capsule guest network problem

I am trying to set up a guest network on my timecapsule. I can get as far as filling in all info in airport utility but after I click update, I recieve a warning " there was a error in you setup" and it shuts down my time capsule and I have to reboot my machine to reestablish its connection. Any idea's out there?
I have tried this process 3 times..with no avail....

The guest network feature requires that the Time Capsule be connected to a simple modem.....not a modem/router or gateway type of device that is often furnished by Internet Service Providers (ISPs) to their customers.
So the first thing to check should be to confirm your modem type. Please provide the make and model number of your "modem" so we can complete the first troubleshooting step.

WLC (Foreign-Anchor), problem with the external web auth -- ISE

hello guys
I am currently designing a platform for a guest network, which must be isolated from the local network, the following equipment:
ISE 1.2 (Cisco SNS- 3415-K9)
WLC 7.0.230.0 (Cisco controller 5508)---> wlc Foreign
WLC 7.0.230.0 (Cisco controller 5508)---> wlc Anchor.
The EoIP tunnel between wlc is performed successfully.
The wireless client gets IP address of the anchor wlc (DHCP server).
Test 1:
I configure the WLC ANCHOR with local web authentication (internal), the wireless client is authenticated by WLC and navigate successfully.
Test 2:
Configure the WLC to anchor external web authentication (ISE). configure a user in ISE guest portal.
The wireless client gets IP address of the anchor wlc (DHCP server), attempting to navigate not display the guest portal.
Debug a wireless client trying to connect to the guest network is attached.

Thanks for your help Scott...
Now I presents another problem with the guest portal page. The wireless client obtains IP address and managed to reach the guest portal page, then enter the username and password page tells me it was successful. When I try to browse again brings me to the portal visitor page and asks me to enter user name and password.
test 1:
the username and password created for away was verified.
Scoot will have some implementation details with the same scenario I am developing? I think I'm missing some details in the ISE does not allow me to navigate the entrance for visitors to be successful.

Wireless Guest Network, iPADS and MAC Filteing

Hello, I have a question regarding our wireless guest network and using iPADs
Our wireless network consist of (3) 5508 WLC’s running 6.0.188. 2 internal WLC and 1 external anchor WLC for guest. Presently we are only using one of the internal controllers for users the second is only used for fail over. The anchor controller is set up as the DHCP server for guest. We also have a Cisco NAC Guest Server in the DMZ for guest authentication.
We have (10) iPads that need Internet access though our guest portal. We do not want these iPADs to have to enter any credentials just pass through to the internet. We do not want any other device to be able to connect to this SSID. Here’s my question; Getting to the Internet is no problem however when I try to set up a MAC filter just for these devices, they never receive an IP address and never get connected. I have tried setting the filter on both the internal controller and the anchor controller identically and in about every combination I can think of. Does anyone know how to set up a MAC filter on a guest network configured as per Cisco’s recommendation? I also plan to use WPA2 and 802.1x once I get the MAC filter to work. Any help would be appreciated.
Thank You
John

Not all layer 2 and layer 3 security mechanisms are compatible. Refer to this doc
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080987b7c.shtml#matrix
What security settings have you configured. The settings also need to be identical on both the internal and anchor controller.

How do I add a guest network to existing airport extreme configuration?

I have an existing Airport Extreme configuation in my home Wifi network and I want to add a guest access point. When I open the recently updated airport utilities, the screen no longer looks the way it used to, with the side bar on the left and my devices listed there for me to select (I also have an Airport Express). I used to be able to select the Airport Extreme from the left side bar, then hit continue to change any settings. Well now, since it updated, the screen looks different, with internet at the top, pointing to the Airport Extreme, then the Airport Express. When I select the Airport Extreme, it no longer gives me the option to change the settings for it, which is where my problem lies! Any help? I know it's probably something very simple that I am missing, but I'm at a loss.

Why would I download a lower version of AirPort Utility?
To gain more functionality.....since AirPort Utility 6.0 is otherwise known as "AirPort Utility Lite" on the forums. It's a "first try" for Apple with a new look. While it does look nice, it has been downgraded as far as the features are concerned.
For example, if you open AirPort Utility 5.6 and click on the AirPort Extreme on the left, your Generation version will be displayed on the right side of the page. There are many more advanced settings available in AirPort Utility 5.6 as well...that are not available on 6.0.
But, you don't have to install AirPort Utility 5.6 if you don't want to. I suggested it because it offers more features and will also look exactly the same as the AirPort Utility that you have used previously.
If your AirPort Extreme is in Bridge Mode, this indicates that you have another device...probably a modem/router....which is acting as the main router on your network. Bridge Mode is the correct setting for the AirPort Extreme in this case.
If you can post back with the make and model number of your "modem", we can check to confirm.
Unfortunately, the Guest Network cannot be enabled unless you configure the AirPort Extreme to be the "main" router on your network, which is likely not possible. If you try to configure the AirPort Exteme otherwise, you will receive error messages and the network will not function correctly.

Hi. Does anyone know how to delete my guest network from the list of network choices that everyone in the neighborhood sees when picking a network? Followed helpful suggestions on this site to delete the netwk but it still appears. Appreciate any help!

Hi. I'm trying to make my guest network disappear from the list of network choices that appears to everyone in the neighborhood. Even though I followed the great suggestions on how to delete the network, it's still appearing in the list that everyone sees. It has my name and would prefer to get rid of it.
Please help! Many thanks!

Thank you for not only the tip but also especially the research showing that for anybody other that those using Wi-Fi for the first time the network wouldn't disappear. I wanted it to disappear for everyone so.....I finally solved it by resetting the Airport Extreme to the factory settings and starting over from scratch! It worked! Yay!!!!!
So, for everyone that has had this problem (and I've read many of the same complaints in different places on the Internet), you must go into Airport Utility and check the box stating that you want to reset it to the factory settings. Do not do it with a paper clip and the reset button on the box; I tried that first and it did not work. You must reset it via the Airport Utility. Then just start over and you will have the choice to NOT check the box to Enable Guests. If you want to enable guests, just be sure not to use your name or you're back to the same problem. Apple is so great with everything...wouldn't it have been so easy for them to just put this in the manual somewhere????? Thanks for all your help. Hope this helps others!

My new iphone4 connected to the internet fine at the store today, but will not connect to my wifi at home - it sees the guest network, but does not give me a place to enter the password

I just got a new iphone 4 (my first one) and the internet worked great at the store, as well as in the parking lot at the grocery store on the way home - yes I was playing with it! Anyway, now that I'm home and the store is closed, it won't connect to my home wifi. It sees the guest network, but it doesn't give me place to put in the password, so I'm not sure if that's why it won't work. Also, I don't know what settings to put in for the screen that comes after the network choice screen - it has IP Addresses with DHCP, BootP, and Statis (I don't know what any of these are or mean!) It also has a 'renew lease' button that I have no idea what to do with, and it has a section with HTTP proxy that is highlighted "off" but also has 'manual' and 'auto' options - maybe these are not set correctly?
Very frustrating that there is no manual, and the website doesn't really help with this at all. Thanks so much!

If you look at the top left of your screen you will either see a 3G (or 4G if you have AT&T) or you will see the wi-fi symbol. If you don't see the wi-fi symbol you are connecting to Gmail through your cellular data plan, not via wi-fi.
To answer your question, it doesn't happen often but when it does the steps I mentioned above will normally resolve it. Hopefully you won't have any further problem with this.

Cannot connect to secure guest network

My company is pushing more of our work content to the iPad2 via internet connection to databases, etc. I work in a hospital as a vendor. The hospital has a guest network setup that requires authentication by providing your email address and accepting their terms and conditions. For a few months I had no issues connecting with the company provided iPad2. For the last month, I have not been able to get connected. I can work on my 3G connection, but most places I go in the hospital do not allow a 3G connection. The iPad sees the guest network, and is connected as indicated by the blue check mark. Additionally, my Android phone and Windows XP laptop connect with no problem.
The information the ipad is pulling from the router is:
IP Address: 172.22.80.149
Subnet mask: 255.255.255.0
Router: 172.22.80.4
DNS: 192.168.16.8
IP address is set to DHCP. HTTP Proxy is OFF. Auto-join and Auto-login are both on. I've tried it with Auto-login turned off too. The error message I get in Safari is: 'Cannot verify server identity. Safari cannot verify the identity of "securelogin.arubanetworks.com".'
I've tried forgetting the network and renewing the lease. I've tried resetting network settings. The hospital's IT department doesn't provide support. Currently my company's IT department is baffled.
The iPad is running iOS v5.0.1. Ipod touch CAN get connected by seeing the authorization screen, agreeing to terms and providing email.
Can anyone please help?!

Scott, welcome to the discussions!
First make sure your Radio Mode is set to "802.11n (802.11b/g compatible). The titanium powerbook is probably a "g" or "b" device so you need this setting for compatibility.
Sounds like the titanium powerbook cannot handle WPA/WPA2 security settings. Try WEP and see if that will work.
WEP is not nearly as secure, but you may need to accept that compromise if you want the titanium powerbook to work on the network.
Post back on your progress.

Guest network in bridged mode (or other non-DHCP mode)

Hello,
I have the (Simultaneous Dual Band II) Airport extreme.
I wanted to use it at work but creating a secure network (my printer, computers, and drives) and a guest network (no password so people can access internet).
They already have a DHCP server (in the past I have a mistake by forgetting to turn off DHCP on a router which assigned other computers IP address (upstream) which conflicted with their DHCP server and all kinds of problems ensued).
So I know that in Bridge Mode, the guest network is turned off.
What are my options? I'm afraid to take if off bridge mode because of the DHCP issue. But I really want to use the dual network mode on the Airport Extreme.
So I don't want to bring down the whole network, can i safely use something other than bridge mode? other ideas?
Thanks in advance for any feedback
(yes I have searched a lot for the issue but I'm not sure what to do)

First, you question the policies about my work place (none of your business).
Sorry for suggesting that you check the policies before you violate something that could get you fired.
But then, you "would bet" that I hooked something wrong (could have asked).
Sorry but that is certainly a higher probability than a router malfunctioning in that manner.
It may not be your intention (just as it is not mine to be ungrateful).
Not sure if you are showing that with your last post.

Guest network Anchor problem

Similar Messages

Maybe you are looking for