How to bind ACS users to only one SSID?

Hello!
I have ACS 4.2 and AP 1240. I`m use two SSID - guest and user. Guest ssid must use PEAP authentication, user ssid must use EAT-TLS authentication (acs user local database). All work correctly. But when i create user for EAP-TLS, i`m create with username of DN certificate and some password. And somebody can use DN as username and password for PEAP authentication for ssid Guest and ssid Users.
How can i make for ssid guest that work only PEAP authentication and for ssid work only EAP-TLS authentication?

Are you using autonomous or lightweight AP's? If you have a controller you could setup the Radius attributes to specify which WLAN the user can authenticate to.
Another option would be to setup dynamic VLAN assignment. This would work for either type of AP. The user might still be able to authenticate to either WLAN but after passing authentication they would be dumped into the VLAN you define.
http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42sol.html#wp1086421

Similar Messages

How can you use iMessage between 3 iPads with 3 different users but only one Apple ID?

how can you use iMessage between 3 iPads with 3 different users but only one Apple ID?

No you do not need separate Apple ID's in order to use 3 devices with one Apple ID. I use 4 devices to Message and FaceTime and all use the same Apple ID. You do need to add additional email addresses for the other devices.
Look at this very informative video for the instructions.
http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l

How to connect my mac to only one wireless network?

How to connect my mac to only one wireless network?

Do you mean that there are several wireless networks within range, and you don't want it switching between them?

The kerberos PAC verification failure when all users of only one RODC Site, trying to get access iis webpage of different site using Integrated Windows Authentication

The kerberos PAC verification failure when all users of only one Site which having only one RODC server(A), trying to get access iis webpage of different site which having WDC server(B) using Integrated Windows Authentication. But when they accessing the
website using IP address, it is not asking for credentials as I think it is using NTLM Authentication at that time which is less secure than Kerberos.
Note that:- All user accounts and Computers of the RODC has been allowed cache password on the RODC. Nearest WDC for the RODC (A) is the WDC (B).
The website is hosted on a windows server 2003 R2 and generating below system event log for those users of the RODC site :-
Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 7
Date:
<var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">date</var>
Time:
<var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">time</var>
User: N/A
Computer:
<var style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">computer_name (the 2003 server)</var>
Description: The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client<var style="color:#333333;font-family:'Segoe
UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">computer_name</var> in realm <var
style="color:#333333;font-family:'Segoe UI', Arial, Verdana, Tahoma, sans-serif;font-size:13px;line-height:normal;">realm_name</var> had
a PAC which failed to verify or was modified. Contact your system administrator.
This issue has been raised for last one week. Before that everything was fine. No Group Policy changed, Time also same.
In this situation do I need to do Demotion of the RODC and re-promote it as RODC again or is there any other troubleshooting to resolve it.
Thanks in Advanced
Souvik

Hi Amy,
Thanks for your response
I noticed that Logon server could become incorrect again after user re-login or restart of a workstation.
It seems root cause is different. Need a permanent solution.
The Workstations of the RODC site are getting IP from a DHCP server by automatic distribution of IP from a specific subnet for the site only. The RODC is
the Primary DNS server for the site.
I have checked the subnet and it is properly bound with only with that AD site. The group of users and workstations are in the same site AD organisational Unit.
Sometime I restarted the NET LOGON service and DNS server service on ther RODC server and sometime rebooted the server. But the Logon server issue has not fixed permanently.
The internal network bandwidth of the site is better than the bandwidth to communicate with other site.
The server is Windows server 2008 R2 standard and hosting the below roles
RODC
DNS
File server
The server performance is Healthy in core times when maximum users usually logins.
Any further support would be much appreciated Amy
Thanks
Souvik

How to bind a user selected value to a view object bind variable?

Hi
I have two pages in ADF BC application. In the first page ,i will give a drop down menu to user which displays all the table names in my databse.
when the user selects a table and goes to the second page..he should be given a menu or a check list of all the columns in the user selected table....
to display the columns i have used the query
Select COLUMN_NAME from user_tab_columns where table_name = : table_name in the view object.
now how to bind the user selected table value in the first page to the table_name bind variable in view object ?
thanks
swathi.

Hi,
depends on how the select box is implemented. With ADF and ADF Faces, the default value selection is the list index. In a value change listener you could look up the selected value from the underlying iterator. Store this value e.g. in a session attribute and point the NDValue of the ExecuteWithParams operation to #{sessionScope.your_attribute}
Frank

How to map two different subnets to one SSID

Hi Experts ,
we have two offices in same city at different location however we are planning to bring both the office at same location.
Now lets say site A has controller 5508 configured with 24 AP's with 10.10.10.x subnet for internal SSID and Site B which is shifting to Site A campus has different subnet ( 10.10.20.x ) for same SSID.
Site B has no controller since they had connection with H-reap and they were using different subnet for internal SSID ( 10.10.20.x ) .....
Now i need to add their AP's in Site A controller which will be extended wireless LAN however we would like to keep same subnet ( 10.10.20.x ) what Site B has for wireless clients which is really confusing me ....
I have already client subnet for site A with 10.10.10.x /24 subnet and nearly 200 users are already using this wireless client subnet....
How do i add their ( Site B ) subnet / 10.10.20.x with same SSID configured which is globally only one SSID ?
limitations :
I can not create new SSID for site B since same will be broadcasting even in Site A AP's
Is this possible to map one more subnet of site B to existing SSID with already different subnet ( 10.10.10.x ) ?
Your suggestions will be really helpful for me to go ahead and understand in better manner ...

Well first off, you need to bring that subnet over to site a without breaking any routing. Once you do that then sites B subnet will have a different vlan than site A of course. Now with both subnets working in site A, you create a dynamic interface on the WLC for that new subnet. Create an AP group for both sites, you can name it by vlan or by any name you want. Now in the ap group for site A, you define what SSID's you want and map the vlan to that ap groups. Then add sites A AP's to that group. You do this also for site B's AP's and map the SSID to the new subnet you brought over and move the AP's to that group. The APs from site B would have to be setup in local mode not hreap.
Makes sense
Sent from Cisco Technical Support iPhone App

How Do I Allow a List Item to be assigned to multiple users where only one needs to take action on it?

Hey folks,
Building a ticketing type system and when a ticket is opened, we want it to go to everyone on our team, not just one person. What's the best way to accomplish this and how?
Do we:
1. Make the field blank so it's searchable that way?
2. Can the assigned to field tied to active directory be filled in with more than 1 name where it doesn't require all names to take action on it?
3. Saw people mentioning assigning to a group but then not sure how to create a group (names are tied to active directory) and not sure how to make the workflow allow just one and not all individuals in that group to take action on it.
First step would be for the individual taking action on it to reassign it to themselves, effectively taking it out of the "queue"
Any help would be greatly appreciated!!
Oh and just a note that SharePoint Designer wasn't set up for us to use BUT we have InfoPath and that is something we can use (go figure lol).
Thanks!

Ben I'll send you the VI
Attachments:
TEST.vi ‏589 KB
TEST.vi ‏59 KB

How to connect many devices with only one FW800 port in iMac?

Hi,
I am upgrading to a new Intel iMac from a 2004 vintage Dual2.0GHz PowerMac. I currently have 8x d2 Quadra drives chained by FW800, and 2x Iomega drives connected vis FW400 hub which also connects HD cams.
My questions is that with only one FW800 port in iMac, I think my devices connectivity is the following?
(1) Get a FW 800 hub (I can only find 2 port ones at the Apple store and BestBuy)
(2) Connect the d2 Quadras to one port of the FW800 hub
(3) Get a FW 800 to FW 400 cable
(4) Connect my 6 port FW400 hub to the 2nd port of the FW800 hub
Thanks for reviewing this solution, and I would also appreciate other suggestions or hear about your experiences if you have a similar set-up.
Will

In addition to your listed considerations, you should consider the following.
Many storage needs do not required FireWire 800 speed. For example, USB 2.0 works fine for your Time Machine backup drive. If you are just storing user data such as your iPhoto or iTunes media files, USB 2.0 is more than fast enough. So, as much as possible, if any of those external drives have USB 2.0 connections and the data storage does not need FireWire 800 speed, offload as much as possible to USB 2.0. I used to be a +FireWire snob+, but since getting an Intel iMac, I find that USB 2.0 works quite well for most data storage purposes.
There are new hard drives that are power efficient and as large as 2TB. Consolidate your data storage needs onto a smaller number of very large drives, partitioned as needed. This will make your setup more reliable (smaller number drives), and save reduce power consumption. If any of your current externals are SATA, you can probably replace the existing drive with an extra large one.
So, I think you setup should be, extra large FireWire 800 drive connected to the FireWire 800 port directly. Using a 9-pin to 6-pin cable, connect the FireWire 400 hub. Connect any non-storage FireWire 400 devices there. Do some data transfer testing to make sure having the 400 hub there on the chain does not cause the 800 connection to slow down.
Connect other drives as needed using USB 2.0, existing or new. Retire the smaller of your external drives.

Hide Top level navigation if user assigned only one role

Hi,
I would like to hide the top level navigation if user assigned with only one role.
I can create role based rule to show desktop using Master rule collection, but is it possible by doing to with role count.
If user has multiple roles show desktop1 else show desktop2

not sure if this possible ,you may check feasibility of creating a application which checks user role count and if role count is = 1 load the Portal url (URL alais) which had TLN iview invisible in the same window else do nothing and load the portal with the desktop which has tln.
Put the application in framewrk page which has TLN visible.
create a URL alias and create a desktop -framework page which dont have TLN ,assign this desktop to this URL alias in rule collection set its priority before user conditions check in rule collection so that it has high priority before user or group check in rule collection.
you can create a poc in sandbox and check if it wiorks?

How to bind the user-defined watch to a specific server so that server's Health would show green ball and is linked to Monitoring watch?

Hi,
I create a user defined watch for BI4.1 ExplorerExplorationServer server in CMC -> Monitoring.
Caution:
node.ExplorerExplorationServer$'Server Running State'==1 ||
node.ExplorerExplorationServer$'Server Running State'==2 ||
node.ExplorerExplorationServer$'Server Running State'==4 ||
node.ExplorerExplorationServer$'Server Running State'==6 ||
node.ExplorerExplorationServer$'Server Running State'==7 ||
node.ExplorerExplorationServer$'Health State'==1
Danger:
node.ExplorerExplorationServer$'Server Running State'==0 ||
node.ExplorerExplorationServer$'Server Running State'==5 ||
node.ExplorerExplorationServer$'Health State'==0
However, in CMC -> Servers -> Explorer Services, the ExplorerExplorationServer shows "Information is not available" blue ball in Health.
How do I bind the user-defined watch to a specific server so that server's Health would show green ball and is linked to Monitoring watch?
Regards,
Jin-Chong

Hello JinChong,
We had created User-defined Explorer watches on our environments and have run into issues.
Have received many false alerts even though Explorer servers are running fine.
After creating an AGS case it was informed to us that Explorer does not have monitoring capabilities.
AGS is checking with solution architect of Explorer application about when the monitoring watches for explorer would be included.
Regards,
Rohit

How to retrieve the user input in One Step Screenflow

Hello all,
I am new in KM. I would like to ask in One Step Screenflow, I have add a inputfield into the ConfirmComponent. How can I retrieve the user input?
public IRenderingEvent execute(IScreenflowData sfd) throws WcmException
          inp.setLabel(new Label("Delegation:"));
          ConfirmComponent cc = new ConfirmComponent(ConfirmComponent.OK_CANCEL,this.context.getLocale(),inp);
          String sRid = (String)this.values.get(0);
          RID rid = RID.getRID(sRid, null);
          OneStepScreenflow oscf = new OneStepScreenflow(sfd,this.getAlias(),rid,cc);
          return oscf.execute();
In the IRenderingEvent , How to retrieve the user input?
public IRenderingEvent execute(IResource res, Event event ) throws WcmException
          if (event instanceof ConfirmEvent)
                    ConfirmEvent cce = (ConfirmEvent)event;
                    if (ConfirmEvent.CHOICE_YES.equals(cce.getChoice()))
                              return new InfoEvent(Status.OK, "Done !");
                    else if (ConfirmEvent.CHOICE_NO.equals(cce.getChoice()))
                              return ConfirmComponent.onNo(event, res.getContext().getLocale());
                    else if (ConfirmEvent.CHOICE_CANCEL.equals(cce.getChoice()))
                              return ConfirmComponent.onCancel(event, res.getContext().getLocale());
          return new InfoEvent(Status.ABORT, "Aborted.");
Many Thanks,
Sunny

Hello yoga,
Many Many thanks for your reply again.
I have just try the class in the thread link.
There is a error
"The project was not built since its classpath is incomplete. Cannot find the class file for javax.servlet.http.HttpServletRequest. Fix the classpath then try rebuilding this project."
The errors occurs because of "extends OneStepComponent"
public final class NewConfirmInputComponent extends OneStepComponent
Where can find javax.servlet.http.HttpServletRequest to include it in my classpath?
Thanks
Sunny

How to evolve a graph with only one loop

1. how to continue to add new nodes to a graph with only one loop
would like to use graph traversal like my previous post to traversal a binary tree, but this time, it can
loop forever, i mean it traverse all nodes in whole graph in the meanwhile it add new nodes too
assume maximum number of joint is 2 or 3
computing nightmare

I just realised that you weren't talking about cyclic graphs (in the case of 1 cycle) here, but meant a single pass traverse and mutate.
What you don't specify is how the new nodes are being supplied. If they are supplied up front, then the loop will of course terminate once all the inputs are addressed, rather than going on forever. If they are being supplied from time-to-time,
then you need to have some sort of event-wait on input. The traversal could have a move-next something like this
If at end of tree with no new nodes, wait for input
If at end of tree, with input, reset to start
If at insertion point for new node at top of input queue, insert that
Move to next node in tree
This seems the sort of thing that would naturally be coded in a functional language as a tail recursion rather than an iteration.

How to configure my MDB serve only one message at a time?

Hi All,
I have requirement where I need to develope a MDB iin weblogic. This MDB has to serve only one message at a time. If the send second message is sent while the first one is running the second message has to sit in queue and start processing once the first message is finished.
Is there any way to configure via annotations or in weblogic server settings ?
Any help would be really appreciated...
Thank you,
K.

Here is my client code to send the message
Connection connection = null;
javax.jms.Session session = null;
MessageProducer producer = null;
try
connection = lpConnectionFactory.createConnection();
session = connection.createSession(false, javax.jms.Session.AUTO_ACKNOWLEDGE);
// Create a MessageProducer from the Session to the Validation Queue
producer = session.createProducer(myQueue);
((WLMessageProducer)producer).setUnitOfOrder();
// Create a message
ObjectMessage message = session.createObjectMessage();
message.setObject(params);
message.setStringProperty(MyServiceConstants.OPERATION, operation);
// Send the message to the queue
producer.send(message);
finally
if (producer != null)
producer.close();
if (session != null)
session.close();
if (connection != null)
connection.close();
Following is the weblogic-ejb-jar.xml
<?xml version="1.0"?>
<!DOCTYPE weblogic-ejb-jar PUBLIC
"-//BEA Systems, Inc.//DTD WebLogic 6.0.0 EJB//EN"
"http://www.bea.com/servers/wls600/dtd/weblogic-ejb-jar.dtd">
<weblogic-ejb-jar>
<weblogic-enterprise-bean>
<ejb-name>TestMDB</ejb-name>
<message-driven-descriptor>
     <pool>
          <max-beans-in-free-pool>1</max-beans-in-free-pool>
          <initial-beans-in-free-pool>1</initial-beans-in-free-pool>
     </pool>
</message-driven-descriptor>
</weblogic-enterprise-bean>
</weblogic-ejb-jar>

How to Create Windows ISO Show Only One Windows Version

Dear,
I want to create Windows ISO server for 2012, but I want this ISO show me only one version of the Windows for example, I have Core version, Standard, DataCenter etc..So I don't need after I create ISO to show me all those choose versions, I need show me
only for example windows standard version during windows server 2012 installation, kindly I need steps to create this ISO.
Thanks..

Hi Dana.Kadi,
You use WIM file and oscdimg tool to create a bootable ISO image, you can refer the following similar thread:
WIM to ISO or what
https://social.technet.microsoft.com/forums/windowsserver/en-US/164c629a-c702-4b46-b3a2-6441e7e7f6ed/wim-to-iso-or-what
making bootable dvd for loading install.wim image
https://social.technet.microsoft.com/forums/windows/en-US/882d06e8-1ff5-4aff-bc5b-3418707015c5/making-bootable-dvd-for-loading-installwim-image
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

How to create a VLAN on only one host?

Hi,
is there a way that a VLAN can be created on a specific host's vNICs rather than appying the VLAN to all hosts through an updating template?
I am kinda trying to get my head around UCS, I have alwats created vlans by creating the VLANs first and then modify the VLANs in an updating template, but in this case, only one host needs that VLAN.

Hi Max,
The only way to do this is if you unbind the service profile from the template (service profile template, and vnic template), but this means that you will need to keep track of the changes for this service profile separately as this service profile won't be part of these templates.
Note that you will still need to allow the vlan on the uplinks but you will be able to assign this vlan to the unbounded service profile.

How to bind ACS users to only one SSID?

Similar Messages

Maybe you are looking for