Is it possible to disable intra-controller roaming with 1510AP

Hi all,
Is it possible to disable intra-controller roaming with 1510AP?
Thanks

Intra-controller roaming is enabled by default and cant be disabled.Refer URL
http://cisco.com/en/US/products/ps6366/products_configuration_guide_chapter09186a008063f3b9.html#wp1093741

Similar Messages

L3 intra-controller roam

Hi folks,
I fully understand how Layer 2/3 roam function and role of EoIP in an inter-controller enviornment.L2 intra-controller roaming also pretty straightforward.
However, L3 intra-controller roaming is not very clear to me.Could someone throw some light on the matter pls?Also if you could point me to to a Cisco doco that would be great.
Thanks,
J

Janesh,
     Correct, the client does not need to refresh it's IP, or get a new one.
     The configuration guide and the mobility FAQ should speak to this. As for the mechanism. When you are roaming inside the same WLC it knows that the client hasn't moved off of it, so it just updates the MSCB entry and the client rolls along.
     Now if you roam from WLC-A to WLC-B, the WLC looks at the interface name, and ip address assigned to that interface. If the subnets match, the MSCB entry from WLC-A is moved to WLC-B. The traffic for the client will ingress and egress on WLC-B. This is a Layer 2 roam.
     Now the client roams from WLC-A to WLC-B, the WLC looks at the interface name, and ip address assigned to that interface. The subnets do not, WLC-A copies the MSCB entry to WLC-B, then they pass the client traffic between them for the client. The traffic will ingress on WLC-A, be sent accross the mobility tunnel to WLC-B, and then to the client. The inverse is true for traffic from the client. It flows from the client to WLC-B, across the mobility tunnel to WLC-A, and then egress to the network there. This is a Layer 3 roam.
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

Intra controller roaming and Security

Hi all,
Under the section intra controller roaming, WLC 7.0 config guide states that " When the wireless client moves its association from one access point to another, the controller simply updates the client database with the newly associated access point. If necessary, new security context and associations are established as well"
http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html
Within the phrase "If necessary, new security context and associations are established as well" . Could someone elaborate on what is meant by the new security context ? My understanding is that only an update to the MSCB (with the AP info) is the only requirement as the client is within the same controller and subnet.I just can't think why would the security info needs to be updated.
Thanks in advance.
J

Well if during the roam the users session times out or a re-keying occurs the information has to be passed to the WLC. The AP does all the encrypt/decrypt if using encryption. This doesn't happen if your using open.
Sent from Cisco Technical Support iPhone App

Is it possible to disable the auto lock with clock?

Is it possible to disable the auto lock with clock?

Is it possible to disable the auto lock with clock?

Is it possible to disable scrolling of tabs with mouse wheel?

Often I close tabs using middle mouse button which is also the wheel. When I point cursor on the tabs, wheel accidently rotates and I close wrong page tab.

You can't disable the tab scrolling with the mouse wheel AFAIK, so you need to use other means to close the tab.<br />
You can close the current tab with the close X on the tab or one close X at the end of the tab bar or use the keyboard with Ctrl+W.<br />
Not selected tabs can only be closed via the right-click context menu as an alternative.
Otherwise you can try to set the minimum width of a tab to a larger value to have more room with the scrolling.
*Custom Tab Width: https://addons.mozilla.org/firefox/addon/custom-tab-width/

Intra-Controller roaming and AP Groups

WiSM 2 controllers running 7.3.101.0
All controllers have the same subnets/dynamic interfaces/WLAN
All controllers in same mobility group.
Controller1
AP1 has APGROUP1 applied
APGROUP1 has SSID1 mapped to DynintVLAN1
Controller2
AP2 has APGROUP2 applied
APGROUP2 has SSID1 mapped to DynIntVLAN2
Client associates to AP1 and gets IP from DynintVLAN1
Client roams to AP2. Keeps IP address but connectivity stops.
Client shows in Controller 1 to be Anchored to Controller 1
Client shows in Controller 2 to be mobile client and mapped to Controller 1 but interface shows as DynintVLAN2
My understanding with this configuration is that the client should stay connected via mobility to Controller 1 but it seems to stay authenticated but looses connectivity.
Any thoughts?
Thanks.

I checked eping and mping between these controllers and no problem
When roamed to controller 2 I even tried a dhcp release and renew and that worked! I got my same IP address so I think the mobility parts are working since I was able to get back to the original VLAN. I just cant ping my gateway or off network.
After the roam here are the "sh client detail"
Controller 1 (Anchor)
(Controller1) >show client detail 00:24:D7:37:B7:48
Client MAC Address............................... 00:24:d7:37:b7:48
Client Username ................................. **************deleted
AP MAC Address................................... 00:00:00:00:00:00
AP Name.......................................... N/A
Client State..................................... Associated
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 1
Hotspot (802.11u)................................ Not Supported
BSSID............................................ 00:00:00:00:00:00
Connected For ................................... 1060 secs
Channel.......................................... N/A
IP Address....................................... 172.17.137.241
Gateway Address.................................. Unknown
Netmask.......................................... Unknown
Association Id................................... 0
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0
Client CCX version............................... 4
Client E2E version............................... 1
Re-Authentication Timeout........................ 1583
QoS Level........................................ Silver
--More-- or (q)uit
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Power Save....................................... ON
Current Rate..................................... m15
Supported Rates.................................. 18.0,24.0,36.0,48.0,54.0
Mobility State................................... Anchor
Mobility Foreign IP Address...................... 172.17.12.5
Mobility Move Count.............................. 2
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Policy Manager Rule Created...................... Yes
Audit Session ID................................. ac110c0e0011541752570af9
IPv4 ACL Name.................................... none
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Client Type...................................... SimpleIP
PMIPv6 State..................................... Unavailable
Policy Type...................................... WPA2
Authentication Key Management.................... 802.1x
--More-- or (q)uit
Encryption Cipher................................ CCMP (AES)
Management Frame Protection...................... No
EAP Type......................................... PEAP
Interface........................................ zone5dynint743
VLAN............................................. 743
Quarantine VLAN.................................. 0
Access VLAN...................................... 743
Controller2
(Controller2) >show client detail 00:24:D7:37:B7:48
Client MAC Address............................... 00:24:d7:37:b7:48
Client Username .................................**************deleted
AP MAC Address................................... 00:23:eb:81:ec:20
AP Name.......................................... AP2
Client State..................................... Associated
Client NAC OOB State............................. Access
Wireless LAN Id.................................. 1
Hotspot (802.11u)................................ Not Supported
BSSID............................................ 00:23:eb:81:ec:20
Connected For ................................... 212 secs
Channel.......................................... 11
IP Address....................................... 172.17.137.241
Gateway Address.................................. Unknown
Netmask.......................................... Unknown
Association Id................................... 10
Authentication Algorithm......................... Open System
Reason Code...................................... 1
Status Code...................................... 0
Client CCX version............................... 4
Client E2E version............................... 1
Re-Authentication Timeout........................ 1584
QoS Level........................................ Silver
--More-- or (q)uit
802.1P Priority Tag.............................. disabled
CTS Security Group Tag........................... Not Applicable
KTS CAC Capability............................... No
WMM Support...................................... Enabled
APSD ACs....................................... BK BE VI VO
Power Save....................................... ON
Current Rate..................................... m15
Supported Rates.................................. 18.0,24.0,36.0,48.0,54.0
Mobility State................................... Foreign
Mobility Anchor IP Address....................... 172.17.12.14
Mobility Move Count.............................. 3
Security Policy Completed........................ Yes
Policy Manager State............................. RUN
Policy Manager Rule Created...................... Yes
Audit Session ID................................. ac110c05008392c65257ede8
IPv4 ACL Name.................................... none
IPv4 ACL Applied Status.......................... Unavailable
IPv6 ACL Name.................................... none
IPv6 ACL Applied Status.......................... Unavailable
Client Type...................................... SimpleIP
PMIPv6 State..................................... Unavailable
Policy Type...................................... WPA2
Authentication Key Management.................... 802.1x
--More-- or (q)uit
Encryption Cipher................................ CCMP (AES)
Management Frame Protection...................... No
EAP Type......................................... PEAP
Interface........................................ zone1dynint732
VLAN............................................. 732
Quarantine VLAN.................................. 0
Access VLAN...................................... 743

OEAP 600 - Possible to disable local ports 1-3?

I have a customer looking to deploy OEAP & wants to know if it possible to disable the local ports 1-3? Reason being, they don't want the home user connecting devices & causing more support tickets to troubleshoot an Xbox or Google TV just b/c it's connected to a company provide AP/Switch.
I have read all the docs & it makes no mention of this.... I can see in 7.2 the ability to disable the local SSID but no mention of the ability to shutdown ports 1-3....
Also see support in 7.2 for Dual RLAN... but that still leaves 2 local ports.
Thanks,
Brandon

We found a way to disable the local ports.
The command is
config network oeap-600 local-network {enable | disable}
Here is the link to the documentation
http://www.cisco.com/en/US/docs/wireless/controller/7.2/command/reference/cli72commands.html#wp15794664
We also found a link on how to configure two ports (4 and 3) as Remote LAN ports
http://mrncciew.com/2013/03/11/oeap-with-multiple-remote-lans/

Is it possible to disable outbox

I tend to roam between several wireless networks and hence have configured different smtp-servers in Mail. It often happens that I change the network and forget to change the server, which results in mail getting stuck to ourbox.
Is it possible to disable outbox? I would much rather see an error message and change to know that I need to change the server.
Mikko

You could set policies which when a malware detected an action perform automatically without user interaction but there is no GPO which stop the notification, one reason could be that when notification keep appearing, then user will know something is wrong
otherwise why FEP should display any warning.

How to disable data roaming with Nokia 97mini

Hello one and all,
Is it possible to disable data roaming on Nokia 97mini? I would like to be able to go abroad and have it automatically stop syncing my email etc... but still be able to use it for SMS and voice calls. I know that the iPhone has the ability to turn off data transfers when roaming on another network.
Can other so called 'smart' phones such as the Nokia 97 mini also do this?
I have searched in vain in the supplied user manual.
All help greatly appreciated.
T

I don't believe there's such an option, sorry. S60's got plenty of options for managing call roaming but as far as I know data roaming hasn't come up.
Help I'm trapped in a sig factory.

Permanently disable the data roaming option

Hi,
is there a way to disable the data roaming option? Maybe via iPhone Config tool?
We would like to permanently disable, respectively password protect this option
for all our iPhone Users. Just setting a default value wouldn´t be enough.
Thanks
Chris

Hye ChrisBLN,
Did you find out any solutions to your problem?
To be honest, I'm currently in exactly the same situation and would appreciate to know if you discovered any replies that shows it's possible?
I tried to manipulate ICU that seems to be made for this kind of problem but I can't find the right property/configuration.
What about you?
Thanks

K8TM-ILSR how to disable raid controller in bios?

Hi,
I have a MSI motherboard K8TM-ILSR, and have 2 sata hdd’s connected.
I want to test my Maxtor hdd’s with the tool called “powermax” but this tool, don’t see my hdd’s
Because it’s on a raid controller. I have my hdd’s in non-raid , when I’m booting I see non-raid, but seems still not disabled.
Is it possible to disable the raid controller in the bios, or are there other ways?
The pata controller is used for my cd-rom and writer.
Please let me know.

You can actually disable the controller, but you cannot use the disks then.
I wouldn't try messing with your raid configuration, you may lose data doing so.
You can try the following: find someone with a mainboard that supports single SATA drives. Install one drive and set the bios setting of the mainboard to IDE for that channel. Now you must be able to use the Maxtor utility. Be aware NOT to let the tool make any changes to the disk. This goes for the mainboard's bios as well. Letting these things change anything to the disk, will cause data loss / distruction of your RAID configuration.
If you use these two drives in a non-raid mode, you will be fine doing this.

Is it possible to disable multiple logins?

Is it possible to disable multiple logins by the same user on different computers? I have network hosted user accounts. I need a way to NOT make it possible for user A to go to client Mac A, login and leave himself logged in there then go to client Mac B and login there also. This is creating some unpleasant effects on the server - naturally!
Any easy way to accomplish this? Perhaps through Profile Manager?
Thanks!

Simon,
Thanks for the reply but I need some elaboration.... "the "Login" preferences for users and groups".... what exactly are we referring to? I don't see such option (or atleast the way it's written), in either Server app or Profile Manager. Are we talking about the same OS X version?
Thanks.
P.S. Despite the fact that I have enabled the option in Profile Manager to logout all users on all computers after 30 minutes of inactivity, I have noticed that the iMac clients don't log out the users after the said time...

Is it possible to disable the 'edit layout' link on the record detail page

Is it possible to disable the 'edit layout' link on the record detail page? Not the homepages, I know there is a switch for that, but I thought there was one for the detail pages?
I want to disable this as I dont want users saving their own layouts, they must stick to the related sections defined in the default layout. The problem is that if they are to have access to certain related lists when an opportunity is of a certain type but NOT other types. If they have saved the layout (using the 'Edit Layout' link), and change the record type, they will see related sections that have been set to 'Not available' in the default layout (ie step 4) for that 'type'.

Robbo, at this time it not possible to disable the Edit Layout on the record detail page.

Is it possible to disable the screen saver for a certain app?

Is it possible to disable the screen saver just while a certain application is running?
The app seems to crash when the screen saver comes on.
Just so you know, application I'm using is Hogwasher; a newsgroup reader.

Not really. Just disable it manually when you run that application. Then, send off a bug report to the app's developer and tell him to update it for the latest Tiger. Alternatively, use another newsgroup reader.

Possible to disable crtl+alt+del button on HP Slate 500?

Hello
I was wondering if it is even possible to disable the crtl+alt+del button on HP Slate 500? As my company has me reviewing the unit to be possibly used within our company but one of the requirements is to be able to lock the tablet down. And one of the things they want is to prevent people from being able to use the crtl+alt+del to access task manager since the plan is to lock windows to one open application. But I can't see any settings in the bios to disable that button. And there are no oblivious options I can find on the Slate and the button does not appear to be controlled by a priority HP software product. The only other way I could think of doing it would be to somehow disable it from the registry.?

This can be done using the Pro version or higher of windows 7, using gpedit and/or administrative templates you can control everything a user account can do or not do.
gpedit.msc in a run command opens the group policy editor
http://technet.microsoft.com/en-us/library/cc753298.aspx

Is it possible to disable intra-controller roaming with 1510AP

Similar Messages

Maybe you are looking for