Marketing Engineer

VI Automation, Pune Requires Marketing Engineer at Pune office.
The desire skills required are:
1. Excellent communcation skills
2. 0-2 Yrs LabvIEW (or NI) experience
3. Ready to travel globaly
4. Any Engineering Graduate/ Science Postgraduate
Plz mail your cvs to [email protected]
Do visit our web: www.vispune.com/www.viapl.com

Respected Kaustubh,
I am labview Programmer/developer.
I have been working on Real time data acquistion, storage and graphical analysis in Labview(NI).
Worked on NI Hardware Platforms Compact RIO embedded controller system,installation,configuration,application.
What is the job Profile for marketing engg.??
will it involve techniacl part of developing labview code else .. ??
Vishal ([email protected])

Similar Messages

Marketing Engineer, Alliance Member, San Diego, CA, USA

Looking for an engineer for Technical Marketing position with Cyth Systems, an accomplished and growing NI Alliance Partner in San Diego. We use the industry's best technologies to create Automated Test Systems and Control Systems and help customers design and test products.
Our region is vibrant and full of customers innovating and looking for the right technology to develope and sell exciting products. We need to consistently and clearly evangelize Cyth and NI products, and help other engineers meet their goals.
Our key disciplines and technologies include LabVIEW and TestStand, Machine Vision technology, RF and wireless testing, and medical device design.
The candidate needs to be willing and able to write technical articles, prepare trade shows and other marketing campaigns, design marketing materials, and make technical presentations. Light travel required.
We're open to meeting people with the relevant experience and making sure we find the right fit. Please contact me directly and let's talk about your experience, networking ability, personality, and knowledge.
Message Edited by jspinozzi on 11-11-2009 01:14 AM

can you please post your email or phone contact
Harold Timmis
[email protected]
Orlando,Fl
*Kudos always welcome

DigitalGraph Annotation at different axis-Y level although the value is same

Hi,
I have plot a graph with annotation and I found it labeling the axis-Y at the different level, with the same value.
Please look at the screenshot I attached. I have attached the Vi too, simply run it will get the result as preview in screenshot.
So,
Any idea to fix this ?
and I need to know,
How the annotation actually label the axis-Y level ? (sometimes label at '1', sometimes at '0', a reason behind it that cause this inconsistently ? a fix setting as written in cluster should have all the label at the same level, but why it behave up and down..)
Please help .. Thanks in advance..
Attachments:
forum.JPG ‏103 KB
waveformlabel.vi ‏28 KB

Hi,
Thanks for sending your VI with your question. I've tried running it and it appears to run fine with the digital input waveform you have specified. Do you have any input data that you know causes an error that you could send to me? I have attached a screenshot of what happens when I run the VI, so let me know if that looks more like what you are trying to achieve.
Also, the reason for the annotation switching between a 1 and a 0 along the various lines is because it is an indication of whether the digital signal on that line is high or low at that point, rather than a label on the y-axis itself. It shows that on, for example, line 4, the signal begins low, hence the 0 on the axis, before switching to high, hence the 1 on the axis. I'd be very grateful if you could let me know if this answers your question and don't hesitate to ask if you need anything else clarifying.
Regards
Jeremy T
Technical Marketing Engineer
National Instruments UK & Ireland
Attachments:
Digi waveform.JPG ‏146 KB

Database does not exist in the specified path

Just bought a USB 6009 DAQ and for some reason I now keep getting this error: "Database does not exist in the specified path" in VI Logger 2.0.1 it was working. Can anyone help??

Jared,
It sounds like VI Logger somehow lost its association with its
database. Please open MAX and check out the "Historical
Data"->"Citadel 5 Universe" entry. Under "My Computer" in the
right-hand pane, you should have a database called "VI Logger Data". It
must be spelled, spaced, and capitalized the exact same way. If you do
not have this database (which I suspect you do not), right click on "My
Computer" and select "Create/Attach Database..." The default database
path (if you want to have access to your old data) is C:\Documents and
Settings\All Users\Application Data\National Instruments\VI Logger,
with the database name as "VI Logger Data". If you want to create a new
database, then specify a new path.
If "VI Logger Data" does appear, a possible fix is to detach and
reattach it. Right click on "VI Logger Data," select
"Detach/Delete...," and chose the "Detach" option. Finally, reattach
the database as described above.
Hope this helps,
Ryan Verret
Product Marketing Engineer
Signal Generators
National Instruments

How can I construct a custom PDA dialog?

Hi,
I need to display a PDA dialog along the lines of "Do you want to save the data, Yes/No?
The two button dialog in LabVIEW is ideal, but on the PDA module you can't set the button text. OK and Cancel don't cut it, as this dialog presents one option at the start of a process. The process continues whether or not you save the data. The cancel button creates the impression that the whole process could be cancelled, not just the file save.
Does anyone know if it's possible to create a custom dialog? Everything I try displays as a full size screen, I have found nothing I can adjust to appear like a pop-up dialog box.
Doas anyone know how this can be done, or is it a non starter?
I'm using LabVIEW and PDA module 8.5 (for Windows mobile, not the Palm version)
Thanks.
Bandit

Hi Bandit
Yes it is possible within labVIEW. The principle of creating a popup dialog box is creating a subVI and changing the window appearance to call the front panel with limited options available.
To do this go into the VI properties either in File>>VI properties or Ctrl I. From here go to the window appearance tab and either select dialogue box or custom and then customize the options that you would like.
To ensure that you have a small pop-up and not a full screen I would recommend resizing your subVI front panel whether on manually by dragging or by changing the window size options in the VI properties again. Remember here to have selected the do not show scroll bars in appearance.
When This VI runs now in your program it should call the front panel and then close it again afterwards.
The method above is a generic for labVIEW which I have not tried on a PDA. If you can confirm that you have done the above and are sure that your size settings are correct and it still is not functioning as a proper dialogue box then I will look further into setting it up on your PDA.
Best regards
Graham Green
Technical Marketing Engineer
National instruments UK & Ireland

High frequency measurement 2 counters range

Hello,
I know this info is somewhere but I can't find it.
When using a Counter/timer to measure frequency there are multiple methods.
i.e. Low Frequency with 1 counter and high frequency with 2 counters.
What is the definition of a "low frequency" and what is the definition of a "high frequency"? i.e. low frequency = frequencies below 100 Hz
Also what is the definition of a "large range"?
Thanks
Dan

Hi Dan
There isn't a specific bandwidth that is defined for use with either the one-counter or two-counter method. However, located in the NI-DAQmx help file there is a section detailing the quantization errors that arise when using either method with a variety of input frequencies. By referring to this information you should be able to determine which method will produce the smallest error in your application and hence which method will be preferable. This help file also explains the errors associated with the large-range two-counter method.
To locate the help file, you should select Start»All Programs»National Instruments»NI-DAQ»NI-DAQmx Help, and search for 'quantization error'.
I hope this helps, just let me know if you'd like anything clarified or if you have any other questions on the matter.
Regards
Jeremy T
Technical Marketing Engineer
National Instruments UK & Ireland

Using USB-6008 software timimg Generate waveform

I am using USB-6008 device. Base on it's User Guide, this device on support software-timed and maximum update rate is 150 Hz.
By place a time delay VI for 1ms, I have a 1.660Hz sine signal. Is this wrong for place a time delay VI for software timing?
I would like to generate a 60 Hz signal by using software-timed VI on USB-6008 device. How should I do?
Thanks a lot.

DephinTW,
The update speed of the USB-6008 is largely dependent on the speed of
you computer as well as anything else on your USB bus. If you are using
an older computer or have other USB devices on the bus, you may not
achieve this rate. In order to output a 60Hz signal, the minimum output
sampling rate is 120Hz. This corresponds to an 8.3 msec. delay between
samples. Instead of using the "Wait" VI, you should try using the "Wait
Until Next ms Multiple" VI. Place this in parallel with your
generation. This will synchronize the output with multiples of the PC
clock, rather than waiting for a fixed amount of time, irrespective of
code and USB overhead.
Hope this helps,
Ryan V.
National Instruments
Ryan Verret
Product Marketing Engineer
Signal Generators
National Instruments

Ask the Expert: Single-Site and Multisite FlexPod Infrastructure

With Haseeb Niazi and Chris O'Brien
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Single-Site and Multisite FlexPod Infrastructure with experts Haseeb Niazi and Chris O'Brien.
This is a continuation of the live webcast.
FlexPod is a predesigned and prevalidated base data center configuration built on Cisco Unified Computing System, Cisco Nexus data center switches, NetApp FAS storage components, and a number of software infrastructure options supporting a range of IT initiatives. FlexPod is the result of deep technology collaboration between Cisco and NetApp, leading to the creation of an integrated, tested, and validated data center platform that has been thoroughly documented in a best practices design guide. In many cases, the availability of Cisco Validated Design guides has reduced the time to deployment of mission-critical applications by 30 percent.
The FlexPod portfolio includes a number of validated design options that can be deployed in a single site to support both physical and virtual workloads or across metro sites for supporting high availability and disaster avoidance. This session covers various design options available to customers and partners, including the latest MetroCluster FlexPod design to support a VMware Metro Storage Cluster (vMSC) configuration.
Haseeb Niazi is a technical marketing engineer in the Data Center Group specializing in security and data center technologies. His areas of expertise also include VPN and security, the Cisco Nexus product line, and FlexPod. Prior to joining the Data Center Group, he worked as a technical leader in the Solution Development Unit and as a solutions architect in Advanced Services. Haseeb holds a master of science degree in computer engineering from the University of Southern California. He’s CCIE certified (number 7848) and has 14 years of industry experience.
Chris O'Brien is a technical marketing manager with Cisco’s Computing Systems Product Group. He is currently focused on developing infrastructure best practices and solutions that are designed, tested, and documented to facilitate and improve customer deployments. Previously, O'Brien was an application developer and has worked in the IT industry for more than 20 years.
Remember to use the rating system to let Haseeb and Chris know if you have received an adequate response.
Because of the volume expected during this event, Haseeb and Chris might not be able to answer every question. Remember that you can continue the conversation in the Data Center community, subcommunity Unified Computing shortly after the event. This event lasts through September 27, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.
Webcast related links:
Single-Site and Multisite FlexPod Infrastructure - Slides from live webcast
Single-Site and Multisite FlexPod Infrastructure: FAQ from live webcast
Single-Site and Multisite FlexPod Infrastructure - Video from live webcast

I would suggest you read this white paper which details the pros and cons of direct connect storage.
http://www.cisco.com/en/US/partner/prod/collateral/ps10265/ps10276/whitepaper_c11-702584.html   This paper captures all the major design points for Ethernet and FC protocols.
I would only add that in FlexPod we are trying to create a highly available solution and "flexible" solution; Nexus switching helps us deliver on both with vPC and unified ports.
NPV equats to end-host mode which allows the system to present all of the servers as N ports to the external fabric. In this mode, the vHBAs are pinned to the egress interfaces of the fabric interconnects. This pinning removes the potential of loops in the SAN fabric. Host based multipathing of the vHBAs account for potential uplink failures. The NPV mode (end-host mode) simplifies the attachment of UCS into the SAN fabric and that is why it is in NPV mode by default.
So for your last question, I will have to put my Product Manager hat on so bear with me.   First off there is no drawback to enabling the NPIV feature (none that I am aware of) the Nexus 5000 platform simply offers you a choice to design and support multiple FC initiators (N-Ports) per F-Port via NPIV. This allows for the integration of the FI end-host mode described above. I imagine being a unfied access layer switch, the Nexus team enabled standard Fibre Channel switching capability and features first. The implementatin of NPIV is a customer choice based on their specific access layer requirements.
/Chris

Ask the Expert: Scaling Data Center Networks with Cisco FabricPath

With Hatim Badr and Iqbal Syed
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the Cisco FabricPath with Cisco technical support experts Hatim Badr and Iqbal Syed. Cisco FabricPath is a Cisco NX-OS Software innovation combining the plug-and-play simplicity of Ethernet with the reliability and scalability of Layer 3 routing. Cisco FabricPath uses many of the best characteristics of traditional Layer 2 and Layer 3 technologies, combining them into a new control-plane and data-plane implementation that combines the immediately operational "plug-and-play" deployment model of a bridged spanning-tree environment with the stability, re-convergence characteristics, and ability to use multiple parallel paths typical of a Layer 3 routed environment. The result is a scalable, flexible, and highly available Ethernet fabric suitable for even the most demanding data center environments. Using FabricPath, you can build highly scalable Layer 2 multipath networks without the Spanning Tree Protocol. Such networks are particularly suitable for large virtualization deployments, private clouds, and high-performance computing (HPC) environments.
This event will focus on technical support questions related to the benefits of Cisco FabricPath over STP or VPC based architectures, design options with FabricPath, migration to FabricPath from STP/VPC based networks and FabricPath design and implementation best practices.
Hatim Badr is a Solutions Architect for Cisco Advanced Services in Toronto, where he supports Cisco customers across Canada as a specialist in Data Center architecture, design, and optimization projects. He has more than 12 years of experience in the networking industry. He holds CCIE (#14847) in Routing & Switching, CCDP and Cisco Data Center certifications.
Iqbal Syed is a Technical Marketing Engineer for the Cisco Nexus 7000 Series of switches. He is responsible for product road-mapping and marketing the Nexus 7000 line of products with a focus on L2 technologies such as VPC & Cisco FabricPath and also helps customers with DC design and training. He also focuses on SP customers worldwide and helps promote N7K business within different SP segments. Syed has been with Cisco for more than 10 years, which includes experience in Cisco Advanced Services and the Cisco Technical Assistance Center. His experience ranges from reactive technical support to proactive engineering, design, and optimization. He holds CCIE (#24192) in Routing & Switching, CCDP, Cisco Data Center, and TOGAF (v9) certifications.
Remember to use the rating system to let Hatim and Iqbal know if you have received an adequate response.
They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Data Center sub-community Unified Computing discussion forum shortly after the event. This event lasts through Dec 7, 2012.. Visit this support forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hi Sarah,
Thank you for your question.
Spanning Tree Protocol is used to build a loop-free topology. Although Spanning Tree Protocol serves a critical function in these Layer 2 networks, it is also frequently the cause of a variety of problems, both operational and architectural.
One important aspect of Spanning Tree Protocol behavior is its inability to use parallel forwarding paths. Spanning Tree Protocol forms a forwarding tree, rooted at a single device, along which all data-plane traffic must flow. The addition of parallel paths serves as a redundancy mechanism, but adding more than one such path has little benefit because Spanning Tree Protocol blocks any additional paths
In addition, rooting the forwarding path at a single device results in suboptimal forwarding paths, as shown below, Although a direct connection may exist, it cannot be used because only one active forwarding path is allowed.
Virtual PortChannel (vPC) technology partially mitigates the limitations of Spanning Tree Protocol. vPC allows a single Ethernet device to connect simultaneously to two discrete Cisco Nexus switches while treating these parallel connections as a single logical PortChannel interface. The result is active-active forwarding paths and the removal of Spanning Tree Protocol blocked links, delivering an effective way to use two parallel paths in the typical Layer 2 topologies used with Spanning Tree Protocol.
vPC provides several benefits over a standard Spanning Tree Protocol such as elimination of blocker ports and both vPC switches can behave as active default gateway for first-hop redundancy protocols such as Hot Standby Router Protocol (HSRP): that is, traffic can be routed by either vPC peer switch.
At the same time, however, many of the overall design constraints of a Spanning Tree Protocol network remain even when you deploy vPC such as
1.     Although vPC provides active-active forwarding, only two active parallel paths are possible.
2.     vPC offers no means by which VLANs can be extended, a critical limitation of traditional Spanning Tree Protocol designs.
With Cisco FabricPath, you can create a flexible Ethernet fabric that eliminates many of the constraints of Spanning Tree Protocol. At the control plane, Cisco FabricPath uses a Shortest-Path First (SPF) routing protocol to determine reachability and selects the best path or paths to any given destination in the Cisco FabricPath domain. In addition, the Cisco FabricPath data plane introduces capabilities that help ensure that the network remains stable, and it provides scalable, hardware-based learning and forwarding capabilities not bound by software or CPU capacity.
Benefits of deploying an Ethernet fabric based on Cisco FabricPath include:
• Simplicity, reducing operating expenses
– Cisco FabricPath is extremely simple to configure. In fact, the only necessary configuration consists of distinguishing the core ports, which link the switches, from the edge ports, where end devices are attached. There is no need to tune any parameter to get an optimal configuration, and switch addresses are assigned automatically.
– A single control protocol is used for unicast forwarding, multicast forwarding, and VLAN pruning. The Cisco FabricPath solution requires less combined configuration than an equivalent Spanning Tree Protocol-based network, further reducing the overall management cost.
– A device that does not support Cisco FabricPath can be attached redundantly to two separate Cisco FabricPath bridges with enhanced virtual PortChannel (vPC+) technology, providing an easy migration path. Just like vPC, vPC+ relies on PortChannel technology to provide multipathing and redundancy without resorting to Spanning Tree Protocol.
Scalability based on proven technology
– Cisco FabricPath uses a control protocol built on top of the powerful Intermediate System-to-Intermediate System (IS-IS) routing protocol, an industry standard that provides fast convergence and that has been proven to scale up to the largest service provider environments. Nevertheless, no specific knowledge of IS-IS is required in order to operate a Cisco FabricPath network.
– Loop prevention and mitigation is available in the data plane, helping ensure safe forwarding that cannot be matched by any transparent bridging technology. The Cisco FabricPath frames include a time-to-live (TTL) field similar to the one used in IP, and a Reverse Path Forwarding (RPF) check is also applied.
• Efficiency and high performance
– Because equal-cost multipath (ECMP) can be used the data plane, the network can use all the links available between any two devices. The first-generation hardware supporting Cisco FabricPath can perform 16-way ECMP, which, when combined with 16-port 10-Gbps port channels, represents a potential bandwidth of 2.56 terabits per second (Tbps) between switches.
– Frames are forwarded along the shortest path to their destination, reducing the latency of the exchanges between end stations compared to a spanning tree-based solution.
    – MAC addresses are learned selectively at the edge, allowing to scale the network beyond the limits of the MAC addr

Ask the Expert: One Management with Prime Infrastructure 1.2

With Tejas Shah
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions from Cisco expert Tejas Shah on One Management with Prime Infrastructure 1.2 Combining the wireless functionality of Cisco Prime Network Control System (NCS) with the wired functionality of Cisco Prime LAN Management Solution (LMS), Cisco Prime Infrastructure simplifies and automates many of the day-to-day tasks associated with maintaining and managing the end-to-end network infrastructure from a single pane of glass. The new converged solution delivers all of the existing wireless capabilities for RF management, user access visibility, reporting, and troubleshooting along with wired lifecycle functions such as discovery, inventory, configuration and image management, automated deployment, compliance reporting, integrated best practices, and reporting.
Tejas Shah is a senior technical marketing engineer for Cisco Prime Infrastructure and Collaboration products. He has deployed Cisco Prime Collaboration Manager at various customer sites to help customers monitor and troubleshoot their video infrastructure. In addition, he is part of the Network Operations Center team at Cisco Live events for six years. Shah joined Cisco in 1995 and was in the Technical Assistance Center team supporting various network management system products for more than six years.
Remember to use the rating system to let Tejas know if you have received an adequate response.
Tejas might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Wireless Mobility sub-community discussion forum shortly after the event. This event lasts through Sept 21, 2012. Visit this forum often to view responses to your questions and the questions of other community members.

Raun, please see my responses inline:
Can you go over the licensing method with Prime Infrastructure 1.2 please?
Raun, you can check out the following link for ordering guide at
http://www.cisco.com/en/US/products/ps12239/products_data_sheets_list.html
I currently have NCS and do NOT currently have LMS. I know I can move to Prime Infrastructure through Cisco Product Upgrade Tool. However, what I am confused about is do I still have to buy LMS to have LMS functionality in Prime Infrastructure 1.2?
==> Not at all. The converged product will give you basic management capability for routers and switches that LMS provided in this release. Feature/Functionality will keep on growing with upcoming releases.
If not, do the licenses I transfer into Prime Infrastructure 1.2 from NCS also work for devices to work under LMS?
==> Licensing is different than NCS or LMS. You don't have to transfer the license. Each install of Prime Infrastructure will have a unique UID string on which the licenses are based. A new license will be applied to the product.
Mean, can my currently 350 licenses be used for AP's as in NCS and routers in the LMS portion of Prime Infrastructure 1.2?
==> I would recommend getting a total count of your wired and wireless devices and match the right SKU based on that.
Hope this helps.. Let me know if you have any further questions,
Tejas

ASK THE EXPERTS : High Density Wireless Deployments and CleanAir Technology

with
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to get an update on High Density Wireless Deployments and CleanAir technology with Cisco expert Fred Niehaus. Fred is a technical marketing engineer for the Wireless Networking Business Unit at Cisco, where he is responsible for developing and marketing enterprise wireless solutions using Cisco wireless LAN products. In addition to his participation in major deployments, Fred has served as technical editor for several Cisco Press books including the "Cisco 802.11 Wireless Networking Reference Guide" and "The Business Case for Enterprise-Class Wireless LANs." Prior to joining Cisco with the acquisition of Aironet, Fred was a support engineer for Telxon Corporation, supporting some of the very first wireless implementations for major corporate customers. Fred has been in the data communications and networking industry for more than 20 years and holds a Radio Amateur (Ham) License "N8CPI."
Remember to use the rating system to let Fred know if you have received an adequate response.
Fred might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the shortly after the event. This event lasts through June 3, 2011. Visit this forum often to view responses to your questions and the questions of other community members.

You are correct, between the higher numbers of users with multiple devices the bandwidth requirements keep increasing.
The limitation of three non-overlapping channels in the 2.4 GHz space is driving more customers to 5 GHz, it is important to have both bands when high density deployments are needed. While many older devices only support 2.4 GHz, we are now seeing far more devices with 5 GHz as well.
The recomendation of 20-25 clients and 8 voice calls on a given 2.4 GHz channel is still a good "rule of thumb" with actual customer data requirements driving those numbers higher or lower. You are right when you say "throwing Access Points" at the problem can degrade the wireless quality as co-channel interference and overall noise floor can rise with multiple Access Points that can all hear each other.
A better approach to the problem is to throw more spectrum at this issue (using 5 GHz channels) and elements of 802.11n (20 MHz) bandwidth on 2.4 GHz.
What we have been doing in high density deployments is to try to minimize the propagation of a cell and focus it in a given direction. This can be done by
1. Managing the RF power of the radios (Access Points) and in some cases the client's power (using elements of CCX).
2. Using the right antennas to shape both Tx and Rx cell size to help isolate, we have recently introduced a new high gain antenna for stadiums that does this well.
3. Limit supported rates, obviously the higher the data rate the less sensitive the receiver is and the smaller the cell size becomes.
4. Enable 5 GHz (that adds far more channels for data throughput)
5. Limit the number of SSIDs in use as each requires a separate beacon (adding to RF utilization)
6. Co-locating access points with non-overlapping channels
There are some challenges, for example; many dual -band clients prefer to connect to 2.4 GHz, and 2.4 GHz is more likely to be busier and subject to interference, so we also enable Cisco "Band-Select" which basically "nudges" those clients off 2.4 GHz and pushes them to 5 GHz so as to free up the 2.4 GHz band when we can determine the client has 5 GHz capability.
So how is this done? well, we do this by listening to the clients and if we detect that the client is sending out probe requests on both bands we know the client can use 5 GHz so we essentially make the 5 GHz band "appear more attractive" to that client.
Note: Client load balancing and Band select are features in the Cisco Unified controller menu.
Also enabling client link (intelligent beam forming) helps direct the signal directly at the client and reduces same channel interference.

ASK THE EXPERTS - WI-FI NETWORKS

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to get an update on different aspects of wireless network design and installation with Fred Niehaus. Fred is a Technical Marketing Engineer for the Wireless Networking Business Unit at Cisco, where he is responsible for developing and marketing enterprise wireless solutions using Cisco Aironet and Airespace wireless LAN products. In addition to his participation in major deployments, Niehaus has served as technical editor for several Cisco Press books including the "Cisco 802.11 Wireless Networking Reference Guide" and "The Business Case for Enterprise-Class Wireless LANs." Prior to joining Cisco with the acquisition of Aironet, Niehaus was a support engineer for Telxon Corporation, supporting some of the very first wireless implementations for major corporate customers. Fred has been in the data communications and networking industry for more than 20 years and holds a Radio Amateur (Ham) License "N8CPI."
Remember to use the rating system to let Fred know if you have received an adequate response.
Fred might not be able to answer each question due to the volume expected during this event. Our moderators will post many of the unanswered questions in other discussion forums shortly after the event. This event lasts through July 16, 2010. Visit this forum often to view responses to your questions and the questions of other community members.

Hi Expert,
                 Before all, thank you for your great advice and helps. I've decided to implement a few of them. However, during preliminary test , i run into some issues. Hopefully, you will be able to help one last time.
During my test, I implemented a few SSID wich worked fine in my lab with WEP encryption. And i decided to change the encryption, some of the SSID did work with wpa2. However, two remains my attention, the guess SSID which uses wpa with tkip and one of the test SSID. The guess SSID worked fine untill I decided to reload the AP. When the AP came back it could not grabs an ip, but sho commands shows that it is associate with the AP. See below. I am 100% certain that the config is correct as it was working fine before the reload.
a) Show commands
#sh dot11 associations
802.11 Client Stations on Dot11Radio0:
SSID [SAVY_GUESS] :
MAC Address    IP address      Device        Name            Parent         State
000e.9b6e.XXXX 169.254.97.66   ccx-client    -               self           Assoc
Address           : 000e.9b6e.XXX     Name             : NONE
IP Address        : 169.254.97.66      Interface        : Dot11Radio 0
Device            : ccx-client         Software Version : NONE
CCX Version       : 2
State             : Assoc              Parent           : self
SSID              : SAVY_GUESS
VLAN              : 9
Hops to Infra     : 1                  Association Id   : 13
Clients Associated: 0                  Repeaters associated: 0
Tunnel Address    : 0.0.0.0
Key Mgmt type     : WPA PSK            Encryption       : TKIP
Current Rate      : 54.0               Capability       : ShortHdr ShortSlot
Supported Rates   : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates       : disabled
Signal Strength   : -31 dBm           Connected for    : 11592 seconds
Signal to Noise   : 61 dBm            Activity Timeout : 57 seconds
Power-save        : Off                Last Activity    : 3 seconds ago
Apsd DE AC(s)     : NONE
Packets Input     : 8830               Packets Output   : 9
Bytes Input       : 435094             Bytes Output     : 1154
Duplicates Rcvd   : 15                 Data Retries     : 0
Decrypt Failed    : 0                  RTS Retries      : 0
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0
Session timeout   : 0 seconds
Reauthenticate in : never
b) SSID config
   dot11 ssid SAVY_GUESS
   vlan 9
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 1240321A241F5B367B29281F6200133524422D325C
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 9 mode ciphers tkip
encryption vlan 16 mode ciphers aes-ccm
ssid SAVY_GUESS
ssid Wireless-Test
interface Dot11Radio0.9
encapsulation dot1Q 164
no ip route-cache
bridge-group 9
bridge-group 9 subscriber-loop-control
bridge-group 164 block-unknown-source
no bridge-group 9 source-learning
no bridge-group 9 unicast-flooding
bridge-group 9 spanning-disabled
interface FastEthernet0.9
encapsulation dot1Q 9
ip helper-address 10.XXX.ZZZ.254
no ip route-cache
bridge-group 255
no bridge-group 255 source-learning
bridge-group 255 spanning-disabled
ps. Wired Device connected on the vlan did grab an IP.
2. Wireless_Test
This SSID was working fine until I change the vlan associate to it.
SSID [Wireless-Test] :
MAC Address    IP address      Device        Name            Parent         State
001f.3b51.XXXX 169.254.90.253 ccx-client    00C00070        self           EAP-Assoc
Address           : 001f.3b51.XXXX     Name             : I00000070
IP Address        : 169.254.90.253     Interface        : Dot11Radio 0
Device            : ccx-client         Software Version : NONE
CCX Version       : 4
State             : EAP-Assoc          Parent           : self
SSID              : Wireless-Test
VLAN              : 16
Hops to Infra     : 1                  Association Id   : 12
Clients Associated: 0                  Repeaters associated: 0
Tunnel Address    : 0.0.0.0
Key Mgmt type     : WPAv2              Encryption       : AES-CCMP
Current Rate      : 54.0               Capability       : WMM ShortHdr ShortSlot
Supported Rates   : 1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates       : disabled
Signal Strength   : -43 dBm           Connected for    : 14298 seconds
Signal to Noise   : 52 dBm            Activity Timeout : 14 seconds
Power-save        : On                 Last Activity    : 6 seconds ago
Apsd DE AC(s)     : NONE
Packets Input     : 15322              Packets Output   : 256
Bytes Input       : 913707             Bytes Output     : 19866
Duplicates Rcvd   : 249                Data Retries     : 14
Decrypt Failed    : 0                  RTS Retries      : 0
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0
Session timeout   : 0 seconds
Reauthenticate in : never
b) config
dot11 ssid Wireless-Test
   vlan 16
   authentication open eap eap_methods2
   authentication network-eap eap_methods2
   authentication key-management wpa
   accounting acct_methods3
   mbssid guest-mode
interface Dot11Radio0.16
encapsulation dot1Q 16
no ip route-cache
bridge-group 16
bridge-group 16 subscriber-loop-control
bridge-group 16 block-unknown-source
no bridge-group 16 source-learning
no bridge-group 16 unicast-flooding
bridge-group 16 spanning-disabled
interface FastEthernet0.16
encapsulation dot1Q 16
ip helper-address 10.zzz.xxx.254
no ip route-cache
bridge-group 16
no bridge-group 16 source-learning
bridge-group 16 spanning-disabled
Can the radio interface get mess by the reload? How can I verify theradio? Debug did not show Client asking for IP...
3. My last question, my ACLs to limit guess access. Should i implement them in my firewall or in my distribution router? The distribution router has a sub_interface for each SSID. Would it be better to block traffic right from the distribution router rather let unecessary traffic flow to the network?
Thanks a lot for great advice and guidance,
---Jean Paul.

ASK THE EXPERTS - Update on 802.11n with Fred Niehaus

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to get an update on 802.11n with Cisco expert Fred Niehaus. Fred is a Technical Marketing Engineer for the Wireless Networking Business Unit at Cisco, where he is responsible for developing and marketing enterprise wireless solutions using Cisco Aironet and Airespace wireless LAN products. In addition to his participation in major deployments, Fred has served as technical editor for several Cisco Press books including the "Cisco 802.11 Wireless Networking Reference Guide" and "The Business Case for Enterprise-Class Wireless LANs." Prior to joining Cisco with the acquisition of Aironet, Fred was a support engineer for Telxon Corporation, supporting some of the very first wireless implementations for major corporate customers. Fred has been in the data communications and networking industry for more than 20 years and holds a Radio Amateur (Ham) License "N8CPI."
Remember to use the rating system to let Fred know if you have received an adequate response.
Fred might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Other Mobility Subjects discussion forum shortly after the event. This event lasts through March 25, 2011. Visit this forum often to view responses to your questions and the questions of other community members.

So there are two parts of this question, the latter part I cannot address as it is a future question. Cisco does not comment on products that have not been released or on the strategy of next generation products.
That said, Cisco was first to market with an 802.11n Access Point and well (we didn't all go on vacation after we did that)
So let's talk a little about spatial streams in general and how it relates to what customers are doing today.
The Cisco 1040, 1140, 1250, 1260 and 3500 Series Access Points are all two spatial streams (2SS).
As of the time of this writing, a critical mass of 3SS and 4SS compatible clients have yet to be deployed, and the vast majority of WiFi clients that will be deployed over the next 18 months will be 1SS and 2SS clients.
The higher SS clients are likely only show up in some higher end notebooks -- Why? well it is a given that smartphones and tablets are likely to continue to be 1SS and in some rare cases 2SS.
This is because additional radios used in this technology consume battery life, add to the physical size of the device and increase the cost. Also many devices leverage the same single antenna for cellular as well as WiFi. Therefore, it is my opinion that 3SS Access Points provide little if any performance benefit for smartphones or tablets in the enterprise today, and any real throughput gain is likely to occur with high end notebooks in close proximity to the Access Point and those are rolling out very slowly and we are monitoring this.
Now we get to my favorite part of this.. I get to ask myself a question and then answer it..
So Fred are you saying that there is no value in 3SS and 4SS?
Of course not, 3SS performs similar to 2SS beyond a short distance, and with any multi-SS product RF interference must be addressed to capture the performance benefits of higher SS Access Points. Actual throughput in any WiFi environment is highly dependent on the presence of interferers and obstacles.
Without the ability to mitigate the impact of interference, 3SS solutions will "downshift" to 2SS of 1SS and lose all the performance benefits anyway IMHO.
I don't want to sound like a commercial, but you really do need Cisco cleanair technology in the AP and Cisco innovations deliver more and will go beyond the simple 3SS aspects of the 802.11n standard.
IMHO it's more about CleanAir, good RF system design, and what we put into the AP with regard to performance "in the environment" and not what is on some spec sheet today.
For more on Cisco CleanAir see the following URL http://www.cisco.com/en/US/netsol/ns1070/index.html
Fred

What are the differences between CompactRIO and PXI-RT?

Hi. We want to perform distributed data acquisition, specifically with (let's say) eigth IEPE accelerometers, wich are about (let's say) 80 meters away from the host PC. We think a good solution is to acquire locally (with PXI-RT or cRIO), maybe do some temporary storage, and then transmit the acquired data through ethernet to the host. This way, we can mantain a desktop PC on a safe place to perform centralized data processing and storage and avoid long accelerometer cable runs, subject to signal degradation.
As I mentioned, we thought on a basic PXI-RT system or a cRIO system, since little or no processing and storage is needed, while providing signal conditioning to the accelerometers. We thought about the next configurations:
1. PXI-RT: PXI-1002 chassis, PXI-8145 RT controller, PXI-4472 8 channel DSA. Total: $ 6585
2. cRIO: cRIO-9101 chassis, cRIO-9002 real-time controller, 2x cRIO-9233 4ch IEPE AI. Total: $ 5260
Prices are relatively close and none is absolutely cheaper than the other if we add accesories, change the number of channels or other characteristics.
We are new to PXI-RT and cRIO, so I would like to know what could be the main effective differences for my application and what do you think would be the best solution.
Thank you,
Daniel R.
Universidad de Concepcion

Hi Daniel,
I agree with John's comments on the difference between PXI-RT and cRIO. To add to this discussion, Compact RIO is an FPGA platform. So you can compile a VI and download it onto the cRIO's FPGA. The cRIO also has an RT portion, meaning that you can have a VI running on the FPGA and a VI running on the RT part and they can communicate with each other. I would recommend cRIO only if you need to take advantage of its FPGA functionality, which gives you extremely fast program execution with amazing loop cycle times. The ruggedness is also a plus. However, programming for LabVIEW FPGA is a bit different than programming for LabVIEW (or LV RT). FPGA programming is very low level and will require additional development time. This is why the direct comparison between PXI-RT and cRIO brings up more than just the price as a differentiator.
If you are looking for a compact platform like cRIO, I would recommend Compact FieldPoint. In ruggedness, it is quite close to the cRIO platform. Development-wise, its exactly like programming for the PXI-RT. This means that basically, any regular LabVIEW VI can be downloaded and run on it. So as you can see, its not a lateral step between PXI/Fieldpoing RT and cRIO. I would recommend that you read more about these platforms before proceeding. If you call us at NI, we can also help you decide a suitable platform for you.
cRIO: http://www.ni.com/compactrio/
FPGA: http://www.ni.com/fpga/
RT: http://www.ni.com/realtime/
Hope this information is helpful.
Anu Saha
Academic Product Marketing Engineer
National Instruments

Ask the Expert: ISE 1.2: Configuration and Deployment with Cisco expert Craig Hyps

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about how to deploy and configure Cisco Identity Services Engine (ISE) Version 1.2 and to understand the features and enhanced troubleshooting options available in this version, with Cisco expert Craig Hyps.
October 27, 2014 through November 7, 2014.
The Cisco Identity Services Engine (ISE) helps IT professionals meet enterprise mobility challenges and secure the evolving network across the entire attack continuum. Cisco ISE is a security policy management platform that identifies users and devices using RADIUS, 802.1X, MAB, and Web Authentication methods and automates secure access controls such as ACLs, VLAN assignment, and Security Group Tags (SGTs) to enforce role-based access to networks and network resources. Cisco ISE delivers superior user and device visibility through profiling, posture and mobile device management (MDM) compliance validation, and it shares vital contextual data with integrated ecosystem partner solutions using Cisco Platform Exchange Grid (pxGrid) technology to accelerate the identification, mitigation, and remediation of threats.
Craig Hyps is a senior Technical Marketing Engineer for Cisco's Security Business Group with over 25 years networking and security experience. Craig is defining Cisco's next generation Identity Services Engine, ISE, and concurrently serves as the Product Owner for ISE Performance and Scale focused on the requirements of the largest ISE deployments.
Previously Craig has held senior positions as a customer Consulting Engineer, Systems Engineer and product trainer. He joined Cisco in 1997 and has extensive experience with Cisco's security portfolio. Craig holds a Bachelor's degree from Dartmouth College and certifications that include CISSP, CCSP, and CCSI.
Remember to use the rating system to let Craig know if you have received an adequate response.
Because of the volume expected during this event, Ali might not be able to answer each question. Remember that you can continue the conversation on the Security community, sub-community shortly after the event. This event lasts through November 7, 2014. Visit this forum often to view responses to your questions and the questions of other community members.
(Comments are now closed)

1. Without more specifics it is hard to determine actual issue. It may be possible that if configured in same subnet that asymmetric traffic caused connections to fail. A key enhancement in ISE 1.3 is to make sure traffic received on a given interface is sent out same interface.
2. Common use cases for using different interfaces include separation of management traffic from user traffic such as web portal access or to support dedicated profiling interfaces. For example, you may want employees to use a different interface for sponsor portal access. For profiling, you may want to use a specific interface for HTTP SPAN traffic or possibly configure IP Anycast to simplify reception and redundancy of DHCP IP Helper traffic. Another use case is simple NIC redundancy.
a. Management traffic is restricted to eth0, but standalone node will also have PSN persona so above use cases can apply for interfaces eth1-eth3.
b. For dedicated PAN / MnT nodes it usually does not make sense to configure multiple interfaces although ISE 1.3 does add support for SNMP on multiple interfaces if needed to separate out. It may also be possible to support NIC redundancy but I need to do some more testing to verify.
For PSNs, NIC redundancy for RADIUS as well as the other use cases for separate profiling and portal services apply.
Regarding Supplicant Provisioning issue, the flows are the same whether wireless or wired. The same identity stores are supported as well. The key difference is that wireless users are directed to a specific auth method based on WLAN configuration and Cisco wired switches allow multiple auth methods to be supported on same port.
If RADIUS Proxy is required to forward requests to a foreign RADIUS server, then decision must be made based on basic RADIUS attributes or things like NDG. ISE does not terminate the authentication requests and that is handled by foreign server. ISE does support advanced relay functions such as attribute manipulation, but recommend review with requirements with local Cisco or partner security SE if trying to implement provisioning for users authenticated via proxy. Proxy is handled at Authentication Policy level. CWA and Guest Flow is handled in Authorization Policy. If need to authenticate a CWA user via external RADIUS, then need to use RADIUS Token Server, not RADIUS Proxy.
A typical flow for a wired user without 802.1X configured would be to hit default policy for CWA. Based on successful CWA auth, CoA is triggered and user can then match a policy rule based on guest flow and CWA user identity (AD or non-AD) and returned an authorization for NSP.
Regarding AD multi-domain support...
Under ISE 1.2, if need to authenticate users across different forests or domains, then mutual trusts must exist, or you can use multiple LDAP server definitions if the EAP protocol supports LDAP. RADIUS Proxy is another option to have some users authenticated to different AD domains via foreign RADIUS server.
Under ISE 1.3, we have completely re-architected our AD connector and support multiple AD Forests and Domains with or without mutual trusts.
When you mention the use of RADIUS proxy, it is not clear whether you are referring to ISE as the proxy or another RADIUS server proxying to ISE. If you had multiple ISE deployments, then a separate RADIUS Server like ACS could proxy requests to different ISE 1.2 deployments, each with their own separate AD domain connection. If ISE is the proxy, then you could have some requests being authenticated against locally joined AD domain while others are sent to a foreign RADIUS server which may have one or more AD domain connections.
In summary, if the key requirement is ability to join multiple AD domains without mutual trust, then very likely ISE 1.3 is the solution. Your configuration seems to be a bit involved and I do not want to provide design guidance on a paper napkin, so recommend consult with local ATP Security SE to review overall requirements, topology, AD structure, and RADIUS servers that require integration.
Regards,
Craig

Marketing Engineer

Similar Messages

Maybe you are looking for