N93i and Corporate WLAN

Can someone please assist me with connecting this device to my corporate WLAN.
I have configured all the settings correctly for WEP/PEAP/MSCHAPv2 (found another article to help on that one), but now need to install the WLAN certificate to get it to actually function.
The certificate is a DER-encoded X.509 intermediate wildcard certificate from IPSca. I have tried transferring this to my N93i via PC Suite with both a .cer and .der extension, but the device does not recognise the file, displays a blue question mark icon, and gives an error when you attempt to click on it in File Manager.
I have confirmed these certificates by doing the exact same thing via ActiveSync to a Windows Mobile 5 device, and it installs without issue. Using Windows Mobile 6, it installs as an intermediate certificate, and I can actually get wireless working... but it won't even load on my Nokia.
As I have an apache linux server here, I have also tried creating an XHTML formated html file that links to the certificates, and have used a .htaccess file to set the correct mime type... when I click on the link, the file opens up as text. Changing the extension to CER instead of DER gives me the option to save the file, but not as a certificate. Doing so results in a copy of the same files that appear as unknown type, and cannot be used.
I have also tried using the certutil utility to try and tweak the format of the certificate (re-encode) it. It either opens up in "Notes" as Base64, or tells me that the file is not supported, or won't load in any other format.
This is really annoying me. All my workmates can quite happilly use wireless, and my device, which costs more, is useless. Particlarly as you need wireless to sync email with the device mailbox (not on a data plan) - which is alos something else that is more convenient when using a Microsoft Mobile.
Please help. Sincerely,
Murray Webber

Steve,
thanks for reply to my message.
I have addition question regarding to this.
on the Guest WLAN if I configure Central Auth/ Local Switching... is there option for me to add acl on this WLAN?
for example after pass auth. user only able to go internet...
thanks,
Nhan

Similar Messages

Wireless guest wlan and secured corporate wlan

I am implementing an enterprise wireless network for my company. I am planning on setting up one secured corporate wlan for employee and one open guest wlan for the guest/contractor/vendor. Is there a way I can prevent my employee jump from the secured wlan to the guest wlan? Thanks.
Lee

Hi stepehen
LWAPP also defines the tunneling mechanism for data traffic.
A LAP discovers a controller with the use of LWAPP discovery mechanisms. The LAP sends an LWAPP join request to the controller. The controller sends the LAP an LWAPP join response, which allows the AP to join the controller. When the LAP joins to the controller, the LAP downloads the controller software if the revisions on the LAP and controller do not match. Subsequently, the LAP is completely under the control of the controller. LWAPP secures the control communication between the LAP and the controller by means of a secure key distribution. The secure key distribution requires already provisioned X.509 digital certificates on both the LAP and the controller. Factory-installed certificates are referenced with the term "MIC", which is an acronym for Manufacturing Installed Certificate. Cisco Aironet APs that shipped before July 18, 2005, do not have a MIC. So these APs create a self-signed certificate (SSC) when they are upgraded in order to operate in lightweight mode. Controllers are programmed to accept SSCs for the authentication of specific APs.
Pls Refer the docu..
http://cisco.com/en/US/products/ps6306/products_qanda_item09186a00806a4da3.shtml
Regds
Saji k.s

Guest wireless and corporate wireless

Hello,
What would be the securest (and cheapest), way to setup a "Guest" WLAN simultaneously with the "Corporate" WLAN?
In my own opinion, the securest way isn't the cheapest by far. Because, in my own opinion, it would be best to segregate the WLAN's physically. Meaning having the WLAN's on different WLAN Controllers as well as physically different WAP's.
Any and all advice will be greatly appreciated.
Thank you in Advance.
Jay

Thank you all for your input.
I inherited this network, and there are a total of 6 WLAN's on our 5508 WLC. 5 of the WLAN's are WEP. As I said, I have no idea why. My supervisor seems to think we need to setup the 5 Guest (yes I said 5 Guest), WLAN's as WEP. All of the Guest WLAN's can only access the internet and none of our network resources. The only WPA2 WLAN is integrated with our AD so those users can access the network resources. I want to change them all to WPA2, but my supervisor seems to be not waning that done. I explained to him and our manager how the network can be compromised by that kind of setup, but the only one that agrees with me is my manager.
What I am concerned about is, even if I set them all to WPA2, can a vendor who has much Trojans and or other tools covertly installed on their device, would they be able to compromise the 5508?

Oeap 600 - can't connect to corporate wlan

Hello!
I have some trouble with the setup of an oeap 600 ap.
The ap has joined the controller as it should and the remote-lan connection to my corporate network works well, but i can't connect to the corporate wlan.
When i check the event log on the ap it says:
*Oct 02 07:36:56.662: (Re)Assoc-Req from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:36:56.665: received assoc-rsp for wireless client, status=0011
*Oct 02 07:37:11.712: DisAssoc-Req/DeAUTH from 00:1a:73:d2:82:8c forwarded to WLC, wired: no
*Oct 02 07:37:11.713: WTP Event: Delete Mobile sent to wlc00:1a:73:d2:82:8c"
and a debug on the controller gives me:
apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Adding mobile
on LWAPP AP ec:c8:82:c2:3a:20(0)
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Association received from mobile on AP ec:c8:82:c2:3a:20
*apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Sending Assoc Response to station on BSSID ec:c8:82:c2:3a:20 (s
tatus 17) ApVapId 1 Slot 0
*spamApTask2: Oct 02 08:52:05.038: 00:1a:73:d2:82:7f Received Idle-Timeout from AP ec:c8:82:c2:3a:20, slot 0 for STA 00:
1a:73:d2:82:7f
*spamApTask2: Oct 02 08:52:05.038: 00:1a:73:d2:82:7f apfMsDeleteByMscb Scheduling mobile for deletion with deleteReason
4, reasonCode 4
Does anyone have an idea?
thanks

Hello,
For More information on OEAP-600, please watch the "Community Tech-Talk Series" Cisco Office Extend Access Point OEAP-600
https://supportforums.cisco.com/community/netpro/wireless-mobility/begin-wireless/blog/2012/02/24/cisco-office-extend-access-point-oeap-600
Thanks,
Vinay Sharma
Community Manager - Wireless

Vendor, trading parner, authorization and corporate group

Hi experts!
Thank you for pay attention to my message! I have a question about the fields in customer master date.
What does it mean or what will happen to the customer master if I entry a vendor no. or a company ID for trading partner in the field vendor, trading parner, authorization and corporate group in the customer master general data?
In other words, in which business scenario or situation should I entry data in these fields:
vendor, trading parner, authorization and corporate group in the customer master general data?
Thank you for your help!
TangDark.

Hi,
Vendor- when the customer is also a vendor( i.e. supplying any form of product- raw material) you need to enter vendor no.
Trading partner- If this customer is trading with other company code of the same client.
Authorization- To protect access of the data maintained
Corporate group- If customer belongs to a group ,maintain group key here.
Thanks,
Vrajesh

WCS and WLC WLAN Config not fully in sync

Hi,
We're facing the issue WCS and WLC WLAN Config is not fully in sync. WLC showing server 1 is IP:10.160.22.151, Port:1812 but WCS server showing none even after click on “Audit” button. Any idea how to resolve this issue? Is this causing any wireless problem? Attached is screen captured. Thanks for your help.

You mentioned "audit". Have you done a WCS audit so the WLC and WCS are in SYNC?
If you make a change on the WLC you will not see it in WCS UNLESS they are SYNC. You will see the term "mismatch".
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

App Store and Corporate Compliancy

Hi All,
What is everyone's thoughts on the App Store and corporate compliancy? If you are an Admin are you going to let your Clients download whatever they want from the App Store or will you remove the application completely?
Thanks!

It looks like you can block users from using App Store.app via Parental Controls but I've never found a way to clone Parental Controls to all my machines.
At this point, it appears we'll need to run "rm -rf /Applications/App\ Store.app" as root immediately after the 10.6.6 install.
IMO, it will be a lot easier to reinstall the app later after we determine it's value, than try to clean up a bunch of Macs should it prove to be a problem to business users.

Cannot disable internet connection and use wlan co...

hi i have download skype and i cant use it with my wlan connection because its already connected with internet and i might get charge for using this service could you please tell me how to disable internet and use wlan connection when i am in home
my handset details are
its made in hungary software version is v 11.0.0.029 software date 11-08-10 rm612
and there is no update availabe for my handset at the moment

It sounds like you are using an unsupported App like "Jailbreak" which technically voids the warranty on your iPhone. Your call on that.
If so, the app creates an "ad hoc" wireless network which the Airport Express cannot join or participate in. So, you cannot use both the AirPort Express and the "modem" function of your iPhone at the same time.
You should be able to turn the app off and log off the internet, and then setup another separate wireless network to run AirTunes, or AirPlay. But, you'll have to "switch" wireless networks to be able to do this and the network will of course not have access to the Internet.
Message was edited by: Bob Timmons

Im at my wits end with my n93i and WLAN. Could any...

OK i havea netgear WG121 router and recently got an n93i.
Now I had an n95 for a few days before and that used to connect to my WLAN fine by just using the wlan wizzard. But with this N93I it gives me no end of troubles.
First of all I kept getting incorrect wep key error (even though I was entering in the wep key that I use on my pc). PS Out of curiosity should I be using the password that my PC connects to or the admin password to the router? Both didnt work anyway.
So found this site http://www.wepkey.com/ for converting your ASCII key to Hex. Still didnt work. Only this time it said WLAN network not found.
So then someone said I should try setting a static ip by entering in the gateway address, subnet from my PC as well as the ip address of my phone. When this was done the web page looked to be loading but then said no gateway reply.
I honestley dont know what to do now. It seems there are so many people with WIFI problems around but I dont see any solutions.
Can anyone assist me?

I'm even more concerned now after hearing back regarding my initial post. Apparently any cancellations or changes are showing as done by me using the self help platform on my BT account. This isn't the case. The actions carried out on certain dates listed on the email I received were all carried out by BT over the phone and not myself. I didn't even know it was possible to cancel a direct debit using the BT website. I thought it had to be cancelled at the bank and then a phone call to BT. I was logged onto my BT account while the phone calls were taking place but any action was carried out by BT and not myself.
BT are insisting I have no DD set up. Yet it clearly shows on my bank account that there is an active DD for BT. To confirm that, I've spoken to my bank today who have verified there is most definitely a DD set up to pay BT on the bank account. They've double checked the account number with me and it's definitely for my BT account. The bank are sending me a letter confirming it's an active DD for me to include all other details for the Ombudsman because I really feel this needs fetching to their attention.
To be fair to the person who has replied I have been told I can pay a small amount and set the DD up rather than pay in full or face restrictions. But despite BT's insistence that I have no DD set up my bank clearly states I have. I'm now going to have to cancel the DD that BT are sure isn't active and set it up again.
Incidentally the monthly payments I'm to make are £45 - less than the £60 and a lot less than the £104 previously mentioned! So on one hand I will have a satisfactory conclusion but on the other I have to still cancel a "none existent" existing DD, set a new one up and am out of pocket on bank charges caused by BT trying to take payment on the wrong date. I then have to trust they'll not do the same thing again.......
It's all like a stupid joke that's just not funny.

ISE used for BYOD and Corporate

Hello
I have a customer currently using EAP-PEAP on both their coporate laptop and wireless phones on different SSIDs, the radius servers are a pair of IAS servers. We have recently deployed ISE BYOD for them with a single BYOD SSID. Now they want to completely get rid of the IAS and move all Radius to ISEs but want to keep EAP-PEAP for laptops and phones.
I am thinking about the authorization rules in the ISE, now they have 3 types of access using EAP-PEAP, a user must at least belong to the Employee AD group, but he may or may not belong to BYOD or/and PHONE groups as well. The authentiation results should be something like:
1. if Corporate Laptop then Permit Access
2. if BYOD then NSP
3. if Phone then Permit Access
I am just wondering what is the best way to classify the devices (to decide the following action) without relying on profiling, Surely they all come from different SSIDs so I could check the WLAN ID to determine what action to follow, but that will need to make sure all the WLCs have the same WLAN ID for each SSID. Is there any better or neater way of doing this? What is the best practice for this kind of senario?
Thanks

If we're talking purely SSIDs, you can match the name of SSID
For example here, I'm matching a SSID of "mlatosie".

Cisco 851W - Internal WLAN and Guest WLAN

I have a Cisco 851W Router, which has an IPSEC Tunnel back to my corporate office.
I want to configure 2 WLANS, one for my internal network (vlan 1) which will have access to my corporate network, and one for guests which will just be for outbound internet access (http, https, ftp, sftp, etc ..).
I have not been able to find any Cisco Documentation with how to accomplish. Can someone inform me where I can find this or supply me with some configuration examples?

create 2 ip dhcp pools on the router for the 2 types of clients
create wlan for each type of client
I'm assuming a wlc is involved, then hreap and allow both vlans, procedure will be slightly different for standalone
acl by address to ban traffic from ipsec tunnel- easier on a WLC interface than on the router, no wlc then on the router
bob

Jabber IM for iPhone and corporate directory search

Hello!
In the Administrator's Guide (http://www.cisco.com/en/US/docs/voice_ip_comm/jabber/iPhone/8.6/Cisco_Jabber_IM_for_iPhone_Admin.pdf)
I cannot find an example of how configuring the client to search in the corporate directory, or the
requirements to do this. I don't understand how it works, in Cisco Jabber for Windows we configured UDS to search into CUCM directory, but it was also possible to use a external LDAP.
I tried also to configure a LDAP Profile in CUPS, and to associate the user to this profile but Jabber IM cannot find any contacts.
CUPS 8.6(3), Cisco Jabber IM 1.0.0
Regards,
Mirko

Jabber IM for iPhone use the LDAP profile configurable on the CUPS Admin page, Application->Cisco Jabber->LDAP Profile.
At first you have to configure your LDAP Server (Application->Cisco Jabber->LDAP Server): add here the IP Address of the LDAP Server with port 3268 and protocol type TCP, when you don't need to use LDAPS.
After that configure the LDAP profile and associate the user to this profile: you can do this either in the user setting page (Application->Cisco Jabber->User Setting) or directly on the LDAP Profile page.

Personal and Corporate Ids. How to share apps?

Hi everyone.
I got two workflows:
(1) my personal Air and an old MBP + my personal iPhone (personal Apple ID, personal mail, personal iCloud, personal credit card) and
(2) my workhorse MBP + corporate personal iPhone (company personal Apple ID, company personal mail, company personal iCloud, no credit card linked to iTunes)
I don't want to use a single Apple ID. I don't want work-related iMessages to pop up on my personal Air screen or iPhone and viceversa.
Can someone please show me the shortest and safer way to share apps and music between devices?
I can't understand why Apple choose the Apple ID as Person ID. A driving license, a SSN, a National Identity Card (in Europe) should define the person. And this person could then be able to manage Apple IDs and credit cards by his needs, sharing contents through his devices.
Maybe I'm missing something. Is Family Sharing the solution?
Thank you,
SD

Make sure the iPad and iPhone use the same Apple ID. Then connect your iPad to your computer and restore the iPad from your iPhone backup via iTunes.

Sales OH and Corporate OH computation in order WIP Valuation

Hi All,
While reviewing production order bookings it is observed that at the time of
running monthly "overhead run", system is calculating corporate overhead
and sales overhead and debiting production order. Since at standard cost
run, corporate OH and Sales OH is not being considered in inventory
valuation, hence production order is credited with cost of goods
manufactured level.
Now if the order is in open status, WIP valuation is happening like "Debit
in production order (incl corporate OH and Sales OH) minus Credit in the
production order (w/o corporate & sales OH).
Can you please suggest some way to follow for correct WIP valuation.
Regards,
Kumar

Hi Ajay,
Can you please let me know how can I assign these cost elements to line Id, when i create line id there is no option of assigning the cost elements. Can you please explain me how to do it.
Thanks for your support.
Regards,
Pavan Kajijpeta

I have a dv8t-1000 and the wlan and treble keep going on and off. I loose the wireless connection.

I need to know how to open the laptop to replace the card that controls the wlan and treble. I tried to find a manual to show how to get the laptop open and then be able to get the card number so I can order one. I have removed the screws but can't get it appart. Can you tell me the type of card that I would need to resolve the problem so I don't loose the wireless conection every 5 minutes.
Thanks
highdiver

The Maintenance and Service guide, which you can find here, can show you how to replace your wlan card.
I am an employee of Hewlett Packard.
- - Please mark Accept As Solution if it solves your problem so others can more easily find the answer - -
- - Please click the Kudos star if you would like to say thanks - -

N93i and Corporate WLAN

Similar Messages

Maybe you are looking for