NAC Framework NAC-L2-802.1x with Wireless AP1242AG?

Hi
Can anyone provide some info on setting up NAC-L2-802.1x with a Wireless AP1242AG (not using the NAC Appliance, but the Framework). I cant seem to find the equivalent dot1x port control auto commands on the access-point. Thanks
Jason

NAC assesses the state, or posture, of a host to prevent unauthorized or vulnerable endpoints from accessing the network. Enforcement is performed through an authorization policy that is centrally defined on a single ACS server or delegated to multiple NAC posture validation servers

Similar Messages

NAC-L2-802.1x with 7940 IP Phones and builtin swithport?

Hi
I've got the NAC Framework, NAC-L2-802.1x working in a test LAB with network hosts (PCs) connected directly to the L2 switch. In our production environment, we have Cisco 7940 IP phones on every desk, and the PCs connect to the switchport on the back of these phones. How would one configure NAC-L2-802.1x to work in a setup like this? I've done quite a bit of searching on Cisco and only found this reference to IP phones and NAC;
IP Telephone and Device Mobility
The computer connected to the PC port on an IP phone will get posture validated successfully.
It does not help much...
Thanks very much.
Jason

You have 2 choices:
1) Ignore the phones based on CDP. You get this be just configuring 802.1X along with a VVID. Here's an example port config from a 3750:
interface GigabitEthernet1/0/2
description endpoints
switchport access vlan 2
switchport mode access
switchport voice vlan 200
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
queue-set 2
mls qos trust device cisco-phone
mls qos trust cos
dot1x pae authenticator
dot1x port-control auto
spanning-tree portfast
spanning-tree bpduguard enable
ip verify source
ip dhcp snooping limit rate 10
The config above will allow a Cisco phone in "for free" just b/c it can do CDP.
2) Authenticate IP phones via 1X or MAC-Authentication for phones that cannot support 1X. This would be the same config as above, with the addition of this line:
dot1x host-mode multi-domain
And if your IP phone cannot do 1X (for example the 7940 cannot) then you'll need to check it's MAC for entry into the network by adding this line:
dot1x mac-auth-bypass
Hope this helps,

802.1x with wireless - pls help :(

I am trying to configure 802.1x on my wireless router (877) but no luck. Here is a part of my config. Radius is on Small Business Server 2008
aaa new-model
aaa group server radius rad_eap
server 172.16.1.x auth-port 1812 acct-port 1813
aaa group server radius rad_acct
server 172.16.1.x auth-port 1812 acct-port 1813
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization ipmobile default group rad_pmip
aaa accounting network acct_methods start-stop group rad_acct
dot11 ssid xxxx
   vlan x
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa'
   mbssid guest-mode
radius-server host 172.16.1.x auth-port 1812 acct-port 1813 key xxxx
With this config above I go to my laptop and try to connect like to a normal wiif, I can see username/pass box. I type and it fails. But at least the router tries to go to Radius (I can see a lot of debug messages). On Radius it fails with 'IAS INVALID AUTH'. probably because the card is not set up with 802.1x
When I remove the line 'authentication key-management wpa' I am able to configure my wirless card with 802.1x but when I try to connect, my router does not contact with Radius at all (I know it as I turned on debug for radius and dot1x)

Hi,
Here is the configuration example link which gived step by step procedure to complete the task.. please follow the same and let me know if this helps!!
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080608364.shtml
Please dont forget to rate the usefull posts!!
Regards
Surendra

NAC L2 802.1x (wireless)

Can somebody advice me - where i can find information about configuring NAC L2 802.1x on wireless AP 1200 series? Or can somebody show me example of configuration file? I have found configuration guide only about wired solutions (configuring NAC L2 IP and NAC 802.1x on switch).
Thank you in advance!

For NAC implementation with wireless access points, the implementation is the same as the switch wired Layer 2 802.1x implementation for network admission control. The only difference is that you will need to use a third party NAC-enabled supplicant such as Meetinghouse for your wireless devices.
sample config on AP
aaa new-model
aaa authentication eou default group radius
aaa session-id common
radius-server host 10.100.100.100 auth-port 1645 acct-port 1646
radius-server key cisco123
radius-server vsa send authentication #Enable VSAs
ip radius source-interface FastEthernet0/0
ip admission name NAC-L2-IP eapoudp #Define NAC policy
ip admission name NAC-L2-IP-Bypass eapoudp bypass #
ip admission name NAC-L3-IP eapoudp1 list EoU-ACL #Define NAC trigger, routers only
ip access-list extended EoU-ACL
deny udp any any eq domain #allow DNS to bypass NAC
deny tcp any host 10.100.100.101 eq www #allow HTTP to bypass NAC
permit ip any any #all other traffic triggers
ip access-list extended Interface-ACL
permit udp any any eq 21862 #permit EAPoUDP
permit udp any eq bootpc any eq bootps #permit DHCP
Refer these links:
http://www.cisco.com/en/US/netsol/ns617/netbr0900aecd80355b2f.html
http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a0080606cbe.html#wp1072071

NAC framework NAC-L2-802.1x, CTA 2.1, CSSC, ACS 4.2 not working???

Hi
I'm trying to setup my first crack at the NAC framework, using NAC-L2-802.1x. For this, the equipment I'm using is;
Cisco 2950 switch (IOS /c2950-i6q4l2-mz.121-22.EA11.bin)
Cisco 1811 router (inter-vlan routing)
Cisco Secure ACS (90 day trial) 4.2
CTA 2.1.103
CSSC 5.1.0.39
Windows XP SP3 client machine
So I've tried to follow the Network Admission Control Framework Guide for the NAC-L2-802.1x section and all seems to have gone as laid out in the document, except when I get to the point where I actually test the config by bringing up the client port. I do the 'no shut' on the port, the light on the switch port goes amber and the CSSC client says its waiting for an ip address, it never pops up asking for credentials as shown in that document. I check the RADIUS server logs and there is no passes or fails for this host. I know RADIUS is working from this switch as I have it setup for login authentication which works just fine. I am completely stumped and the only thing I can think of is trying to install a full certificate server and going that way, instead of the Self Signed Cert which CSACS has generated and I've copied the .cer file to the client and installed it and verified it is installed with the Certificates MMC. Please, somebody provide some better reading on this matter, or some assistance. Thanks very much.
Jason
aaa new-model
aaa authentication login default group radius local
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa accounting dot1x default start-stop group radius
dot1x system-auth-control
Client port;
interface FastEthernet0/1
switchport mode access
dot1x port-control auto
dot1x timeout reauth-period server
dot1x reauthentication

You can refer to the below URL for future reference:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/nac.html
http://www.cisco.com/en/US/netsol/ns617/networking_solutions_sub_solution_home.html

NAC Framework - NAC-L2-802.1x without CSSC client?

Hi
I'm just wondering if it is possible to do NAC-L2-802.1x without the use of the CSSC client? I've managed to get this working with the CSSC client with no problems, but have been having nothing but problems trying to get this working without. This client software is pretty expensive and if it is possible to get around using it, that'd be great. Thanks for any info.
Jason

You can do 802.1x without CSSC, you cannot support remediation without it however. 802.1x by itself allows you authentication, and dynamic VLAN assignment.

NAC IB with wireless users

I have a problem here guys, I will deploy cisco NAC with wireless users
My scenario is IB-VG , the access points are autonomous there is no WLC
the AP is connected to the switch on a trunk port and I have configured the AP
with different SSIDs each one with different vlan (s) on the NAC i have
configured the vlan mapping and the managed subnets but it doesn't work.
i wanna know where is the problem or is there anu configuration example to configure \
autonomous AP in In-Band virtual gateway mode

Hi,
Can you please be more specific about what does not work?
What were you expecting to see and what are you seeing?
Do the wireless users get IP address?
If, yes, are they getting the IP you would expect?
After getting IP address, if you open a web browser dod you get redirected to the NAC login page?
If yes, do you enter the credentials and fail autentication?
Please note that you will need to make sure that the VLAN on the clients is allowed on the untrusted interface of the CAS, and that the VLAN mapping maps this VLAN to a vlan where a DHCP server can be reachable.
Also, please make sure that the traffic on the VLAn configured on the SSID has the only path as the path going through the CAS.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Wireless 802.1x with Window 7

I have a WLC 6.0, ACS 3.3 and the SSID is setup to use 802.1x with Peap Authentication. The clients are using Windows 7 to connect to wireless. To get the clients connected they have to go into there network properties if the wireless card, configure the client to use PEAP, uncheck validate server certificate, and also uncheck use computer name to login into windows. This works fine and the user to able to connect to to wireless after dong all these steps and then entering in there Windows Username and Password. The customer is saying that this is to many steps for the end user and they just want the user to to click on the SSID and connect. If wireless could also be setup to use there windows username and password would be a bonus. I'm basically looking for a solution that is simple but is also secure as well. I know that's an oxymoron. Is there anything I could do to make the wireless process simpler. Either by going with a different security authentication or by doing something different on the clients computers. Thanks for any help and suggestions.

This is a script that we use on our campus (University of Leeds), that self configures an 802.1x connection and when a user connects to an 802.1x connection merely asks them for their username and password, which then remained cached.
The .exe you create takes away all the techy bits that do 'confuse' some users, even if they are provided with well written documentation.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
https://sourceforge.net/projects/su1x/
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
http://lsayregj.swan.ac.uk/su1x/SU1X_User_Guide-v104.pdf
Features include:
- Automation of configuration of a PEAP wireless connection on XP(SP3),Vita and Win 7
- Can set EAP credentials without additional user interaction (avoids tooltip bubble)
- Installation of a certificate (silent)
- Checks for WPA2 compatibility and falls back to a WPA profile
- Third party supplicant check -SSID removal and priority setting
- Support tab: (checks: adapter, wzc service, profile presence, IP)
- Outputs check results to user with tooltip and/or to file
- Printer tab to add/remove networked printer
This tool is very cleverly written by Gareth Ayres at Swansea University

Problems connecting on Wireless 802.11n with my T61 with Intel Wireless AGN

Hi, I live in Thailand and have a similar problem as others with my Intel Wireless AGN connection as others. I have a D-Link Model DSL-2740B Rangebooster N ADSL2/2+ Modem Router. It is supposed to support 802.11n draft wireless connections of up to a maximum of 270 MBPS versus 54 MBPS for 802-11G wireless. Of course, I don't expect it to reach the maximum transfer speed, particularly here in Thaiand, however I would expect it to produce results better than the 54 MBPS rate for 802-11G. I first tried it on my ThinkPad T61 which incorporates Intel® Wireless WiFi Link 4965AGN. When connected, it shows a speed of 54MBPS (802-11G) instead of higher wireless 802-11n speeds. I've upgraded my router to the latest firmware and have tried different configurations with no improvement in performance. One think I have noted is that when I make an on-line configuration change to my router configuration then select "apply", immediately my ThinkPad rate changes to 150 MBPS momentarily then my connection is lost (to be expected as the router changes are being implemented), followed by reconnection of wireless signal only to return at 54 MBPS again. I also have an older ThinkPad model without built-in wireless capability so I purchased a Belkin wireless 802.11n USB adapter to connect to my router. Again, the maximum connection is at 54 MBPS. When I repeat configuration changes to my router as I did above, my ThinkPad connection momentarily changes to only 1 MBPS instead of 150 MBPS as in my other T61 ThinkPad then reverts back to 54 MBPS once the configuration changes have been completed. Has anyone successfully used wireless 802.11n successfully at the higher transfer rates (above 54 MBPS)? Is it possible that my TOT Goldcyber connection speed is artificially limited? I notice that my rated speed for my desktop computer connected to my same D-Link DSL-2740B only indicates a rated speed of 100 MBPS. I use Vista Home Premium 64-bit on my destop, Vista Home Premium 32-bit on my ThinkPad T61, but us Windows XP Professional on my older ThinkPad. I feel that my problem is either with my ADSL carrier (TOT) or compatibility with my D-Link DSL-2740B Modem Router and my ThinkPad T61 internal wireless card and/or Belkin wireless n USB adapter. IT-City is letting me swap out the Belkin USB for the D-Link Rangebooster n DWA-140 USB adapter next week when they restock. The only other think that I can think of is that wireless n just doesn't work in Thailand and that maybe I should just stick with wireless G and go with a higher powered wireless USB model such as the business rated EmGenius EUB 362 EXT. Has anyone used this model and had good success with it; I've heard that it is a long range model and has the capability of reaching 108 MBPS through some sort of magic? Looking forward to reading your replies and possible solution.
Pattayadavid

Hi!
Intel Wi-Fi cards support full 802.11n speed of 300 Mb/s working at 5 GHz range only. Your D-Link DSL-2740B works only in 2.4 GHz range. So to get 300 Mb/s you have to get another wi-fi router that supports 802.11n in both 2.4 and 5 GHz, for instance Lynksys WRT610N or Apple Airport Extreme or whatever.

WPA2 802.1x with MS RADIUS, LDAP, Clean Access

We are in a multivendor enviornment using NAC and WCS. We would like to implement WPA2 Enterprise. We currently authenticate with LDAP to place users in proper roles.
Not 100% sure on this. As far as I know, it is not possible to implement 802.1x with LDAP.....so how could we use LDAP and a Radius server together in order to implement WPA2 Enterprise? Is this possible? Any documentation out there that I have yet to find explaining this?
Any help would be appreciated.
Thanks in advance,
Ben

Hi,
Let's clarify all possibilities and you can chose one from there :-)
1) the Wireless Controller (WLC) can act as radius server. The feature is called "local eap". So the WLC authenticates the client (wpa2 if you like).
The WLC can use an LDAP database as user database. The only restrictions are that you cannot use "mschapv2" methods. So only peap-gtc,eap-fast-gtc and eap-tls. Of those 3, only eap-tls is present on the client default windows supplicant.
2) You can have a complete radius server like Cisco ACS. However the limitation coming with LDAP remains. Unless your database is Active Directory in which case ACS can integrate with it and allow for all eap methods.
3) If you go for WPA enterprise, that means you will authenticate users 2 times. One with dot1x to join the wireless and one with NAC afterwards to get network connectivity. Again if you have active directory, you can go with "single sign on" so that users never have to enter their credentials. Otherwise they will have to enter them twice.
Apart from that fact, NAC pretty much doesn't care if your wireless is open or dot1x-secured, it comes after the dot1x authentication anyway.
I hope this clarifies ?
Nicolas
===
please rate answers that you find useful

ASK THE EXPERTS - Update on 802.11n with Fred Niehaus

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to get an update on 802.11n with Cisco expert Fred Niehaus. Fred is a Technical Marketing Engineer for the Wireless Networking Business Unit at Cisco, where he is responsible for developing and marketing enterprise wireless solutions using Cisco Aironet and Airespace wireless LAN products. In addition to his participation in major deployments, Fred has served as technical editor for several Cisco Press books including the "Cisco 802.11 Wireless Networking Reference Guide" and "The Business Case for Enterprise-Class Wireless LANs." Prior to joining Cisco with the acquisition of Aironet, Fred was a support engineer for Telxon Corporation, supporting some of the very first wireless implementations for major corporate customers. Fred has been in the data communications and networking industry for more than 20 years and holds a Radio Amateur (Ham) License "N8CPI."
Remember to use the rating system to let Fred know if you have received an adequate response.
Fred might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Other Mobility Subjects discussion forum shortly after the event. This event lasts through March 25, 2011. Visit this forum often to view responses to your questions and the questions of other community members.

So there are two parts of this question, the latter part I cannot address as it is a future question. Cisco does not comment on products that have not been released or on the strategy of next generation products.
That said, Cisco was first to market with an 802.11n Access Point and well (we didn't all go on vacation after we did that)
So let's talk a little about spatial streams in general and how it relates to what customers are doing today.
The Cisco 1040, 1140, 1250, 1260 and 3500 Series Access Points are all two spatial streams (2SS).
As of the time of this writing, a critical mass of 3SS and 4SS compatible clients have yet to be deployed, and the vast majority of WiFi clients that will be deployed over the next 18 months will be 1SS and 2SS clients.
The higher SS clients are likely only show up in some higher end notebooks -- Why? well it is a given that smartphones and tablets are likely to continue to be 1SS and in some rare cases 2SS.
This is because additional radios used in this technology consume battery life, add to the physical size of the device and increase the cost. Also many devices leverage the same single antenna for cellular as well as WiFi. Therefore, it is my opinion that 3SS Access Points provide little if any performance benefit for smartphones or tablets in the enterprise today, and any real throughput gain is likely to occur with high end notebooks in close proximity to the Access Point and those are rolling out very slowly and we are monitoring this.
Now we get to my favorite part of this.. I get to ask myself a question and then answer it..
So Fred are you saying that there is no value in 3SS and 4SS?
Of course not, 3SS performs similar to 2SS beyond a short distance, and with any multi-SS product RF interference must be addressed to capture the performance benefits of higher SS Access Points. Actual throughput in any WiFi environment is highly dependent on the presence of interferers and obstacles.
Without the ability to mitigate the impact of interference, 3SS solutions will "downshift" to 2SS of 1SS and lose all the performance benefits anyway IMHO.
I don't want to sound like a commercial, but you really do need Cisco cleanair technology in the AP and Cisco innovations deliver more and will go beyond the simple 3SS aspects of the 802.11n standard.
IMHO it's more about CleanAir, good RF system design, and what we put into the AP with regard to performance "in the environment" and not what is on some spec sheet today.
For more on Cisco CleanAir see the following URL http://www.cisco.com/en/US/netsol/ns1070/index.html
Fred

Problem with wireless rt3090

hello, I bought a laptop 'hp pavilion dv5-2133la' with wireless card rt3090 Ralink
i have tried 3 forms for install the drivers, all failed.
1.- compile the drivers provided by Ralink. here the link http://www.ralinktech.com/support.php?s=2
but it give me this error:
make -C tools
make[1]: se ingresa al directorio `/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/tools'
gcc -g bin2h.c -o bin2h
make[1]: se sale del directorio `/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/tools'
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/tools/bin2h
cp -f os/linux/Makefile.6 /home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/Makefile
make -C /lib/modules/2.6.36-ARCH/build SUBDIRS=/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux modules
make[1]: se ingresa al directorio `/usr/src/linux-2.6.36-ARCH'
CC [M] /home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../common/rtmp_mcu.o
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../common/rtmp_mcu.c: En la función 'RtmpAsicLoadFirmware':
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../common/rtmp_mcu.c:352:2: aviso: ISO C90 prohíbe mezclar declaraciones y código
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../common/rtmp_mcu.c:355:2: aviso: el paso del argumento 1 de 'writel' crea un entero desde un puntero sin una conversión
/usr/src/linux-2.6.36-ARCH/arch/x86/include/asm/io.h:64:1: nota: se esperaba 'unsigned int' pero el argumento es de tipo 'ULONG *'
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../common/rtmp_mcu.c:356:2: aviso: el formato '%d' espera el tipo 'int', pero el argumento 2 es de tipo 'ULONG'
CC [M] /home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.o
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:679:2: aviso: se declaró 'enum tx_power_setting' dentro de la lista de parámetros
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:679:2: aviso: su ámbito es solamente esta definición o declaración, lo cual probablemente no es lo que desea
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:678:29: error: el parámetro 2 ('Type') tiene tipo incompleto
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:676:12: aviso: la declaración de la función no es un prototipo
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:1355:2: aviso: inicialización desde un tipo de puntero incompatible
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:1388:2: aviso: inicialización desde un tipo de puntero incompatible
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c: En la función 'CFG80211_SupBandInit':
/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.c:2594:2: aviso: el formato '%d' espera el tipo 'int', pero el argumento 2 es de tipo 'long unsigned int'
make[2]: *** [/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux/../../os/linux/cfg80211.o] Error 1
make[1]: *** [_module_/home/moguri/Downloads/20101216_RT3090_LinuxSTA_V2.4.0.4_WiFiBTCombo_DPO/os/linux] Error 2
make[1]: se sale del directorio `/usr/src/linux-2.6.36-ARCH'
make: *** [LINUX] Error 2
2.- packages from AUR.
but rt3090 and rt2860-firmware are out of date and not work.
3.-instal a deb.
but dpkg give me this error:
dpkg: warning: 'update-rc.d' not found in PATH or not executable.
dpkg: 1 expected program not found in PATH or not executable.
NB: root's PATH should usually contain /usr/local/sbin, /usr/sbin and /sbin.
lshw:
description: Wireless interface
product: RT3090 Wireless 802.11n 1T/1R PCIe
vendor: RaLink
physical id: 0
bus info: pci@0000:08:00.0
logical name: wlan0
version: 00
serial: 70:f3:95:6e:2a:04
width: 32 bits
clock: 33MHz
capabilities: bus_master cap_list ethernet physical wireless
configuration: broadcast=yes driver=rt2800pci driverversion=2.6.36-ARCH firmware=N/A latency=0 multicast=yes wireless=IEEE 802.11bgn
resources: irq:17 memory:f1000000-f100ffff
iwconfig:
lo no wireless extensions.
eth0 no wireless extensions.
wlan0 IEEE 802.11bgn ESSID:off/any
Mode:Managed Access Point: Not-Associated Tx-Power=20 dBm
Retry long limit:7 RTS thr:off Fragment thr:off
Power Management:off
ppp0 no wireless extensions.
when I make the command "iwlist wlan0 scanning" give me this output:
wlan0 Failed to read scan data : Network is down
wicd and networkmanager don't recognize any network.
and I'm sure that the wifi card is fine because win7 recognize the network of my neighbors xD
please help me! i wanna conect via commands if its posible, i don't want to conect via wicd or networkmanager because they modify the file /etc/hosts, and i wanna conect to adsl via pppoe-start.
right now i am conected via adsl rj45 ethernet.
sry 4 my english xD
Last edited by vincegeratorix (2010-12-28 17:03:13)

Hi,
on my ProBook surprisingly rt2860sta could not connect anywhere, let alone with WPA, and the opensource driver rt2800pci did. With moderate success I might add because it caused a kernel panic a few times - I found Monitor mode triggered it, in kernel 2.6.36 (have not tried 2.6.37 yet). Note that rt2860sta was known to cause them as well, when disconnecting from networks.
Several things to mind to make it work. Quoting from my article about installing Arch on it:
The only way to get your card working is to make sure to unblock RF-Kill on all devices; the Wireless (and Bluetooth since they are combined in this model). In Arch Linux a simple startup service takes care of it, part of the rfkill package. You also have to make sure one or the other driver is blacklisted. Having them both loaded leads to connection failures.
As for actual connecting, with rt2800pci, you can take a look at my connection script. It includes sample wpa_supplicant configuration as well. See rt-connect.sh: http://sysphere.org/~anrxc/j/articles/p … connect.sh
Last edited by anrxc (2011-01-09 00:23:11)

2 x MSI RG54GS2 802.11b/g Wireless Broadband Router

Hello
I have 2 computers and 2 MSI RG54GS2 802.11b/g Wireless Broadband Routers . I need to connect the routers between them wireless. What settings should I make ? I set the ip for both routers and every router comunicates well with his computer. DHCP is on , on both routers . I do not have any option to use one of them as a client. How do I check that the connection is done ? I Ping from one router the other ? Because I receive failed !
Please help

I`m have the same situation, but with the diference that i have 2 network segments, I have tried many configurations but anything .... Have you solved your case?? How??

Getting Started with Wireless: Wireless configuration on 877W router - STUC

Just letting you know that I've already posted an identical post under "Getting Started with Wireless" but don't feel that I'm getting any attention so I made another post. Thank you.
Hi all
I have a Cisco 877W router running IOS v 12.4(15)T3. Have been trying to configure wireless to run WPA-PSK and is stuck at the final stage. Spent a lot of time configuring the router using CLI but ended up using the Web GUI interface. I was able to configure the wireless settings (I think) but failed when connecting to the router from WinXP-SP2 and was wondering if you have any suggestion for me. I've ran the following debugs on the router:
VNRouter#sho debug
DHCP server event debugging is on.
dot11:
802.1X module WPA/WPA-PSK/CCKM key management debugging is on
dot11 Syslog debugging is on
Below is the error message when connecting wirelessly
*Mar 4 18:46:25.655: *** Not encrypted dot1x packet from 001b.771a.dbad has been discarded
VNRouter#
*Mar 4 18:46:25.659: %DOT11-6-ASSOC: Interface Dot11Radio0, Station VNRouter 001b.771a.dbad Associated SSID[VN-WiLess1] AUTH_TYPE[OPEN] KEY_MGMT[WPA PSK]
VNRouter#
*Mar 4 18:47:25.571: *** Not encrypted dot1x packet from 001b.771a.dbad has been discarded
*Mar 4 18:47:25.575: *** Not encrypted dot1x packet from 001b.771a.dbad has been discarded
*Mar 4 18:47:25.575: *** Not encrypted dot1x packet from 001b.771a.dbad has been discarded
*Mar 4 18:47:25.579: *** Not encrypted dot1x packet from 001b.771a.dbad has been discarded.
I've created two VLANs (and tied these two vlans to 2 separate SSID) on this router for a reason and so far has not been able to connect to any of them (SSID). I've also attached the config so you can have a look. Thanks in advance for your help.

The configuration looks fine. In most cases, the connectivity issues with WPA-PSK is due to the mismatch in PSK on the Client and the AP. Try re-entering the PSK key on both the router and the client and check if you are seeing any issues.

802.1x with PEAP fails on Unified

We have an issue with a Fujitsu Siemens Amilo Laptop. It uses 802.1x with dynamic WEP and PEAP-MSCHAP (MS-IAS), Verisign Imported Certificate. It works fine in a Autonomous environment but fails in Unified environment. Other laptops work fine in both environments with the same setup. Debug on the WiSM shows the EAP request identity/start message send to the client. But there's no answer from the client; Reached Max EAP-Identity Request retries (21) for STA
Any help is welcome!

If the issue is with the certain brand of laptop, look at the wireless card firmware. What type of card are in these laptops? What configuration has changed between the Autonomous and the LWAPP (basic settings). What does the log show on the IAS server?

NAC Framework NAC-L2-802.1x with Wireless AP1242AG?

Similar Messages

Maybe you are looking for