PEAP MSCHAP restriccion to block connections from Iphone

Good day my name is Ivan
I have a problem about my wireless network.
I have a Cisco WLC 5508 in which I have configured two SSID's. An SSID is working on my corporate network users, which uses 802.1X PEAP MSCHAP v2 session to authenticate user and computer in the wireless network.
Computers are validated as part of the domain objects
Everything works great but when I use a mobile device like an iPhone, iPad, or other similar, the iPhone asks me to write the domain user account (username and password) and below asks me inherit ACS certificate v5 .4 (Security server). I give a click to accept the certificate and admission to corporative wireless network.
That is a security hole, since from the IPhone any person who knows the credentials of a corporate user, may enter the corporate network by the SSID set.
What I can do in the ACS v5.4 for the IPhone not automatically inherit the user certificate. Any restrictions or configuration to support PEAP MSCHP V2 in Cisco ACS?.
My ACS v5.4 is integrated to Active Directory with Machine authentication.
My other solution is to use EAP TLS. But I would like to exhaust all MSCHAPV2 PEAP.
I understand that PEAP user certificate valid only, not machine.
Can you help with some advice?
Thank you.

Hi Scott, thanks for your answer
Is there any special settings in policies, because I already I have configured two policies, one for authentication and authorization of users and one for computers.
I have enabled MAR (Machine Access Restriction)
Maybe I need to add some policy or characteristic of politics
Maybe some condition especially as
Compund condition: service type: match framed, nasport IEEE 802.1X wireless type?
Thank you.

Similar Messages

ITunes blocks connection from remote devices when menus are being used

when any menu from the top menu bar is active (dropped down so you can see its contents), itunes refuses remote connections (iPod/iPhone) preventing you from starting stopping or otherwise controlling the remote computer. If the remote has not established a connection then it will be unable to, if it has an existing active connection then all commands will be queued until the menu is deactivated and at that time the computer goes crazy
Expected behavior is such that the remote controlling the device would be able to connect and communicate with the computer regardless of if a menu is dropped down.

anyone?

Cannot get connection from Iphone 5 to my desktop via bluetoot. They seem to see eachother just fine and I am getting the code on my computer and the phone but when I hit the pair button the connection cannot be made

Trying to connect my iphone 5 with my desktop MAC via bluetooth. Everything seems to be working fine when pairing them up. I get the code on both the computer and the phone but when I hit the final pairing button i get an unsuccessful pairing issue. Any ideas

Catch 22
I need Safari to get to that first page so I can do that!
I am already logged on via the laptop, and can add the iPhone if Safari could only get to the first page!!
The lobby wifi is open, and doesn't need the sign in page, but I can't get to the Internet even though it seems to have connected to the hotel's wifi.

Block connections from outside a country?

Hi there,
I would like to keep certain ports open for remote access - ssh, ftp and vnc as examples.
When I do a whois on those IP's it gives me a good idea of where those unauthorized connection attempts are coming from.
http://www.abuseipdb.com/whois/91.229.77.4
The above being a good example.
Is it possible to setup rules that automatically disconnect attempts from outside the UK (in my situation) ? I realise I could whitelist the IP's I use but I find this a bit of a pain since I move around a lot. My passwords and logins are reasonably secure - but having this setup would dramatically help security.
I know my own IP shows me being somewhere in Englandshire but I do live in deepest darkest Scotland, So I'm aware the IP lookup is not perfect ... however is it possible just to blacklist series of IPs that don't orginate from certain countries?

I say dramatically help security - but I know someone is going to comment, let me rephrase - dramatically help obscurity =D I realise people can proxy etc but I'm just looking to slow down bots and toolkits - if someone really wants to connect let them bruteforce. I'd just rather automatically block the ones I'm not interested in.
I use little snitch, having had a poke around I see someone uses IP lists that they convert into CIDR and then pipe into little snitch.
http://forums.mozillazine.org/viewtopic.php?f=38&t=2520179
I realise utils like peerguardian used to be all the rage for blocking bittorrent peers from certain companies -- but does anyone know of any app that does what I'm looking for automagically?

Exchange 2003 Stand Alone Server No Connection from Iphone and ActiveSync

We have a single Exchange 2003 Server SP2. We have a test user that has an iPhone and I have been trying to get it connected. Have tried everything I can think of, it always fails on creating the account with "Account Verification Failed" Please let me know what I can do to get this working. I have a BES and about 28 other users with Blackberry's all working.
SC

Hi SC,
Make sure the iPhone is updated. http://www.apple.com/iphone/softwareupdate/
How is the iPhone connecting to the Internet? Try testing over a local Wi-Fi network that the Exchange server is running on.
Also, you can try emailing the iPhone a configuration profile with security certificates. The iPhone Enterprise support has a configuration utility and a Deployment Guide which will help you verify configuration settings.
http://www.apple.com/support/iphone/enterprise/
-Jason

Can't connect from iphone to airport express

Plugged airport express into wall outlet. Blinking yellow light. Tried to connect to airport express through iphone. Iphone says "cannot be set up by this"

If it's an older 802.11b/g router you can't use the AirPort Utility on iPhone to configure it. Use the AirPort utility for Mac or Windows. You have many more configuration options using the desktop software as well. The utility on the iPhone is very basic.
Mac v5.6: http://support.apple.com/kb/DL1482
Windows v5.5.3: http://support.apple.com/kb/DL1391

How do I block numbers from iPhone 5

I have an annoying person that keeps texting and calling from two different numbers and wanted to know best way to have this stopped

I do agree that true blocking can only be done by carriers but the apps can intercept the calls and texts after being delivered to the phone and not display the normal action like accept or deny the phone call. they are all displayed in the app. not the system applications for these actions.
I have used an app from Google Play that does exactly this without root access. When I would get a call from the blocked number my phone would not ring it would just show in the downloaded app that that number tried to call. And when I would recieve a text from the blocked number it would not show me a notification that I had a message. Only if I went into the app would I see that that number had texted me and I could view the content of the text, but still nothing showed up in my regular calling and messaging apps.

I cant sync my iphone calendar with my iMac. It worked fine until two weeks ago. I don't use iCloud, just direct connect from iphone to iMac. any ideas?

cant sync iphone with imac - don't use icloud just direct connect - worked fine until a couple of weeks ago. Any ideas?

1. Apple has removed sync services in OS X Mavericks. Therefore, you cannot sync Outlook 2011 with Contacts or Calendar.
2. Apple has removed the ability to sync through iTunes in OS X Mavericks, so that, even if you use Contacts and Calendar on the Mac, you can only sync them with your iPhone through iCloud, thus exposing all your contacts and calendar information to the mercies of the Web.
3. Microsoft does not not support CalDAV and CardDAV in Outlook, so there is no way to sync directly through iCloud, except perhaps by setting up a Microsoft Exchange account.
4. Apple makes it extremely difficult (virtually impossible) to revert to a version of OSX that is earlier than OS X Mavericks once Mavericks is installed.
In short, we are screwed and neither company seems to care.

How to remove ipad connection from iphone account?

Wehn I message on my ipad the conversation goes to my cell phone and i don't want it to. how do i remove my cell number from my iphone
account?

Settings App > Messages > Send & Receive.

Crashed connection blocks connections from other pools

Setup:
WLS 8.1.0.0 with 2-node cluster
Sybase: 12.0 and 12.5
jConnect 5.5 (EBF11248)
Java HotSpot(TM) Client VM Version 1.4.2-b28
I have two databases (DB1 & DB2) and two connection pools (P1 & P2), each pointing
to a corresponding DB. The pools are created at WLS startup.
Later on, say, DB1 is disconnected (crashed or lost network connectivity). We
found that all connections, whether to DB1 or DB2, becomes extremely slow (on
the order of 10+ mins) to obtain. The stack dumps (see following example) indicate
the crashed one (Thread-36) was stuck at a socket connection and all the others
(for DB2/P2) were waiting for the lock (0xf26b1958) during DriverManager.getConnection
(eg. Thread-153).
While searching at BEA, I noticed a fix CR125320 for 8.1 sp2 that seems to be
relevant but I'm not sure that's the exact fix. That fix specifically mentions
JTSConnection.doClose() but our dump doesn't show that.
Please help.
Thanks,
Bill
"Thread-36" daemon prio=5 tid=0x00da23a8 nid=0x8a runnable [5e97f000..5e9819a0]
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
- locked <0x82db64c0> (a java.net.PlainSocketImpl)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
at java.net.Socket.connect(Socket.java:452)
at java.net.Socket.connect(Socket.java:402)
at java.net.Socket.<init>(Socket.java:309)
at java.net.Socket.<init>(Socket.java:124)
at com.sybase.jdbc2.timedio.RawDbio.doConnect(RawDbio.java:88)
at com.sybase.jdbc2.timedio.InStreamMgr.<init>(InStreamMgr.java:94)
at com.sybase.jdbc2.tds.Tds.login(Tds.java:375)
at com.sybase.jdbc2.jdbc.SybConnection.tryLogin(SybConnection.java:221)
at com.sybase.jdbc2.jdbc.SybConnection.regularConnect(SybConnection.java:198)
at com.sybase.jdbc2.jdbc.SybConnection.<init>(SybConnection.java:177)
at com.sybase.jdbc2.jdbc.SybConnection.<init>(SybConnection.java:129)
at com.sybase.jdbc2.jdbc.SybDriver.connect(SybDriver.java:179)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.makeConnection(ConnectionEnvFactory.java:175)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.createResource(ConnectionEnvFactory.java:111)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1092)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1029)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:320)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:253)
at weblogic.jdbc.common.internal.ConnectionPool.reserve(ConnectionPool.java:339)
at weblogic.jdbc.common.internal.ConnectionPoolManager.reserve(ConnectionPoolManager.java:78)
at weblogic.jdbc.common.internal.ConnectionPoolManager.reserve(ConnectionPoolManager.java:85)
at weblogic.jdbc.pool.Driver.connect(Driver.java:144)
at java.sql.DriverManager.getConnection(DriverManager.java:512)
- locked <0xf26b1958> (a java.lang.Class)
at java.sql.DriverManager.getConnection(DriverManager.java:193)
- locked <0xf26b1958> (a java.lang.Class)
"Thread-153" daemon prio=5 tid=0x00c46280 nid=0xff waiting for monitor entry [57480000..574819a0]
at java.sql.DriverManager.getConnection(DriverManager.java:187)
- waiting to lock <0xf26b1958> (a java.lang.Class)

For the crashed DB, when one tries to get a connection, it gets stuck on a socket
connection. This means all subsequent requsts will all take a long time to just
come out and say it didn't work.
"Slava Imeshev" <[email protected]> wrote:
"Bill" <[email protected]> wrote in message news:[email protected]...
Thanks, Slava. You are right - getConnection is "public static synchronizedConnection
getConnection(String url)". However, how would one reduce the timeouton the socket
read on the crashed DB?I'd fix this problem first. In case of failure you serialize recreation
of the
connections. Depending on number of concurrent requests the process
of recovery can be noticeably lengthy. Fix it and re-do the test.
Regards,
Slava Imeshev
"Slava Imeshev" <[email protected]> wrote:
Don't use DriverManager to obtain connections. DriverManager contains
a lot class-level synchronization and is not recommended for use in
J2EE
environment. The best option is using DataSource obtained via a JNDI
lookup.
Or, use
Driver driver = ((Driver)Class.forName("my.driver")).newInstance();
Properties props = new Properties();
Connection conn = driver.connect(url, props);
Regards,
Slava Imeshev
"Bill" <[email protected]> wrote in message news:[email protected]...
Setup:
WLS 8.1.0.0 with 2-node cluster
Sybase: 12.0 and 12.5
jConnect 5.5 (EBF11248)
Java HotSpot(TM) Client VM Version 1.4.2-b28
I have two databases (DB1 & DB2) and two connection pools (P1 &
P2),
each pointing
to a corresponding DB. The pools are created at WLS startup.
Later on, say, DB1 is disconnected (crashed or lost network connectivity).We
found that all connections, whether to DB1 or DB2, becomes extremelyslow (on
the order of 10+ mins) to obtain. The stack dumps (see following
example)
indicate
the crashed one (Thread-36) was stuck at a socket connection and
all
the others
(for DB2/P2) were waiting for the lock (0xf26b1958) during DriverManager.getConnection
(eg. Thread-153).
While searching at BEA, I noticed a fix CR125320 for 8.1 sp2 that
seems
to be
relevant but I'm not sure that's the exact fix. That fix specificallymentions
JTSConnection.doClose() but our dump doesn't show that.
Please help.
Thanks,
Bill
"Thread-36" daemon prio=5 tid=0x00da23a8 nid=0x8a runnable [5e97f000..5e9819a0]
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
- locked <0x82db64c0> (a java.net.PlainSocketImpl)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
at java.net.Socket.connect(Socket.java:452)
at java.net.Socket.connect(Socket.java:402)
at java.net.Socket.<init>(Socket.java:309)
at java.net.Socket.<init>(Socket.java:124)
at com.sybase.jdbc2.timedio.RawDbio.doConnect(RawDbio.java:88)
at com.sybase.jdbc2.timedio.InStreamMgr.<init>(InStreamMgr.java:94)
at com.sybase.jdbc2.tds.Tds.login(Tds.java:375)
at com.sybase.jdbc2.jdbc.SybConnection.tryLogin(SybConnection.java:221)
at com.sybase.jdbc2.jdbc.SybConnection.regularConnect(SybConnection.java:198)
at com.sybase.jdbc2.jdbc.SybConnection.<init>(SybConnection.java:177)
at com.sybase.jdbc2.jdbc.SybConnection.<init>(SybConnection.java:129)
at com.sybase.jdbc2.jdbc.SybDriver.connect(SybDriver.java:179)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.makeConnection(ConnectionEnvFactory.java:175)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.createResource(ConnectionEnvFactory.java:111)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1092)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1029)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:320)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:253)
at weblogic.jdbc.common.internal.ConnectionPool.reserve(ConnectionPool.java:339)
at weblogic.jdbc.common.internal.ConnectionPoolManager.reserve(ConnectionPoolManager.java:78)
at weblogic.jdbc.common.internal.ConnectionPoolManager.reserve(ConnectionPoolManager.java:85)
at weblogic.jdbc.pool.Driver.connect(Driver.java:144)
at java.sql.DriverManager.getConnection(DriverManager.java:512)
- locked <0xf26b1958> (a java.lang.Class)
at java.sql.DriverManager.getConnection(DriverManager.java:193)
- locked <0xf26b1958> (a java.lang.Class)
"Thread-153" daemon prio=5 tid=0x00c46280 nid=0xff waiting for monitorentry [57480000..574819a0]
at java.sql.DriverManager.getConnection(DriverManager.java:187)
- waiting to lock <0xf26b1958> (a java.lang.Class)

Our picture transfer from iphone, ipads and or Sony DSC-W150 camera ended when we changed int providers from xfinity to frontier. All attempts to troubleshoot have not corrected problem, HELP!!

Our picture transfer from iphone, ipads and or Sony DSC-W150 camera ended when we changed int providers from xfinity to frontier. All attempts to troubleshoot have not corrected problem. The only changes to the system that was functioning properly are Fios int service and router. All apple components are using the fios router. Can anyone Help get us up and running again? Thanks

How have you been making the physical connection from:
iPhone
iPads
Sony DSC-W150 camera
...to your Mac?
If WiFi, have you changed the WiFi encryption method or WiFi password? If so, each device need the new information netered into it manually to get onto your "new" WiFi Network.

Can Apple block my stolen iPhone 5 from downloading apps from itunes store if i provide them with the necessary infos like serial no., IMEI/MEID no.?

and all other information regarding the device like hardware no. etc
The phone's serial no. goes up in itunes whenever it is connected right?
Seriously, this much technology, hoping apple can block it from accessing their itunes database if ever it pops up somewhere.

You are assuming that no one ever sells an iPhone. The registration with your serial number has nothing to do with purchases or use. Which also applies to your block.
There is now a carrier database of IMEI's in the US so whoever ends up with it will probably not be able to use it as a phone in the US. And if they restore it the phone will not activate and will become unusable.

I can't send emails from iPhone until I connect to my wifi! I am with bigpond and have a bigpond email address. Can anyone help me?

I can't send emails from iPhone until I connect to my wifi at home. I am with bigpond and have a bigpond email address. Can anyone help me?

Try closing the Mail app completely and see if it works properly when you re-open it : from the home screen (i.e. not with the Mail app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Mail app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
If that doesn't work then try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

Hi Apple Team, my iphone can't share files with my macbook pro. But other devices can share bluetooth files with my mac book pro. Please, kindly open up bluetooth to accept all connections from all devices. Now it becoming difficult for me to share.

Hi Apple Team, my iphone can't share bluetooth files with my macbook pro. But other devices can share bluetooth files with my mac book pro. Please, kindly open up bluetooth to accept all connections from all devices. Now it difficult for me to share bluetooth files from my mac bookpro to my iphone, unless i attached it through email.
We need it to be acceptable to all devices.
Thank you!

You can tell Apple directly at the link below.
http://www.apple.com/feedback/iphone.html

Not receiving texts from iPhone contacts when I'm not connected to wifi or cell data. I can't send and receive regular SMS texts with non iMessage users but iMessage users message are not being converted to text when I don't have internet connect

I can send and receive to any non iPhone user. I can send a message as a text to an iPhone user but if I'm not connected to cellular data or wifi I do not receive messages from iPhone contacts. From what I understand these message should automatically send to me as texts instead of iMessages but since the update it's not functioning properly. Please help. I've tried turning iMessage off and I still don't receive the messages until after I reconnect to wifi.

I have the same problem! Before the upgrade, if I wasn't connected to the internet, any messages sent to me from an iphone would convert automatically to a text message. I have payg tarriff, so I turn cell data off, as it costs too much to use it. I have wifi at home and work, but if I'm out and about, I don't receive texts from iphone users until I'm on wifi. I get them ok from non iphone users. There was never any problem until ios7

PEAP MSCHAP restriccion to block connections from Iphone

Similar Messages

Maybe you are looking for