Posture validation in SOHO - Extended wireless from corporate

Hi,
I have a customer moving from Cisco NAC based solution to Cisco ISE.  NAC should be provided to wireless and the SOHO users(wireless).  We implemented airspace ACL on the Cisco ISE, which will push the ACL to wireless Aps(flexconnect acl) based on the posture validation. If the posture validation fails, ACL specific to a particular end point will be pushed into AP.
 However, the same airspace ACL is not working on the VPN routers(800 series). VPN routers integrated wireless solution doesn’t understand the airspace ACL av:pair and don’t think we can configure flexconnect ACLs on the SOHO routers. Do you think of anyother idea where we can enforce the ACL based on the posture validation?. Downloadable acl works on an interface. I don’t think it can be enforced on per-user basis.
Is there any way to push the ACL? Do posture validation & remediate the end point with limited access?
Pardon me for my gmail account. I  havnt received the BT id yet.
Thanks,
Ramesh

Had a similar problem where I wasn't exactly sure how to setup the provisioning part of the flow. I was pretty sure I had all the rules in place.
I found an excellent Cisco TAC guide here which details setting up Anyconnect for the posture assessment. They include a part to say here's where you put in the NAM or/and VPN settings but you dont' need to. In fact if you do wish to load some you need to use Ciscos standalone NAM Profile Editor.
Hope the TAC article helps you out, it got me to understand the process of what was happening for client provisioning.

Similar Messages

  • Extend Wireless Network using a Telstra technicolor Gateway wireless Router to Airpot extreme but Airport will only except join not extend and I can not get a network on the Airpor Extreme ethernet ports but can ping Airport extreme from Technicolor Rout/

    Extend Wireless Network using a Telstra technicolor Gateway wireless Router to Airpot extreme but Airport will only except "join a wireless network (which it does) not "extend a wireless network" (Led turns yellow and I can not get a network working on the Airpor Extreme ethernet ports but can ping Airport extreme from Technicolor Router.
    Airport gets it address DHCP.

    Funny how I can ping the Extreme but the Hard Ethernet ports dont seem to work correctly.
    When the AirPort Extreme is configured to "Join" a wireless network, the Ethernet ports are not enabled.
    Oddly, the AirPort Express has a special feature that will allow it to to "Join" virtually any wireless network.....and the Ethernet port can be enabled. So, an Express would work for your purpose to provide an Ethernet connection to the media player. This assumes that the Express is located where it can receive a strong wireless signal from your main router.
    Note that the Express will not provide any additional wireless coverage when it "Joins".

  • Extend wireless network from Uverse/Motorola 1ZVDC via Airport express

    After spending 2+ hours trying to extend son's network via A Express, can this be done straight from his uVerse Motorola 1ZVDC modem?  I can get the express to show up, but will not work/extend network, and doesn't show up in wireless menu; only in airport utility :-(
    Now I saw an old post which says express cannot expand network from non-apple modem.  Is this correct? I don't think he wants to pay for Extreme + express.  I am certain that, at my other residence, I am using an express directly paired to my uVerse.  Here, main residence, I have 3 paired with Extreme. 
    He had bought a cheap extender which has to be plugged into USB on computer (wouldn't this be the modem?).  I was positive the express would do the job.
    His setup: OS X.6.8
    Airport: 5.6.1
    uVerse Motorola: 1ZVDC
    Apple Express:one below
    What if I plug the express directly into the modem?  Of course, probably won't extend network, which is my objective.
    If I give him my old extreme, what are advantages to new one?
    TY for your help.
    Ruth

    You cannot use extend to other brands.. it is apple proprietary method of repeater.
    What if I plug the express directly into the modem?  Of course, probably won't extend network, which is my objective.
    You can always plug in by ethernet and setup the express to create a wireless network with the same name and same credentials as the existing wireless.. this is called roaming network and is far superior to extend.
    If ethernet does not allow you to place the unit in the right place.. you can try EOP adapters. (homeplug in the US).
    If I give him my old extreme, what are advantages to new one?
    You can extend wireless by plugging the extreme into the main modem.. setup wireless to create a wireless network.. the Express can extend an apple wireless network.
    However please do understand the restrictions.. extend will halve the speed at best.. at worst it will be too slow to be usable. And the range can still be poor.. apple do not make wireless powerhouses.. they are average at best.
    He had bought a cheap extender which has to be plugged into USB on computer (wouldn't this be the modem?).  I was positive the express would do the job.
    If it is a universal extender it should work but needs to be located where the signal is still good.. USB is probably just for power.
    If the computer cannot pick up wireless signal then the extender cannot work either.

  • Troubling extending wireless network with Time Capsule and Airport Extreme

    I am trying to set up and extend a wireless network in my house, but it’s not working right. I have two Airport/Capsule units in the house:
    2TB Time Capsule (Dual-Band II)
    1 Airport Extreme (Dual Band)
    I have the Verizon Fios router as my gateway to the internet, and also as my DHCP server. I have also tested the ethernet ports in my house to verify that they work, and that I can get a DHCP-issued IP address.
    Now, my Verizon router has WiFI, and it’s still on. I am not using it though except to troubleshoot. So far as I understand, this should not cause a problem.
    Base station setup
    So I setup the TC to Create A New Wireless Network, on the ethernet network it’s on (Dlink switch plugged into Verizon router). I set it up in Bridge Mode (as opposed to having it dole out IPs, since the Verizon router does this already). The TC gets a valid IP, and my wireless device connect to it without a problem. I have checked “Allow this network to be expanded” under Wireless settings.
    Extended station setup
    The AE Dual-Band is plugged into the Ethernet, and is reset to Factory Settings. I name it “Airport Extreme 2” and I chose “I want Airport Extreme to join my current network.” The other two options are: “I want to create a new wireless network” and “I want to replace and existing base station or wireless router with Airport Extreme.”
    I chose to “join,” I select “I want to connect Airport Extreme to my network using Ethernet to extend my existing wireless network.” The other options are to disable wireless entirely, or to “wirelessly join my current network.” On the next page it asks me to select the device or network that the Airport Extreme will connect to using the Ethernet. I set it to the Time Capsule.
    Results:
    Access near the Airport Extreme 2 is incredibly slow. Speedtest shows I am getting less than 1Mbps. Worse yet, my mail client won’t connect. It just times out.
    What I had hoped was that the AE would connect via Ethernet to the network, and just bring the wireless network to the other side of the house. Instead it almost seems as though it is just re-amplifying the TC’s signal. Otherwise, why is performance so bad?
    Thanks to anyone with some insight here!

    Hello Kennuff. Welcome to the Apple Discussions!
    Since you have the ability to connect all of the routers by Ethernet, there is no need to configure the Time Capsule (TC) & 802.11n AirPort Extreme Base Station (AEBSn) for a dynamic WDS (aka, extending a network). This option is only when the routers do NOT have an Ethernet connection between them.
    Instead, you want to configure the TC & AEBSn in a "roaming" network. I suggest starting by performing either a "hard" or "factory default" reset on both.
    Next be sure that both the TC & AEBSn are on the same Ethernet subnet coming from the Verizon-supplied router.
    Configure the TC & AEBSn as follows:
    AirPort Utility > Select the TC or AEBSn > Manual Setup > AirPort > Wireless
    o Wireless Mode = Create a wireless network
    o Allow this network to be extended: <not checked>
    o Radio Mode: <leave the default or if you require a specific mode make sure both routers are configured the same>
    o Wireless Security: <configure both routers the same>
    AirPort Utility > Select the TC or AEBSn > Manual Setup > Internet > Internet Connection
    o Connection Sharing = Off (Bridge Mode)

  • Extending wireless network many times – works with limitations (why?)

    Hi all! I want to extend wireless network in big 2 floor house without ethernet cables. My current setup is attached in picture file.
    Time Capsule – connected directly to Internet.
    TimeCaps-Front – this is AirPort Express configured to extend network from Time Capsule.
    TimeCaps-Back – this is AirPort Express configured to Bridge mode (it accepts local network via ethernet cable plugged to its WAN) and this AirPort creates new network with the same name and password as Time Capsule do.
    2nd-floor-main – this is AirPort Express configured to extend the network from TimeCaps-Back (NOT from Time Capsule because 2nd extension doesn't work).
    This setup is WORKS (unbelievable)!!!
    But when Time Capsule is rebooted, any client can't connect to any base station, even to Time Capsule (error - connection timed out). For this solution work, it needed to reboot each device individually each after previous… Also I noticed, if after Time Capsule reboot, turn off "TimeCaps-Back" we can again connect our wireless clients to Time Capsule.
    So the question is – how to optimize (if possible) this setup?

    It sounds a bit corny to say that a chain is only as strong as its weakest link, but it remains a valid concept. In your case, the weakest link is the wireless connection between the Time Capsule and AirPort Express.
    The reason for this is that an extending device can only extend the quality of signal or bandwidth that it receives. So, the stronger the connection at this point in the network, the better the whole network will perform in terms of speed and stabiity. At least half of your entire network depends on a single wireless connection between the Time Capsule and the AirPort Express.
    If things are working fine, there may be no need to check further. If you want to be a bit more scientific, then you can use a good utility like WiFi Explorer to examine the Signal to Noise (SNR) at various points on the network.
    In that regard, I would first measure the SNR of the Time Capsule signal at the location of the first Express to make sure that it was acceptable and even experiment if possible by moving the Express closer to the Time Caspule or minimimizing any obstructions that might be limiting the SNR at this point.
    The wireless connection between the Time Capsule and AirPort Express supports the other half of the entire network, so any weakness at this link in terms of bandwidth will be passed down to the other devices on the network.

  • How do I know "Roaming Network" is working with Airport Express and Airport Extreme and should I use extended wireless network for third Express?

    Attempting to eliminate a dead spot in Wifi coverage [and implement AirPlay] have one Airport Extreme 802.11n and two Airport Express 802.11n's.
    http://support.apple.com/kb/HT4145
    The Airport Extreme is of course connected to cable modem and Ethernet switch, and one Airport Express is connected to the Ethernet network. As per instructions for creating a "Roaming Network", Airport Express is set to same SSID, security type, and Password.
    Questions:
    1. How does the client device know which Airport to connect to? In other words, will it switch to the closer WiFi transmitter automatically? The WiFi reception problem is intermittent in the fringe areas so what I do not want it for it to stick with the more distant Airport Extreme in the basement when the Airport Express which is closer will work better.
    2. How can I tell which of the Airports the attached client device is using?
    The third Airport Express will be in a third location - I was planning on using it also for expanding coverage but after reading the warnings about performance suffering when purely using WiFi for the expansion in this location ("Wireless Extended Network" without an ethernet connection) I have figured that the single wired Airport Express will be adequate and will use the third Express to do Airplay only.
    http://support.apple.com/kb/HT4259
    Question: Can I use this second Airport Express to extend the wireless network via "Extended Wireless Network" while the other two are in "Roaming Netowrk" configuration? Without bogging down??
    Mitch

    1. How does the client device know which Airport to connect to?
    The Mac computer will automatically connect to the wireless access point with the strongest signal...which is probably the closest AirPort. An iPhone or iPad may not do this and will tend to stay connected to one AirPort.
    2. How can I tell which of the Airports the attached client device is using?
    On a Mac, open Macintosh HD > Applications > Utilities > AirPort Utility. Click on one of AirPorts. In the area to the right, locate the AirPort ID and jot that down. Then do the same for your other AirPort.
    Move your Mac near one of the AirPorts and log on to the wireless. Hold down the option key on the Mac while you click the fan shaped AirPort icon at the top of the screen. Look for the BSSID. That is the AirPort ID of the device to which you are connected.
    If you are close to the "remote" AirPort, and you see the AIrPort ID of the "main" router when you are testing, then you know that the network is not configured correctly.
    Can I use this second Airport Express to extend the wireless network via "Extended Wireless Network" while the other two are in "Roaming Netowrk" configuration? Without bogging down??
    There will be a modest 10-15% bandwidth loss with the "extend" setup, assuming that the Express is located where it can receive a strong wireless signal from the AirPort to which it is associated. You can avoid the bandwidth loss if the Express is also connected via Ethernet as part of the roaming configuration.

  • ACS / NAC phase 2 / posture validation with symantec AV

    Hi,
    We encounter problem to implement NAC phase 2 with symantec.
    ACS is an appliance one, version 4.0
    We?ve installed the Symantec AV pair on the ACS : that?OK.
    The following softwares are installed on the client PC:
    - Cisco CTA : ctasetup-win-2.0.1.14.exe
    - Aegis SecureConnect 2KXP-4_0_4.msi
    - Symantec client security posture plug-in.msi together with the associated setup.exe
    Moreover, client PC is configured to use EAP-FAST with mschapv2.
    We?ve defined an internal posture validation on the ACS.
    The first rule of this posture is performed on the following Symantec AV pair: Symantec:AV:Dat-Date days-since-lastupdate.
    When the first rule of this posture matches, then the posture token associated (radius authorization component) doesn?t return the associated vlan, so the user must be placed into the vlan associated by default on the port.
    The default rule is associated with another authorization component that returns the quarantine vlan.
    Problem is that we don?t manage to match on this posture.
    It?s as if the client doesn?t send the parameters.
    Logs on the ACS indicates the following:
    - message type : authen failed
    - authen failure code : posture validation failure (general)
    - eap type name : EAP-FAST
    - reason: no matched required credential types in any posture validation rule
    - cisco:PA:OS-type : OK, well retrieved (windows XP professional)
    - cisco:Host:ServicePack: OK, well retrieved (service pack 2)
    - but none of the Symantec AV could be retrieved.
    Symantec indicated to us that their AV server isn?t yet compatible witch ACS.
    So external posture validation isn?t possible in our case.
    Only internal posture validation should work.
    But no way to retrieve Symantec information from CTA.
    Thanks in advance for your attention.
    Best Regards,
    Arnaud

    Hi.
    Please examine the following directory of client pc. Is Plugins File of Symantec installed?
    \Program Files\Common Files\PostureAgent\Plugins
    \Program Files\Common Files\PostureAgent\Plugins\Install
    Plugin Installation and Upgrade
    Each NAC-compliant application is responsible for installing its own posture plugin on end systems.
    Plugins for Windows environments are installed in this directory:
    \Program Files\Common Files\PostureAgent\Plugins\Install
    When CTA receives a posture request, it scans the PostureAgnt\Plugins\Install directory for new or updated posture plugins. If there are new or updated posture plugins in the PostureAgnt\Plugins\Install directory, CTA performs one of the following actions:
    " If the .dll plugin does not exist in the PostureAgent\Plugins directory, CTA moves the plugin files from the PostureAgent\Plugins\Install directory to the PostureAgent\Plugins directory.
    " If the .dll plugins does exist in the PostureAgent\Plugins directory, then CTA checks to see if the plugin, in the PostureAgent\Plugins\Install directory, is newer than the one in the Plugins directory. CTA then moves the newer plugin to the PostureAgent\Plugins directory and overwrites the older one. If the plugin in the PostureAgent\Plugins\Install directory is older than the one in the Plugins directory, CTA deletes it, and continues to use the original plugin.
    " If the plugin creates an error during registration, CTA moves the plugin to the following directory (if the logging is enabled, the error information is logged):
    http://www.cisco.com/en/US/products/ps5923/products_maintenance_guide_chapter09186a00806870db.html
    best regards,
    sahase

  • Posture validation

    Dear Team,
       I have an internal Windows and Antivirus server. I want to do posture validation and want to make sure that end points
    checks the updated from the external server.
    Could you please let me know where do we define information about the internal servers in ISE?
    Minakshi

    Posture Services on the Cisco ISE Configuration Guide
    http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise-posture-00.html

  • Problem using Airport Express to extend wireless network.

    I'm trying to extend my wireless network with an Airport Express (brand new, bought last week), but can only seem to do so by connecting it via cat5 to the router, which doesn't actually extend anything.  I have a Linksys WRT54GS with DD-WRT, and want to have the Airport Express in a different room so cat5 isn't an option.
    I'm using WPA2 Personal security on my network.
    I've tried to follow several sets of instructions from these forums and on blogs, but the only things I've been able to do are...
    1) connect via cat5, selecting "Create a new network" with the same SSID and such, but it doesn't give me any more range.
    2) connect wirelessly selecting "Join an existing network", but that doesn't extend the network at all either, even if I put the AE at the edge of the network now.
    Thanks in advance.  All I really want to do is access my wireless from the other half of my house.
    Zack

    It was possible to create a WDS between the older 802.11g AirPort Express and the Linksys WRT-54GS and this (as you know) has been documented on the Internet. However, I do not know of anyone that has been successful doing so with either of the 802.11n generations.
    The two methods that you have tried would not work as neither is the proper method to set up a WDS. Please check out the following Apple Support article for more details. If you are successful in setting a WDS between them, please post back your results.

  • External posture validation server LanDesk vs. ACS

    Hi,
    I want you to ask wheather somebody has same problem as me and how did you solve it.
    I want to validate security of hosts with LANDesk® Security Suite 8.7 in cooperation with ACS. My problem seems to be in comunication between ACS and LanDesk validation server. Landesk server in log says that no scan has been made on the host. But when i dont forward LanDesk credentials to LanDesk and I Validate them on ACS, it works. I mean ACS can determine whether the scan has been made and with which result.
    So I think problem isn't in CTA or LanDesk host agent(when they send right credentials). It seems to be somewhere between ACS and LD server.
    Didn't you have similar problem?
    p.s. I have been imported LanDesk plugins into CTA and attributes definition file into ACS. But I am not sure if the External posture validation setup in URL field should be "http://ip.a.d.d:12576/pvs.exe" which i found in LD documentation. In google i found another URL "http://ip.a.d.d:12576/avp.exe". None of them works properly. And on LD server isn't such a file.
    Thans for help
    Daniel Sebek

    Hello,
    NAC Appliance:
    • Offers Authentication, Authorization and Remediation
    • Covers Wireless, VPN and LAN.
    • Only can be used as an appliance. No virtualize offerings. For small locations which ISR routers, a 50 and 100 user module is available.
    • Licensed by user count matching and applied to the corresponding enforcement server. Users bundles are 50, 100, 250, 500, 1500, 2500, 3500 and 5000.
    • Uses SNMP V1,2 and 3 or can be in-band / bump in the wire.
    • Can leverage Cisco Profiler or whitelist non-NAC capable devices.
    • Cisco enforcement appliances can provide collecting abilities for Cisco Profiler with an additional license.
    • Can Leverage Cisco Guest server for advance guest access.
    • Comes in HP or IBM appliance formats.
    • IBM appliances are 3315, 3355 and 3395 appliances. They can support ISE
    • HP appliances are 3310, 3350 and 3390 appliances. They cannot support ISE
    ACS 5.X:
    • Offers 802.1x NAC features and device management (TACACS/RADIUS).
    • Can be an appliance or Vmware. Appliances that are IBM hardware can support ISE. VMware can be migrated to ISE for an additional cost.
    • Provides Authentication and Authorization. Does not offer remediation.
    • Requires switches that support 802.1x COA as specified on cisco.com/go/acs to function as the enforcement agent. ACS alone cannot offer access control.
    • 802.1x NAC features do not require additional licenses for up to 500 users/devices. To scale beyond 500 users/devices, an additional large deployment license is required.

  • Inline Posture deployment for non Cisco Wireless Controler

    Hi all of you
    I have to deploy an Inline Posture to manage non Cisco Wireless Controler ( ZoneDirecteur 1000 Ruckus), It seem easy but I don't know from where to start. All documentation I rode it's about Inline Posture for VPN. I want just to use this Inline Posture to manage Wireless user through ZoneDirector wirelss controler. Thank you.
    Regards
    Kouassi

    So what is the solution for this scenario?
    remote site has non-cisco autonomous wireless AP. NAC is centralized. I can not use OOB since there is no support for non-cisco AP in OOB mode. As a result I use InBand mode. This means that local wireless trffic in remote site must travel to central site, go through NAC Server and go back to remote site. Is this correct?

  • I cant print wireless from my D110a ..It says its connected to wireless network.

    I am unable to print wireless from my laptop to my D110 printer. The printer shows up, but wont print. the printer also shows that it is connected to wifi.

    Can you describe the new home network?
    What router brand?
    What Modem?
    What service provider?
    10.59.1.250 is a valid home network address.  You might check the address on the computer to make sure it is simular (10.59.1.xxx).
    This sounds like it could be a router setup issue.  Sometimes service providers set up router in a way that prevents the computers printer driver from seeing the printer. This might not match with the "It worked for 2 weeks" though.
    Another possibility is that the printer got a new IP address and the computer hasn't been able to find it.  Rebooting the cpmputer might fix that.
    Still another possibility is that the printer is attached to some elses router.  You might want to comfirm is it connected to your network and not another one in the area.  If you used the default SSID on the new home network there might be another one in the neighborhood that is the same.
    Treefrog
    P.S.  Be sure the old network equipment is not plugged in somewhere, unless you have changed its SSID. 
    Please mark the post that solves your problem as "Accepted Solution"
    Sometimes it takes several posts back and forth to get to a solution - please be patient.
    I am employed by HP

  • Problem with airport express extending wifi from extreme

    My setup is an airport extreme wired to the internet with two iMacs connected by wire and an airport express to extend wifi from the extreme to the further parts of my house.  When originally installed about a year ago this arrangement worked perfectly, but I noticed a few weeks ago that neither my iphone, ipad, nor my MBP 13" is connecting to the aitport express anymore and the network extension is not working as intended.
    Last night I investigated the isue and found that the express is connected wirelessly to my extreme because when I wired my MBP to the express and turned off the wireless connection it could still reach the internet.  But, even with the express sitting plugged in next to my iPhone I could not get it to connect to the express - it always uses the extreme and while I'm in range there is no problem.  The problem is that my house is old and the wals tend to cause problems with reception and I can't get wifi in the garden and some parts of the house.
    I have the express and the extreme configured to allow access only by the client macs that I have provided and it looks like the two devices share this information when they are in extend mode (but not sure about that).  When I set up the system I added the aitports mac addresses to the approved list in the access control screen, which seemed to be necessary then though I removed them (the airport mac addresses) fromt he list last night to see what effect this had and biefly the airport did connect to my MBP.  But after returning it to its location where it usually is I have not been able to reconnect to it.
    In brief;  I have an airport express extending an airport extreme wifi, it used to work, but now all wifi clients will only connect to the master.  I have a suspicion that a recent airport update has caused this (both airports are up-to-date) but can't be sure.  I have the express correctly configured to extend the wifi of the extreme as it was originally working.
    One thing I have noticed - I had the express set to use a fixed IP by setting 'static' in the internet screen - this is not the current setting (it's reverted to DHCP) and I cannot force it to update to and remain set to static.
    Does anyone know how I can restore the correct functioning of the express as an extension of the wifi network?
    Thanks
    Damon

    Perform the Factory Default Reset one more time. Hold the reset button until the amber light has been blinking rapidly for 8-10 seconds before you release the reset button
    Run the setup wizard, and wait for screen similar to this to appear, then click on Other Options:
    Select the Add to an existing network option, then click Next and follow the prompts.
    If you are still having difficulty, try running the setup utility on an iPhone or iPad, since Yosemite has a number of bugs in the setup process.

  • Cannot extend wifi from Time Capsule

    Hi all
    I have a time capsule (TC) in bridge mode connected to a livebox router. Internet access is fine, wirelessly and wired from the TC. I have disabled the wireless from the livebox router, to keep things simple.
    I was hoping to extend the wifi through the house, using 2 airport expresses (AEXS), one as a relay, one as a remote.
    I have ticked create wireless network in airport utility, on the TC, and extend wireless network on the AEXS, but cannot get the network propagated from the AEXS. The AEXS's are set to pick up the lower frequency channel from the TC, and I understand that this has a longer range than the 5 GHz band.
    I also have broadband running through the mains circuit (we call this homeplug in the UK) but connecting the AEXS to the homeplug ethernet socket does not work either.
    Any ideas?
    Thanks in advance
    Peter

    Here's how to do what you want with the furthest Express (AX):
    You may be able to simply change some settings on the AX, or if that is not possible, you'll need to hold the reset button in on the device until you see the amber light begin to flash more quickly.
    I prefer to setup devices by connecting an ethernet cable from the Mac directly to the device...the AX in this case, but you can also configure using wireless only if you prefer.
    On the AX, Open AirPort Utility - Click Manual Setup
    Click the Wireless tab below the row of icons. Your setup should look like this:
    Wireless Mode = Create a wireless network
    Wireless Network Name = Exact same name as your Time Capsule (TC) network
    Radio Mode = Probably 802.11n (802.11b/g compatible) would be a good choice here, but you could choose 802.11n 5 GHz if all of your devices are capable of connecting to 5 GHz.
    Channel = Automatic
    Wireless Security = Exact same setting as your TC
    Wireless Password = Same setting as your TC network
    Confirm Password
    Click the Internet icon
    Connect Using = Ethernet
    Connection Sharing = Off (Bridge Mode)
    Update to save settings. This will provide you with extended wireless coverage and devices will be able to stay on the same wireless network as they move around and connect to the access point with the strongest signal.

  • Extending Wireless--​a few questions

    I posted a while back about needing to extend wireless coverage to an RV about 60 feet from the current router.  Well, I finally am getting around to it, but still have a few questions.
    I have the Westell A90-9100EM 15-10 model.  
    I've read the "Can I get an ethernet connection in a room with only coax" article.
    So I understand I need a splitter, router and extra cable.
    Since I have the Westell, does it matter if I buy another of the exact same model or would the Actiontec MI424-WR work just as well?
    The part about reconfiguring it has me a bit confused.  Can I hook it up to a laptop to do it, even though I'm receiving wi-fi on that laptop from my present modem?  
    It sounds like using another Westell involves a bit more configuring, is that correct?  If so, then the Actiontec would probably be a bit easier?
    Thank you,
    TJ

    tntpointer wrote:
    1) Since I have the Westell, does it matter if I buy another of the exact same model or would the Actiontec MI424-WR work just as well?
    2)  The part about reconfiguring it has me a bit confused.  Can I hook it up to a laptop to do it, even though I'm receiving wi-fi on that laptop from my present modem?  
    3)  It sounds like using another Westell involves a bit more configuring, is that correct?  If so, then the Actiontec would probably be a bit easier?
    1)  It does not matter.  Either another Westell or an Actiontec will work.
    2)  Connect the laptop to the second router.  Temporarily disable wireless on the laptop so it's only talking to the second router.
    3)  Configuration is identical between a Westell and an Actiontec.
    Note:  The configuration steps in the FAQ you referenced ONLY apply to the second router.  Never to the primary router.

Maybe you are looking for