Users unable to access the internet sites
Hi Everyone,
We have users who are able to get the IP address but unable to access any internet sites.
I check the trap logs on the WLC
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 16) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.60.1:1812 deactivated on WLAN 1
RADIUS server 192.168.60.1:1812 failed to respond to request (ID 200) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.60.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 deactivated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 15) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 16) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
RADIUS server 192.168.60.1:1812 deactivated on WLAN 1
RADIUS server 192.168.60.1:1812 failed to respond to request (ID 200) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.60.1:1812 activated on WLAN 1
RADIUS server 192.168.50.1:1812 deactivated on WLAN 1
RADIUS server 192.168.50.1:1812 failed to respond to request (ID 15) for client 88:53:2e:99:24:b5 / user 'unknown'
RADIUS server 192.168.50.1:1812 activated on WLAN 1
Need to know how can i troubleshoot this further?
Regards
Mahesh
I would do the troubleshooting in following sequence.
1. Put a wired PC on to the vlan allocated for WLAN1
2. Check whether wired PC gets an IP & can browse internet
3. If that works, then we know no issue of DHCP & not issue with L3/NAT routing to access internet
4. If step2, does not work then your issue is not within wireless, you have to change the focus of your troubleshoot.
5. If step2 works, then test a wireless client with OPEN Authentication (No ACS involvment).If this does not work,then it means wireless client does not get proper IP connectivity. Check dynamic interface configuration for this WLAN & make sure gateway addresses correctly configured. Also VLANs are trunk across to WLC from switch.
6. If step5 works, then try your client with ACS & see the client get successfully authenticated. If not it may be WLC to ACS issue. Troubleshoot that in that case.
Do some troubleshooting like this & let us know the outcome. I am sure you will abe to find out the issue easily in this way.
HTH
Rasika
Similar Messages
-
UNABLE TO ACCESS THE INTERNET FROM LOCAL PROVIDER ON A SITE-TO-SITE VPN CONNECTION
Dear All,
I have a site-to-site connection from point A to point B. From point B i am unable to access the internet from local internet provider.
I am trying to ping from 192.168.20.1 the dns 8.8.8.8 but i receive the message "destination net unreachable".
When i run "show ip nat translation" i receive nothing.
The vpn connection is working properly, i can ping the other side 192.168.10/24
Below is the configuration of the cisco router on point B.
dot11 syslog
ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.21.254
ip dhcp pool voice
network 192.168.21.0 255.255.255.0
default-router 192.168.21.254
option 150 ip 192.168.5.10
ip cef
ip domain name neocleous.ru
ip inspect name IOS_FIREWALL tcp
ip inspect name IOS_FIREWALL udp
ip inspect name IOS_FIREWALL icmp
ip inspect name IOS_FIREWALL h323
ip inspect name IOS_FIREWALL http
ip inspect name IOS_FIREWALL https
ip inspect name IOS_FIREWALL skinny
ip inspect name IOS_FIREWALL sip
no ipv6 cef
multilink bundle-name authenticated
vty-async
isdn switch-type primary-net5
redundancy
crypto isakmp policy 5
hash md5
authentication pre-share
group 2
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
lifetime 28800
crypto isakmp policy 50
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key Pb85heuvMde9Wdac5Qohha7lziIf142u address [ip address]
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10
crypto ipsec transform-set TRANSET esp-aes esp-sha-hmac
crypto ipsec transform-set TRANSET2 esp-des esp-md5-hmac
crypto ipsec df-bit clear
crypto map CryptoMAP1 ipsec-isakmp
set peer [ip address]
set transform-set TRANSET
match address CryptoACL
interface FastEthernet0/0
description Primary Provider
ip address [PUBLIC IP MAIN PROVIDER] 255.255.255.252
ip access-group outside_acl in
ip mtu 1390
ip nat outside
ip virtual-reassembly in
load-interval 30
duplex auto
speed auto
crypto map CryptoCY
crypto ipsec df-bit clear
interface FastEthernet0/1
description TO LAN
no ip address
load-interval 30
speed 100
full-duplex
interface FastEthernet0/1.1
description DATA VLAN
encapsulation dot1Q 20
ip address 192.168.20.254 255.255.255.0
ip access-group inside_acl in
ip nat inside
ip inspect IOS_FIREWALL in
ip virtual-reassembly in
ip tcp adjust-mss 1379
interface FastEthernet0/1.2
description VOICE VLAN
encapsulation dot1Q 21
ip address 192.168.21.254 255.255.255.0
interface Serial0/2/0:15
no ip address
encapsulation hdlc
isdn switch-type primary-net5
isdn incoming-voice voice
no cdp enable
interface FastEthernet0/3/0
no ip address
ip access-group outside_acl in
ip nat outside
ip virtual-reassembly in
shutdown
duplex auto
speed auto
crypto map CryptoCY
ip local pool VPNPool 192.168.23.2 192.168.23.10
ip forward-protocol nd
ip http server
no ip http secure-server
ip nat inside source list nat_list interface FastEthernet0/3/0 overload
ip route 0.0.0.0 0.0.0.0 [default gateway ip]
ip access-list standard VTY
permit 192.168.20.0 0.0.0.255
ip access-list extended CryptoACL
permit ip 192.168.20.0 0.0.0.255 192.168.3.0 0.0.0.255
permit ip 192.168.21.0 0.0.0.255 192.168.5.0 0.0.0.255
permit ip 192.168.21.0 0.0.0.255 192.168.6.0 0.0.0.255
permit ip 192.168.21.0 0.0.0.255 192.168.12.0 0.0.0.255
permit ip 192.168.21.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255
permit ip host 192.168.22.1 192.168.5.0 0.0.0.255
permit ip host 192.168.20.1 192.168.5.0 0.0.0.255
permit ip host 192.168.22.1 192.168.6.0 0.0.0.255
ip access-list extended DFBIT_acl
permit tcp any any
ip access-list extended inside_acl
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.35
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.39
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.23
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.18
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.55
permit ip 192.168.20.0 0.0.0.255 host 192.168.10.144
permit ip 192.168.20.0 0.0.0.255 host 192.168.10.146
permit ip 192.168.20.0 0.0.0.255 host 192.168.10.141
permit ip host 192.168.20.253 host 192.168.3.21
permit ip host 192.168.20.254 host 192.168.3.21
permit ip 192.168.20.0 0.0.0.255 host 192.168.3.10
permit ip 192.168.20.0 0.0.0.255 host 192.168.20.254
ip access-list extended nat_list
deny ip host 192.168.20.254 192.168.10.0 0.0.0.255
deny ip host 192.168.20.254 192.168.3.0 0.0.0.255
deny ip host 192.168.20.1 192.168.3.0 0.0.0.255
deny ip host 192.168.20.1 192.168.10.0 0.0.0.255
deny ip host 192.168.20.2 192.168.3.0 0.0.0.255
deny ip host 192.168.20.2 192.168.10.0 0.0.0.255
permit ip host 192.168.20.1 any
permit ip host 192.168.20.2 any
permit ip host 192.168.20.254 any
ip access-list extended outside_acl
permit gre any host [ip address]
permit esp any host [ip address]
deny ip any any
ip sla 2
icmp-echo 192.168.10.254 source-interface FastEthernet0/1.1
frequency 180
timeout 500
ip sla schedule 2 life forever start-time now
logging 192.168.3.21
route-map DFBIT_routemap permit 10
match ip address DFBIT_acl
set ip df 0
route-map ISP2 permit 10
match ip address nat_list
match interface FastEthernet0/3/0
route-map nonat permit 10
match ip address nonat_acl
route-map ISP1 permit 10
match ip address nat_list
match interface FastEthernet0/0You cannot access internet, because all traffic is tunneled for VPN !!!!
Please see cisco tech documentation and bypass traffic for internet.
eg. if lan traffic is going from site a to site b then through vpn
else
lan traffic to internet (any) should be out thorugh the vpn . -
After updating Firefox yesterday I have been unable to access the internet. I have tried the Norton 360 fix several times, but it still doesn't work.
After updating Firefox yesterday I have been unable to access the internet. I have tried the Norton 360 fix several times, but it still doesn't work.
-
Unable to access the Internet over 3G Network, Wi-Fi fine.
Hi there,
I'm unable to access the internet on the iPhone 3G over the 3G network. Wi-Fi is fine, no problems there, but every time I try to bring up a website in Safari over 3G I get the message "Safari can't open the page because it is not connected to the Internet".
I have Enable 3G 'ON' under Settings > General > Network, and I have full strength on the signal meter in the top left of the Home screen. I'm in a city (Melbourne, Australia) on the Optus network, so the network itself shouldn't be the issue.
I've tried resetting the Network Settings under Settings > Reset > Reset Network Settings, but it didn't change anything. Any other ideas?
Cheers.Well, there you go, fixed! Called Optus Customer Service and they were actually helpful! Apparently there were "some components in their back-end that needed to be installed manually." The man wasn't sure why they weren't there, "glitches, blah, blah..." but at least they're there now and I have 3G access.
-
When my iphone connects to wifi, everything else in my house will not connect to the internet. They all show 3 to 4 bars on connection strength, but unable to access the internet. The second I turn off the wifi on my iphone, everything in my house runs fine. What is going on?
Had a similar problem a number of years ago with a laptop my daughter had. The probelm turned out to be the router. What kind of router do you have? Have you checked for firmware updates, or at least tried re-booting it?
-
Help! I have an older iPad. I am not sure which version. I cannot access the internet even though it shows a strong Wi-Fi signal. I have tried re-starting and when I tried to search for updates I couldn't access. It told me an error had occured. What can I do? Thanks!
Me too having the same thing what's the solution for this how can I update
-
Time Capsule has green light, but unable to access the internet
My Time Capsule has a green light, but all devices (wired and wireless) are not allowed out to the internet.
When I connect my iMac directly to my internet router, I am able to access the internet, so I have isolated the issue to the Time Capsule.
The Time Capsule receives an IP address from my internet router via DHCP and I can see this address in the Time Capsule config, but for some reason the Time Capsule is not allowing internet access to both wired and wireless clients.
Thank you.
--SN124BVerify that you have a working Ethernet cable.
Then verify that the Ethernet cable is connected from one of the LAN <-> ports on your main router to the WAN "O" port on the Time Capsule.
Check again to make sure that the Time Capsule is configured in Bridge Mode
Power cycle the entire network as follows:
Power off all devices in any order you want
Wait a few minutes
Start the modem or modem/router first and let it run a full minute by itself
Start the main router next the same way
Start the Time Capsule the same way
Continue starting devices one at a time until everything is powered back up
Check the network -
Standard error message comes up ONLY on the below site that Problem Loading Page
The connection has timed out
The server at www.barclaycard.co.uk is taking too long to respond.
* The site could be temporarily unavailable or too busy. Try again in a few
moments.
* If you are unable to load any pages, check your computer's network
connection.
* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web.Hi the-edmeister
I have been through all of the above, and still will not connect to Barclaycard withthe same error message as in above post. What's next, deintall firefox and reinstall? Could it be some problem with VPN software, as interestingly on my works supplied machine, neither IE or Firefox will connect to this site (but all others) when I'm outside the VPN, but when I'm inside, IE5 will connect to all sites including Barclaycrd, but not firefox....could it be a conflict between IE5 and firefox? This is driving me nuts
Thanks in advance for your response -
Completing user authentication before accessing the Internet
Im using an 871 router with IOS Version 12.3(8)YI3 as a firewall to the Internet. Ive already got the 871 using Websense for URL filtering but I need the 871 perform AAA authentication the first time a user attempts HTTP or HTTPS access to the Internet. And if authenticated, pass the user/IP information to Websense so I can apply the proper filtering policies. Im already doing this type of function using a PIX, can I do the same on the 871 router?
Yes, it's called auth proxy:
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080094eb0.shtml
Hope that helps! -
Hi
I have a new 21 inch imac oct 2011 version. I installed bootcamp and windows xp on my machine and i also installed parallels 6.
Paralleles works great and i can open any program with it. But bootcamp also works EXCEPT it refuses to give me access to the internet. I installed the bootcamp drivers from my snow leopard disk, it did not make a difference. All the drivers installed but still no internet. I then installed the bootcamp drivers from the gray mac osx disk (#1) but it stopped installing with an error number ( 2753) and it said that the package was damaged.
I have tried everything; i opened each disk and trieed installing the files separately. Nothing.
What i see missing in my devices screen in XP is the network adapter.
I have a router (dlink-dr615) and it is connected by ethernet to my imac. I wonder if THIS might have anything to do with the problem. Any guidance would be much appreciated.
Thank youI'd recommend reposting in the Boot Camp forum, that is where the Boot Camp and Windows gurus hang out.
Good luck. -
Connected to Wi-Fi network, but unable to access the Internet ipad 2
Hello,
i baught a new ipad 2 32 gb , 3g.... 4.3.5os
i am having an annoying issue regarding the internet connection..
where i am living i cannot connect a router so my laptop has a cable connected to it to access internet ... i had to create an ad-hoc ( to make my laptop work as a router)
( windows 7 btw)
now my iphone connect fine and i can browse internet, but when it comes to my ipad it only connects to the wi-fi but when i open the safari , a message pops up saying no internet connection eventhough as i said it's connected to WIFI with full signal !!
this is really frustrating and i've read many many blogs about this issue but none of them solved my problem and this was my last option is to send u guys askin for help...
p.s: i tried to click on renew lease but nothing is changed
ip adress : 169.254.90.xxx
subnet mask:255.255.0.0
router : blank
dns:blankTry using an explict DNS server, such as
208.67.222.222 (OpenDNS server)
8.8.8.8 (Google DNS server)
System Preferences -> Network -> Advanced -> DNS -> [+]
The first entry you add (at the top of the list) will be the primary DNS server. -
Unable to access the internet through pc
I have time capsule connected to my pc through an Ethernet cable, it says my local area network is connected at 100 Mbps yet it is unable to connect to the internet. My xbox and MBP connect without a problem, any ideas on what is going on?
If you're using 5.1, that's a beta enviroment and not supported.
If you have it legally, it's attached to a developer account and all questions need to be directed to the developer forums.
Latest gold version is 5.0.1. -
Unable to access the internet after upgrading to 10.5.2
Since I've upgraded to 10.5.2 recently, as in yesterday, my ability to connect to the internet has changed DRAMATICALLY!!! Basically to not at all! It seems that there is ALLOT of of traffic on the forums about this problem. But no responses seem to be given from a moderator or tech support.
I've had to downgrade the wireless to G or use the ethernet connection to get online. And that is just barely. I have NO problems with using my WIN computers on the same router. This all started when 10.5.2 arrived. Even when the network sys pref's reported back that I had an IP address on the router, it STILL didn't connect.
Does anyone from Apple read the forums???? It appears not. And it appears that Apple don't really care as the problem seems to have been going on for awhile!Since I've upgraded to 10.5.2 recently, as in yesterday, my ability to connect to the internet has changed DRAMATICALLY!!! Basically to not at all! It seems that there is ALLOT of of traffic on the forums about this problem. But no responses seem to be given from a moderator or tech support.
I've had to downgrade the wireless to G or use the ethernet connection to get online. And that is just barely. I have NO problems with using my WIN computers on the same router. This all started when 10.5.2 arrived. Even when the network sys pref's reported back that I had an IP address on the router, it STILL didn't connect.
Does anyone from Apple read the forums???? It appears not. And it appears that Apple don't really care as the problem seems to have been going on for awhile! -
RE: having trouble acessing my 3g network.Could my problem b that i have no internet connection to allow access to bring up my cellular account?
Either take it into your nearest Verizon Store or call Verizon and follow the prompts for technical support. They will walk you through setting it up. 800-922-0204
-
Having downloaded and installed IOS6 for IPad ,I can no longer access internet on IPad.Any solutions ?
1. Turn router off for 30 seconds and on again
2. Settings>General>Reset>Reset Network Settings
Maybe you are looking for
-
I've checked my current plugins and it still shows Adobe Acrobat Version 7 for Netscape (7.0.9.50) I tried to do the update but I get the same error each time - "Please tell Microsoft about this problem" "Send Error Report/ Don't Send". Also, do I ne
-
Error while creating WBS element.. regarding source structure
I am creating a project and then a WBS element. Its a investment project. While creating WBS element XXX, it gives me error that "WBS element XXX: SOurce assignments for source structure A1 missing in Investment Profile ZZZZZ." What shall I check? wh
-
Hi i have few questions about cs6 is there a way to let the ruler and straighten like cs5 ? i gave a look to my friend cs6 and cs6 ruler and straighten leave transparent image around the corner and is there a way to set for each adjustament layer a s
-
System Wide Text Substitutions
I hope this is the right discussion group for this question. I just discovered that 10.6 has the ability for applications like Text Edit to use automatic text substitutions so that if you type "teh" by accident it will automatically change to "the".
-
In cs5 Photoshop OXC000001d failed
The recently intalled software programme is not opening. OXC00001d failed to initialise properly.