WAP321 - Guest SSID not working

I have a WAP321 with 2 SSID's. One is for local access and another for guest. The WAP connects to a 3550 and it's port is set to
description Cisco Wireless
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,20
switchport mode trunk
no ip address
spanning-tree portfast
My ASA 5505 is set with both VLANs and I'm using DHCP to dishout the guest IP. MyWAP has both networks setup. VAP 0 is setup for VLAN 1 and VAP 1 is for VLAN 20. Both are enabled.
When connecting to my local wireless, I have no problem getting local access and Internet connection. When I connect to Guest I get an IP from my ASA's DHCP, but I cannot ping my gateway, which is my ASA. I know my guest VLAN is ok, because if I put a port on that VLAN, I can connect to the Internet.
When I do packet captures from the WAP (Administration-Packet Capture), I can't see any ICMP attempts either from the eth0 or VAP 1. When I capture my machines wireless interface I see ICMP attempts with no reposnds. It makes me think I missed something in the WAP321 setup.
Any ideas where to check?

Hi, My name is Eric Moyers. I am a Network Support Engineer in the Cisco Small Business Support Center. Thank you for using the Cisco Community Post Forums.
While what I am fixing to share is not in any way a great solution, It can be utilized as a workaround.
With the WAP321, after trying a few different scenarios that didn’t work. I simply created two vlans, left the Untagged vlan as main vlan and changed the Management vlan to the second. I then attached the guest SSID to the Management VLAN. This allowed me to authenticate to my guest captive portal and get an IP and get out to the internet. The Main SSID still worked normally.
Now for some caveats:
Problem: If a wireless client knows the IP of the WAP and the username and password they could get into the WAP.
Solution: Setup Management Access Control to an IP outside the DHCP scope for that VLAN and have a Strong Password.
Problem: Management of the WAP321 can only be from an IP on the Management VLAN. (In my case 2)
Solution: Setup Management Access Control to an IP outside the DHCP scope for that VLAN and have a Strong Password.
Not the very best solution, but the only workaround I can come up with for now.
Thanks
Eric Moyers .:|:.:|:.
Cisco Small Business US STAC Advanced Support Engineer
Wireless Subject Matter Expert
CCNA, CCNA-Wireless
866-606-1866
Mon - Fri 09:30 - 18:30 (UTC - 05:00)
*Please rate the Post so other will know when an answer has been found.

Similar Messages

Guest SSID not working

Hi all, im trying to configure the MSM760 to work with Guest SSID via HTML authentication.im facing the problem that i can get IP address, i can ping to outside, but i cant open anything in the broswer, it seems there is DNS resolving issue.anyway.i have disconnected this controller from teaming yesterday, and the team works with two SSID's1. NPS SSID which is used for Domain users authentication2. HTML uses authentication the NPS SSID was always ok, but the Guest was not working, and as i understand from some reading in here that the Guest SSID will not work properly in Teaming.so i disconnected this Controller and and changed the management IP address to new range. and started to test but i didnt get success with browsing.also the NPS authentication on it stopped and i cant get it to work. any advice? thanks in advance.

FYI this is for HP wireless product and networking not support another company product. For that you need to go to their support site and ask for further help from them.

E4200 Guest Network Not Working

I cannot get the Guest Network feature to work.
Even though Guest SSID is enabled, it does not show up on any devices attempting to connect. Manually connecting by entering the Guest SSID fails (not recognized). On devices with the primary 5 and 2.4 GHz configured they do see the third network but without SSID (unknown) and are also unable to connect to it manually using the SSID.
Here are my settings:
Firmware: 1.0.02
E4200 is configured in Bridge mode (WAP).
5 GHz Network
Mode Mixed
SSID Astro2-an
Width Auto
Channel Auto (DFS)
SSID Broadcast Disabled
2.4 GHz Network
Mode Mixed
SSID Astro2-bgn
Width Auto
Channel Auto
SSID Broadcast Disabled
Guest Access
Allow yes
Name Astro2-bgn-guest (cannot be changed)
Guest Password testpassword
Total Guests Allowed 5
SSID Broadcast enabled
I did not try this before 1.0.02. Have rebooted modem and verified all configs (multiple times). The network is live in an office and can't keep screwing with it or drastically changing its settings.
Peter
Solved!
Go to Solution.

[email protected] wrote:
I have now tried 3 of these routers and the problem as I see it is when you set the E4200 to bridege mode with a static IP then the client receives a .33.x address receive the E4200's default gateway and a .33.1 as the dns servers. I don't see how the clients could resolve dns with these 2 entries.
Alas, I have think I have now figured out why some people can connect using the E4200 in bridge mode as a guest and some cannot. It is my belief that Cisco needs to update the firmware to allow you to enter dns values on the staic page because if you set the E4200 to obtain an IP address automatically then it receives good DNS info. You can verify my results by looking at the staus page in staic and dynamic mode.
I hope this helps people that are having problems.......
(Mod Note: Edited due to non-compliance of forum guidelines.)
Your findings are correct. However I don't see where adding a static DNS would work. What Cisco needs to do is provide the DNS of the connected gateway for internet access when in bridge mode for guest connections. Then restrict routing to just the gateway for internet access and no local routing.

EA4500 Guest Network not working

A few days ago I saw there was an upgrade for my router. I clicked on it and away I went. Since updating my guest network isn't working. My android and Kindle HD find the guest network, attach but no prompt for password ever shows up like it did before. The web page will time out and die. Does anyone have a clue why my devices don't prompt for a password anymore?

cperficio wrote:
A few days ago I saw there was an upgrade for my router. I clicked on it and away I went. Since updating my guest network isn't working. My android and Kindle HD find the guest network, attach but no prompt for password ever shows up like it did before. The web page will time out and die. Does anyone have a clue why my devices don't prompt for a password anymore?'i clicked on it and away it went' could be the problem. as much as linksys would like to think it works that way, it has been shown time and time again that the best way to update is to:download the update file to a pc with a wired connection factory reset the routerflash the file from that wired pcfactory reset againconfig from scratch not a backupyou might try to do a factory reset and config and see if it clears the issue. also on those devices that are not working try forgetting the connection and connect again.

Guest account not working

Guest WiFi is not working.

We need a bit more information to be able to help.
Are you saying that the Guest Network was working before and is now not working?
Or, that you are trying to set up the Guest Network for the first time?
The Guest Network requires that the Time Capsule be connected to a simple modem.......not a modem/router or gateway type of device that is often furnished by Internet Service Providers.
Can you provide the make and model number of the device that you call your "modem", so we can check on compatibility with the Guest Network feature?

Guest Network not working in latest Airport Extreme

Just bought the latest Airport Extreme (802.11ac), and want to enable the Guest Network.
- Installed latest firmware
- Set Airport in Bridge Mode
- Enabled Wireless Network
- Enabled Guest Network
There is no connecting to Guest Network (iphone) and if possible (macbook) there is no internet.
With a previous version of Time Capsule, the Guest Network in the same setting worked like a charm.
Anybody seen this before or is the Airport Extreme working different than a Time Capsule?

According to the theory what you are saying about the A1355 is not possible.. ie there is no guest in bridge.. I have tested it and can assure you it did NOT work.. it fooled me into thinking it should and I spent many hours working on it.. our forum expert here.. Bob Timmons set me straight.
Now I am always a believer in voodoo and gremlins and maybe the tooth fairy when it comes to wireless.. it is about 80% of the above and 20% science.. so please do the test again and see if it is possible.. but I can assure you.. apple have set guest network to off in bridge.
There are ways around it.. complicated methods. ie if you extend wireless to your TC.. from another apple router where the router is on, then guest can be used. You can also use a managed switch to set vlans for the guest.
See the following which I used to research this topic.
Guest network in bridge.
https://discussions.apple.com/thread/2815541?start=15&tstart=0
https://discussions.apple.com/thread/3617532
https://discussions.apple.com/thread/5247107?start=0&tstart=0
https://discussions.apple.com/thread/4787934?start=45&tstart=0
https://discussions.apple.com/message/23127620#23127620
Good Luck.. !!

Guest WiFi not working with DHCP disable

Hello,
I am using my "server" for handling DHCP requests, in the past i used my router to perform this task.
After disabling my DHCP server on the router i found out my guest WiFi is not working anymore. It seems it keeps searching for a DHCP server to get an IP but i am not sure whether this is the problem.
Could someone help me with this problem and hand me a solution or alternative, i really would like my guest wifi to work.
Thanks in advance.

Not sure when or if it will be. You'll need to keep an eye on main web site for udpates and release notes. This may not be fixed as Guest WiFi may depend on DHCP to be enabled. It will be up to Linksys to figure this out.

10.8 Server - AFP Guest access not working

Hi Folks
I have a brand new Mac Mini server running the latest 10.8.4 and Server.app from the app store (10.8 / v2 / whatever it's called these days). I have everything up and running perfectly except that no matter what I do when users connect via AFP there is no option for them to connect as guest. It literally just does not even show up in the login dialog.
I have several AFP share points setup to allow guest access, I have enabled the option in System Prefs->Users and Groups->Guest User->Allow guests to connect to shared folders. I have even also enabled it via command line tool; serveradmin settings afp:guestAccess = yes
But no matter what I do any machines connecting (either via browsing to the server via finder and connecting or directly from "Connect to server" using the afp:// URI approach) the login dialog doesn't give us the option to select to connect as guest -- it's just not there at all in the dialog box.
This is fairly urgent, a few more days and this server needs to go into production at our school here and this is essential for the way we need to do things. A little more background information: we are bound to both a local OD setup and a campus wide AD setup (not sure if any of this matters or not).
Help and thanks!

And I guess toggling File Sharing on and off about a dozen times it seems to have finally picked up and is allowing guest access to work :/ Answer my own question!

Guest user not working at all (Mavericks Ver.10.9.4)

I am currently using a 2011 MacBook Pro running OS X Mavericks Version 10.9.4.
I'm having an annoying problem regarding the guest user, I just can't seem to get it to work. I got to User and Groups in the System Preferences, check the box "Allow guests to log in to this computer" and it doesn't work. I've tried turning it off, restarting my computer, then turning it back on and yet the guest account still doesn't show up in the login page or in the faster user switching menu. It's crazy how there's barely any information on how to fix this. I've searched google and the only results are how to enable guest user or how to get rid of it, nothing pops up on that the guest user is not working so I've come to the Mac community to see if I can get any help here. I have updated everything in my software update by the way.

This procedure is a diagnostic test. It makes no changes to your data.
Please triple-click anywhere in the line below on this page to select it:
dscl . -list /Users | grep Guest | pbcopy
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.
Wait for a new line ending in a dollar sign ($) to appear below what you entered.
The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.
The Terminal window doesn't show the output. Please don't copy anything from there.
If any personal information appears in the output, anonymize before posting.

Time capsule Wifi (for guest) does not work

Using the last model of airport time capsule, i faced an issue with the guest wifi. I see the guest wifi on the available wifi list, then i digit the password (system accept it) but i cannot abtain any connection. I tried several time by making several set up (also without protection) but the connection does not work. Only the main wifi is working well (i mean the wifi without any restriction..used by administrator). Someone could help me? thx Marco

The TC must be in router mode.. if it is in bridge even though it looks like guest network is available and even though Apple says it now works.. it doesn't.

WAP321 2 SSIDs not both showing Clustered in Single Point Setup

I have 2 Cisco WAP321 with 2 SSIDs setup Single point using VLAN 1 and VLAN 2 using firmware version 1.0.5.3. VLAN 1 is the management VLAN. One WAP321 is connected to a SG200-8 version 1.0.8.3 on a trunked port 1UP,2T. The SG200-8 is connected to a SG300-28 L3 switch version 1.3.7.18 on a trunk port 1UP,2T. The other WAP321 is connected to a trunked port 1UP,2T on the SG300-28 switch. Both SSIDs seem to work but the VLAN2 SSID does not show as clustered under single point Wireless Neighborhood. Only VLAN1 shows clustered. Do I have a setup issue? Is the Wireless Neighborhood not showing correct? What do you think is the problem why they are not showing clustered? Both SSIDs work and connect to the internet.
PS
If it matters DHCP is from the SG300-28 in L3 mode which feeds a RV180 router from a 1UP port on the SG300-28.

My name Eric Moyers. I am an Engineer in the Small Business Support Center.
You do not have a setup issue. Clustering/Single Point Setup is based on the device and not on the SSID's. When looking at the Wireless Neighborhood within the Clustering section, you will only see the first SSID listed regardless of how many SSID's you have configured.
Now as far as the connection are concerned you said that your friends were having a hard time connecting. When they eventually connected were they going to the guest network? When you connect with your laptop, are you connecting to the same SSID or a different one?
Eric Moyers
.:|:.:|:. CISCO | Cisco Presales Technical Support | Wireless Subject Matter Expert
Please rate helpful Posts and Let others know when your Question has been answered.

Guest WiFi not working correctly

I just bought a new EA6300 router expecially for it's guest wifi functionality but i have problems with this feature.
weather i log in via my laptop/ macbook/ android or iphone i can connect to the guest wifi network but the guest wifi portal is not displayed and i cannot login as guest.
After a reset of the router the guest wifi works for a little while but fails within couple of hours.
Is this a firmware bug or does someone knows a workaround.
Hope Linksys can help me with this standard build in feature!!!
Thanks in advance.

blue_butterfly wrote:
Hey there, bramschats! Intermittent guest network connection may be caused by wireless interference. Try changing the wireless channel of your router to either 1, 6, 9, or 11. You may also want to change your security settings to WPA2 Personal. That should take care of the intermittent connection. If all else fails, update the router's firmware.
There is no "I"in the word Team.
(moxx)
hi blue_butterfly: I would kindly suggest a better way to do what you suggest. It would be best to troubleshoot the problem by looking first to see if there actually is congestion. there are apps available for free to see what channels are being used. By randomly moving to another channel you may cause others to then be interfered with causing them to move and the problem just continues to move around. Also, the only wifi channels that don't overlap (at least here in the USA) are channels 1, 6, and 11. All the other channels cause at the very least a small amount of signal degragation to the adjacent channel. So try to find the app for whatever device you can use, android or iPhone and see what is actually out there, select the channel with the lowest signals on it and see if that helps. The channels in between 1, 6 and 11 can certainly be tried but just be aware that they are the least advisable ones to use.
@ bramschats: if you are able to use the guest login at some times but then it doesn't work after a while try refreshing your browser before you re-boot the router. If that still doesn't work and the only way to fix it is to reboot the router complain to belkin about it. There seems to be a lot of bugs in their software lately and the only way we will get their attention is to complain, return deivces etc.

My first Jabber Guest link not working

So I believe I have everything set up correctly for Jabber Guest, but when I browse to the link I created I either get the Expressway Edge login page, or if I'm logged in to the Exp I get "The requested URL /call/8888 was not found on this server." Maybe I'm confused on how the domains are supposed to work together, but shouldn't I be able to use the FQDN of the Expressway Edge in my Jabber Guest links? Thanks! Mike

From the Cisco Jabber Guest Server 10.0 Installation and Configuration Guide:
The Cisco Expressway-E administrator currently uses port 80 and therefore, incoming requests from the Cisco Jabber Guest client to Cisco Expressway-E on port 80 need to be remapped to port 9980 using a firewall (or similar) in front of Cisco Expressway-E.
The Cisco Expressway-E administrator currently uses port 443 and therefore, incoming requests from the Cisco Jabber Guest client to Cisco Expressway-E on port 443 need to be remapped to port 9443 using a firewall (or similar) in front of Cisco Expressway-E.

WAP321 Guest SSID

I want to create one more SSID (for guest use) in WAP321 AP. Is it possible to perform such setup with non-cisco switch and firewall.
Please advise. Thanks !

Additional Info:
I'm using WAP321 AP x 6
HP 1905-24-PoE switch x 4 (for IP phone and WAP321)
HP 1905-48 port switch (for data only)
Juniper SSG5 as a firewall router for internet access with fixed IP
Pls advise

[SOLVED] xmonad on virtualbox guest does not work

I'm trying to install xmonad on an arch guest in virtualbox.
I'm referencing both the Beginner's Guide and the VirtualBox doc. The beginner's guide says to install X a different way and points the virtualbox guide, which doesn't mention X.
So here's what I do:
$ pacman -S xorg-server xorg-xinit xorg-utils xorg-server-utils virtualbox-archlinux-additions mesa
$ modprobe -a vboxguest vboxsf vboxvideo
Looking online, I get the impression that virtualbox-archlinux-additions includes a video driver, so I don't install one (not sure which driver would work anyways).
After installing "xorg-twm xorg-xclock xterm dbus" startx works. However, when I exit, the output says something about pixman: 0.24.0 and complains
(EE) Failed to load module "vesa" (module does not exist, 0)
(EE) Failed to load module "fbdev" (module does not exist, 0)
(EE) AIGLX error: vboxvideo does not export required DRI extension
(EE) AIGLX: reverting to software rendering
(EE) VirtualBox USB Tablet: failed to initialize for relative axes
xinit: connection to X server lost
There is no default ~/.xinitrc (it does not exist)
I then install xmonad and xmonad-contrib. There is no default ~/.xmonad/xmonad.hs
I then do
$ cp /etc/skel/.xinitrc .
Then I append "xmonad" (I also tried exec xmonad) and run "startx" and I get a black screen that hangs. I can't quit the environment, so I'm forced to close the virtual machine. Adding ~/.xmonad/xmonad.hs doesn't help either.
Can someone tell me what's going on? Am I missing a video driver?
Last edited by whotemp (2011-12-09 07:02:46)

Hmm, so I now get:
$ xmonad
xmonad-i386-linux: user error (openDisplay)
with
$ cat ~/.xmonad/xmonad.hs
import XMonad
main = xmonad $ defaultConfig

WAP321 - Guest SSID not working

Similar Messages

Maybe you are looking for