WAP4410n LIMITED TO 130Mbs in N-mode

I have a WAP4410N-A V02 with firmware 2.0.4.2 for my office and the same at several client locations. The problem I see with all the units is that, for N-mode connections, the maximum reported connection speed is 130Mbs at both the WAP and the clients. Also, the clients' status page shows that only a standard channel (no wide channel) is in use. For info, all firmware upgrades/downgrades were accomplished by first resetting to factory default, applying the firmware, resetting to factory default and finally making the desired settings. The units were received with firmware v2.0.1.0 and were first upgraded to 2.0.4.2, then switched between 2.0.4.2 and 2.0.2.1 for the testing since the original firmware was not available on the Cisco site.
With firmware 2.0.4.2:
The WAP connects to the Cisco SG200-18 Gigabit switch at 1000Mbs.Wireless N connections report 130Mbs at the WAP and the clients.
My laptop's Intel Ultimate-N 6300 AGN card reports its transmit power as 32mw. This is the standard (and its max) value it uses when connected at wireless-G speed. (When connected in N-mode it transmits at ~10mw).
The Linksys-Cisco WET610N wireless bridge status page on 15 different computers reports only a standard channel in use and a connected bandwidth of only 20Mbs. All locations have no interference from other WAPs and are in relatively close proximity to the WAP4410N (signal level -40- to -50dbm).
With firmware 2.0.2.1:
The WAP connects to the Cisco SG200-18 Gigabit switch at only 100Mbs.
Wireless N connections report 300Mbs at the WAP and the clients.
My laptop's Intel Ultimate-N 6300 AGN card reports its transmit power as ~10mw (normal for N connections).
The Linksys-Cisco WET610N wireless bridge status page on the15 computers reports both standard and wide channels in use and a connected bandwidth of 40Mbs.
Other info:
No combination of settings changes the above described operation. This includes setting the WAP to N-only operation, switching the WAP's bandwidth setting between auto and 40Mbs, no security or WPA2-Personal-AES, etc. You name the combination and I have tried it.
It seems weird that the units report 130Mbs when a wide channel is not in use. I wonder if the overall issue has something to with the code that is applicable to MIMO and antenna selection?
I saw a couple of other discussions here noting the 130Mbs connection speed but those discussions appeared to raise no issue with it. I hope the info provided here helps Cisco solve this problem.
I would apprreciate any insight on this issue, including a response from Cisco.

Hi James,
When I bought the WAP4410N I was still using Vista and a beta of Windows 7 x64. My PC was reporting 300Mbps but I never believed it and just figured this was better then the Linksys Wap54g with DD-WRT. I was only showing 54Mbps on my laptops but the amount of data I could download over a minute was better then the WAP4410N. The best speed I can achieve (but only lasts a few minutes) is 130Mbps from the WAP4410N and downloads are painfully slow. Using a desktop gadget "network meter" on one of my desktop PCs with a wireless N USB adapter it is showing a speed of 54Mbps and a signal strength of 70% at a distance of 4 feet from the WAP4410N. At this distance I also experience interruptions in connection and poor performance. I do not know if my WAP4410N is defective but a beta firmware is to be released this month that is supposed to help. I have had to recommend other brands in this price range to those wishing to buy a stable product as this performance is not acceptable. My network is mostly GigaLan devices and strangely the intelligent switch reports the WAP4410N as running at 100Mbps with the firmware set the 1000Mbps so there is another mystery.
Best regards,
Brad

Similar Messages

Limited-access user permission lockdown mode and allowing anon users to view list items

I'm working on setting up a public-facing SharePoint website that will need to support anonymous user access. I'm using the Enterprise Publishing Portal site collection template, so the Limited-access user permission lockdown mode feature is turned on.
Everything is working great, except allowing users to view a list item. One of the key features I was hoping to leverage was the ability to display custom lists on a web page using a List View web part. Then they could click on an item and see the DispForm.aspx
so the item's content was accessible, including any file attachments.
A real-world example is adding an RSS viewer web part to the home page and allowing anon users to click on one of the events to see the details of it. Currently, in lockdown mode, the users gets an authentication prompt.
I toyed with the idea of turning the lockdown feature off. However, I'm uncertain of the full impact that would have on security. For example, I know it will allow anonymous users to see who created and modified an item, which we don't want exposed to the
public (i.e. our employee names). Seems like opening a can of worms by disabling the lockdown mode...
Any ideas on how to tackle this would be greatly appreciated.

So far, this is the most promising solution I've come across:
http://soerennielsen.wordpress.com/2012/05/29/how-to-make-list-items-visible-to-anonymous-users-in-search

Query about vWLC's limitation of not supporting Local mode APs

Hi,
I was reading about virtual WLCs and came to know about the limitation that vWLCs don't support APs in local mode. I have few queries about the limitation,
Is this limitation to ensure that all the traffic is not tunneled back to the vWLC and in effect, the ESXi host and not to create a bottleneck?
I was wondering if I can use a vWLC (installed at local site) for our smaller branch offices, say with 10-15 APs, with central switching and central auth rather than having a hardware WLC? Is it supported? Will it logically behave as local mode or would it choke the network by tunneling all the traffic back to the ESxi host? Would there be any impact for the end users? Or should I use vWLC with local switching central auth?
Thanks,
Utkarsh

Hi,
FlexConnect Mode: Central and Local Switching. Only FlexConnect Central and Local Switching APs are supported, Local Mode AP will only join the controller but will not associate the clients.
So once AP joins the controller we can change the mode from Local mode to Flexconnect mode.

WAP4410N firmware 2.0.4.2 bug: 300Mbps data rate not possible

I've spent parts of the past five days buying and exchanging several WAP4410N units because I was not able to achieve anything close to a 300Mbps data rate. I also tried various wireless-n network cards which were known to be configured correctly for 300Mbps speeds with no luck.
The highest speed I was able to achieve was 130Mbps, which is an indication that channel bonding is not in effect.
Then I came across another post in the forums:
WAP4410N does not exceed 130Mbps in N mode at close range.
where the OP mentions recently upgrading to firmware 2.0.4.2, though not treating that as the cause of his problems.
On a lark, I tried downgrading to both firmware 2.0.2.1 and firmware 2.0.3.3, and to my surprise, I was able to achieve the full 300Mbps data rate with both firmware versions.
When I reverted back to 2.0.4.2, I was not able to achieve the full 300Mbps data rate.
So, right now, I downgraded to firmware 2.0.3.3 so I can get the higher data rate, though there are other quirks to deal with.
Furthermore, when I do a web search of reviews, I can see that the inability to achieve the 300Mbps data rate is a huge source of complaints.
Cisco, please fix this firmware!
Edited to add: I found another post regarding the same phenomenon:
WAP4410n LIMITED TO 130Mbs in N-mode

Hi James,
When I bought the WAP4410N I was still using Vista and a beta of Windows 7 x64. My PC was reporting 300Mbps but I never believed it and just figured this was better then the Linksys Wap54g with DD-WRT. I was only showing 54Mbps on my laptops but the amount of data I could download over a minute was better then the WAP4410N. The best speed I can achieve (but only lasts a few minutes) is 130Mbps from the WAP4410N and downloads are painfully slow. Using a desktop gadget "network meter" on one of my desktop PCs with a wireless N USB adapter it is showing a speed of 54Mbps and a signal strength of 70% at a distance of 4 feet from the WAP4410N. At this distance I also experience interruptions in connection and poor performance. I do not know if my WAP4410N is defective but a beta firmware is to be released this month that is supposed to help. I have had to recommend other brands in this price range to those wishing to buy a stable product as this performance is not acceptable. My network is mostly GigaLan devices and strangely the intelligent switch reports the WAP4410N as running at 100Mbps with the firmware set the 1000Mbps so there is another mystery.
Best regards,
Brad

WAP4410N, and WRVS4400N V2 ?

I have an issue were I have a wrvs4400N V2 sending out a wireless signal. About 150 feet away I am trying to install a WAP4410N and utiliz the cient/repeater mode in the AP. I log into the Access Point and on the AP tab i choose the client /repeater mode and i check the box for "Allow Stations to associate". I click the Site Survey and after a few moments i get the list of availible wireless networks, with the SSID that i have in my router listed. I select my router and then save the settings. When i veiw the availible wireless networks on the PC i seethe network name and Excellent signal strength.
There are a few different things i have gotten when i try to connect to the network:
1. it takes quite a long time to connect and pull an IP address. and when i finally do my signal strenth is down to 1 bar. I suspect that instead of connecting to the access point i am connecting back to the router with is some distance away.
2. I do not pull an Ip address at all and get the "Limited or no connecctivity" error
Does anyone know of a compatibility issue between WAP4410N and a WRVS4400N V2? I am at a complete loss.

What should actually be done, is set the WRVS4400Nv2 up to support WDS. On the wireless tab, there is a sub-tab for WDS. Under this sub-tab is where the ability to repeat the signal is located.
First, set the router up completely. Configure all dhcp,firewall,vlan,wireless, etc. settings, then cable the WAP4410N directly to the router.
Access the WAP on ip address 192.168.1.245. Set the WAP to client/repeater mode under the AP mode tab. Then perform a site survey and select your SSID from the survey. This is the extent of basic setup.
If you have configured security for the wireless network, then obviously enter the proper information when prompted.
I did notice when you perform the steps above, if you connect your client to the WAP and then unplug the WAP it will remain connected to the network and traffic will still flow. However, if you reattach the power to the WAP the pc will stay associated to the WRVS and will not jump back to the WAP. You must (or atleast in my case, I did) reboot BOTH devices to resolve the issue. If you only disassociate and then reassociate, it still will only connect to the WRVS.
I hope this helps.
Bill

I cannot keep it from re directing to various unwanted sites... How do i fix this. Not going to start in safe mode every time! FRUSTRATED

After updating firefox,, i keep getting redirected almost 100% of the time.. I have attempted to fix this issue but i do not want to delete and redownload ff and loose all my saved info.. passwords etc. there has to be an easy fix for this.. If not.. i will start using another browser!!!!

Sounds like a Malware infection on your PC.
Install, update, and run these programs in this order. They are listed in order of efficacy. '''''(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)''''' These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have. 
''Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.''
Malwarebytes' Anti-Malware - [http://www.malwarebytes.org/mbam.php] 
SuperAntispyware - [http://www.superantispyware.com/] 
AdAware - [http://www.lavasoftusa.com/software/adaware/] 
Spybot Search & Destroy - [http://www.safer-networking.org/en/index.html] 
Windows Defender: Home Page - [http://windows.microsoft.com/en-US/windows7/products/features/windows-defender] 
Also, if you have a search engine re-direct problem, see this: 
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
If these don't find it or can't clear it, post in one of these forums for specialized malware removal help: 
[http://www.spywarewarrior.com/index.php] 
[http://forum.aumha.org/] 
[http://www.spywareinfoforum.com/] 
[http://bleepingcomputer.com]

How do I get Windows 7 to display in Target Display Mode on IMac

I am increasingly frustrated by my inbability to get my Mac Mini running Windows 7 to display on my late 2013 27" IMac using Target Display mode.
My setup:
1. IMac 27" Late 2013 running OSX 10.9.2 with all the latest drivers as of Mar 7, 2014.
2. Mac Mini Server Mid 2011 running Windows 7 SP1, 64bit, all the latest Windows drivers as of 3/7/14, using the latest BootCamp Drivers for this machine, ver 5.1 downloaded 3/5/14 to this machine using Boot Camp utilities in its OSX mode.
3. Connected via Apple Thunderbolt cable.
My process is as follows:
a. Turn on the IMac, boot up in the normal manner, preparing it to run in Target Disk Mode in OSX.
b. Turn on the MacMini boot up via BootCamp, in the normal manner in to Windows 7.
c. When Both machines are on and connected via their Thunderbolt ports, I enter cmd-F2 on the IMac keyboard to enter Target Disk Mode.
Nothing happens.
I use this IMac to display my MacBook Pro in OSX, so I know it is working, but I can't see where the problem is.
I have reviewed all of the Apple support information and followed it explicitly, to no avail.
When I have called the Apple support team, I get little help, they assert that they can't troubleshoot because it is not all Apple hardware/software (everything including the Thunderbolt cable is Apple except for the Windows OS)
Any suggestions will be welcome...
Thanks!

I have finally achieved some clarity on how Target Display Mode works, or rather doesn't work.
And I have been mistaken in some of my prior comments.
Target Display Mode is a function of the host machine, at this point only the IMacs. And it is only available when the host machine is running OSX.
But the most recent Thunderbolt versions of the IMac have been significantly dumbed down in this functionality.
The prior generation of IMacs whose video was supported through the Mini Display Port supported almost any input from a Mini Display Port compliant Computer through the use of various mechanical adapters, and certainly from any Mac Hardware or software combination. It was a very versatile setup, and the IMac in this manner could serve as an absoloutely beautiful monitor for a wide variety of hardware/software combinations.
When the current version of the IMac was deployed using the Thunderbolt ports for input for external video, we apparently left a world of standards based video input and entered the world of Apple proprietary video.
The current model of IMacs with thunderbolt video have a very limited functionality in Target Display Mode compared to those of us who have used it previously. and it only functions when the client machine is running OSX.
No other video input from any source will display.
I am not quite clear on the reasons one would want to display OSX on an OSX native machine, but you can do it. I guess MacBook Pro or Air running OSX will now display on the IMac if that is your need.
Likely the most likely need for Target Display Mode for the rest of us is to run Windows on an external machine and display the video on the IMac, as we have been able to do with the prior generations of IMacs for several years now.
Apple has been unwilling to distribute the technical specifications of its video input requirements in Target Display Mode, (other than to assert it requires OSX), and these technical specifications appear to be proprietary.
I have personally unsuccessfully tried to display the output from both Windows 7 and a Windows 8 machines running from a Windows thunderbolt port into a thunderbolt port on a current model IMac using Target Display Mode.
Unfortunately, there are still a few applications that won't work in Mac world and require a native Windows machine. My current need is to run Dragon Naturally Speaking via Citrix to a remote Citrix server and a Windows app. Parallels and VMWare Fusion do not work, nor does the OSX version of Dragon Dictate function via Citrix. So I am stuck.
I hope that Apple, so long a leader in technology, will restore the functionality it abandoned when it embraced thunderbolt as its only video iniput in Target Display Mode.
Thanks!

Processing Large Files using Chunk Mode with ICO

Hi All,
I am trying to process Large files using ICO. I am on PI 7.3 and I am using new feature of PI 7.3, to split the input file into chunks.
And I know that we can not use mapping while using Chunk Mode.
While trying I noticed below points:
1) I had Created Data Type, Message Type and Interfces in ESR and used the same in my scenario (No mapping was defined)Sender and receiver DT were same.
Result: Scenario did not work. It created only one Chunk file (.tmp file) and terminated.
2) I used Dummy Interface in my scenario and it worked Fine.
So, Please confirm if we should always USE DUMMY Interfaces in Scenario while using Chunk mode in PI 7.3 Or Is there something that I am missing.
Thanks in Advance,
- Pooja.

Hello,
While trying I noticed below points:
1) I had Created Data Type, Message Type and Interfces in ESR and used the same in my scenario (No mapping was defined)Sender and receiver DT were same.
Result: Scenario did not work. It created only one Chunk file (.tmp file) and terminated.
2) I used Dummy Interface in my scenario and it worked Fine.
So, Please confirm if we should always USE DUMMY Interfaces in Scenario while using Chunk mode in PI 7.3 Or Is there something that I am missing.
According to this blog:
File/FTP Adapter - Large File Transfer (Chunk Mode)
The following limitations apply to the chunk mode in File Adapter
As per the above screenshots, the split never cosiders the payload. It's just a binary split. So the following limitations would apply
Only for File Sender to File Receiver
No Mapping
No Content Based Routing
No Content Conversion
No Custom Modules
Probably you are doing content conversion that is why it is not working.
Hope this helps,
Mark
Edited by: Mark Dihiansan on Mar 5, 2012 12:58 PM

Is the CMYK color mode available in Photoshop Elements 12?

In taking a photography course I was introduced to color printing modes in Photoshop CS6 which includes CMYK as one of the modes. I am currently using Photoshop Elements 11 which is limited to the RGB color mode. Does Elements 12 offer CMYK?

No, this is one of the areas where Adobe is determined to keep a difference between PSE and full Photoshop. No version of PSE has CMYK support and it's unlikely to come in a future version, either, I'm afraid.

What Everyone Should KNow and Linksys Should Advertize About WRT350N Storage Link Limitations

I have spent hours with Linksys online chat trying to get my wrt350N storage link to work as advertised. Basically, I want to hook up a 400gb mybook hard drive and use the networked drive to backup my netwroked computers over the wireless network. While I can write individual files to the networked hard drive, and can copy and paste large folders using windows explorer, I can not use backup programs. The netowrked drive reports incorrect information as to its capicity to "my computer" and always shows up as "read only" while some programs don't seem to mind this, every backup program I have used has problems with this clitch.
After several sessions with linksys and having retuend the router to linksys for a new one, this is what technical support said this morning:
"You: ok so if I have you right, the router's storage link is not guaranteed to work at all with >300gb storage devices, does not work at all with 3rd party backup programs, and does not provide a backup program of its own, is that the bottom line?
Tech Support: Exactly. That's its product limitation."
Just so everyone is clear, Linksys does not gauruntee that storage link works at all with drives greater than 300gb, it is not compatable with 3rd part backup progrmas and does not provide a backup program of its own.
This is independant of ntfs vs fat32 and yes I do have the new firmware 1.03.2 and have it correctly installed (linksys checked all of my settings online).
If I am missing something and there are others out there who are gettnig storage link to work with backup software, I would love to know what I am doing wrong, because 7 different linksys tecnical support people have been unable to tell me.
Since Linksys is unwilling to place these product limitations on their packaging, I thought that potential users deserve to know the limitations of this product.
(Mod note: Post has been edited for guidelines compliance.)Message Edited by primus on 03-04-2007 08:43 PM

sounds like you are in the same boat I was. I bought the WRT350N to use with my macbook pro and attached a 500gig usb drive to it for remote storage. I got nothing but permission problems copying files. The save usb drive worked fine in a dlink storage box. I took mine back and ordered the
Airport Extreme-N
- James

WAP4410N Duplicate IP's when Repeating

First here is our network breakdown
8 Windows 2008 Servers - uneffected
5 Windows 2003 Servers - effected with dupe IP's
We have AP - A, B and C all configured static and outside of our DHCP scope
A - 104.240
B - 104.241
C - 104.242
WAP A is setup to allow the MAC's of A and B to repeat its signal
The issue starts about 1-2 minutes after I set B and C to client/repeater and select A in site survey then save the settings. Obviously its weird that only our 2003 servers are getting this error
The system detected an address conflict for IP address 192.168.105.201 with the system having network hardware address *MAC ADDRESS OF ROUTER A*. Network operations on this system may be disrupted as a result.
Any thoughts?

I have the same problem, when i put my two WAP4410N to work in client/repeater mode, all the host in the network starts the advisory alert that the ip is used by an other host.
Any solution?

BAPI_PO_CHANGE and Limits

Hi,
According to OSS 561507 you can delete limits using BAPI_PO_CHANGE. Has anyone tried this? Can you show me how to do this? Or is there another way of doing this?
Any suggestion is highly appreciated.
Thanks in advance!
Tee
Message was edited by:
        Tee Smith
Message was edited by:
        Tee Smith
Message was edited by:
        Tee Smith

Hi Tee,
Symptom
Also implement Notes 579205 and 579987 immediately afterwards as these two notes correct difficulties with a changed interface. For Release 4.6C, you also need to add Note 593428.
You can also change services using BAPI_PO_CHANGE. Up to now, it was only possible to add complete service or limit items.
Using the new BAPI_PO_CHANGE, you can now make changes to services and with limits.
Since in production mode the interfaces are filled entirely from available documents by a report, SAP always assumes that the services or limits to be changed are sent to the BAPI interfaces with all the data belonging to them, even if not all the data is changed. If required entry fields are missing, the system displays an error message, other data not filled is possibly initialized. (It is not necessary to assign the complete item.)
What BAPI_PO_CHANGE can do now:
      1. Changes to an existing item:
              For an existing item, you can
            a) Add, change or delete services.
            b) Add, change or delete limits (free limits and contract limits), provided that this does not cause the net value of the purchase order item to become "0".
      2. Account assignment change for item category B and D: the account assignment for an existing item can be changed.
            a) Account assignment category U can be converted into another account assignment category allowed for the item categories, and vice versa.
            b) An existing account assignment can be changed.
            c) In case of services, a single account assignment can be converted into a multiple account assignment and vice versa (- not for limits (with item category B), here multiple account assignment is not possible on-line either).
      3. Changes to more than one item.
What the BAPI_PO_CHANGE cannot do:
      1. Add or change service specification outlines.
      2. Everything that is not possible on-line either.
Other terms
BAPI_PO_CHANGE, 2012, service, BBP
Reason and Prerequisites
Note 494759 is prerequisite for implementing the correction.
Solution
      1. Implement function modules:
          o MS_CHANGE_SERVICE_PACKAGE_PO
          o MS_CHANGE_ACCASS_PO
          o MS_CHANGE_LIMIT_PO
                    Note that with each of the three function modules the "Global" indicator must be selected on the "Attributes" tab page. You can set the indicator when you create a function module by following the menu path: In Transaction SE37 or SE80 - Edit -> Interface -> Globalize parameter.
      2. Use Transaction SE11 to create the EXTREFKEY external reference code field (domain CHAR_40).
      3. Enhance tables, structures and views as follows:
            a) To table ESLL, add component
          o EXTREFKEY (Component type EXTREFKEY, domain CHAR_40)
            b) To structure BAPIESLL, add component
          o EXTREFKEY (Component type EXTREFKEY, domain CHAR_40)
            c) To structure BAPIESLLC, add the components
          o EXTREFKEY (Component type EXTREFKEY, domain CHAR_40)
          o DELETE_IND (Component type DEL, domain CHAR01)
            d) To view ML_ESLL, add component
          o EXTREFKEY (Component type EXTREFKEY, domain CHAR_40)
            e) To structure BAPIESUCC, add the components
          o SHORT_TEXT (Component type KTEXT1, domain TEXT40)
          o DELETE_IND (Component type DEL, domain CHAR01)
            f) To structure BAPIESUC, add component
          o SHORT_TEXT (Component type KTEXT1, domain TEXT40)
            g) To structure BAPIESKLC, add the components
          o QUANTITY (Component type MENGEV, domain MENGV13, reference table field ESLL-MEINS) and
          o NET_VALUE (Component type SNETWR, domain WERT11V, reference table field ESSR_WAERS)
            h) To structure MSUPDAP, add component
          o EXTREFKEY (Component type EXTREFKEY, domain CHAR_40)
      4. Enhance limit and service text structures:
          o MS_CHANGE_LIMIT_PO: T_ESUC
          o S_CHANGE_SERVICE_PACKAGE_PO: T_ESUC, T_ESLLTX (T_ESLLTX is only relevant for R/3 Enterprise)
      5. Create the following Includes in function group2012:
L2012F41
L2012F42
L2012F43
L2012F44
L2012F45
L2012F46
      6. See the correction instructions.
      7.
Afterwards, you must also implement Note 630097, which solves a large number of problems.
Regards
Aneesh.

Limited Access not working as intended

In SharePoint 2010 when Limited Access (fine grain permissions) is enabled you could assign permissions for a user on a list item or list etc. SharePoint would then grant Limited Access permissions for that same user on parent scopes. This allowed the user
to have access to shared resources such as navigation and master pages allowing him to traverse to the target item or list without having access to any other content.
I can't seem to replicate this in SharePoint 2013. I have the following features:
SharePoint Server Publishing Infrastructure: Enabled (site collection feature)
Limited-access user permission lockdown mode: Disabled (site collection feature)
SharePoint Server Publishing: Enabled on all sites (Site feature)
If I assign permission to a user for a list. The user can view that list via URL, but cannot view the parent webs/sites. Cannot view the navigation (site scope).
If anyone has any idea as to why Limited Access isn't working as I hoped it would, I would be very appreciative of any help!
Regards,
Damien

Since Publishing is enabled, the pages are stored in the Pages library and CSS etc is stored in the Style library. Make sure that users have access to those locations. If they don't then having limited access won't allow viewing the default
page and navigation. I suspect in 2010 you were using sites where the default page was stored directly in the site root folder rather than in a library. Changes in 2013 moved away from that design. So limited access normally won't allow display
of the root site unless you also give users access to the page and any additional required material.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

ASA Routed/Transparent Mode - Advice

Hi guys,
I'm looking for some advice regarding the deployment of an ASA. I have two networks separated by a routed link (layer 3 switch to layer 3 switch). I would like to deploy an ASA between the two networks for increased security. I'm leaning toward transparent mode so I don't have to have an additional IP subnetwork configured, and because deployment seems a little 'easier'.
I would welcome any feedback.
Thanks.

Hi,
So there is 2 networks which are separated by a routed link between the L3 switches? Have you considered simply moving the LAN and Link networks IP address to a Routed Mode ASAs interfaces when inserting it between these networks or is there something on the L3 switch that prevents this?
Naturally you can use the ASA in Transparent Mode also. I have not deployed Transparent ASAs as usually the Routed Mode has been required. Even firewalls installed to internal networks (like between factory automation and office networks) have always been in Routed mode.
Looking at the ASA Configuration Guide the limitations set by the Transparent Mode are not something that would prevent us from using them instead of the current setups. I would imagine that the most important limitation in many setups has usually been the fact that the VPN is not supported in Transparent mode though I guess in your case that would not be a problem.
The ASA Configuration Guide section on Transparent mode (guidelines/limitations) can be found here:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/intro-fw.html#pgfId-1501525
- Jouni

Help installing via Firewire (Target Disk Mode)

I purchased a used iBook G4 which came with Tiger 10.4.8, and as much as I really wanted to keep it, I don't have the original Tiger discs and needed to reinstall an OS to be the Admin account (I kept getting password prompts when connecting and updating my ipod, etc).
I have Panther and have successfully installed it under circumstances where I've had to utilize Target Disc Mode (connecting one computer to another via Firewire).
I've tried connecting this iBook to my iMac G3, it recognizes it, and I am fully capable of formatting the iBook's disc, which I have, but after attempting to install Panther, the iBook won't boot on its own.
First of all, it also won't boot off the Panther disc by holding down C on bootup. So i am pretty much limited to a Target Disc Mode install. So, to explore an alternative, I have a G4 with a Software Restore disc at work. The restore has Jaguar on it, but I figured I could restore to Jaguar, then upgrade to Panther no problem.
Again, using my iMac G3 and the restore CD, i was able to install the OS, but the iBook still does not want to book on its own. Unlike with the Panther install, this time it gets a few seconds into loading and then crashes. It gives me the black box in the middle of the screen saying I need to restart my computer by holding the power button for a few seconds.
Any thoughts? Is it possible that since the G3 and the iBook G4 are in different "families" something's not going right?
Im going to go up to my office later today and try using my G4 to host the iBook through Target Disc Mode and see if that makes a difference.
Thanks for any feedback.
-Justin

Hi -Justin!
Tiger is available for purchase at The Apple Store (U.S.).
If you know what you are lookng for, a Full Retail Version, of the Tiger Install DVD, can alsobe purchased rather inexpensively, at some online Apple retailers, Amazon, eBay, AppleRescue, FastMac, etc.
As already posted, be sure not to purchase grey, upgrade or machine specific CDs or DVDs.
The disc must look exactly like the images in the above links.
Additional info in these links.
Using OS X Install CDs/DVDs On Multiple Macs
What's A Computer Specific Mac OS X Release
Software Update, Upgrade: What's The Difference?
Once Tiger 10.4.x is installed, you can use the PPC 10.4.8 Combo Update, to upgrade to the current version.
Shop Carefully, Examine All Documentation, And Good Luck!
ali b

WAP4410n LIMITED TO 130Mbs in N-mode

Similar Messages

Maybe you are looking for