Wireless AP with 802.1x

Does anyone have experience, and is willing to share, on setting up access points where the connected users are authenticated through 802.1x?
Here is my setup. Cisco 1240AG and 1131AG connected to an 802.1x enabled switch. The switch gets puts users on different VLANS depending on access (wired authentication already works). MS Server 2008 acting as RADIUS.
My goal is to have one SSID. When guests connects, they do not authenticate and are put on a guest VLAN. Authenticated users are put on a different VLAN.
Thank you in advance for any help on this subject.

Hi,
I am trying to implement 802.1X authentication in enterprise environment with access switch WS-C3750-48TS-E (C3750 Software (C3750-IPSERVICES-M), Version 12.2(50)SE3).
I am using dynamic VLAN assignments, like guest VLAN, restricted(critical) VLAN, unauthorized VLAN for wired clients.Everything if fine for them.
I want to use only one SSID for wireless clients. Is it possible to use "authentication host-mode multi-auth" command for configuring switch port with connected Cisco AP 1242G to it ?
Example configuration:
description Cisco 1242G AP
switchport access vlan 2223
switchport mode access
switchport voice vlan 998
authentication event fail retry 1 action authorize vlan 2226
authentication event server dead action authorize vlan 2227
authentication event no-response action authorize vlan 2224
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication port-control auto
authentication periodic
authentication timer reauthenticate 300
authentication violation protect
mab
dot1x pae authenticator
dot1x timeout quiet-period 10
dot1x timeout tx-period 1
dot1x max-reauth-req 1
spanning-tree portfast
spanning-tree bpduguard enable
Do I have to enable 802.1X auth on the AP or it has to be pass-through for wireless clients and be the client of the switch itself (with its MAC address) ?
Thank you in advance !

Similar Messages

Wireless Controller with 802.1x

Hi.
This may seem like a stupid question, but if i'm using 802.1x on my wireless network and using RADIUS/LDAP/ACS for authentication, do I need to configure any aaa commands on my access switches? It was my understanding that all traffic from the client is tunnelled back to the controller so this is not necessary?
Thanks.

No commands necessary on your switches. Your WLC has radius servers configured and the WLC will communicate with your radius.
Sent from Cisco Technical Support iPhone App

Extending home wireless network with 802.11b/g Airport Expresses

Home Setup: iMac with iSight G5 2.1GHz PPC, OS X Leopard 10.5.8, 2.5GB memory, 2 Airport expresses-802.11b/g.
Up to just recently, I was able to use my AE's to create a whole house wireless network: one as my main network connected to my cable modem, and the other as a wireless network extender. My extender got pulled out one day accidentally, and when I went to plug it in it wouldn't reconnect to my network...and so the problems began. Airport Utility used to give the option of "Extending the Wireless Network", but no more.
I've done a lot of searching through the forums regarding this issue, read through the sage advice by superusers Tesserax and Bob Timmons, and attempted to set up my main AE as my "WDS Main" AE and the other as my "WDS Remote". The WDS main connects fine to the internet, but the WDS remote continues to show a flashing amber light and inability to extend my wireless network. I've done soft and hard resets to the remote AE (which transiently gives me a green light, then back to flashing amber), network diagnostics using the Airport utility, but still no luck. The AE wireless extender continues to flash amber and is nonfunctional.
AE Wireless extender settings reported:
-WIreless Mode: Create a wireless network
-Connect using: Ethernet
AE Errors reported:
-Ethernet Unplugged
-Default Settings
I setup the AE Wireless extender as a WDS Remote, it resets and shows "Normal" without problems reported in the summary window of Airport Utility. Connection indicated as "Airport (WDS)" and Wireless Mode reads "participate in a WDS network", but the AE is still flashing amber and will not connect to the internet or Main WDS wireless network.
Went to the Genius Bar at the local mac store...they couldn't help at all.
I'm out of answers...help?!
Allan

There are basically two "flavors" of WDS that the AirPorts support: static & dynamic.
o A static WDS allows for a main, relay, and remote base stations in the configuration. This only operates in the 802.11g radio mode. Its advantage is it is well suited when you are trying to cover a considerable linear range ... like a rectangular house where the Internet connection comes in at one of the shorter sides and you want wireless at the other end. The biggest disadvantage of this type of WDS is that for every base station added, you lose half the overall bandwidth.
o A dynamic WDS allows for only a single main and multiple remotes. Think of a wheel with the main at the center and the remotes as spokes of the wheel. The advantage of this type of WDS is it operates in the 802.11n radio mode and doesn't suffer a significant bandwidth loss like the static version.
As a minimum, a dynamic WDS requires two 802.11n AirPorts (or Time Capsules). You can create a static WDS with either all 802.11g AirPorts or a mix of 802.11n & 802.11g AirPorts. Note; however, you cannot create a dynamic WDS with mixed mode base stations.

Securing a wireless network with 802.1x + WPA

I'm currently in the process of designing a new wireless network and am looking to do both authorization from a RADIUS server (Active Directory) and encryption using WPA. Rather than setting a pre-shared key and distributing it to all the users I would rather have the AP automatically distribute the encryption key after the user has authenticated. Is this possible? If so, which Cisco AP's support this functionality?

I don't think you can do that. You might want to think about the following (if you have all Windows clients)
- Use PEAP machine authentication and push out the config (over the wire) via GPO
- Configure a domain controller with PKI (Certificate Services) and machine auto-enrollment. Use EAP-TLS for authentication, and push out the wireless config via GPO
- Use WPA with PSK and push out the config via GPO.
The only problem is that your wireless client config would need to be pushed out over the wire (not wireless) via GPO. This also assumes that your wireless supplicant is Wireless Zero Config (and not the Intel PROset or Cisco Aironet stuff).
I'm afraid you're going to have to touch the machines one way or the other, but you can touch them remotely (via GPO) or touch the manually to configure the wireless settings.

Wireless Guest Access with 802.1X (PEAP/MSCHAPv2) and ISE?

Hi,
I have a setup based on WLC 5508, Catalyst 3750-X and AP3600i.
The WLCs are running 7.3 and ISE is 1.1.1
I'm trying to setup wireless guest access, where the guests connect to a SSID with 802.1X using PEAP/MSCHAPv2.
They should receive their username/password either from a sponsor directly (corporate AD user which prints the credentials) or through a SMS.
The credentials will be created by the sponsor, using the sponsor portal on the ISE.
Now to the questions:
Is it correct that the foreign WLC (i.e. the WLC within the internal corporate network), should be set to no L2 and L3 security on the guest WLAN, to avoid having the foreign WLC contact the ISE and all traffic be forwarded directly to the anchor WLC?
Is it correct that the anchor WLC (i.e. the WLC in the DMZ), should be configured with 802.1X/WPA2 L2 security and the ISE servers as the RADIUS servers on the guest WLAN, to ensure that the client is correctly authenticated/authorized by the ISE?
When a guest logs on, how can I ensure that only one device (MAC address) is allowed per user?
As it is now, a guest is able to log on with (I assume) an unlimited number of devices, using the credentials they have received.
Thankyou very much :-)
Best Regards,
Niels J. Larsen

Hi,
I have a setup based on WLC 5508, Catalyst 3750-X and AP3600i.
The WLCs are running 7.3 and ISE is 1.1.1
I'm trying to setup wireless guest access, where the guests connect to a SSID with 802.1X using PEAP/MSCHAPv2.
They should receive their username/password either from a sponsor directly (corporate AD user which prints the credentials) or through a SMS.
The credentials will be created by the sponsor, using the sponsor portal on the ISE.
Now to the questions:
Is it correct that the foreign WLC (i.e. the WLC within the internal corporate network), should be set to no L2 and L3 security on the guest WLAN, to avoid having the foreign WLC contact the ISE and all traffic be forwarded directly to the anchor WLC?
Is it correct that the anchor WLC (i.e. the WLC in the DMZ), should be configured with 802.1X/WPA2 L2 security and the ISE servers as the RADIUS servers on the guest WLAN, to ensure that the client is correctly authenticated/authorized by the ISE?
When a guest logs on, how can I ensure that only one device (MAC address) is allowed per user?
As it is now, a guest is able to log on with (I assume) an unlimited number of devices, using the credentials they have received.
Thankyou very much :-)
Best Regards,
Niels J. Larsen

802.1x wireless authentication with certificates

Hi.
I have configured and working 802.1x authentication with certificates for Wired connections. with no problem.
when i try to authenticate the same machine with 802.1x and certificates , on Wirelss, the ACS rejects it with:
"12520 EAP-TLS failed SSL/TLS handshake because the client rejected the ACS local-certificate."
the ACS is the same, the certificate the same, and the root ca is the same.
what's hapenning????
Antero Vasconcelos

What supplicant are we using for wireless authentication? Do we have complete chain of certificates installed on the client machine? Can you check if we have root CA/intermediate correctly installed in client and ACS.
~BR
Jatin Katyal
**Do rate helpful posts**

Adding 802.1x Wireless networks with a script

Hi,
We have some new wireless networks we've set up for students to use (I work in a University). The networks use 802.1x authentication, and WPA2-Enterprise encryption. Adding Macs with various versions of OSX isn't a big issue, but it's time-consuming. Users need to follow an instruction sheet, and the process is prone to errors.
I'm looking for a method to give users some sort of download to run, which can just add the SSID for our wireless LAN with the minimum of fuss. I've dug around and found various things, but I'm a little perplexed as to how best to go around it. I've seen things suggesting an AppleScript would be able to do it, but I'm no AppleScript export, so some sort of example would be nice.
Any pointers gratefully received.

did you find any resolution to this? our mba- mid 2013 deployment is having a very similar problem. We've gone through loads of troubleshooting and have yet to come to a resolution. all our mid 2012 mba's are working fine they're 10.7.5/10.8.4 mixed. console logs don't show much, i'll try the wireless diags tomorrow. our other 10.8.4 build appears fine on other models of machines. i've read posts about deleteing the adapters, deleting the system config plists and changing the mtu size, these steps do not work for us.
we don't have as high a failure rate with our deployment, but 25%-30% of our clients randomly drop connectivity and are unable to reconnect (fluttering wi-fi wave). when you slect the wifi symbol in the menu bar other wireless networks do not show, the 'looking for networks' fly wheel continues to spin. ocasionaly on login the yellow jelly bean will appear then disappear before finally timeing out without logging the user in (depsite having mobile accounts enabled). mostly the problem manifests itself when waking from sleep - the wifi symbol flutters endlessly without connecting. deleting the 8021x profile and readding it will reenable connectivity. we've tried new profiels, but to the same end. i know our certs and systems are fine because previous mac os x builds work fine as do our windows clients.
any input would be much appreciated.

How do I use a Verizon PC Wireless card with my iMAC Intel Core desktop?

Help! Bought a Kyocera KPC650 Wireless PC Card for Verizon wireless internet. Works fine w/ laptop because it has a slot. How do I configure my iMAC desktop to accept this card? Is there an external USB adapter? Or do I have to get one installed internally? Which adapter works with OX 10.4?
I've seen the Quatech U132 online. Will that work? Its $192!! As is the Sewell adapter too. ($209)
Any ideas? I want to get off SBCYahoo DSL and their router because our DSL line is damaged in our complex and no one is fixing it!
Thanks in advance.
tklines
iMAC Intel Core Duo Mac OS X (10.4.2) All-in-one

What protocol is Verizon using that is not compatible with the Airport Extreme built into your iMac? I have used Apple's Airport Extreme with a lot of different wireless routers with zero problems as all conform to either 802.11b or 802.11g standard both of which are supported by the built in Airport Extreme.

Airport Express (Model with 802.11G +54MBPS Mac/PC and Set Up Issues

Hi,
We have a 4 Mac and 1 PC Household. Cable Internet Service by Roadrunner.Cable model (owned) connected to a D-Link 802.11G wi fi router (by ethernet from cable modem)in the family room , then out to a Imac (the half moon base and LCD screen with a airport card also in the family room and the closet computer to the D-Link
router, (we did add a D-Link antenna to the router ? about 10 months ago (a D-Link ANT24-0700 (Version 1.2)and a HP 4 in 1 printer attached via USB to the Imac
,a eMac 1.25 ghz 1Gb ram with airpot card also connected wirelessly (no printer attached on the same floor but in a ajoinging room about 20 feet from the Router, and another eMac 1.0 Ghz 1Gb ram with airport card in the upstairs part of our house (a bedroom) and no issue with Internet connection (it has a Epson 3in 1 printer attached via USB, and a MacBook Pro with 802.11N wireless card in side , bought for a Christmas/Birthday Present and also for college.It to has no issues with the Internet where ever it may be in the house. Our sole PC a HP tower with a added D-Link WDA -2320 Range Booster Desktop Adapter (802.11G) and we added a D-Link Antenna same model as the other a ANT24-0700 to help with Internet access which it did as well as adding some ram to increase page loading time etc. It does not have a printer attached. I will get to the Topic Area now
The Airport Express. I was not involved in the set-up as I was laid up due to a bad back and post major knee surgery , But I always (especially recently) wondered why the light was amber and blinking. I read through the manual and also
Apple.com support and MacFixit.com (which is under construction and moved to part of Cnet.com)and then went to the Airport Express Discussion area (sorry for being so wordy) I need a Twitter account to post!) We have a network name for the D-Link and the computers all were added and it also supports a Xbox 360, a Sony PlayStation 3 and a Nintendo Wi (in online use without issue) but..
A network was also as it appears to myself) for the Airport Express and under the half moon bars showing connection strenght (there is our D-Link network "phoenix" with security protection WPA2 I believe) as I have set up the router, We had a Apple Base station prior that was ? 802.11B (a half moon white unit) still have it in the box ) So for normal daily use, checking e-mail and internet use all of the computers use the "phoenix" or D-Link supported Router 802.11G
and The other network calld Apple Network with numbers and letters after it (and hopefully security) password is unknown , The Airport Express is set up connected via USB to a HP B&W laser printer which has saved quite a bit of money on ink, To utilize that printer you must switch from "phoenix" The D-Link router network to the Apple Network (followed by letters and numbers) The Imac and the eMac in the family room and a ajoing room (after switching to the Apple Network
can than print to the lasr printer. The eMac upstairs and the HP Windows XP Professional software can not print to the laser printer (yet the HP PC shows it as a individual network and a strong signal, equal to the Internet connection from the D-Link, and the eMac (after switching under the half moon (not the proper name I am sure) to get to the Apple Network to print , it will not print, yet it shows a 5 bar signal, same as the D-Link connection. I do believe we have two seperate networks (but do not understand why the two Mac's in the family room can print to the laser printer by simply switching networks and then file and print. ** One other 9probaly major item is that it states to set up the Airport Express with a Mac With OSX 10.4 or later (at the time of set up, we had the Imac and two eMac's all running Panther OSX 10.3.9 9which they continue to have installed) We obtained the HP Tower and Monitor and HP 4in 1 printer ust before Christmas in 2008 and the MacBook Pro in Mid December 2009 (current model and running Snow Leopard 10.6. The HP Tower runs Windows Xp Professional (Service Pack 3) so the MacBook Pro which is much more mobile , could be used to do the set-up, or the HP Tower coulf be moved temprarily, I do recall if Router changes (at least with The D-Link You need to be connected by Ethernet to the Mac
that would be doing the set up/configuration of the router (and it runs OSX 10.3.9 and is a older Mac (with 80Gb Hard drive that is partioned for OS9 and OSX as well , it is under a Ghz processor wise and less than 1 Gb of ram as the last ram slot required a seal to be broken and 256mb of ram (?) could be added
it has 768 mb of ram but knock on wood running well. We use Lacie external drives
on the Imac and both eMac's and need to get external drives for the HP PC as well as the Mac Book Pro (15" screen)
I apoogize if I repeated myself, and rambled but I wanted to (in one post) to explain our set up and network configuration
Questions
1) if indeed it is that the two networks is true and a set yp that is not correct
can the Airport Express be configured without opening up the router (when ever that happens it seems one computer is unable to get online and each time its a differnt one a Mac or veen the PC
The PC under My Computer and Networks clearly shows the wto distinct and seperate netwoks with strong signals and the distance is not far (it is through a floor as the other emac and the PC are upstairs and cabling by ethernet is not a option
2) If I need to open the router would I add the Airport Express as a client as if it was one of the computers or gaming systems on the network? (adding the Mac adress or IP address (not sure how you find the Mac address) and its been while since the router was opened up for any additions or work on it.
3) would it be on the same channel as the router or not ?
4) Hopefully with proper configuration the light will stay on (and green) on the A/E and the eMac and HP PC will be able to print to the laser printer. Currentlt
when anything needs printed from the PC its put on a Flasg Drive and plugged in tothe Imac and the the Apple Network is selected and data printed, The eMac upstairs has the option of using the attached Epson 3 in one or doing the Flash stick work around.
I would be verya appreciative if some one took a look at the set up above and advised me of what is right, what is not right* and what to do to fix things up
I would imagine after proper set up, delete the Apple Network from the PC and eMac upstairs and ? all of the computers as we should have one base station (the D-link and the spoke (the A/E connected by UBS to the A/E (it may be ethernet but the cable connection from the A/E to the HP laser printer is correct (the rest of the A/E set up ... Please , tell me where it is and where it should be
and ? any idea why we can print to the laser printer down stairs and not up stairs ? it did mention printer set up with Panther as possible, page 43 of themanual we have un chaper 5 Tips and Troubleshooting (under whn your printer isn't responding) (we do not have the interfereance listed in the manual,
our phones are land line, one 900 mghz and the others 5.8 ghz
It is possible to move the A/E and laser printer if that would help the two computers (desktops) upstairs) bt the distance is way less than 150 but their is a floor and ? duct work (metal ) but I think here is a place to stop typing and let some of the experts on the discussion forums take a look.
one lst note (as the lap top will be going off to college in the fall (runnning Snow Leopard, and the other 3 Mac's run Panther OSX 10.3.9 should the HP PC windows Xp Professional be the computer to set up the air port express and the Airport Utility proram installed & would this conflict with the current Router (set up by a Macc running OSX 10.3.9 (Panther) i.e (should both set ups be on the same computer?) but actually aThe D-Link is OSX10.3.9 compatible (and 802.11G) and set up requires ethernet connection to a Mac (You type in the numbers and . etc and password as administror and you are in, or should the admin be on the same cpmpuer for the router and A/E ?
(and considering a Airport Extreme Base Station as well as dual frequency simulataneus and 802.11N (for the laptop now) and future, or wait. The 802.11
in theory would broadcast farther..?? even if computers had 802.11b(our Mac Desk tops and the PC 802.11B card
Thanks Again!!!
Many, Many Thanks
amnienttales

William Boyd Jr.
Hello again,
D-Link Router is model DGL-4300 (along with a D-Link ANT24-0700 Omnidirectional
7dbi Antenna . Our Cable Internet ISP (Roadrunner) provides consumers with dynamic ISP address's . All Mac's have Airport Cards and The Hp Tower XW4550 has a D-Link Rangebooster G Desktop Adapter WDA-2320 (also with a D-Link ANT24-0700 Omnidirectional 7 dbi Antenna (the PC OS is Win XP Pro Service Pack 3) The 3 desktop Mac's run OSX Panther 10.3.9 , The 15" MacBook Pro OS is OSX 10.6 Snow
Leopard (not sure what is after the .6 (right now) D-Link's website is
http://www.dlink.com , I have configured this router multiple times in the past.
also added as clients on the network (Utilizing the D-Link Router) are a X-Box 360, Sony Play Station PS3, and a Nintendo Wii all of which have on line ability
and enables online video game play with any one online.
As mentioned prior the Airport Port Express is Model A1084 Part No. M9447OLL/A
which is USB conected to a HP LaseJet B&W , model 1020 and some how the two computers near it can switch to the Airport Express Network from the D-Link Router based Network and print wirelessly to the A/E connected LaserJetPrinter
I realize I will need to reconfigure the D-Link Router and add the A/E as a client. I will try first to use the Airport Utility and see if I can do anything
Utilizing it (adding it to the D-Link network, I think its unlikely but worth a try but* the password is unknown but I have a few guess's as to what it may be.
I do have the necessary admin and network paswwords to cconfigure the D-Link Router,
1) * If the the A/E Utility experiment fails and I need to re-configure the router * do I need to (as per the Airport Express Set Up Guide (Use a Mac with OSX 10.4 or later or a PC with Win Xp Home or Professional (have a desk top PC that has the specs) and The Mac Book Pro meets the Mac Spec's)
If I can not get a password to work on the A/E I would reset it using the reset button
And before plugging in the A/E , connect the appropraite cables in our case a USB cable to the LaserJet Printer then plug in the A/E
2) I would then connect by Ethernet from Either the Mac Laptop or The PC to the D-Link router (if not the router will not set-up correctly)
3) The one question that puzzles me is that we are not using the A/E as a base
but a client
in two sections(Using Airport Express , connecting a Printer via USB
and use Airprt Utility to create a new network or join a new newWireless computers using Mac OSX 10.2.7 (Tiger) or later or a PC with Windows XP and it then goes in to the steps of ising the printer for both a Mac and a PC (using Bonjour on the CD that came with the A/E (this appears to contradict needing to use Mac OSx 10.4 or a PC with Win Xp set the A/E up for use as a printer
(joiing a new network or existig one)
And in Chapter 5 Tips and Roubleshooting= Your Airport Express Status Light Flashes amber & Your Printer is not responding (it is flashing amber and the printer does not respond to the two computers upsstairs (one Mac running OSX 10.3.9 & One PC running WinXp and its states to make sure the printer is selected
in the Printer list o client computers, to do this on a Mac using OSX 10.3 or later , open Printer Set Up Utility and follow steps and if a PC with Windows XP , Open Printers and faxes and then follow steps
in Closing ? can I configure the A/E Utility with a Mac using 10.3.9 as above or
? Per Chapter 1 Getting Started use a Mac with OSX 10.4 or later or a PC with Windows Xp Home or Professional
Perhaps I am taking the tips and trouble shooting and Printer Set up out of context or does the getting Started Computer specs contradict them or are they
for use if the A/E was going to be a Base Station and not a client..
Will keep at it,
ambienttales

Troubling extending wireless network with Time Capsule and Airport Extreme

I am trying to set up and extend a wireless network in my house, but it’s not working right. I have two Airport/Capsule units in the house:
2TB Time Capsule (Dual-Band II)
1 Airport Extreme (Dual Band)
I have the Verizon Fios router as my gateway to the internet, and also as my DHCP server. I have also tested the ethernet ports in my house to verify that they work, and that I can get a DHCP-issued IP address.
Now, my Verizon router has WiFI, and it’s still on. I am not using it though except to troubleshoot. So far as I understand, this should not cause a problem.
Base station setup
So I setup the TC to Create A New Wireless Network, on the ethernet network it’s on (Dlink switch plugged into Verizon router). I set it up in Bridge Mode (as opposed to having it dole out IPs, since the Verizon router does this already). The TC gets a valid IP, and my wireless device connect to it without a problem. I have checked “Allow this network to be expanded” under Wireless settings.
Extended station setup
The AE Dual-Band is plugged into the Ethernet, and is reset to Factory Settings. I name it “Airport Extreme 2” and I chose “I want Airport Extreme to join my current network.” The other two options are: “I want to create a new wireless network” and “I want to replace and existing base station or wireless router with Airport Extreme.”
I chose to “join,” I select “I want to connect Airport Extreme to my network using Ethernet to extend my existing wireless network.” The other options are to disable wireless entirely, or to “wirelessly join my current network.” On the next page it asks me to select the device or network that the Airport Extreme will connect to using the Ethernet. I set it to the Time Capsule.
Results:
Access near the Airport Extreme 2 is incredibly slow. Speedtest shows I am getting less than 1Mbps. Worse yet, my mail client won’t connect. It just times out.
What I had hoped was that the AE would connect via Ethernet to the network, and just bring the wireless network to the other side of the house. Instead it almost seems as though it is just re-amplifying the TC’s signal. Otherwise, why is performance so bad?
Thanks to anyone with some insight here!

Hello Kennuff. Welcome to the Apple Discussions!
Since you have the ability to connect all of the routers by Ethernet, there is no need to configure the Time Capsule (TC) & 802.11n AirPort Extreme Base Station (AEBSn) for a dynamic WDS (aka, extending a network). This option is only when the routers do NOT have an Ethernet connection between them.
Instead, you want to configure the TC & AEBSn in a "roaming" network. I suggest starting by performing either a "hard" or "factory default" reset on both.
Next be sure that both the TC & AEBSn are on the same Ethernet subnet coming from the Verizon-supplied router.
Configure the TC & AEBSn as follows:
AirPort Utility > Select the TC or AEBSn > Manual Setup > AirPort > Wireless
o Wireless Mode = Create a wireless network
o Allow this network to be extended: <not checked>
o Radio Mode: <leave the default or if you require a specific mode make sure both routers are configured the same>
o Wireless Security: <configure both routers the same>
AirPort Utility > Select the TC or AEBSn > Manual Setup > Internet > Internet Connection
o Connection Sharing = Off (Bridge Mode)

HP Officejet Pro 8500A Plus Support WEP with 802.1X

My boss currently bought a HP Officejet Pro 8500A Plus that have wireless function. Unfortunately our corporate wireless is protected with WEP with 802.1X that requires certificate import into laptop to connect to the wireless. I run thru the whole HP Officejet Pro 8500A Plus do not have any instruction on import the cert. I depply appreciate if any experts can assist me on the wireless setup?

Hello-
Make sure printer firmware is up to date.
http://www.youtube.com/watch?v=qZBhl0eMBPs
Also, plug printer directly into wall outlet.
Also, remember a click on the Kudos star to the left is a quick "Thanks" for a helpful post.
Please select the "Accept as Solution" button on the post that best answers your question.
I appreciate your input !
Thank You,
Donald

Creating a seamless wireless network with 2 AExpress units

I have 2 Airport Express units in different parts of my house. I have struggled for YEARS trying to get them to create one seamless wireless network with the same name that I could float between. I have never been able to get that to work. anyone?
I know that some of the problems MAY have to do with the non-apple router settings, but I just have never gotten a clear response form anyone about weather it is doable, and/or worth doing. I would settle for 2 seperate wireless networks that didn't compete with each other and/or constantly need re-booting to stay active. I am generally the most tech savvy person I know and am consulted on IT by friends and colleageus regularly, but I just cannot figure this one out..
I am totally capable of setting this up, both in the router and the AE units, if someone can just tell me that;
1) yes it is possible and it will work, and
2) just set it up like this...

Thanks for the clarification. Check your AirPort Express devices one at a time, but other than different device names to avoid confusion.....AirPort Express 1, AirPort Express 2....for example, the settings should look this:
Open AirPort Utility , select one AirPort Express, click Manual Setup
Click the Wireless tab below th row of icons
Wireless Mode = Create a wireless network
Wireless Network Name = Your choice
No check mark needed next to "Allow this network to be extended"
Radio Mode = 802.11n (802.11 b/g compatible) a good choice, but you can choose other combinations by holding down the option key on your Mac while you click on the selection box
Channel = Automatic
Wireless Security = WPA2 Personal an excellent choice if all of your devices are compatible with this setting
Wireless Password = Your wireless password
Confirm Password
Click the Internet icon
Connect Using = Ethernet
Connection Sharing = Off (Bridge Mode)
Update to save settings
Configure AirPort Express 2 exactly the same way and Update to save settings
Then, power down the entire network.....all devices....order is not important
Wait a moment, then start the modem/router first and let it run 2-3 minutes by itself
Start each AirPort Express the same way
Start each other network device one at a time about a minute apart
Check for proper network operation
IF....you did not have your AirPort Express devices in Bridge Mode before.....that is the reason why you are having issues now and also is the reason why the "roaming" network was not working.....assuming that there was a reasonable overlap in wireless coverage between the 2 Express devices, of course.
If you want to try the "roaming" setup again, assign the exact same wireless network name, security and password to both Express devices and confirm again that both are setup in Bridge Mode as the very last step before you click the Update button in AirPort Utility.
Power down the entire network and start up in sequence as well as in the example above.

Time Capsule (SIM) expand network with 802.11b/g Airport Extreme

Hi, I try to expand a Airport-Network which is set up with a Time Capsule (SIM (latest model). I like to use an Airport-Extreme-Basestation to expand the network. The two devices will be connected wireless. In the helpfile there is a explantation how to do this with 802.11n-devices but when it comes to the 802.11b/g-devices it just says I should have a look on the apple support-pages. I do not find anything there.
I tried everything, but it did not work. I've had a Time Capsule (first model) which died some days ago (the well known powersupply problem). With this Time Capsule I did not had any problems to set up a WDS.
What to do?
Message was edited by: Kadege

Kadege wrote:
Ok Jolly, thank you, but I started this thread to get in contact to somebody who knows the solution, i.e. has done this before.
Jolly Giant wrote:
try automatic
Of course I've already tried this and the other automatics, but it did not work. That is the reason I am asking for help. So I guess I need special settings.
NOT good !
No protection is not good, ok. But I want it to set up and running and after this I can switch on protection to eleminate some mistake-reasons.
WDS-Mode: "remote WDS-Basestation"
when the UFO joins the TC's network this will no longer apply
But this menu exists and the UFO does not join the network, so I have to select any of this settings!
try these steps provided by Tesserax:
Setting Up Time Capsule as a Second Wireless Router
802.11g AirPort Extreme Base Station -> 802.11n Time Capsule
With "mixed" AirPorts, you will need to configure both routers into a Wireless Distribution System (WDS). Your neighbor's AirPort Extreme Base Station (AEBS) will be the main and your Time Capsule (TC) will be the remote base station in this WDS.
To simplify setup, you should connect your TC directly to the AirPort's LAN port by Ethernet. Once the WDS is configured, you can disconnect the TC and place it at the desired location.
The following are the basic configuration steps to create a WDS:
(Note: To facilitate the WDS set up, jot down the AirPort IDs (MAC addresses) for each of the base stations to be used in the WDS. The AirPort ID and is printed on the label on the bottom/side of the base station.)
Main Base Station Setup - AEBS
o Click the AirPort status menu in the menu bar and choose the wireless network created by the base station you want to set up as the main base station.
o Open AirPort Utility (located in the Utilities folder in the Applications folder on a Macintosh computer, or in Start > All Programs > AirPort on a computer using Windows).
o Select the main base station, and choose Manual Setup from the Base
Station menu, or double-click the base station to open the configuration in a separate window.
o Enter the base station password if necessary. If the base station is using the
default password of public, you will not be prompted for a password.
o Click Wireless in the toolbar, and then choose “Participate in a WDS network” from the Wireless Mode pop-up menu.
o Click WDS and then choose “WDS main” from the WDS Mode pop-up menu.
o Select the “Allow wireless clients” checkbox if you want client computer to connect to this base station.
o Click the Add "+" button and enter the AirPort ID of the base station you want to connect to this base station.
o Click Update to send the new settings to the base stations in the WDS.
Remote Base Station Setup - TC
o Click the AirPort status menu in the menu bar and choose the wireless network created by the base station you want to set up as a remote base station.
o Open AirPort Utility (in the Utilities folder in the Applications folder on a Macintosh computer, or in Start > All Programs > AirPort on a computer using Windows).
o Select the remote base station, and choose Manual Setup from the Base Station menu.
o Enter the base station password, if necessary. If the base station is using the default password of public, you will not be prompted for a password.
o Enter the same network password as the main base station, if necessary.
o Click AirPort in the toolbar and click Wireless. Choose “Participate in a WDS network” from the Wireless Mode pop-up menu, and choose the same channel as the main base station from the Channel pop-up menu.
o Click WDS and choose “WDS remote” from the pop-up menu.
o Enter the AirPort ID of the main base station in the WDS Main field.
o Click Update to transfer the settings to the base station.
(ref: Pages 42-46 of "Designing AirPort Networks.)
802.11n AirPort Extreme Base Station -> 802.11n Time Capsule
o Open AirPort Utility and select the base station that will connect to the Internet.
o Choose Manual Setup from the Base Station menu, or double-click the base station to open the configuration in a separate window. Enter the base station password if necessary.
o Click AirPort in the toolbar, and then click Wireless.
o Choose “Create a wireless network” from the Wireless Mode pop-up menu, and then select the “Allow this network to be extended” checkbox.
o Next, select the base station that will extend this network, and choose Manual Setup from the Base Station menu, or double-click the base station to open its configuration in a separate window. Enter the base station password if necessary.
o Choose “Extend a wireless network” from the Wireless Mode pop-up menu, and then choose the network you want to extend from the Network Name pop-up menu.
o Enter the base station network and base station password is necessary.
o Click Update to update the base station with new network settings.
does this fix it for you ?
edited by the Jolly Green Giant (where Green stands for environmentally friendly)

Aironet 1140N in mixed mode not working with 802.11b/g Clients

I have a new Aironet 1140N Access point , the model is number AIR-AP1142N-A-K9, my main problem in that i have Nokia E71 smartphones on the network, but they cannot connect to the Network, the Access Point SSID is not showing on the List of Available Devices if i Scan using the Phone,
All Laptops are runing Win 7 Pro and they connect quite ok, The phones (8 of them) at HotSpots connects without problems, the Spec says they are compatible with 802.11b/g and the Aironet Access point provides 802.11a/g/n.
Since the phone has the 802.11g which is compatible with the Access Point, why cant it Pick it? the Access Point is Operating in Mixed Mode.
Bonnie

There are basically two "flavors" of WDS that the AirPorts support: static & dynamic.
o A static WDS allows for a main, relay, and remote base stations in the configuration. This only operates in the 802.11g radio mode. Its advantage is it is well suited when you are trying to cover a considerable linear range ... like a rectangular house where the Internet connection comes in at one of the shorter sides and you want wireless at the other end. The biggest disadvantage of this type of WDS is that for every base station added, you lose half the overall bandwidth.
o A dynamic WDS allows for only a single main and multiple remotes. Think of a wheel with the main at the center and the remotes as spokes of the wheel. The advantage of this type of WDS is it operates in the 802.11n radio mode and doesn't suffer a significant bandwidth loss like the static version.
As a minimum, a dynamic WDS requires two 802.11n AirPorts (or Time Capsules). You can create a static WDS with either all 802.11g AirPorts or a mix of 802.11n & 802.11g AirPorts. Note; however, you cannot create a dynamic WDS with mixed mode base stations.

Windows 7 client won't connect with 802.1x security

Having issues connecting a windows 7 dell laptop with cisco unified wireless infrastructure. Currently running 4 4402 WLCs and 1 wism. The client in question is trying to connect to an AP that sits on one of the controllers on the wism. WLC code running is 6.0.199. If I configure the windows 7 client to an ssid with wpa2 with preshared key it works with no issue. It's really problematic with 802.1x, wondering if there is addition settings on the adapter in win 7 that I'm missing or have overlooked.
Thank you in advance for any suggestions to a solution to my problem
Regards,
izzy

Windows is going to want to use the credentials that you login to the machine. SO if you logged is as "administrator" but you need to authenticated as domain\John.Smith you need to manipulate the credentials.
If you are logging in to the machine with valid domain credentiasl though, it becomes a bit more difficult.
So, is this the only type of machine having an issue? What is the driver version and chipset type?
you can run debug client < cliet ma address > and watch what is happening from the controllers persepctive. You can also see what username is being sent to the AAA server.
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Wireless AP with 802.1x

Similar Messages

Maybe you are looking for