Wireless Guest Users once authenticated, are able to connect again after disconnection

Wireless Guest Users once authenticated, are able to connect again after disconnection .Clients should not able to connect after the restart or by disabling and enabling the WIFI adapter. But as of now clients are connecting to network . How we can configure this feature in WLC ?

IIRC, if your reboot, disable the adapter or disconnect from the wireless, as long as the session timer or the idle timer does not timeout, then you are still considered as authenticated. If you logout, the wlc logs you off and you will have to log back in. The wierd thing is with iPhones or iPads, they go to sleep mode and you have to log back in to access the guest network. The workaround was to increase the idle timers to a certain acceptable limit to prevent this from happening.
If you disconnect from the guest SSID and leave your client off the network until the idle timer expires, do you get prompted for a login or do you have access again?
Sent from Cisco Technical Support iPhone App

Similar Messages

HT2250 I have been able to get my MacBook Pro to print wirelessly through my Airport device. How do I make it so other computers (non-Mac) can also print wirelessly as well? They are able to connect through my wireless network but can't print.

I have been able to get my MacBook Pro to print wirelessly through my Airport device. How do I make it so other computers (non-Mac) can also print wirelessly as well? They are able to connect through my wireless network but can't print.

Well, you could install the drivers to the wireless printer in you other computers.
blue apple > System Preferences... > sharing
check printer sharing.

WLC 2500 and WCCP for Wireless Guest Users

Hi there
I would like to redirect web traffic from WLANs on a Wireless LAN Controller 2500 to a proxy server in a remote site. I'm using ironport proxy server and Cisco 3560 Layer 3 switch. Basically current scenario is:
Wireless Guest Users get authenticated by web-auth through Access Point 3501 HREAP configured. Guest client gets an IP address on VLAN 100 in remote site. Once they connect to VLAN 100, I want all web traffic to be redirected to the proxy server. I know PAC file may be the easier solution however our guest clients want seamless solution for internet. I am not sure whether WCCP is supported for this.
You advice will be highly appreciated.
Regards

For guest wireless traffic redirect to proxy server
https://supportforums.cisco.com/thread/2126486

My husband has a Mac mini, vintage 2009, running Snow Leopard. All other computers and devices in the house are able to connect to our wireless network, but since I upgraded his computer to Snow Leaopard it won't connect. What is the problem?

What am I missing here. I'm sure it is some kind of sitting that is not right.
Thanks Pat

Sounds familiar:
lllaassJan 6, 2015 2:12 PM Re: My husband has a Mac mini, vintage 2009, running Snow Leopard. All other computers and devices in the house are able to connect to our wireless network, but since I upgraded his computer to Snow Leaopard it won't connect. What is the problem?
Re: My husband has a Mac mini, vintage 2009, running Snow Leopard. All other computers and devices in the house are able to connect to our wireless network, but since I upgraded his computer to Snow Leaopard it won't connect. What is the problem?in response to Patricia Isaac1
Power off and then back on the router
What happens when you enter the network's PW?
Try forgetting/deleting the network if necessary. To do that go to System Preferences>Network>wifi>Advanced and select the network and click on the minus sign
Csound1 wrote:
Turn off the modem and the router, wait 60 seconds. Turn on the modem, wait 60 seconds, turn on the router.

I have just updated the i06 software for my ipad and it will not connect to my home wifi network - all my other devices are able to connect - i have tried all troubleshooting options and none have worked - please help

I have just updated the i06 software for my iPad and it will not connect to my home wifi network - all my other devices are able to connect to my wifi network.
I have attempted all troubleshooting actions suggested and nothing has worked. I have restored my iPad network and factory settings - Please help - this is frustrating me

you have to set up your router to solve th problem. first find and write down the ipad mac address.
then log on to your router using your laptop or any device that can connect to router at 192.168.0.1 in your web browser. please check out my posting about how to resolve the wifi connection problem.
i think the ios6 update has reset the networking but if you set up the router then you should not have the same problem any more.

Wireless guest users are getting limited connectivity.

Could anyone help please, I have a wireless guest solution consist of :
WLC located internal in the network – all the AP are associated with that WLC-.
Anchor WLC located in the DMZ . the guest SSID are tunneled from the internal WLC to the Anchor WLC, the DHCP service for guest users is on the Anchor WLC.
NAC guest server to authenticate the guest users.
The solution was working properly but now we have a problem that if any one tried to connect to the guest SSID if he is authorized or not , the user will get IP address from the DHCP pool and now as you know most of people has smart phones and they try to get internet access. Now only 5 or 6 people authenticated with NAC gest server and the DHCP pool become full because too many people tried to connect even they do not authenticate.
so if any user trys to cnnect he will not get IP address from the anchor controller and getting limited connectivity.
if I add static IP address on my Laptop , I will be redirected to the authentication page and can access normally.
I am working in big environment 7,000 users so I can’t go with increasing the DHCP pool because the problem will not be solved.
I hope if anyone can help in this case.
Thanks in advance.

This is a pitfall and raising the eyebrows.. currently we do not have anyother option other than using a WPA-PSK + WEB AUTH
that is..
PSK will block the users to just grab an IP and sit!! , if the user enters a valid PSK, he will get the IP address and followed by the Web auth process!! this may help u as of now.. or just a work around.. to overcome the IP exhaustion..
Please rasie a PER with your accounts team to raise the severity on this issue if u have the contract n all with us!!
Please dont forget to rate the usefull posts!!
Regards
Surendra

Guest users in WLC are not logged out after pre defined time.

Hi,
My customer wants to create guest users in wireless lan controller. We were successfully able to create that and it worked . But the problem is that to access the internet the users have to change the "proxy server" settings on the internet explorer. As a result the guest users are not logged out automatically after the pre defined amount of time. We enabled " by pass proxy server " settings in internet explorer also, unfortunately it didnt work too.
If we disable the proxy settings in internet explorer customers were logged out, but the problem is that once the customer log in he will change the proxy settings in internet explorer to browse net but wont get disconnect unless and untill he manually change the proxy settings in the internet explorer.
Is there any other way to solve this issue? Can any one provide any alternative solution if possible.
Regards,
Bibin

Can you explain how your proxy server has anything to do with your wireless access duration?
Does you proxy server have the logic that stops the internet access after a period of time? If so, I assume you turn proxy off in order to web-authenticate? If so, then you just need to tell the browser to not proxy for the virtual IP address of the WLC. You'll never get redirected to the webauth page if you don't send a https request to it (as if, your browser is sending it the IP of your proxy server).

Wireless Guest Users DHCP issue

Dear all
We have 2 wism as well as Anchor controller
Guest users are getting ip address from anchor controller.
We had created DHCP scope on anchor controller itself.
We had opened particular ports to communicate between guest controller and inside controller for EOIP tunneling to take place.
Issue is that some times user is getting IP address in the range of AP management vlan.
Do we require to open ports for bootpc and bootps as well or do we need to create dhcp scope in the switch.
If any one has faced the above issue pls reply me at the earliest.
Regards
-Danish

If the anchor goes down, or mobility fails, the user should never egress from the Foreign WLC (in my opinion). However, if you are saying that the user gets an IP from the MGMT Interface of the Foreign WLC (not the Anchor), then it is doing exactly what it shouldn't.
What version of code is this?
I've seen a lot of deployments implement a "dummy interface" on the Foreign WLC. So a fake vlan/subnet is created on the WLC and mapped as the default interface for the Foreign's Guest WLAN. In the event anchoring does fail and the client sticks to the foreign WLC this dummy interface would actually prevent the user from having network access.
Are you seeing this often?

Wireless Guest Users Self Registration

We are looking for a solution where for guest user self registration an email will be send to the employee/network admin for approval request before providing the network access to guest users.
Please let me know if ISE is having this feature. Also let me know the other options.

If you want to go through the process of having a employee or "sponsor" approve the account, why not just have the person who would be the appover create the account for the guest user and cut out the middle step? This is the process we have been using and so far so good! If abuse is a concern we try to keep tabs on that by occasionally checking the logs in ISE to see if any one user is creating many account or consistantly has an account that may be for non work related functions.

Macbook air not detecting home wifi but detecting all other networks in vicinity. Other devices are able to connect to home network.

I have had this problem since yesterday. My macbook air is not detecting the home wifi network it used to be connected to. A manual addition of the network is also not working. I also tried using network utility which gives the details of all networks available and their details, but the home network does not feature there.
However, my iPhone is able to connect to the home wifi without a glitch. I am right now using a mobile data card to access internet, but need to get back to the home network.
I found various users posting the same problem online, but am yet to find a conclusive problem. Here are two threads on apple support which are similar to my case.
https://discussions.apple.com/thread/2445976?threadID=2445976
https://discussions.apple.com/message/10695921?messageID=10695921&start=1#106959 21?messageID=10695921&start=1
Please help!

It was not working for me either and I spent a day looking at things other people did when they had similar problems. Never could find a conclusive response and what has been suggested here was always almost the only thing mentioned. I wish you luck and hopefully someone can actually point out the one true thing that is doing this!
This is the exact sequence of events: I switched off the main supply to the house when I was going out, and when I came back this problem occurred. I was searching desperately online and just when I had given up, I decided to switch mains off and then back on. It picked up the wifi, and has been working since. This was a shocker and mostly a coincidence. Wont hurt to try.

Not able to connect wifi after ios5 upadate

Hi i updated my ipod with ios 5 after updation is successfully done i am not able to connect with my wifi network. the thing is my i pod is getting connected with my system but when open safari it shows error msg like this "Safari cannot open the page it is not connected to the the internet".

Reboot your phone. Hold down the sleep/wake button and the home button until the apple logo pops up and if that doesn't work then reset network setting (general>reset) and then another thing is to go to other and add it from there

Wireless guest users cannot ping if ACL is applied

Hi friends,
This is the first time I am trying my hands on wireless gears. I have 2500 WLC and 1142 AP (which I converted from Standalone to LAP).
I have a layer 3 POE switch where i am using port 1 for the WLC which is a trunk port.
Port 2 is for the AP using access vlan 111
Port 3 is trunk port going to a router where i am running dhcp server for the VLANs which are as follow:
VLAN 110 -Corp Wireless (10.1.110.0/24)
VLAN 111 - AP-Mgmt (10.1.111.0/24)
VLAN 999 - Guest (10.1.101.0/24)
I wanted to block the traffic from the Guest VLAN 999 but when i apply the ACL on the Guest Interface created on the WLC, I dont see any pings going across and neither I see any hit counts on the deny statement as if the ACL is never applied.
Can some one guide me to the right direction if i am missing anything??
Thanks,
Mohit

rdvorak wrote:Put the ACL on the WLAN not on the interface.
But applying the ACL to the interface will affect all WLANs that utilize that interface!!!
Rating useful replies is more useful than saying "Thank you"

Wireless Guest and mac authentication

Hi all,
I want to setup a wifi guest network with mac based authentication.
I already have the guest anchor controller and the remote wlc controller (and the mobility tunnel) up and running.
However, i am uncertain where i have to program the mac addresses: on the remote wlc or on the guest controller ? (for local database mac)
It seems my authentication only works if i program the mac address of the 'remote' wlc (the wlc holding the AP).
This is a pitty, as i was hoping to centralise all "appoved" mac addresses on the guest controller and not on each individual wlc seperatly.
Also, suppose i want a radius server to validate the mac address. Which controller is going to sent the radius request ? the wlc controller
managing the AP or the guest anchor controller ?
Does the remote wlc also need to be configured with "Layer2 security: none"+"mac authentication" (the same as the anchor controller) or can i put "Layer2:none" and put the anchor controller on "Layer2: none"+mac authentication ?
regards,
Geert

Hi Geert,
The rule is straightforward : layer 2 is handled by foreign WLC (one holding the AP) and layer 3 handled by the anchor (the guest).
This means the anchor WLC handles the dhcp/ip address, it handles the web authentication etc ...
But only the foreign WLC knows which AP the client is associated to, it's the only one to have layer 2 information so that's the one doing layer 2 authentication (wpa psk or mac filtering).
The way to "centralize" for you would be to have the mac addresses on a radius server or to push the mac addresses on the controllers via WCS.
Hope this clarifies,
Nicolas
===
Don't forget to rate answers that you find useful

Domain\User Name is not able to connect to Database

We have a service account and we want to run the report using the service account. Users will be accessing the report using their windows authentication, while on connecting to data source service account needs to be used.
We have added the service account in database server and also on physical server as "Allow logon as locally".
While creating the datasource, we are getting this error "logon failed for user domain\username".
We tried with the first checkbox "Use as windows credentials when connecting to the data source", but the error is "Logon Failed. Ensure the username and password are correct".
When we tried with the second checkbox "impersonate authenticated user after the connection has been made to the data source", but the error is "Login Failed for user domain\username".
We have even tried to add this domain\username as execution account in reporting services configuration and its failing.
Kindly let me know wat needs to be done to run the report as a service account and not as windows integrated or sql account.

Hi CrazySam81,
Per my understanding that when you are using one service account to access the report server to run the report you got some error, right?
I assumed that the use have grant the correct permission to access the report server, so the issue can be caused by use don't have grant the right permission to access the datasource or the setting of the credential is not correct.
Use stored credentials or prompted credentials to query external data sources for report data. The credentials can be either a Windows domain account or a database login.
In your scenario, please make use the service account is the Windows domain account or a database login account. please also check details information below:
make sure you have done the setting like below and test connection to see if the username and password is correct：
Go to SQL Server Reporting Services Configuration Manager, make sure the service account have the correct password and username.
Go to Database, Verify that the service account can connect to the database.
More details information about the grant of permission reference to:
How to: Store Credentials for a Data Source (Report Manager)
pecify Credential and Connection Information for Report Data Sources
If your problem still exists, please try to provide more details informaiton in the log file which path like:
C:\Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\LogFiles
Regafrds,
Vicky Liu
Vicky Liu
TechNet Community Support

Having trouble pairing my MacBook with my wireless JBL speakers. Have been able to connect in the past. Anyone?

Have Mac OS X Unable to pair it with my wireless speakers. Airplay icon in iTunes
is not visible...

Hello there, MaryFromDowney.
The following Knowledge Base article offers up some great information on AirPlay functionality:
About AirPlay Mirroring in OS X
http://support.apple.com/kb/ht5404
If the MacBook model is newer than the one mentioned in your information above, then this section should prove helpful:
Troubleshooting AirPlay Mirroring
If you don't see mirroring options
If your Mac and Apple TV are on the same network, but no AirPlay Mirroring menu appears, your Apple TV may be asleep. Simply press a button on your Apple TV remote to wake it up. After a few seconds, the AirPlay Mirroring menu extra appears. If you still don't see the options you expect, make sure your Apple TV has the currentsoftware update installed. Also make sure that you have the "Show mirroring options in the menu bar when available" option selected in the Displays pane of System Preferences.
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

Wireless Guest Users once authenticated, are able to connect again after disconnection

Similar Messages

Maybe you are looking for