Wireless IPS
I have a customer who currently uses Symbol Wireless AP's in their enviroment. As part of their PCI requirements they need to start monitoring for rouge AP's and the wireless traffic. Other than the wireless devices they are a total Cisco shop. My question is this; does Cisco have anything that will monitor the traffic and detect rouge AP's even though they are from another vendor?
Yes. Cisco WLC has a basic IPS (detect rougue AP), and if you need has WIPS solution (appliance MSE with WIPS license and Sensor AP).
Similar Messages
-
Dear All,
I am planning to install Cisco wIPS in our network, kindly advise if I need to install access point with wireless security module to make my wIPS work or one normal cisco 3602 will be enough. I have gone through the below documents, but one says about wireless module where the other one not says about the module. Kindly suggest.
http://www.cisco.com/c/en/us/products/collateral/wireless/adaptive-wireless-ips-software/data_sheet_c78-501388.html - Says about module
http://www.cisco.com/c/en/us/products/collateral/wireless/adaptive-wireless-ips-software/qa_67-503875.html - Not says about module.
Kindly advise that whether the security module is mandatory to go with Cisco wIPS.
Regards,
Jubair.SIf you want to operate AP normally where client can connect & do wIPS then you require the module.
Otherwise you can configure AP into monitor mode where it will not associate any clients, but do the wIPS function.
If you require limited wIPS (Enhanced Local mode) then you can have same AP to do everything.
Below summarize the options available & read the given link for more details
http://www.cisco.com/c/en/us/td/docs/wireless/technology/wips/deployment/guide/WiPS_deployment_guide.html
HTH
Rasika
**** Pls rate all useful responses **** -
My macbook pro with OS 10.6.7 'mail' program does not send my mail through the IPS wireless, I am connected to. The message is my 'e-mail is rejected by the server'. It has been working until 5 days ago. The connection doctor says I am connected and no log in required.
After trying lots I found now in 'Airport Utility is 'unable to detect any airport wireless devises.....'
There is no provider to be seen in airport utility and only 'rescan' is an option with no results...
even so I am connected and can browse the net receive mail etc. and the outgoing 'mail server' is set to the internet provider I am connected to.
Can you enlighten me what can I do I need to use my e-mail program urgently !!!
Thanks for your helpI'm not sure what "IPS wireless" is, but unless you have an Apple Wi-Fi base station (such as a Time Capsule, AirPort Extreme, or AirPort Express), AirPort Utility won't see anything.
You might try defining a new SMTP server to see if that will work any better.
By the way, the subject field for these messages isn't intended to hold a lot of text. Put a short description of your problem in the subject field and save the rest of your message for the body field. -
I have connected my time capsule to motorola SG6580 modem via ethernet. I have a wireless network on the motorola and a wireless network from the time capsule. I get duplicate IPs error messages (no connection) sometimes when trying to connect devices to the wireless network. How do I fix? Sometimes devices cannot connect to the network because of conflicting IPs. I look on the Motorola and every device has a unique IP assigned but occasionally a device has taken the IP of another device. I have been writing down all the devices and the IPs they have been using. It happens more with PCs than Macs, ipads or iPhones.
If the Time Capsule is set up correctly in bridge mode, then it is the responsibility of the Motorola modem/router to provide the correct IP address assignments for all devices on the network.
Check to insure that the Time Capsule is correctly set up to operate in bridge mode as follows:
On your Mac, open AirPort Utility
Finder > Applications > Utilities > AirPort Utility
Click on the Time Capsule icon, then click Edit in the smaller window that appears
Click the Network tab at the top of the next window
Insure that the setting for Router Mode is configured to read "Off (Bridge Mode)"
Once you have confirmed that the Time Capsule is configured correctly, everything else is the responsibility of the Motorola modem/router as far as network routing and IP address assignments for devices.
If you continue to have IP address issues, then you should contact the Internet Service Provider (ISP) that provided the Motorola device to you and ask them to fix the issue. -
Di-641+ Dlink wireless router not acquiring dhcp ips
I have this home user with a Di-641+ Dlink wireless router not acquiring dhcp ips. This is both with the Windows or Dell managing her wireless networks. However, it works fine in our office connecting our Cisco AP541L access points. Any ideas or suggestions other than physically looking at the device.
cascoli_2008 wrote:I have this home user with a Di-641+ Dlink wireless router not acquiring dhcp ips. This is both with the Windows or Dell managing her wireless networks. However, it works fine in our office connecting our Cisco AP541L access points. Any ideas or suggestions other than physically looking at the device.
Good afternoon,
As per your post, your home user is having issues with the D-Link product, not the Cisco products. This forum serves to provide technical and presales support for Cisco devices only.
I did take the time to locate the free support number for the D-Link products: 1-877-453-5465
In light of all of this, I am glad to hear your Cisco access points seem to be working well!
Best of luck,
-Lindsey -
10.5 DHCP issues with Wireless - self assigned IPs?
We're having an issue with Mac OSX 10.5.4 clients, running the latest software updates, not getting an IP address via DHCP on our wireless network.
We're using Cisco APs, with multiple VLANs & SSIDs. They authenticate, but get automatic self-assigned IP addresses. None of our PC clients are experiencing this issue, nor older 10.4.x OSX clients. This looks like a bug, from what I was able to discover:
http://forums.macrumors.com/showthread.php?t=384947
Is Apple aware of this, and/or working on a fix? I've seen many issues over the last year or so with Airport clients and wireless connectivity..This is a "user to user" help forum that is designed as a self-help system, independent of Apple's Technical Support system. No one here can say what Apple knows or is doing about a specific issue (pure speculation is discouraged). We share experience and suggest possible solutions or workarounds.
One way to ensure that your issue is brought to Apple's attention is to use their feedback form for OSX - http://www.apple.com/feedback/macosx.html
Since the link you posted is from late last year, there have been many updates to Leopard. Some of the updates mention network reliability. Even though Apple has stated that the Pram chips don't control network connections, I have had some luck by Zapping The Pram - http://support.apple.com/kb/HT1379 - Remember to check your System Prefs for things like date/time settings after you Zap. -
Time Capsule: PC and Wireless on different IPs
(Apologies if this has been answered recently, but I've used Search and gone manually through 10-15 pages and didn't see an answer)
I just purchased a Time Capsule and have it successfully setup with my desktop PC via Ethernet cable. I also have a new Macbook Pro 17 and older MBA. The Time Capsule is clearly creating a wireless network which my various Macs can access. The PC can clearly see the Time Capsule as an external hard drive and Internet connectivity is fine.
The problem is that the PC appears to be on a different IP address than my wireless router, meaning that I can't share my iTunes collection across my computers.
How do I get my PC onto the same IP address as the general wireless network created by the Time Capsule?
For background, I'm using a Comcast cable modem with a known fixed IP address, but I was unable to have success using Bridge mode, so I used share a Public IP.
Thanks,
Chris
Message was edited by: Istari6I have a similar but sort of in reverse. I have set up my Mac Air via ethernet and would like to get my PC to do a backup as well to Time Capsule. I have put the airport utility on my PC and it recognizes the TC. How do i tell it to backup since I don't have something like Time Machine on the PC?
-
hello,
i just got my new laptop a couple days ago. i have a netgear wireless router and a cable modem. everything works fine at my house and the internet works as it should. the problem is when i go to another house it doesnt work. everything is plugged in right and its the exact same modem as the one at my house... but i just wont work. any help is greatly appreciated. thanksdid you unplug the cable modem for 30 seconds?
basically, from my limited knowledge of these balky things:
cable modem grabs an IP from the ISP.
router grabs that IP and assigns its own IP to a pool.(DHCP)
MacBook grabs one of those router IPs.
so your MacBook may have the old router IP, which has the old ISP IP it got from the old cable modem. often times shutting off one or all of the above will force them to refresh and grab the correct IPs. does that make sense? -
Cannot do wireless printing to HP Photosmart C7180 since upgrading to Win 7 Home Premium 64-bit
I recently upgraded one of my new HP p6150t Pavillion PCs from Vista Home Premium 64-bit to Windows 7 Home Premium 64-bit. Since then I have not been able to print to my networked printer, an HP Photosmart C7180 All-in-One, which is wireless on my home network. When this PC was Vista, I was able to print. Two other PCs on my home network, both running XP, can access the printer across the network and print. This PC now running Windows 7 64-bit can find the networked printer when I "Add-a-printer", and I am able to finish the installation of the printer.
I downloaded and installed new drivers for the HP C7180 from the HP website specifically for Windows 7 64-bit, so I have the latest drivers. (The version of the drivers is 13.1.0, date is 10-2009. From the same HP printer driver download site, I also installed " HP Print Software Patch When Upgrading Vista to Windows 7".
I do not want to install the printer as a shared device on any of the other PCs, but rather want to be able to print from any of them, direct wirelessly, even if the other PCs are offline. And I was able to do this when I used Vista...
If I open and leave visible the print queue for the printer, and then print a Test Page, I see the print job briefly shown as "Spooling" and then as "Printing" in the print queue display, but nothing ever reachs the printer. There are no error messages, either during the process of Adding the Printer, or when sending Test Pages, or other print jobs to the printer.
I have McAfee antivirus and Firewall installed on all of my PCs. The Firewall advanced setting for Networks shows that the IP address range for all of my IPs are trusted.
[Although I just bought this PC from hp.com only 4 months ago, as part of a package of 2 PCs, a MediaSmart server, big hdtv monitor, and all with 4 year extended support agreements, HP provides "NO" support for network printing. That was what a support specialist called to tell me after I sent an email to the HP CEO. HP PCs, HP printer, HP provided upgrade kit for Windows 7, but if you want to actually print from your HP PC to your HP printer, there is "NO" support. (I worked for HP for ten years, but it is clearly a different company now.) So, if anyone in the Community can assist, I would very much appreciate it.]I have a year old Epson and an HP.. I upgraded to a win 7 64 bit and doing some sharing/networking.. Got some 32 bit XPand two win 7 64 bit.. The Epson ,shares and connects up with no issues.. the HP is just a fiasco... No more HP for me ...
-
How can I use Apple Caching Service on a Network with Multiple Public IPs?
Hello!
I help manage a network of ~4000 clients for a small liberal arts college in Michigan. I'm looking into the possibility of implimenting Apple Caching Server for our network.
We have one 400mbit pipe out to the internet, and all of our clients are given public-facing IPs to the internet. A caching server would be great, especially on update days. All wireless clients are on the same subnet, which is where I'd like the server to be serving the cached copies.
I have installed Mavericks on a fresh machine, downloaded OS X Server 3.0.3, and attempted to start the caching service. This is what I get.
Unable to start service.
Caching cannot be run on a public network. Consult documentation.
How can I get this up and running?The way the Caching server works is that the server will be accessing the Internet and when doing so traffic will be coming from it via a particular public IP address. Usually this will not be the address of the server itelf but your router as for most networks NAT is used. In this by far more common scenario the client Macs (and likely iOS devices) will be going through the same router and hence show up via the same public IP address.
If the client request is the same as the address registered via the Caching server then Apple redirect the request via the Caching server.
The setup would look something like this -
Internet
|
Router (with NAT)
|
(LAN) +------Caching Server-----Client devices
With this setup because everything is using the same public IP address Apple can reasonably assume everything is on the same network and trigger a redirection to your Caching server.
If you try a setup like the following with the Caching server having its own public IP it will not work because the Caching server and client devices will have different public IP addresses
Internet
|
Router (no NAT)-------------------+
| |
Firewall (with NAT) Caching Server
| |
| |
(LAN) +-----Client devices-----------+-----------
Your configuration as described is more like the following
Internet
|
Router (no NAT)
|
(LAN) +------Caching Server-----Client devices
With yours not having NAT each device has its own public IP address including the Caching server and Apple cannot redirect traffic as it thinks they are on different networks. -
Advice needed on wireless router
Hello
I currently need a wireless router to give my wireless clients an internal address range e.g. 10.1.1.x/24
But, I need to configure the router WAN port on a different subnet (using static ip e.g. 172.30.30.1/24) and obviously with another uplink router say, 172.30.30.254/24 and manual dns address.
I need the wireless router to NOT run network address translation on wireless clients making requests, i.e. so the requests come out with their original IP addresses 10.1.1.x. This is because another device upstream does this and we need to see the clients original source ips.
My questions from looking around at forum posts:
- is this achievable on the wrtg models e.g. wrtg54g, with the option to set "router mode" instead of "gateway mode" ?
- is this achievable on the newer e1000 by disabling nat mode, or does this do something different.
Please could someone advise me.
thanksYes, that's possible. Set LAN and internet connection as needed and disable NAT (aka "router mode").
-
Internet Connection - Your Apple wireless device does not have a valid IP.
I just bought an Apple TimeCapsule and set it up normally, following instructions to my Arris cable network on the Videotron provider here in Quebec, Canada. The TimeCapsule did appear as a wireless device on my MacBook Pro (after updating the AirPort software from the provided CD - as was instructed). I went through the whole installation process to obtain at the end this error:
Internet Connection - Your Apple wireless device does not have a valid IP.
The only provided instructions were to check the cable and then contact your Internet provider. Well it seems clear to me that if I contact my provider and say that the internet connection works fine directly on my computer, also fine through my "normal" wireless router but not with my new TimeCapsule, I won't get much of a response.
After a lot of research, a friend indicated the solution in my case.
You have to really reset the cable modem to convince it to start giving out IPs again.
To do this:
1. Unplug your TimeCapsule (possibly you might have to reset to factory defaults - see the documentation)
2. Unplug your cable modem
3. Reset your cable modem by pressing the reset button with a pen (or something) for several seconds.
4. Plug your cable modem back in and let it reboot/restart - until the lights are back on.
5. Plug in your TimeCapsule
Everything should now work and you can restart your AirPort set-up on your Mac.
Good luck!My ISP is AOL. The service is DSL via a broadband modem. Somewhere during the setup process there appears to be a communicatiosn issue between the Airport Extreme Base Station and the DSL modem. When I hook the DSL modem directly to my iMac I can connect to the internet without any issues.
I tried the factory reset and the DSL modem reboot process described in other posts and seemed very close to success...until the internet setup step. That is where this issue first presented itself. -
WRT54G v6 - Can Connect to wireless network but can't access internet
Ok, this is my last resort for help. I spent two hours yesterday with linksys "chat" support to no avail.
First the techincal details:
OS for all machines = Windows XP
Laptop w/two adapters - one wired, one wireless
WRT54G v6 upgraded with 1.00.9 firmware
SpeedStream modem from DSL provider
I have manually set the IP, subnet mask, gateway, primary and secondary DNS for my wireless adapter (using the Alternate Configuration in the Internet Protocol Properties of the Wireless Network Connection). When I connect to the wireless network I see that the IP, subnet, gateway and DNS server IPs are all correct (via ipconfig /all). I see that I am connected to my SSID (11.0 MBps, signal strength Excellent) however I can't access web sites (the server not found message appears in the browser) nor can I ping the router IP or any other IP (LAN or WAN).
My wired PC works fine with this router. My laptop works fine with this router when wired.
Anyone face a similar situation and have a solution? Thanks.A new discovery...
When I disable the wireless security on the router, I am able to connect to the wireless network, ping the router and access the internet. So, there is apparently something wrong with the WEP security (although I am able to connect to the wireless network when WEP is enabled).
I am thouroughly confused. Any help is appreciated. Thanks. -
Troubling extending wireless network with Time Capsule and Airport Extreme
I am trying to set up and extend a wireless network in my house, but it’s not working right. I have two Airport/Capsule units in the house:
2TB Time Capsule (Dual-Band II)
1 Airport Extreme (Dual Band)
I have the Verizon Fios router as my gateway to the internet, and also as my DHCP server. I have also tested the ethernet ports in my house to verify that they work, and that I can get a DHCP-issued IP address.
Now, my Verizon router has WiFI, and it’s still on. I am not using it though except to troubleshoot. So far as I understand, this should not cause a problem.
Base station setup
So I setup the TC to Create A New Wireless Network, on the ethernet network it’s on (Dlink switch plugged into Verizon router). I set it up in Bridge Mode (as opposed to having it dole out IPs, since the Verizon router does this already). The TC gets a valid IP, and my wireless device connect to it without a problem. I have checked “Allow this network to be expanded” under Wireless settings.
Extended station setup
The AE Dual-Band is plugged into the Ethernet, and is reset to Factory Settings. I name it “Airport Extreme 2” and I chose “I want Airport Extreme to join my current network.” The other two options are: “I want to create a new wireless network” and “I want to replace and existing base station or wireless router with Airport Extreme.”
I chose to “join,” I select “I want to connect Airport Extreme to my network using Ethernet to extend my existing wireless network.” The other options are to disable wireless entirely, or to “wirelessly join my current network.” On the next page it asks me to select the device or network that the Airport Extreme will connect to using the Ethernet. I set it to the Time Capsule.
Results:
Access near the Airport Extreme 2 is incredibly slow. Speedtest shows I am getting less than 1Mbps. Worse yet, my mail client won’t connect. It just times out.
What I had hoped was that the AE would connect via Ethernet to the network, and just bring the wireless network to the other side of the house. Instead it almost seems as though it is just re-amplifying the TC’s signal. Otherwise, why is performance so bad?
Thanks to anyone with some insight here!Hello Kennuff. Welcome to the Apple Discussions!
Since you have the ability to connect all of the routers by Ethernet, there is no need to configure the Time Capsule (TC) & 802.11n AirPort Extreme Base Station (AEBSn) for a dynamic WDS (aka, extending a network). This option is only when the routers do NOT have an Ethernet connection between them.
Instead, you want to configure the TC & AEBSn in a "roaming" network. I suggest starting by performing either a "hard" or "factory default" reset on both.
Next be sure that both the TC & AEBSn are on the same Ethernet subnet coming from the Verizon-supplied router.
Configure the TC & AEBSn as follows:
AirPort Utility > Select the TC or AEBSn > Manual Setup > AirPort > Wireless
o Wireless Mode = Create a wireless network
o Allow this network to be extended: <not checked>
o Radio Mode: <leave the default or if you require a specific mode make sure both routers are configured the same>
o Wireless Security: <configure both routers the same>
AirPort Utility > Select the TC or AEBSn > Manual Setup > Internet > Internet Connection
o Connection Sharing = Off (Bridge Mode) -
Using AX as wireless router, how to set up w/ security and airtunes on XP
I previously had a Linksys wireless router. I just purchased an Airport express to use as the wireless router (and remove the Linksys router) as well as use the Airtunes functionality.
After some trial and error, I have been able to wireless connect my computer to the AX on it's own (the linksys router is now unplugged and out of the equation). I can connect to the internet fine on my PC (XP Pro SP2).
Trouble is, when I use the Network Setup Assistant, it shows the apple network listed, but it can't connect to it, no matter how many times I try, reboot my machine or reboot the AX. I've tried both the "setting up a new network" and "editing an existing network" option, and in each selection, after a few minutes of trying to connect to the network, I just get a failure message.
If I try and use the Admin utility, nothing shows up in the left-hand list window, and when I Press re-scan, still nothing shows (it doesn't even appear to scan).
I'm not sure what I'm doing wrong. I can't find simple instructions on how to set up the AX as the only wireless router for a PC and set up security and Airtunes (I'm assuming enabling airtunes is done in these applications, as I haven't seen anything about that yet either).
Any ideas on how this is done with a PC? Much thanks!
Dell 4500 seriesI have found the 'DHCP Reservations' option on the AirPort Extreme to be buggy. I seem to remember it causing IP conflicts for some reason. I think what I remember is that if the computer with the reservation was off, and the DHCP server then handed out that IP to another DHCP client, then there would be a conflict when the reserved IP computer was turned back on. Maybe it was an issue in ealier versions of the AE or OS X as the case may be, and maybe it's been corrected, but I've never bothered using it agian since the method I describe below has always worked without fail. Also, I'm guessing DHCP Reservations would work fine if one manually enters IPs outside of the DHCP range but in the AE 'DHCP Reservation Setup Assistant' the IP options provided are within the DHCP range which to me makes no sense and increases the potential for IP conflicts.
Here's what I do to setup a mixed environment of static and dynamic IPs on my network. It works like a charm and does not require the DHCP server (beyond the distribution of dynamic IPs to hosts using DHCP).
For machines on my network that are accepting services from the public network, I set them up with static IPs using the 'Manually' option (System Preferences/Network/Ethernet/Configure IPv4). The settings for 'Router' IP address and 'DNS Server' IP address should both be set with your gateway/router LAN IP). Use an IP address below or above the DHCP range of adresses (in AE/Internet/DHCP/DHCP Beginning & Ending Address).
i.e. if my subnet is 10.0.1.1 and my DHCP range is 10.0.1.100 to 10.0.1.150, you could set the static IPs on your local hosts as 10.0.1.x where x = any number from 2 - 99 or from 151 - 200 as an example.
All other machines and devices that do not require static routing are setup as DHCP clients and get a dynamic IP from the AE. To me it's a simpler setup though it might take a little extra time to setup initially.
John
Maybe you are looking for
-
Help!, iphoto and mail cannot be opened because of a problem
i have a laptop w mountain lion. wwanted to transfer my my laptop info to my mac pro destop which is older so will only work w Lion 10.7.5. after the transfer my mail or iphoto will not open as well as some of the system panels ( energy saver, deskto
-
Hi! Can anyone please help me out with <b>screen exit</b> step by step. I will require that for Purchase Order screen. Thanks and regards, Atanu
-
Error, please help? 1120: Access of undefined property event
I have ActionScript 3 in two frames of my piece. In this 2nd frame, I get an error: "1120: Access of undefined property event" for "myXML=XML(event.target.data);" Can anyone help? I am not sure how to fix this. var myloader:URLLoader=new URLLoader();
-
am trying to connect to FTp thru proxy. I am using jscape's FTPclient i set the properties as System.setProperty() for ftpproxy host & port but still it is not working. Also my proxy is set to make Ftp connection Plz do help me out . i am not getting
-
I'm just a simple beginner learning java basics, but I'm really trying to do the work on my own. I managed to write a GuessingGame, but it doesn't work and I have no idea why. You don't even have to tell me HOW to solve the problem (although that wou