Wireless Profiling 7.5.102.0 Question

We upgraded our controllers to 7.5 this past weekend. How does the wireless profiling work? I've been through the local policy creation, and added iPhone, Samsung, and Droid policies. I noticed a few new columns, on the client page, but just see "unknown" for the device type, next to the users. Can anyone explain how this works, or have any documentation on it?

Sure... Setup the IP helper to point to the WLC management also and then also enable profiling in the WLAN advanced tab.
Sent from Cisco Technical Support iPhone App

Similar Messages

Wireless Profiles not advertised

I have two 4402-50 controllers that will server upto 45 APs. The install and implementation has just begun. The controllers have three SSID's (in separate VLANs) configured. I was able to see and connect to all the profiles. I decided to change tha allowed VLANs on the trunk from switch to controllers. I only allowed the three SSID vlans and the management VLAN. Once I did that, I could not see the three SSID in available networks on the client. I then undid the switch configuration but to no success. I rebooted 5 APs (only 5 APs are installed and running yet and others are bring installed) and I could see the SSIDs available as wireless networks on the client. Few questions:
1. Was I wrong in prunning the VLANs to only allow the management VLAN and the three wireless profile VLANs between the switch and controller? I thought that is the only significant traffic for the controllers.
2. If I misconfigured something on the switch trunk ports that resulted in the WLAN interfaces on the controller to go down, then it makes sense that profiles were no longer available. But when the things were corrected on the switch, the profiles did not become available till I rebooted the APs. If the WLAN interfaces on the controller were back up and running, should not it have pushed that to APs as available profiles? I did wait for an hour after undoing the switch trunk port configuration before I rebooted the APs.
Let me know what additional information I can provide.
Thanks,
Gill

prunning the VLANs is a good practise to be followed and there is nothing wrong in doing the same.Allowing the three SSID vlans and the management VLAN is enough for the device to work fine and changes that yoy have done as per your explanation will not affect the working of the device.Also rebooting the AP will just fetch the available onfiguration from the controller.Can you provide the logs for the events you have explained which will be helpful in identifying the exact reason for the issue.

T60 does not automatically connect to wireless profile at bootup any more

Probably my rose-colored-glasses mistake again.
I let the ThinkVantage system updater install most of the latest updates last night including the
wireless adapter software. Now, when I boot up, my PC no longer automatically connects to
my wireless profile. The radio is on and it is obvious it knows the network is there because it
is highlighted in the Access Connections menu with a Connect option.
It connects just fine when click Connect.
It will still automatically switch between ethernet and wireless when I plug and unplug the
ethernet cable even if I have specifically disconnected from the wireless connection before
plugging in the ethernet cable. It also automatically connects when I log off Windows and log back on.
Is there a setting some place that controls whether it should automatically connect to a
wireless profile at bootup?
I love the brain-dead online FAQ about this exact problem.
It says to click the Connect button if it happens.
Well, duh! What do I do to make it automatically connect like it used to?
I tried unchecking the "allow computer to turn off the radio" setting as other suggested.
But, my problem is not the radio being off.
Thanks

Hi sashton,
When troubleshooting Wi-Fi connectivity issues, I find the following resource has the most relevant information:
Troubleshooting Wi-Fi issues in OS X Lion and Mac OS X v10.6
http://support.apple.com/kb/HT4628
Furthermore, you may want to avoid giving your network a common name. While the following article (and excerpt) refer to iOS devices, the same applies for your Mac:
Avoid giving your wireless network a common name (SSID)
http://support.apple.com/kb/HT4450
If you were to give your wireless network a common name (SSID), users of your network who use iOS devices [sic] and are away from your network would run the risk of joining a different network with the same name. Having joined the unexpected network, they would be exposed to potential data theft.
Because of this security issue, Apple maintains a list of common or ambiguous SSIDs, including the default SSID for many commercially available access points, as well as the SSIDs "wireless" and "default". If your network's name is on the list, any iOS device [sic] that joins the network stores the access point's BSSID and associates it with the network's SSID. Subsequently, it will only auto-join the network if the access point's BSSID matches the information the device has stored. This avoids joining a different network with the same name.
Therefore, you may want to refer to the following article when configuring your Wi-Fi router:
iOS and OS X: Recommended settings for Wi-Fi routers and access points
http://support.apple.com/kb/HT4199
Thanks,
Matt M.

ISE 1.3 Why are Windows endpoints defaulting to 802.1x machine authentication in wireless profile and not User or User&Computer

We are running ISE 1.3 tied to AD with WLC 7.6.130.0. Our ISE has a GoDaddy (none wildcard) certificate loaded for https and EAP. We are just running PEAP. We have a mix of IOS, Android, and Windows 7/8 devices. IOS and Android devices can self create a wireless profile and after entering credentials can connect without issue. Our Windows 7/8 devices, when auto creating a wireless profile are selecting 802.1x machine authentication instead of User authentication or the best option which is machine or user authentication. This is problematic as we do allow for machine authentication but have an authorization rule limiting machine auth to domain controller and ISE connectivity only. This is to allow domain Windows 7/8 devices to have domain connectivity prior to user sign-in but force user auth to get true network connectivity. The problem is why are the Windows devices not auto setting to user authentication (as I think they did when we ran ISE1.2), or the best option which is to allow both types of authentication? I have limited authentication protocols to just EAP CHAP and moved the machine auth profile to the bottom of the list. Neither have helped. I also notice that the Windows 7/8 endpoints have to say allow connectivity several times even though we are using a global and should be trusted certificate authority (probably a separate issue).
Thank you for any help or ideas,

When connecting a windows device to the ISE enabled SSID when there is not a saved wireless profile on that machine, it will connect and auto create the profile. In that profile, 802.1x computer authentication option is chosen by windows. That has to be changed to computer or user for the machine to function correctly on the network.
On 1.2, this behavior was different. The Windows device would auto select user authentication by default. At other customer sites, windows devices auto select user authentication. This of course needs to be changed to user or computer in order to support machine auth, but at least the default behavior of user authentication would allow machines to get on the network and functional easily to begin with.

Wireless Profile (System Payload) - A keychain cannot be found to store....

Hey Guys,
Got a rather complex one here which I'm reasonably sure is specifically just a 10.10 Yosemite bug in itself but here's some background, hopefully someone else can replicate it and offer an explanation.
I work at a school and we have WPA2 enterprise wireless utilising certificates and TLS authentication, where as part of TLS we provide a username which matches the certificate name.
We create our wireless profiles for devices through Casper or iPhone Configuration Utility (both output the same file and both work). We are finding that in Yosemite, only user level wireless profile payloads are deploying error free.
Casper allows you to create a system payload wireless profile (mobileconfig), and I also know the lines to modify within an exported iPhone Configuration Utility profile to make it a system one.
If we attempt to deploy a system level payload of a wireless profile, we are meeting the error:
"A keychain cannot be found to store TLSUSERNAMEHERE"
You can then choose to select 'Cancel' or 'Reset to Defaults'
I notice that at this point, the wireless is already in fact connected and am clicking 'Cancel' and just moving on.
If you choose to click 'Reset to Defaults' you get the message:
"Are you sure you want to reset your keychain? This will delete all your saved passwords, keys, and certificates. You cannot undo this operation"
You can then choose to select 'Cancel' or 'Reset'
When you choose 'Reset' a window appears stating:
"Please enter your login password. This password will be used to create your new keychain."
You then attempt to enter your password in the text box, however nothing you type appears in the text box at all. You can tick show password which should show what you're typing but still nothing appears in the text box, all you see is a flashing cursor, no password dots, characters or anything. You click OK and it just closes the window.
However the above exact same mobileconfig file works fine on every OSX we have except for 10.10 Yosemite.
We have also tried deploying this same profile on multiple devices running 10.10 Yosemite and they all have the exact same error.
The fact that the profile starts working before you respond to the error indicates to me that this is a false error or a bug within 10.10 Yosemite itself, especially given when you try to do the reset it's indicating you should do, you cant even enter any text and pressing ok just closes it off completely.
Unfortunately I can't find anyone else that's had this problem - can anyone shed some light on this?

Having the exact same issue here. Trying to enable 802.1x wifi on MacBook Airs so that they can authenticate to AD at login and mount user home directories properly. Loading the profile developed to allow connection to wireless before the actual login to the computer gives exactly the same symptoms. I believe, but am not sure that it is because the TLSUSERNAME and password are stored in the profile, and it doesn't know how/where to store the login. The not being able to type in the "Reset" is also identical.
Any updates or ideas? 100% reproducible on 20 different MacBook Airs for 20 different users.

Wireless Profile issue

Hi all,
One of my client was using Autonomous Wireless setup in 2 of their offices, and user authentication was done through Certificate based authentication using AD. In one of their office, saying Office-1, they deployed WLC 5508 and all the autonomous APs were replaced with LWAPP APs. Controller is integrated with AD using Microsoft IAS and users are successfully authenticating.
Now, there is strange problem. Once the user creates a Wireless Profile at Office-1 and successfully connects to the Network, and then he/she moves to Office-2, he is not able to re-connect to the Network and he/she has to delete the existing profile, create the same profile again and then he/she is able to join the Network. Wireless Profile configuration is same for both the locations, except for the thing that Office-1 has Wireless LAN controller and Office-2 does not have WLC. This issue is being faced with only Windows 7 machines, and on Windows XP, it is working fine without deleting/creating new Wireless profile. Looking forward for valuable response.
Regards, Sohail

Hi Scott,
I have managed to get the show wlan output from the controller. Here it is..
(Cisco Controller) >show wlan 4
WLAN Identifier.................................. 4
Profile Name..................................... NGN8021x
Network Name (SSID).............................. NGN8021x
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status ....................... Disabled
   DHCP ......................................... Disabled
   HTTP ......................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 7
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ 300 seconds
--More-- or (q)uit
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... WLC-METLIFEACLICO-DIFC-01
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
PMIPv6 Mobility Type............................. none
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Per-Client Rate Limits........................... Upstream      Downstream
Average Data Rate................................   0             0
Average Realtime Data Rate.......................   0             0
--More-- or (q)uit
Burst Data Rate..................................   0             0
Burst Realtime Data Rate.........................   0             0
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ 172.30.1.236 1645
   Accounting.................................... 172.30.1.236 1646
      Interim Update............................. Disabled
   Dynamic Interface............................. Disabled
   Dynamic Interface Priority.................... wlan
--More-- or (q)uit
Local EAP Authentication......................... Disabled
Security
   802.11 Authentication:........................ Open System
   FT Support.................................... Disabled
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Enabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Enabled
         AES Cipher.............................. Enabled
                                                               Auth Key Management
         802.1x.................................. Enabled
         PSK..................................... Disabled
         CCKM.................................... Disabled
         FT-1X(802.11r).......................... Disabled
         FT-PSK(802.11r)......................... Disabled
         PMF-1X(802.11w)......................... Disabled
         PMF-PSK(802.11w)........................ Disabled
      FT Reassociation Timeout................... 20
--More-- or (q)uit
      FT Over-The-DS mode........................ Enabled
      GTK Randomization.......................... Disabled
      SKC Cache Support.......................... Disabled
      CCKM TSF Tolerance......................... 1000
   WAPI.......................................... Disabled
   Wi-Fi Direct policy configured................ Disabled
   EAP-Passthrough............................... Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   FlexConnect Local Switching................... Disabled
   flexconnect Central Dhcp Flag................. Disabled
   flexconnect nat-pat Flag...................... Disabled
   flexconnect Dns Override Flag................. Disabled
   FlexConnect Vlan based Central Switching ..... Disabled
   FlexConnect Local Authentication.............. Disabled
   FlexConnect Learn IP Address.................. Enabled
   Client MFP.................................... Optional
   PMF........................................... Disabled
   PMF Association Comeback Time................. 1
--More-- or (q)uit
   PMF SA Query RetryTimeout..................... 200
   Tkip MIC Countermeasure Hold-down Timer....... 60
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Multicast Buffer................................. Disabled
Mobility Anchor List
WLAN ID     IP Address            Status
802.11u........................................ Disabled
--More-- or (q)uit
MSAP Services.................................. Disabled
Regards, Sohail

One Wireless Profile in ACCESS CONNECTIONS interferes with another?

I have a profile on my T61 laptop for my secured home wireless connection. It's worked fine (now that I've figured out all the idiosyncracies of ACCESS CONNECTIONS) up to today.
Last night, I connected to a Boingo wireless system at the airport, and saved the profile in ACCESS CONNECTIONS.
Today, when I tried to connect to my home system via my home wireless profile, I continually was told by ACCESS CONNECTIONS that the router was out of range or unavailable. I checked my profile and all settings were correct for my home wireless. All profiles are turned off for automotic location switching.
Long story short -- after other failed steps, I finally deleted the Boingo airport profile from ACCESS CONNECTIONS, and suddenly ACCESS CONNECTIONS was able to connect to my home wireless system again.
Why would one wireless profile interfere and seeming superimpose its connection settings onto my home wireless profile? I believe I now have found another idiosyncracy, it seems?
Solved!
Go to Solution.

Here is the solution to the problem.
GoBoingo has a software program that is set to run during Startup (MSCONFIG in Windows XP); this program alerts the laptop user to the presence of a nearby BOINGO wireless hot spot. This program apparently is interfering with ACCESS CONNECTIONS in the sense that it seems to point the laptop's wireless to a BOINGO access point, regardless of whether one is nearby or not. Then, when I try to use ACCESS CONNECTIONS to connect to the home wireless profile, I'm told that the wireless router is out of range -- and, of course, it is, except that it's a BOINGO wireless router, not my home wireless router.
The solution is to remove the GoBoingo software from running in the Startup window, and instead manually start up the software if one wants to check for a nearby BOINGO wireless hot spot. After unchecking GoBoingo from Startup list, and rebooting the computer, I was able to connect to my home wireless router without any problems.

Adding Wireless Profile XML In TS or Command Line in SCCM

I have exported my wireless profile to an XML file and have created a package and tried from the command line in TS but keep getting errors (0x00000001 or 0x80004005). The command line I've been using is netsh wlan add profile filename="<Profilename>"
I have to be missing something. Does anyone have any ideas?

Now I'm with you :)
My way of doing it is that i have my scripts included in the toolkit package (we do use integrated MDT).
Therefore i need a use toolkit befor i riun my script.
After that I just use a run command line step with Cscript.exe "myscriptname".
Sccm is running as system so it should have all permissions it needs.
By the way, you are not trying to do a gpupdate by chance? That will not work (at least not in 2007)

Wireless profiles problem

I'm hoping that Phrakture and Dibblethewrecker see this. I'm setting up a Thinkpad X20 with a Cisco 350 wireless card. I grabbed the dibble-modified wireless script, and set up a new wireless-profile. I repeatedly get the message on booting that the wireless-profile is NOT found. Here's a couple of other things:
1. I've repeatedly tweaked the profile, but I'm pretty sure that I've got it right. Plus, I've checked and doublechecked that it's in the right place, and that rc.conf points to it.
2. I can bring up the wireless connection manually.
3. I imported Phrakture's old wireless script (and profile) from another machine with Arch on it, and BOOM, I got connected right away.
So, this is not a matter of urgency. I'm just looking for pointers to help me solve my problems with the new script.
This does not appear to be a problem for others since I've found no other posts on this issue. As always, assistance is appreciated.
Bob Pisciotta

bpisciot wrote:I'm hoping that Phrakture and Dibblethewrecker see this.
We see all! :twisted:
Anyway, I'd suggest checking out the initscripts in the testing repo - Judd has implemented roaming network profiles there (as they are official, it'd make more sense to use them)

Since Lion system profiler is now a question mark in the dock. Can i get it back?

Since Lion, system profiler is now a question mark in the dock. Can I get it back? dsso

In Lion, there is no Systim Profiler. It is System Information now located in the Utilities Folder. Open that up and select to keep it in the Dock.
Drag the icon for system profiler off the Dock.

RDP + Wireless disconnect - 802.1x wireless profile

We have an enterprise access point that uses 802.1x domain user authentication so when the user logs into their domain laptop it automatically authenticates and connects using their AD credentials. It's worked great for years.
However we recently noticed (and apparently its done this forever my coworkers tell me) if you Remote Desktop into a any laptop that is on this 802.1x access point the wireless connection disconnects. It does this even if you are using the same username/pw
to connect with Remote Desktop. If you log back in on that laptop the wireless instantly reconnects.
We have a GPO that pushes to these laptops and sets this access point/SSID as the default. I can't see anything obvious that would disconnect this wireless profile if RDP tries to connect...
Anyone else seen this? This is across all windows domain wireless systems, all hardware types.

Hi,
Please follow the steps bellow:
1. Check if you have any third-party network card tool , if so, please choose to let Windows manage your network connections, then check if issue would be solved.
2. If the solutions mentioned above don’t work, please delete your wireless profile and create it again.
Please refer to the following thread about deleting wireless profile.
http://answers.microsoft.com/en-us/windows/forum/windows_7-networking/windows-7-wireless-networking-keeps-returning/621d4c06-8185-4e10-9ecf-50d02aa4d141
Any update, please feel free to ask.
Best regards

Wireless Profile Certificate Embed with SOE image

Guys, i need help on this issue. Our company has all the Cisco Wireless AP. i would like to know if i want to Embed Wireless Profile and tag with every new PC/Laptop with the SOE image. What should i need to do ? anything that i need to buy for this ?
Do we need to set up another CA server ? why we need that ?
The main purpose is for us to easy maintain the wireless profile. so that we no need to manually key in the wireless setup. so, whenever a fresh installation of the PC/Laptop, it will automatic connect to the company wireless network through the certificate. can you please guide me on this ? as my company engineer seems not sure how to do. i just join to this company and thinking of implement this project.
Thanks for the help.

I have moved this over this thread from Small Business Wireless to the correct area. Ryan, I also noticed that you have reposted too. As a reference here is your new post for other people to follow: https://supportforums.cisco.com/message/3514621#3514621
Regards,
Cindy Toy
Cisco Small Business Community Manager
for Cisco Small Business Products
www.cisco.com/go/smallbizsupport
twitter: CiscoSBsupport

What is my wireless profile?

I am trying to set up a wireless connection using the ELA, but when i go through the steps to connect myu computer wirelessly, i use my netwrok cable to set up wirelessly, it searches the network finds the router, searches the computer, opens wireless settings then... finally comes up saying that my wireless profile could not be set up, what can i do?

still doesnt help and on top of that every time i go to advanced settings , in my wireless network tab, if i set it up to be a WPA and TKIP, when i check back it resets itself to Open and WEP....someone help

Help. wrt54gs v 4 Cant create wireless profile

The lights just flickered and it knocked me off. I'm assuming it reset everything bc I couldnt get back on. Now it's telling me it cant create a wireless profile. I'm getting ticked off. I've been working on it for 2 hrs. Anyone help??? Thanks!

Sorry i did not get you ... are you trying to create a profile on the wireless adapter monitor .... or you are trying to create wireless settings on the router ...
Please explain ??

Windows 7 "Error Saving Wireless Profile"

I heve problem with wireless network connection
it says
Windows has encountered an error saving the wireless profile.
Specific error: The system cannot find the file specified.

Have checked your computer for viruses? You might want to check this article: http://www.sevenforums.com/network-sharing/328929-error-saving-wireless-profile.html

Wireless Profiling 7.5.102.0 Question

Similar Messages

Maybe you are looking for