WIreless solution with WDS/Active Directory/mutiple ssid

I'm in a project where the mail goal is to implement a wireless solution for our company.
I will try to explain our dimention.
We want two kinds of wireless solutions based on the same AP, secure and unsecure.
The unsecure is a "guest" net for Internet-access. We want a solution where the users have to contact our reseption to be given a username/password to access this network (same kind you find in airports, some hotels and so on). It has to be able to give a permanent access, access by the hour/day. Username/password can be random, but don't have to be.
The secure is a "work" net for our company computer services. We want the wireless network to be encrypted (a good standard) and the computer itself has to have some kind of certificate. We also want the user to authenticate itself using Microsoft Active Directory.
These two wireless networks should have their own SSID with different security levels. Both of them should support WDS.
Can somebody give me some information on which equipment we need, what kind of server services needes and so on.
The solution has to be robust, but of course the cost aspect is hanging over us as a ghost... ;-)
Regards
Eirik

Guest solution and secured wireless solution is very much possible with Cisco Unified wireless solution. The document available at http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008070ba8f.shtml explains how to setup guest and internal WLAN in a network. This should help.

Similar Messages

  • SSO All SAP solution with windows Active directory

    Dear Experts,
    We have multiple sap solution like
    SAP ERP EHP7
    SAP BW
    SAPBO
    SAP EES/MMS
    SAP Solution Manager
    And all solutions based on Operating system AIX and database is DB2
    We want to configure SSO ( using windows 2012 active directory users ) with all above systems and it's clients.
    Kindly guide me how to achieve SSO using Windows 2013 active directory users.
    DO we need LDAP between Active directory and all servers ?
    we need additional SAP license
    please guide me
    Regards

    Hello
    You can use SAP Single Sign-on 2.0 solution by SAP to integrate all your systems with SSO. The solution contains all what is required for configuring SSO in SAP ABAP and Java Systems. To know more, you may refer:
    1. SAP NetWeaver Single Sign-On 2.0 – SAP Help Portal Page
    2. Implementing SAP NetWeaver Single Sign-On 2.0 Based on Kerberos Tokens 1/4 - YouTube
    3.Implementing SAP NetWeaver Single Sign-On 2.0 Based on Kerberos Tokens 2/4 - YouTube
    4.  Implementing SAP NetWeaver Single Sign-On 2.0 Based on Kerberos Tokens 3/4 - YouTube
    5. Implementing SAP NetWeaver Single Sign-On 2.0 Based on Kerberos Tokens 4/4 - YouTube
    You will have to buy license for SAP Single Sign-on 2.0.
    Regards,
    Tapan

  • 802.1x PEAP Machine Authentication with MS Active Directory

    802.1x PEAP Machine and User Authentication with MS Active Directory:
    I have a simple pilot-text environment, with
    - Microsoft XP Client,
    - Cisco 2960 Switch,
    - ACS Solution Engine (4.1.4)
    - MS Active Directory on Win 2003 Server
    The Remote Agent (at 4.1.4) is on the same server as the MS AD.
    User Authentication works correctly, but Machine Authentication fails.
    Failed machine authenticaton is reported in the "Failed Attempts" log of the ACS SE.
    The Remote Agent shows an error:
    See Attachment.
    Without Port-Security the XP workstation is able to log on to the domain.
    Many thanks for any indication.
    Regards,
    Stephan Imhof

    Is host/TestClientMan.Test.local the name of the machine? What does the AAA tell for you the reason it fails?

  • OracleApps HRMS-R12.1.3 Integration with MS Active Directory (win 2008 R2)

    Dear Friends,
    we are using Oracle Apps R12.1.3 and the Microsoft Active Directory : Windows 2008 R2
    we have the following requirement:
    (1)From Oracle Apps to Active Directory.
    -Employee master information needs to be interfaced to Active Directory on a regular interval which should be updated in the active directory.
    (2)From Active Directory to Oracle system.
    -Whenever new email address for an employee is created in Active directory, the information needs to flow to Oracle HRMS.
    Please let us know the method to achieve with minimal latest oracle softwares?
    can it be done over coding from oracle apps without new softwares?
    Is Oracle Apps R12.1.3 certified with Windows 2008 R2 Active Directory?
    Regards,
    DB

    user564706 wrote:
    Dear Friends,
    we are using Oracle Apps R12.1.3 and the Microsoft Active Directory : Windows 2008 R2
    we have the following requirement:
    (1)From Oracle Apps to Active Directory.
    -Employee master information needs to be interfaced to Active Directory on a regular interval which should be updated in the active directory.
    (2)From Active Directory to Oracle system.
    -Whenever new email address for an employee is created in Active directory, the information needs to flow to Oracle HRMS.
    Please let us know the method to achieve with minimal latest oracle softwares?
    can it be done over coding from oracle apps without new softwares?
    Is Oracle Apps R12.1.3 certified with Windows 2008 R2 Active Directory?
    Regards,
    DBPlease update your original thread(s) instead of creating new one(s) -- Integrate Oracle Apps R12 with Microsoft Active Directory
    Thanks,
    Hussein

  • Portal Integration with Microsoft Active Directory

    We are working on a project to integrate Oracle9iAS Portal with Microsoft Active Directory. I am wondering if anyone has any experience with this and hence suggestions. Particularly, I'm wondering if its possible and how to use Active Directory to manage the Portal user accounts and group relationships?

    Please note that we finally got this working. For Active Directories sake, I would suggest using userPrincipalName or sAMAccountName as the Unique Attribute. Also, note that Active Directory uses OUs for organization, not CNs, so the search base should be either just the DN of the domain or an OU in the domain. Also, be sure to specify the full DN of the Bind DN as in CN=Administrator,CN=Users,DN=domain,DN=com

  • SAP IDM with MS Active Directory (OU names in Arabic)

    Dear Gurus,
    With SAP IDM , we need to integrate with MS Active directory such a way that SAP IDM only fetches users who have “SAP” in one of the AD field. That means do not read entire AD but only fetches users in SAP who have “SAP” tagged in one of the AD field.
    Is it possible ? We tried that in SAP LDAP connector but its not possible in LDAP connector in SAP as LDAP connector is reading through all the users in our CUA system.
    Question is it possible through SAP IDM that we use some thing (maybe  BAPI) to restrict users and do not read all users but only users having “SAP” in one of the AD field.
    Also note that our AD has some OU's name in Arabic.
    Regards,

    If you want to filter this in the ADS Initial Load job then you can modify the repository LDAP Filter:
    (&(objectclass=person)(orgUnit=SAP))
    Replace orgUnit=SAP with your your attribute and tag.
    Br,
    Chris

  • SSO (single sign on) on NetWeaver 7.0 Enterprise Portal based on spnego with Microsoft Active Directory

    Hi,
    we are using SAP Netweaver Enterprise Portal 7.0 (SP25) based on Windows 2008 R2/Oracle 11g.
    When we setup the Portal, we used the UME of the ECC - ABAP.
    The portal is used internally only.
    Now we want to provide SSO.
    User authenticate against Windows Active Directory (Windows 2003).
    We thought SSO via spnego would be the best solution.
    Any better alternates, we should use?
    We are following the SAP documentation:
    SAP-Bibliothek - Benutzerauthentifizierung und Single Sign-On
    We still want to create users in ABAP and assign them the portal roles. LDAP access should only have read access, to verify the security token from Active Directory.
    When we setup the portal from scratch using ABAP as its UME, in the system configuration, LDAP can't be selected/add as data source.
    In case we understand the documentation correctly, we would now need to add LDAP via the configtool for read access.
    What is not clear to us, when we active now LDAP via config tool, if we would now lose the ABAP connection.
    Is there a tutorial for SSO Netweaver 7.0 EP, like for EP 7.3, available?
    In 7.3 SSO is pretty simple to get it running, thanks to the many tutorials here and on the internet.
    Thanks for your help.
    Best regards
    Carlos Behlau

    Hi,
    I was able to generate the key via ktab program.
    But when I am enable SSO, nothing is happening when I try to log-on via SSO to the portal.
    I installed WebDiag tool on the portal server and ran trace.
    The users are located in domain: company.com of activate directory.
    The Java AS are located in domain: sap.company.com of activate directory.
    The sap.company.com domain acts as child of company.com.
    When I check the WebDiag trace, I see for the SPNegoLoginModule - the entry "... no key (etype: 23) for realm sap.company.com available ..."
    I would except company.com as realm key, as the keytabs have been generated on the domain controller of company.com.
    Is it possible to get SSO with child domain running?
    Based on the statement of the network folks, child and father domain having a trust.
    Thanks for your help.
    Best regards
    Carlos

  • How to deploy EUS  using OVD with existing active directory ?

    Hi,
    I am new in Oracle FMW and want to explore more into it,
    I have existing MS active directory with users and group policies defined there  and I need to implement the solution for  all users  to authenticate in oracle Database (11gR2) via AD.
    and after searching reading some docs I came to know that It can be done by  "EUS deployment using AD and OVD".
    Now I am bit confused for where to start Please guide me . My env is as follows
    I have existing MS AD server (win2003) and oracle Database 11gR2 on HP unix..So Do I need another server (Win2003/2008) to install OVD or can I install OVD on existing AD server.
    What exactly software required to install OVD as I have downloded software from e delivery site "Oracle Identity and Access Management 11g (11.1.1.7.0)"  
    Is it same or do i need to download other one?

    Check this:
    Installing and Configuring Oracle Virtual Directory
    OIM Image: OID and OVD 11g Basic Install Steps
    Oracle® Fusion Middleware
    Middleware Technologies : Installing Oracle Virtual Directory

  • ODI Integration With Microsoft Active Directory to bring User id to Table

    Hi All,
    I have to bring the USER Id of  Employees from the Microsoft Active Directory based on the Mai id of the user.
    I have a table like below:
    User_name
    Mail_id
    Vishwas
    [email protected]
    John
    [email protected]
    Depak
    [email protected]
    I need to bring the User id of that employees from Active Directory and load it to another table
    Now the Issues is What are the Things i have to perform in ODI to do this:
    I have gone through some of the Blogs for the same but every where i found using ODI for External Authentication.
    Can i get the User Ids in a relational tables so that i can join it with above table and load it to target ?
    Please let me know if any body have the solution for it
    Thanks
    Regards

    I think you can user ldap driver to read entries from your ldap server. Please check the documentation at LDAP Directories - 11g Release 1 (11.1.1)

  • ACS Integration with Microsoft Active Directory Services

    Hello Everyone,
    I've been tasked to design the integration of ACS with MS AD. What I want to know is the below assuming I have a software ACS or a ACS device and the protocol for authentication is Radius
    - What is the criteria for the AD to integrate with ACS software of appliance
    - Should that AD be hosted on the domain controller or not?
    - If not, on what (Domain Controller, Tree, Forest, Branch, Flower, Fruit  ) should the AD be hosted on?
    - What will I have to do to authenticate users logging into Cisco Security Manager with ACS integrated with AD?
    - Are there any other dependencies that I will have to categorically mention in my design document?
    Thanks,
    Rishi

    In ACS v5.x, there is a screen for integrating the ACS with AD. 
         (Users and Identity Stores > External Identity Stores > Active Directory)
    Just enter the local domain name (domain.com) and a valid AD administrator account username and password, and the ACS will connect to the domain.  This allows you to use existing AD credentials to login and administer your network devices. 
    Tying the ACS to AD really only takes one screen and less than a minute, but you will still have to tell the ACS which AD groups get which permissions (for example, read-only or read-write access), and you will have to setup a search sequence (Users and Identity Stores > Identity Store Sequences) to tell ACS to first look at AD for credentials, then check the local ACS user database for valid accounts.  The permissions part is still fairly quick, and it only takes me about 45 minutes to build an ACS from scratch including all AD integration and custom RADIUS attributes for some of our devices. 
    The authentication would occur like this:
    User SSH/telnet/console to device
    Device contacts ACS using TACACS or RADIUS
    User receives login prompt and enters AD credentials
    Devices sends credentials to ACS
    ACS validates credentials in AD
    ACS sends authentication OK message to Device
    Device logs user in.
    Command Authorization looks something like this:
    User enters a command
    Device sends command authorization request to ACS
    ACS looks at which AD group the user belongs to and looks up permissions configured in ACS for that group
    Based on the permissions you have assigned, ACS either sends an allow or deny message to the Device
    Device allows or denies the user command.
    Criteria:  We use an ACS 5.2 virtual machine and have had it work perfectly with Server 2003 and Server 2008.
    AD is hosted on our local domain controller (Bonus:  no planting of flowers required!)
    Dependencies: 
    Issue:  The Device looks to ACS.  ACS looks to AD.  If AD fails, users cannot use their AD credentials to login.
              Device ---> ACS ---> AD
    Solution:  Configure the Device to look at ACS first, then a local table if ACS is not available.  Also, configure the ACS to look at AD first, then a local ACS account list if AD is not available.  (You can configure local user accounts on the Device and in the ACS) 
              Device ---> ACS ---> AD
              Device ---> ACS ---> AD ---> ACS local
              Device ---> ACS ---> AD ---> ACS local ---> Device local
    The new version of Cisco ACS is UNIX-based, and you can download a free trial to load up and try before you buy.  It is far FAR superior to the old ACS v3.3 that we had for years.
    I hope this helps for your design document!
    --Chris

  • How to populate drop down list in infopath 2010 with form Active Directory resources.

    I want to populate drop down list in infopath 2010 with Active directory resources.
    Kindly let me know how to do this.

    Actually I posted an alternative approach, whoops. This is the Web service way, but both will work;
    http://blog.mangroveweb.com/pre-populating-an-infopath-from-with-mysql-data-using-a-net-web-service/using-sharepoints-getuserprofilebyname-web-service-to-retrieve-ad-account-information/
    w: http://www.the-north.com/sharepoint | t: @JMcAllisterCH | YouTube: http://www.youtube.com/user/JamieMcAllisterMVP

  • Unable to login with an Active Directory account on 10.6.7

    I just got a Mac Airbook and I'm trying to connect with my AD account. I was able to bind my computer to the domain succesfully but when I try and logon with my AD account I get the shakes. I verified my binding with the green light next to "Network Account Server". I asked some admins who have older macs and they guided me through the settings but it still doesn't work for me. The only thing that shows up in the logs when I attempt to login is "Active Directory could not find GUID for DOMAIN\domain to update admin group". And yes, my local user is different than my AD user.
    Any ideas?

    Not for me. Some things mount others do not. Plus you can't use links from e-mails or save to from applications. It makes most applications completely unuse-able for me. It looks like I'm going to have to run almost everything over Parallels. Kind of of lame that Mac can't get this fixed.

  • Integrate Oracle Apps R12 with Microsoft Active Directory

    Dear Friends,
    I am using Oracle Apps R12.1.3 and alsoo we have Microsoft Activity Directory.
    we need to integrate both so that any employee cretaed in Oracle Apps HRMS will be replicated in Microsoft Directory.
    Please let us know the oracle 10g and 11g products we have to use to achieve this.
    Please let us know both 10g and 11g products and is 10g products covered in Oracle support?
    Regards,
    DB

    Please see these docs/links.
    Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On 10gR3 (10.1.4.3) [ID 376811.1]
    Using the Latest Oracle Internet Directory 11gR1 Patchset with Single Sign-on and Oracle E-Business Suite [ID 876539.1]
    Registering Oracle E-Business Suite Release 12 with Oracle Internet Directory 11gR1 and Single Sign-On [ID 1370938.1]
    External Authentication To Active Directory Integration With E-Business Suite [ID 429020.1]
    Re: Integrating Active directory  with oracle EBS 12.1.3 with 11g R2 database
    Re: Oracle EBS with SSO
    Re: Need to integrate AD with R12.1.3 with the most simplest architecture.
    Re: EBS R12,how to use OID implement SSO without OAM/OID(with 3rd product)?
    Thanks,
    Hussein

  • OWLCS install - trying to use with my Active Directory

    Experts,
    I'm new to OWLCS but am very familiar with the Oracle Fusion Middleware 11g Stack. My end goal is to integrate OWLCS with WebCenter Spaces 11g (11.1.1.3). I have a Dev Environment where I have installed OWLCS (11.1.1.2) following the steps outlined in the Installation Guide, Oracle® WebLogic Communication Services Installation Guide 11g Release 1 (11.1.1) E13808-01.
    I followed the instructions to setup an All-in-One Managed Server. I have an Admin server (owcs_AdminServer) and managed server (wlcs_server1) defined and started. I've also followed the instructions to update my Realm to "mycompany.com" and also remembered to update the /etc/hosts file with "mycompany.com".
    I followed the remainder of the guide to test the installation with an Oracle Communicator Client.... I added test users using launch_sash, I successfully connected and saw my presence change and was able to communicat with another test user.
    That was fine for testing... but, I need this connected to our LDAP (Active Directory) and then eventually to integrate with WebCenter Spaces. This is where I get lost...
    I started following the Admin Guide, Configure Authentication Provider for OWLCS, in Section 5. But I'm confused over what type of authentication that is needed? Do I setup for Digest Authentication?
    Being not quite sure, I started to follow the steps 5.7.4 Steps for Configuring Digest Authentication. First, I could not change my LDAP provider to store unecrypted passwords so I didn't change anything to the existing LDAP.
    In 5.7.4.2 Reconfigure the DefaultAuthenticator Provider, I followed steps to change the DefaultAuthentication flag to "sufficient".
    Next, I followed 5.7.4.3 and created an LDAP authentication provider for my Active Directory LDAP server. I checked my Users and Groups after restarting the Admin server and I can see my users and groups in the MyRealm Security Realm .
    Here is where I need help... My LDAP admin is telling me that our LDAP cannot pass unencrypted passwords... so what are my options?
    Do I really have to setup DigestAuthentication? What is the Credential Attribute Name that Active Directory LDAP users use?
    Do I have to create a new Digest Authenticator?
    I also have a few questions regarding the settings to Oracle Communicator but will wait until the above is resolved. I have some confusion on the settings on Oracle Communicator once the above is working. And then next, getting it to work with WebCenter Spaces.
    Thanks in advance,
    Phil

    Hi Phil,
    Integration with Active Directory is not supported for OWLCS. We support LDAP integration with Oracle Internet Directory (OID) only.
    Please refer to section 5.12 in the Admin Guide at:
    http://download.oracle.com/docs/cd/E14571_01/doc.1111/e13806/securityoverview.htm#CJAJEFHF
    There are several steps which need to be followed carefully to configure OWLCS with OID, including installing Static Verifier and modifying OWLCS server instance.
    Please also keep in mind that OWLCS is not available for production use; it is limited to development, testing, and non-production use only. It is not licensable at this time for middleware customers.

  • ACS 5.1 with Windows Active Directory

    Hi All,
    I installed ACS 5.1 in vmware server successfully. I have problem while intergrating cisco acs with microsoft Windows 2008 active directory. I already verfied all the related parameters like Domain name, user rights to join in AD, DNS name resolve and IP-Address.
    But, I can able to add any system into my domain without any issues and this is not happening in Cisco ACS 5.1 version.While testing the Active Directory - Test connection it prompts with error message " Can not resolve network address".
    Please help me from this issue.
    Regards
    Mani

    Hi
    Have you setup the correct DNS servers and domain name in the ACS and also do you have an entry in the DNS for the ACS server?
    Dave

Maybe you are looking for