I set up my WLAN with 802.1x auth pointing to a radius server. The Radius server in question is a Windows server 2008 R2 virtual machine with the Network Policy Server role. I installed IIS and submitted a cert request with the internal FQDN of the server. I got my trusted cert back and imported it into the Radius server. I then configured my network and connection policy with PEAP authentication (specifying that certificate and everything worked perfectly.

http://www.theregister.co.uk/2011/03/29/cisco_buys_newscale/

Cloud computing is really becoming a overused term. Everyone is signing on to it, but most people don’t even really understand it. This will either be the future of IT or a complete fad. I give it 50/50 odds.

In troubleshooting we discovered that when we plugged in the port channel there was immediately a massive amount of data transversing it, far too much to be normal. Doing some digging we discovered there was some mirror port configuration on the switch which was mirroring one port of my Etherchannel to another port on the Etherchannel thus causing a type of traffic loop which eventually completely floods the switch.

Not likely an issue I will see again but a valuable lesson on pruning old configurations after they no longer apply.

In the end I turn off routing with a “No IP routing” and then turned it right back on with “IP Routing” and that immediately resolved the issue. It was very weird though.

Easy and simple way to accomplish this. Load up your IOS file onto a TFTP server and then connect to the CLI of your controller.

Enter this command for each AP:

config ap tftp-downgrade tftp-server-ip-address filename access-point-name

http://mikemcarthur.net/article.php?story=20100602220125153

Essentially Cisco phones use CDP to discover their voice vlan. HP procurve phone’s use LLDP to accomplish the same goals. Now apparently this works fine with the Cisco 79XX model phones which are there Enterprise class phones.

However I was trying it with the Small Business line 500 series phones and it does not work. According to the article you need to manually disable CDP on the phones to make this work. The other alternative (which is what I did) is manually input the voice VLAN into the phone.

Hope this helps

For my first issue I want to talk about is with Cisco ASA’s and concerns how to set up a static route on an interface to point to another router for certain routes.

Let me give an example. You have your inside interface, lets say 192.168.1.0/24, and on this interface your have a router with an IP address of 192.168.1.10 which connects to a network of 10.0.0.0/24. Now you need your devices on the 192.168.1.0/24 network to get to the 10.0.0.0/24 network via 192.168.1.10 but that is not their default gateway. How do you do it?

Well obviously you could use static routes on the machines but that is bad practice. So you do it on the ASA.

You would set up your static route and NAT exempt as normal but it will not work. The ASA will be able to ping the 10.0.0.0 network but not the devices. Packet tracer will tell you that you have a Access List issue but you don’t.

You need to other commands to make this work:

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

This will allow your traffic to function as you intended

A long time coming, but awesome news none the less.

http://newsroom.cisco.com/dlls/2010/corp_041910.html?sid=BAC-NewsWire

I have it on good authority that Cisco has a lot of plans already on how to integrate this into their existing UC line. The best part is that Tandberg devices already support SCCP so it will be very very easy to tie this in with Unified Communications.