I have a WLC 4400 that manages our AP's. We have a few wlan/ssid's that the ap's use.
We have locations around the county that are connected back to us on our fiber. When we plug AP's into any of the remote or local sites we have no problems.
Second setup: We have locations that are not on our fiber so we use ASA 5505's to create a tunnel using easy vpn.
They connect just fine and users into plugged into the 5505 have no problems at all.
When I plug in the AP it connects , gets an IP and connects to the WLC.
The wireless client connecting to the AP will get an ip from the WLC / WLAN subnet. Still looks good. All DNS resolution and pinging works internal and externally.
The problems that occurs is no traffic gets back? Like web, etc.. So when I try to bring up a web page internally or externally it just times out. All sites can be pinged just no way back? It will sometimes connect to web sites for a few minutes then slowly stop and then time out. Intranet pages and outside pages alike.
Quick layout again of the scenario: the clients connecting to the AP's plugged into the ASA are getting addresses from the WLAN they are connecting to from the WLC.
The Users directly plugged in are getting them from the ASA 5505.
I can create a ftp server on the internal network and ftp to it and connect to it from outside on the WLAN/WLC subnet on the AP plugged into the ASA. When I start a download it starts ..but then drags and gets slow until it drops. If I browse to a network share I can copy a file it is just really really slow. The web pages start for a millasecond then just keep waiting for reply. Again it works on the subnet plugged straight into the ASA.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :