GNS able to virtualize ASA

http://www.xerunetworks.com/2012/03/asa-84-asdm-on-gns3-step-by-step-guide/

please use asdm-715-100.bin to support latest java.

Remember to edit preference to preview command to learn how ASDM push command to CLI

P:S

Share IOS file.

https://www.dropbox.com/sh/n1inktllvb8hk0g/TtR1wPzOBk

most useful of ASDM is see live log when troubleshooting production network,

Autonomous mode

Deploy standalone Access point

AP nowadays come with Controller(WLC) based IOS, however that is possible to convert the access point to standalone access point (save $)

CAP-2602I

Controller based AP.

LAP-1042

Lightweight  Access point

https://learningnetwork.cisco.com/thread/14405

Using a TFTP Server to Return to a Previous Release

---

Note This section does not apply to Cisco C3201WMIC and Cisco C3201LAP.

---

Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:

---

Step 1 The static IP address of the PC on which your TFTP server software runs should be between 10.0.0.2 and 10.0.0.30.

Step 2 Make sure that the PC contains the access point image file (such as c1200-k9w7-tar.122-15.JA.tar for a 1200 series access point) in the TFTP server folder and that the TFTP server is activated.

Step 3 Set the timeout value on the TFTP server to 30 seconds.

Step 4 On the PC where the TFTP server is located, perform these steps:

a. Disable any software firewall products, such as Windows firewall, ZoneAlarm firewall, McAffee firewall, or others.

b. Ensure all Windows files are visible. From Windows Explorer, clickTools > Folder Options > View; then uncheck the Hide extensions for known file types check box.

Step 5 Rename the access point image file in the TFTP server folder to c1200-k9w7-tar.default for a 1200 series access point, c1130-k9w7-tar.default for an 1130 series access point, c1240-k9w7-tar.default for a 1240 series access point, and c1250-k9w7-tar.default for a 1250 series access point.

Step 6 Connect the PC to the access point using a Category 5 (CAT5) Ethernet cable.

Step 7 Disconnect power from the access point.

Step 8 Press and hold MODE while you reconnect power to the access point.

Step 9 Hold the MODE button until the status LED turns red (approximately 20 to 30 seconds) and then release.

Step 10 Wait until the access point reboots, as indicated by all LEDs turning green followed by the Status LED blinking green.

Step 11 After the access point reboots, reconfigure it using the GUI or the CLI.

Scenario

C3750X –-- CAP-2601I

·         1 vlan 1 SSID

Switch configuration

switchport access vlan xxx Just 1 vlan switch will control

switchport mode access

·         Multiple vlan & SSID,

Note: If have multiple Vlan/SSID Trunk needed to configure on the switch port

Switch configuration

switchport trunk encapsulation dot1q

switchport mode trunk

switchport allowed vlan xx, xx, xx

switchport trunk native vlan xx Usually the management IP for the AP

Access Point Configuration

show run

Building configuration...

dot11 ssid GLBSYM

   authentication open

   guest-mode Broscast SSID

!

!

dot11 guest

!

interface Dot11Radio0 2.4Ghz Radio

no ip address

!

encryption key 1 size 128bit 7 6A074B7F357E124C750C1F17280E transmit-key

encryption mode wep mandatory

 !

ssid GLBSYM

!

stbc

channel 2437

!

interface Dot11Radio1 5Ghz Radio

no ip address

!

encryption key 1 size 128bit 7 6A074B7F357E124C750C1F17280E transmit-key

encryption mode wep mandatory

 !

ssid GLBSYM

!

stbc

speed  basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.

power local 11

!

interface GigabitEthernet0

no ip address

duplex auto

speed auto

bridge-group 1

bridge-group 1 spanning-disabled

no bridge-group 1 source-learning

!

interface BVI1 bridge virtual interface <- the management IP address

ip address 10.93.107.220 255.255.255.128

!

ip default-gateway 10.93.107.129 <- Gateway IP address, normally point to DHCP server or DHCP relay

all

!

End