topic cisco 1130 ag multiple ssid (no dhcp support) in Wireless

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Sun, 04 Jul 2021 06:33:48 GMT

hi there,

i' ve got 2 cisco 1130 AG AP's , i want both of them to broadcast 2 ssid's per AP, i've done so far but my clients cannot get a ip adress from the dhcp server.

please read my config.txt file out of my AP and tell me were i am going wrong

thanks

johan maljaars / info@upqu.nl

upqu media

Re: cisco 1130 ag multiple ssid (no dhcp support)

Scott Fella — Mon, 18 Feb 2013 11:29:46 GMT

I don't think you have your encryption correct. If your using WPA you need to only use TKIP. For WPA 2 you use AES.

Here are some links bot both

http://networking-newbie.blogspot.com/2008/11/configuring-wpa-and-wpa2-on-cisco.html?m=1

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801c40b6.shtml

Sent from Cisco Technical Support iPhone App

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 11:39:22 GMT

hi,

thanks for your reply, but even when i changed to other encryption setings i cannot obtain a ip adress to my wireless clients (the dhcp server is on my wired network and acessible of course). are there other configurations possible ??

I've read something like to add:

interface FastEthernet0.10

encapsulation dot1Q 10

no ip route-cache

bridge-group 10

no bridge-group 10 source-learning

bridge-group 10 spanning-disabled

interface FastEthernet0.10

encapsulation dot1Q 10

no ip route-cache

bridge-group 10

no bridge-group 10 source-learning

bridge-group 10 spanning-disabled

Re: cisco 1130 ag multiple ssid (no dhcp support)

Scott Fella — Mon, 18 Feb 2013 12:38:30 GMT

Okay so now you hopefully got the ssids set, now take a look at this link for multiple ssids and vlans.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a0080665ceb.shtml

Sent from Cisco Technical Support iPhone App

Re: cisco 1130 ag multiple ssid (no dhcp support)

Scott Fella — Mon, 18 Feb 2013 12:39:17 GMT

Here is a support doc that should help

https://supportforums.cisco.com/docs/DOC-14496

Sent from Cisco Technical Support iPhone App

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Mon, 18 Feb 2013 13:01:40 GMT

Hi John,

Sorry to say that your configurations does not looks good to me 😞 . Please try to modify the configuration as below (assuming your using only dot11radio 0 if not replicate the dot11radio 0 configuratrion to dot11radio 1 as well).

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

Also ensure that switch port to which AP is connecting is configured as below.

interface FastEthernet x/x

switchport trunk encapsulation dot1q

switchport trunk native vlan 10

switchport mode trunk

speed 100

duplex full

Regards

Najaf

Please rate when applicable or helpful !!!

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 13:05:29 GMT

thanks, gonna give it a try !

give a reply soon

Re: cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 13:15:16 GMT

i've made the following config.txt, upload to my ap (i can see the two ssid's , but connecting to them gives no ip adress), straight to the switch no problem getting an ip from the dhcp server !

whats up ?

can anyone give me an working simple multi broadcasting ssid ( two ssid) configuration, maybe editing that one would be fine for me ..

thanks for helping me out

johan

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Mon, 18 Feb 2013 13:28:57 GMT

Hi John,

Sorry not sure where did the below configuration came from?

interface FastEthernet0

ip helper-address 192.168.178.1

no ip address

no ip route-cache

duplex auto

speed auto

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

The fast ethernet configuration should be as below.

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

First of all, could you confirm if your BVI interface is picking and DHCP ip address? If yes try pinging the BVI interface and confirm if that goes through? Also where is the DHCP scope configured? Could you share the DHCP scope configuration

Also if all above are working as expected for testing just configure the exsisting SSID with open authetication (with out wep) and try connecting client to and confirm if that goes through?

Regards

Najaf

Please rate when applicable or helpful !!!

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 13:37:34 GMT

... changed interface fastethernet0 to its settings you've seen to some suggestions on internet to add ip helper-address.

but didn't work, BVI interface picks up an ip adress,and i can ping that one / reach also the web interface !

als disble any security gives the same...., no ip for the clients

did you got an working config with an 1130ap two ssid's broadcasting and an dhcp server for giving the adresses to the clients through the ap ?

thanks

johan

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Mon, 18 Feb 2013 13:49:48 GMT

Hi John,

The configuration looks fine. As requested a typical configuration id provided below. Erase all exisisting configuration and apply below configuration. Then save the configuration and reload the AP and then try connecting the wireless client.

dot11 ssid BADGASTEN

vlan 13

authentication open

mbssid guest-mode

dot11 ssid ROELSE

vlan 11

authentication open

mbssid guest-mode

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption vlan 13 key 1 size 40bit 7 6C7F123C7FCA transmit-key

encryption vlan 13 mode wep mandatory

encryption mode ciphers aes-ccm tkip

encryption vlan 11 key 1 size 40bit 7 C27CF72C3684 transmit-key

encryption vlan 11 mode wep mandatory

ssid BADGASTEN

ssid ROELSE

speed basic-1.0 basic-11.0 basic-54.0

channel 2412

station-role root

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

interface BVI1

ip address dhcp client-id FastEthernet0

no ip route-cache

ip default-gateway x.x.x.x

bridge 1 route ip

Regards

Najaf

Please rate when applicable or helpful !!!

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 14:48:54 GMT

najaf,

when i try to load exactly the above configuration there will be no ssid's broadcasting !

suggestions ?

thanks

cisco 1130 ag multiple ssid (no dhcp support)

Stephen Rodriguez — Mon, 18 Feb 2013 14:50:13 GMT

add the follwoing two commnds

dot11 mbssid

and then under the Radio

mbssid

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 14:55:01 GMT

steve,

added, now giving it a try.., my dhcp server by the way is a win2008 server like..., nothing special on the same ip range / subnet of course

give a reply soon

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 15:03:06 GMT

when loading the configuration now, two ssid's upcoming .. but still the same, no ip adress for the clients

also now my BVI1 now didn't got an ip adress from the dhcp server

my config now:

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

hostname UPQU1

enable secret 5 $1$nDCn$DTMxREXd/QkG5nasXDXSr0

no aaa new-model

resource policy

ip subnet-zero

dot11 mbssid

dot11 ssid BADGASTEN

vlan 13

authentication open

mbssid guest-mode

dot11 ssid ROELSE

vlan 11

authentication open

mbssid guest-mode

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

mbssid

encryption vlan 13 key 1 size 40bit 7 6C7F123C7FCA transmit-key

encryption vlan 13 mode wep mandatory

encryption mode ciphers aes-ccm tkip

encryption vlan 11 key 1 size 40bit 7 C27CF72C3684 transmit-key

encryption vlan 11 mode wep mandatory

ssid BADGASTEN

ssid ROELSE

speed basic-1.0 basic-11.0 basic-54.0

channel 2412

station-role root

interface Dot11Radio0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

bridge-group 11 block-unknown-source

no bridge-group 11 source-learning

no bridge-group 11 unicast-flooding

bridge-group 11 spanning-disabled

interface Dot11Radio0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

bridge-group 13 block-unknown-source

no bridge-group 13 source-learning

no bridge-group 13 unicast-flooding

bridge-group 13 spanning-disabled

interface FastEthernet0

no ip address

no ip route-cache

speed 100

full-duplex

interface FastEthernet0.10

encapsulation dot1Q 10 native

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface FastEthernet0.11

encapsulation dot1Q 11

no ip route-cache

bridge-group 11

no bridge-group 11 source-learning

bridge-group 11 spanning-disabled

interface FastEthernet0.13

encapsulation dot1Q 13

no ip route-cache

bridge-group 13

no bridge-group 13 source-learning

bridge-group 13 spanning-disabled

interface BVI1

ip address dhcp client-id FastEthernet0

no ip route-cache

ip default-gateway x.x.x.x

bridge 1 route ip

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Mon, 18 Feb 2013 15:07:42 GMT

Hi John,

Remove the configuration line "encryption mode ciphers aes-ccm tkip"

Also could you please provide the switch port configuration? Also where do you have the DHCP configured? Could you please share the DHCP configuration.

Regards

Najaf

Please rate when applicable or helpful !!!

Re: cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 15:40:41 GMT

dhcp server ip is 192.168.178.1

range is 192.168.178.20 to 192.168.178.200 / subnet 255.255.255.0

Remove the configuration line "encryption mode ciphers aes-ccm tkip" gives still the same !

anymore options ?, enable dhcp in the AP ?

when i manually add the ip settings / gateway settings in my wireless client there is also no internet access !

when i found the ssid with my client, enter the key then no ip adress is assigned. in the log file on the 1130 AP there is a rule:

Interface Dot11Radio0, Station UPQU1 c485.08b1.e419 Associated KEY_MGMT[NONE]

johan

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Mon, 18 Feb 2013 15:53:52 GMT

Hi,

Ok..There is no specific configuration on the AP for DHCP other than mapping the SSID to correct vlan.

Is the dhcp configured on the switch?

Could you please share the configuration on the switch port where the AP is connected?

Also could you please configure the switch port where AP is connected to vlan 13 and connect the PC to this port and check if your are getting the ip address from vlan 13?

Regards

Najaf

Please rate when applicable or helpful !!!

cisco 1130 ag multiple ssid (no dhcp support)

johan maljaars — Mon, 18 Feb 2013 17:13:15 GMT

my switch is a very basic Cisco 100 Series. no configurations for that !!, is that needed ???

when i go to factory default settings, and set a basic setup with one ssid broadcasting there is no problem with assigning an ip adress from the dhcp server to the clients !!

thanks for your help

johan

cisco 1130 ag multiple ssid (no dhcp support)

kcnajaf — Tue, 19 Feb 2013 02:16:08 GMT

Hi John,

This exactly could be the problem then. If you want the AP to run with multiple vlans, then on the switch end you should be configuring the port as trunk port which will then help the switch to carry multiple vlans traffic over the trunk link. If your switch is not supporting the trunk configuration it will carry only one vlan information. That is the reason why your are getting ip address when you have single ssid to vlan mapping.

Hope that helps.

Regards

Najaf

Please rate when applicable or helpful !!!