topic Autonomous AP Trunk Configuration in Wireless

Autonomous AP Trunk Configuration

nicolasvogel — Mon, 05 Jul 2021 10:35:39 GMT

Dear Support,

I have to configure a Wireless Trunk Link between two buildings. I'm using Outdoors AP 1532 with directional Antennas on 5GHz. I want my Wireless Trunk to word exactly like a Wired Trunk between two switches.
In each Building I have a 2960X Switch with 2 VLANs (Data and Voice).
I converted the 1532 APs to Autonomous APs
I configured the VLANs, Radio 1 sub-interfaces and G0 sub-interfaces.
I'm using VLAN 1 as native VLAN in all the network.
I configured only 1 SSID, mapped on VLAN 1 (native VLAN). Is that the right configuration? Or do I have to configure a SSID for each VLAN?
Are the Roles "Root Bridge" for AP01 and "Non-root Bridge" for AP02 alright?

Thank you.
Kind Regards,

Nicolas.

Hi Nicolas,Pls find a

Rasika Nayanajith — Sat, 18 Jul 2015 09:13:58 GMT

Hi Nicolas,

Pls find a reference wireless bridge configuration. Initial configuration is the basic one and then I have added EAP-FAST as security method. You can do WPA2/AES with PSK if needed.

http://mrncciew.com/2013/11/09/wireless-bridge-with-eap-fast/

AP management should be on native vlan in these configuration.

HTH

Rasika

*** Pls rate all useful responses ***

Hi Rasika,Thanks for

nicolasvogel — Mon, 20 Jul 2015 21:36:02 GMT

Hi Rasika,

Thanks for responding. So the first thing I have to change is to configure my VLAN 10 as native as it is used for management of the devices.

After that can I add as much VLANs as desired? The only thing I have to configure is a new VLAN with corresponding Radio sub-interface and Ethernet sub-interface?

Regards,

Nicolas.

If you want vlan 10 IP to be

Rasika Nayanajith — Mon, 20 Jul 2015 21:43:36 GMT

If you want vlan 10 IP to be used as management of these bridges, then YES. Still note that bridge group should be 1 for those sub-interfaces.

Give it a try & let us know any issues.

HTH

Rasika

Hi Rasika,Here is my actual

nicolasvogel — Thu, 23 Jul 2015 06:58:32 GMT

Hi Rasika,

Here is my actual configuration:

dot11 vlan-name Data vlan 10
dot11 vlan-name Voice vlan 777
dot11 ant-band-mode single
!
dot11 ssid <my-SSID>
   vlan 10
   authentication open
   authentication key-management wpa version 2
   guest-mode
   infrastructure-ssid
   wpa-psk ascii 7 <my-psk>

interface Dot11Radio1
description 5GHz Interface for P2P Link
no ip address
!
encryption mode ciphers aes-ccm
!
encryption vlan 10 mode ciphers aes-ccm
!
encryption vlan 777 mode ciphers aes-ccm
!
ssid <my-SSID>
!
antenna gain 0
peakdetect
no dfs band block
packet retries 64 drop-packet
channel dfs
station-role root bridge
world-mode dot11d country-code CH outdoor
bridge-group 1
!
interface Dot11Radio1.10
encapsulation dot1Q 10 native
!
interface Dot11Radio1.777
encapsulation dot1Q 777
bridge-group 255
bridge-group 255 spanning-disabled
!
interface GigabitEthernet0
description REMA-URD-SW01 Trunk
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0.10
encapsulation dot1Q 10 native
bridge-group 1
!
interface GigabitEthernet0.777
encapsulation dot1Q 777
bridge-group 255
bridge-group 255 spanning-disabled

The problem is that interface Dot11Radio1 is in bridge-group 1 by default and cannot be removed. So Interface Dot11Radio1.10 cannot be added in bridge-group 1 because "Configuration of subinterfaces and main interface within the same bridge group is not permitted"...

I'm trying to remove Interface Dot11Radio1 from bridge-group 1 but without success...

Any idea?

Nicolas.

Hi Rasika, It's OK everything

nicolasvogel — Thu, 23 Jul 2015 14:56:05 GMT

Hi Rasika,

It's OK everything works fine now. It was a Native VLAN configuration mismatch.

I have all my VLANs carried over the Wireless Trunk.

Thank you for helping,

Kind Regards,

Nicolas.