topic Re: VLANs / SSIDs Connectivity in Wireless

VLANs / SSIDs Connectivity

admin_2 — Sat, 03 Jul 2021 22:45:01 GMT

Let me try this again..

I am attempting to set up multiple SSIDs and VLANs on a 1121G autonomous / IOS WAP. One appears to be working fine - the other has no connectivity.

SSID = ssid_100 and VLAN 100 seem to be working fine. We can connect and get the appropriate DHCP address.

SSID = ssid_910 and VLAN 910 are not working. The client and the AP both say the client is associated, but DHCP fails. I have used a packet sniffer to verify that the DHCP request is never making it to the switch port.

I think the VLANs on the wired LAN are working fine, because I can plug into a properly configured switch port and get connectivity no problem.

I have attached a snippet of the WAP config. The switchport tthat the WAP is connected to has this config:

interface FastEthernet0/1

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 1,100,910

switchport mode trunk

Any suggestions or pointers will be very much appreciated.

Thanks.

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 15:10:09 GMT

Sorry about this folks, I am trying post a portion of my WAP config and I am getting Tomcat error messages.

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 15:12:15 GMT

dot11 ssid ssid_100

vlan 100

authentication open eap eap_methods1

dot11 ssid ssid_910

vlan 910

authentication open

interface Dot11Radio0

no ip address

no ip route-cache

encryption mode wep mandatory

encryption vlan 1 mode wep mandatory

encryption vlan 100 mode wep mandatory

encryption vlan 910 key 2 size 40bit 7 transmit-key

encryption vlan 910 mode wep mandatory

ssid ssid_100

ssid ssid_910

interface Dot11Radio0.1

encapsulation dot1Q 1 native

no ip route-cache

no cdp enable

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.100

encapsulation dot1Q 100

no ip route-cache

no cdp enable

bridge-group 100

bridge-group 100 subscriber-loop-control

bridge-group 100 block-unknown-source

no bridge-group 100 source-learning

no bridge-group 100 unicast-flooding

bridge-group 100 spanning-disabled

interface Dot11Radio0.910

encapsulation dot1Q 910

no ip route-cache

no cdp enable

bridge-group 91

bridge-group 91 subscriber-loop-control

bridge-group 91 block-unknown-source

no bridge-group 91 source-learning

no bridge-group 91 unicast-flooding

bridge-group 91 spanning-disabled

interface FastEthernet0

no ip address

no ip route-cache

duplex auto

speed auto

no cdp enable

interface FastEthernet0.1

encapsulation dot1Q 1 native

no ip route-cache

no cdp enable

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface FastEthernet0.100

encapsulation dot1Q 100

no ip route-cache

no cdp enable

bridge-group 100

no bridge-group 100 source-learning

bridge-group 100 spanning-disabled

interface FastEthernet0.910

encapsulation dot1Q 910

no ip route-cache

no cdp enable

bridge-group 91

no bridge-group 91 source-learning

bridge-group 91 spanning-disabled

dot11 ssid ssid_100

vlan 100

authentication open eap eap_methods1

dot11 ssid ssid_910

vlan 910

authentication open

interface Dot11Radio0

no ip address

no ip route-cache

encryption mode wep mandatory

encryption vlan 1 mode wep mandatory

encryption vlan 100 mode wep mandatory

encryption vlan 910 key 2 size 40bit 7 transmit-key

encryption vlan 910 mode wep mandatory

ssid ssid_100

ssid ssid_910

interface Dot11Radio0.1

encapsulation dot1Q 1 native

no ip route-cache

no cdp enable

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.100

encapsulation dot1Q 100

no ip route-cache

no cdp enable

bridge-group 100

bridge-group 100 subscriber-loop-control

bridge-group 100 block-unknown-source

no bridge-group 100 source-learning

no bridge-group 100 unicast-flooding

bridge-group 100 spanning-disabled

interface Dot11Radio0.910

encapsulation dot1Q 910

no ip route-cache

no cdp enable

bridge-group 91

bridge-group 91 subscriber-loop-control

bridge-group 91 block-unknown-source

no bridge-group 91 source-learning

no bridge-group 91 unicast-flooding

bridge-group 91 spanning-disabled

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 15:12:35 GMT

interface FastEthernet0

no ip address

no ip route-cache

duplex auto

speed auto

no cdp enable

interface FastEthernet0.1

encapsulation dot1Q 1 native

no ip route-cache

no cdp enable

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface FastEthernet0.100

encapsulation dot1Q 100

no ip route-cache

no cdp enable

bridge-group 100

no bridge-group 100 source-learning

bridge-group 100 spanning-disabled

interface FastEthernet0.910

encapsulation dot1Q 910

no ip route-cache

no cdp enable

bridge-group 91

no bridge-group 91 source-learning

bridge-group 91 spanning-disabled

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 15:15:57 GMT

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 15:23:34 GMT

Re: VLANs / SSIDs Connectivity

andrew.prince — Mon, 21 Apr 2008 19:46:08 GMT

Could you copy all the config into a text file and attach it? It would be much easier to read?!

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 20:58:28 GMT

Re: VLANs / SSIDs Connectivity

Mon, 21 Apr 2008 20:59:20 GMT

Re: VLANs / SSIDs Connectivity

Tue, 22 Apr 2008 14:04:29 GMT

Re: VLANs / SSIDs Connectivity

bcolvin — Wed, 23 Apr 2008 18:55:49 GMT

Basically your your bridge groups, SSID, and Vlan assignmnts don't agree.

1 your native Vlan 1 is your first vlan with no SSID/radio only Fastethernet defined as bridge group 1

2. Vlan 100 assigned to SSID 100 and brige group 100.

3. Vlan 910 assigned to SSID 910 and bridge group 910

you can use whatever SSID you wan for the VLAN's but the numbers for the VLAN and bridge groups need to be consistant.

I recomend you use the GUI to set up VLAN's as it takes care of all the interrelatioinships.

Here is a linl to a good doc on this configuration for AP's

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801d0815.shtml

Best practice is not to use your native VLAN for wireless traffic

HTH

Bill