Hi all,
i've trying to reconfigure my access point with multiple ssid's and vlan's. All is working great excpect the connectivity to BVI interfaces.
Clients can connect to both SSID's and belong to the right vlan. But I can't ping from the 1141 any host and no host can ping the BVI address.
Here's my configuration:
Current configuration : 3113 bytes
!
! Last configuration change at 04:45:48 UTC Fri Mar 1 2002
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
!
no aaa new-model
no ip routing
no ip cef
!
!
!
!
dot11 syslog
!
dot11 ssid Computers
vlan 125
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7
!
dot11 ssid Phone
vlan 120
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7
!
!
dot11 guest
!
!
!
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 125 mode ciphers aes-ccm tkip
!
encryption vlan 120 mode ciphers aes-ccm tkip
!
ssid Computers
!
ssid Phone
!
antenna gain 0
mbssid
speed basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
station-role root
!
interface Dot11Radio0.120
encapsulation dot1Q 120
no ip route-cache
bridge-group 120
bridge-group 120 subscriber-loop-control
bridge-group 120 spanning-disabled
bridge-group 120 block-unknown-source
no bridge-group 120 source-learning
no bridge-group 120 unicast-flooding
!
interface Dot11Radio0.125
encapsulation dot1Q 125 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 120 mode ciphers aes-ccm tkip
!
encryption vlan 125 mode ciphers aes-ccm tkip
!
ssid Computers
!
ssid Phone
!
antenna gain 0
peakdetect
no dfs band block
mbssid
speed basic-12.0 18.0 basic-24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel dfs
station-role root
!
interface Dot11Radio1.125
encapsulation dot1Q 125 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
!
interface GigabitEthernet0.120
encapsulation dot1Q 120
no ip route-cache
bridge-group 120
bridge-group 120 spanning-disabled
no bridge-group 120 source-learning
!
interface GigabitEthernet0.125
encapsulation dot1Q 125 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
ip address 192.168.10.2 255.255.255.0
!
ip default-gateway 192.168.10.1
no ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 protocol ieee
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
length 0
transport input all
!
end
Would be really nice if someone could take a look into my config and maybe had an idea : ).
Regards Yannik
