Access Point host communication

[scott.bridges]

Hello all,

I'm running into a confusing problem on my home network and am looking for advice.

Attached is a Visio of my layout.  My ASA is trunking to the directly connected PoE Cisco Access Point.  Two VLANs are in use.

The problem is that hosts on 8 cannot communicate with each other.  In this example, my laptop cannot print/ping my printer, yet anything that's directly attached to my ASA in the same subnet can.

Is there anything obvious that I should be doing?  All clients have WAN connectivity and can get to hosts directly off the ASA.  The problem appears to be communication between hosts directly associated with the AP.

Any help is appreciated

Thanks

[kcnajaf]

Hi Scott,

Could you please share the entire AP configuration with sensitive information removed?

Regards

Najaf

[scott.bridges]

Here is the AP config

Thanks for the reply!

[kcnajaf · Accepted solution]

Hi Scott,

Try adding below commands and check how it goes.

config terminal

interface Dot11Radio1.8
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled

interface Dot11Radio0.8
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled

Regards

Najaf

[scott.bridges]

That appeared to do the trick.

Would you mind explaining WHY it worked? 

Thanks so much!

[kcnajaf]

Hi Scott,

Thanks for the rating.

When you enable brige group on an AP below commands are enabled by default

bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled

I'm not sure why two lines (bridge-group 1 subscriber-loop-control & bridge-group 1 spanning-disabled) was missing from your configuration. Did you manually remove these lines?

The bridge-group subscriber-loop-control configuration interface command enables loop control on virtual circuits associated with a bridge group. In other words it is similar to STP as its purpose is to prevent loops, yet, unlike STP, it is layer 1 based. With out this command arp broadcast communication does not work properly and that was the reason why you where not able to communicate between the your laptop and printer.

Hope that helps.

Regards

Najaf