Cisco 877w Dual Vlan

[Nish Vamadevan]

Hi,

Trying to setup Dual VLAN (Different Subnet for Wired and Wireless) on 877w for and seem to be stuck somewhere where VLAN2 is stuck on up/down

WIRED - Vlan1 - 192.168.1.1 / 24

WIRELESS - Vlan2 - 10.0.0.1 /24

I have disabled all the bridiging and all the BVI are removed.

Vlan 1 and Vlan 2 has the Above Subnet Configured.

Can someone point me in the direct direction on where I am going wrong? Or some kind of basic guide would be helpful.

Internet#sh dot11 asso

802.11 Client Stations on Dot11Radio0:

SSID [Fnode] : DISABLED, associated VLAN 2 is not active

Internet#

[Reza Sharifi]

Hi,

Can you post your current confg?

Reza

[Surendra BG]

have you assigned VLAN 2 to any port and connected a PC to that port?? that time the VLAN 2 wil come up and then u can check the line and protocol status. when the VLAN comes up, the wireless clients will grab the IP and they will get connected.

Let me know how this works out for you!!

Regards

Surendra

[Nish Vamadevan]

Thanks Surendra, It does work... I guess there is no way to dedicate VLAN 2 to Just for Wireless... Correct me If I am wrong, If VLAN2 is assigned to Dot11Radio0, it should be up/up right?

Reza, I am Posting part of my Config here, but it is running on Bridge-Mode.

If anyone can setup this box to serve WIRED and WIRELESS on Totally Seperate VLANs Without any Bridging, please do point me in the right direction.

Thanks!

!
dot11 ssid XXXX
   vlan 2
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 xxxxxxx
!

!
interface Dot11Radio0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
!
encryption vlan 2 mode ciphers aes-ccm
!
broadcast-key vlan 2 change 45
!
!
ssid XXXX
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2462
station-role root
rts threshold 2312
!
interface Dot11Radio0.1
encapsulation dot1Q 2
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Vlan1
description Wired VLAN
no ip address
bridge-group 1
!
interface Vlan2
description Wireless VLAN
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
!
interface BVI1
description Wired Network Range
ip address 192.168.1.1 255.255.255.128
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
!
interface BVI2
description Wireless Network Range
ip address 10.0.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
!

bridge 1 protocol ieee
bridge 1 route ip
bridge 2 protocol ieee
bridge 2 route ip

!
bridge irb
!

[jonathanhalim]

Hi guys,

I'm trying to do the same here.

Ive got 2 VLANs and I'm trying to bridge with no luck

actulaly, if I stick everything into the same VLAN then that'll be okay too.

Can anyone help me as I tried the above and didn't work.

Thanks

[Nish Vamadevan]

Have a look at the following as I have managed to do it.

First, you need to have a look at how I have managed to configure Wireless on the following URL, then follow the config below.

http://www.nish.com/2012/04/configure-wpa2-aes-ccmp-on-cisco-877w/

Mind you, If you are confused about the NAT Translation, I am not using the ATM Interface as I am using an External Modem, hence the NAT Translation is going out of VLAN20.

!

ip dhcp pool WIRELESS

   network 10.10.1.0 255.255.255.0

   default-router 10.10.1.1

   dns-server 208.67.222.222 208.67.220.220

!

ip dhcp pool WIRED

   network 192.168.1.0 255.255.255.0

   default-router 192.168.1.1

   dns-server 208.67.222.222 208.67.220.220

!

!

interface Vlan1

description WIRED VLAN INTERFACE

no ip address

bridge-group 1

bridge-group 1 spanning-disabled

!

interface Vlan2

description WIRELESS VLAN 2

no ip address

!

!

interface BVI1

description WIRED VLAN BRIDGE INTERFACE

ip address 192.168.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly

!

!

ip nat inside source list WIRED interface Vlan20 overload

ip nat inside source list WIRELESS interface Vlan20 overload

!

ip access-list extended WIRED

permit ip 192.168.1.0 0.0.0.255 any

ip access-list extended WIRELESS

permit ip 10.10.1.0 0.0.0.255 any

!

Hope it helps.